topic Re: unable to ping Domain name from UAG in Horizon Desktops and Apps

unable to ping Domain name from UAG

pkkishorenkl — Tue, 24 Nov 2020 04:18:35 GMT

I have deployed a UAG OVA through vCenter. I could not ping domain name from UAG.

Connection server and UAG are on the same network
A domain name is xxxx.local
Made a DNS entry for UAG hostname and Connection server hostname
From connection server, able to ping xxxx.local domain name
From connection server, able to resolve Connection server hostname and UAG hostname
Able to Ping DNS IP, gateway IP, Connection server IP from UAG VM
Able to Ping DNS IP, gateway IP UAG IP from the Connection server

Not able to ping xxxxx.local domain name from UAG
Not able to resolve UAG and Connection server hostname from UAG VM

Note: I have not edited /etc/hosts and /etc/resolve.conf

As per My understanding, I should not edit the resolve.conf file as per this document

https://vmware.github.io/photon/assets/files/html/3.0/photon_admin/adding-a-dns-server.html

another DNS related Issue KB article from VMware

https://kb.vmware.com/s/article/50120424

Re: unable to ping Domain name from UAG

sscnc — Tue, 24 Nov 2020 08:10:33 GMT

https://roderikdeblock.com/vmware-uag-not-using-dns/

Edit /etc/systemd/resolved.conf and uncomment the domains line and adding in your .local domain to the domains there.

---

Re: unable to ping Domain name from UAG

sjesse — Tue, 24 Nov 2020 12:58:38 GMT

Follow the docs for your version like

https://docs.vmware.com/en/Unified-Access-Gateway/3.2.1/com.vmware.uag-321-deploy-config.doc/GUID-537BD936-73B4-4902-A15D-5723295BA29E.html

look for

Note:If you are not able to access the Admin UI login screen, check to see if the virtual machine has the IP address displayed during the installation of the OVA. If the IP address is not configured, use the VAMI command mentioned in the UI to reconfigure the NICs. Run the command as "cd /opt/vmware/share/vami" then the command "./vami_config_net".

I think its the same on all versions. Use this to set the dns instead of messing with config files first, usually I've seen dns be a problem because of syntax issues when entering it in the ovf form.

Re: unable to ping Domain name from UAG

hkraaijeveld — Tue, 24 Nov 2020 15:19:00 GMT

This might answer a few of your findings:

https://kb.vmware.com/s/article/50120424

Specifically:

Note : Industry recommendations and only use .local for multicast DNS as stated in the RFC. .local is defined for a specific multicast use and not for general DNS. It is covered by https://tools.ietf.org/html/rfc6762 & MS recommendations https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/plan/selecting-the-forest-root-domain (see caution section when selecting suffix). Cnames can be employed to allow alternate names if you have a .local server that you need to alias.

And:

As the UAG is an appliance based on photon o/s, never edit resolve.conf or the host file manually.
Please update dns entries with redeployment or in the admin user interface - note any manual changes to the file will get over-ridden by admin user interface entries or by a reboot.