VMware UAG DNS resolution issue

vmware-uag-dns-resolution-issue-01

Once the Unified Access Gateway (UAG) has been deployed and configured, the VMware UAG DNS is not able to name resolve the Connection Servers if the FQDN includes the .local domain.

Despite the correct DNS and Search suffix settings configured, once the appliance is rebooted after the deployment the Horizon Destination Server (Connection Server) is unreacheable from the UAG appliance. This problem occurs when the FQDN of your Connetion Server is a .local domain (for example w16-cs01.nolabnoparty.local).

vmware-uag-dns-resolution-issue-02

 

VMware UAG DNS fix

To fix this issue, there two possible workaround:

  • the use of the IP Address instead of FQDN
  • modify an entry in the resolved.conf file in the UAG appliance

Use the IP Address

An easy solution to allow the Unified Access Gateway appliance to reach the Connection Servers can be achieved by entering the IP Address instead of the FQDN in the Connection Server URL field.

vmware-uag-dns-resolution-issue-03

 

Edit the /etc/systemd/resolved.conf file

If you want to use the FQDN instead, you have to edit the /etc/systemd/resolved.conf file in the UAG appliance.

Using a tool like PuTTY, SSH the UAG by entering the root credentials.

vmware-uag-dns-resolution-issue-04

Edit the file /etc/systemd/resolved.conf with the vi command.

# vi /etc/systemd/resolved.conf

vmware-uag-dns-resolution-issue-05

Uncomment (remove the #) the Domains line and specify your DNS Search Domain (in the example nolabnoparty.local). When done save the file with the :wq command.

Domains=nolabnoparty.local
:wq

vmware-uag-dns-resolution-issue-06

Now Reboot the appliance to apply the changes.

# reboot

vmware-uag-dns-resolution-issue-07

When the appliance has booted, login to the UAG appliance and check the Connection Server connectivity. This time the Connection Server is reachable since the DNS name is resolved with no issues and all components are marked as green.

vmware-uag-dns-resolution-issue-08

Once the Connetion Server is reacheable from the Unified Access Gateway, remote users can connect the corporate Horizon infrastructure.

signature