Link to home
Start Free TrialLog in
Avatar of dogcheez702
dogcheez702

asked on

Need to query an on premise DNS server over a shared Wi-Fi access points with public DNS servers (Google) configured.

Scenario:
We have several hundred wireless devices that connect to a shared Wifi infrastructure.  The entire IP network is flat IP infrastructure that is logically segregated with multiple internal Active Directory domains with their own DNS infrastructure.  The following conditions are true on the network.
1.  I can ping any wired device from any wireless device via IPv4 address
2.  I cannot ping any device on my LAN via host-name while connected to WiFi
3.  I can ping any wireless device from any hardwired device via IPv4 address
4.  I cannot ping any other wireless device while connected to WiFi
5.  WiFi devices attain IP addresses and DNS server addresses from the WiFi infrastructure
6.  The DNS servers assigned are Google's public DNS servers

What I would like to do is have my machines that are joined to my domain resolve our internal domain systems WITHOUT maintaining a host file on each laptop/tablet/mobile device and WITHOUT hardcoding my DNS server.


Penny for your thoughts

Thanks!
ASKER CERTIFIED SOLUTION
Avatar of footech
footech
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of dogcheez702
dogcheez702

ASKER

Yeah ... that is what I thought I'd have to deal with .... Thanks
Part of our issue is that we do not control the DHCP scope that the WiFi uses.... I am going to have to reach back out to the WiFi provider to see if they can create a conditional forwarder to our domain in their DNS servers - Political NIGHTMARE!

Again thank you for your comment
One last idea - maybe having your clients establish a VPN connection to your network will be sufficient.
Sorry for the late post ... we have an on premise VPN solution that works great when it is used but our issue is more along the lines of users being willing to use the VPN when they know the server is 15 feet away from them.  because of the security policies we are not allowed to do split tunneling for VPN traffic which forces our users to go out to the internet, back in to or network and then back out to the internet for any work they do while connected to the VPN.  you can imagine the issues we are facing with this kind of thing.

We are in talks with the WiFi provider to create the conditional forwarders for us.  Lots of political capital is being spent to achieve this goal while the affected client base is relatively small (in the grand scheme of things)

again ... thanks to all that chimed in