cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
8816
Views
5
Helpful
5
Replies

How to configure ASA 5505 as a DNS server

naushad_khan
Level 1
Level 1

I want to configure my Cisco asa 5505 as a dns server, so that when i configure any of my network systems ip address and use my firewall as a default gateway and dns ip, the system should be able to browse internet.

5 Replies 5

cadet alain
VIP Alumni
VIP Alumni

Hi,

It's not possible to do so.

Regards.

Alain

Don't forget to rate helpful posts.

I need my network systems to use internet, when default gateway of the firewall is provided.

Hi,

The ASA can't act as DNS server or proxy-dns as far as I'm aware of.Even though it can serve as DHCP server or Relay,the features are limited compared to IOS and that's understandable because its primary focus is security.

Regards.

Alain

Don't forget to rate helpful posts.

Hi,  Hope this will helpful to you.        Configuring the DNS Server  Some ASA features require use of a DNS server to access external servers by domain name; for example, the Botnet Traffic Filter feature requires a DNS server to access the dynamic database server and to resolve entries in the static database. Other features, such as the ping or traceroute command, let you enter a name that you want to PING for traceroute, and the ASA can resolve the name by communicating with a DNS server. Many SSL VPN and certificate commands also support names.    Step 1         dns domain-lookup interface_name  Example:  hostname(config)# dns domain-lookup inside        Enables the ASA to send DNS requests to a DNS server to perform a name lookup for supported commands.  Step 2         dns server-group DefaultDNS  Example:  hostname(config)# dns server-group  DefaultDNS         Specifies the DNS server group that the ASA uses for from-the-box requests.  Other DNS server groups can be configured for VPN tunnel groups. See the tunnel-group command in the Cisco ASA 5500 Series Command Reference for more information.  Step 3         name-server ip_address [ip_address2]  [...] [ip_address6]  Example:  hostname(config-dns-server-group)#  name-server 10.1.1.5 192.168.1.67  209.165.201.6         Specifies one or more DNS servers. You can enter all 6 IP addresses in the same command, separated by spaces, or you can enter each command separately. The security appliance tries each DNS server in order until it receives a response.

Hi,

But this is not offering DNS services to clients as the OP asked.

Regards.

Alain

Don't forget to rate helpful posts.
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: