cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2590
Views
0
Helpful
2
Replies

Cisco router & split dns

v.matiakis
Level 1
Level 1

Hi there,

Here's what i'm trying to achive :

I want to use my cisco router in order to forward queries that belong to mydomain.com to my dns server and everything else to the ISP's dns server. Has anyone ever configured something similar?

Thanx in advance

2 Replies 2

Kevin Dorrell
Level 10
Level 10

I don't think you can do that on a router.  I think the usual way to do it is to forward all your DNS requests to your local DNS server, and then configure the local DNS server to refer to the ISP DNS server for addresses that are outside its scope.

Kevin Dorrell

Luxembourg

Hi,

You can do it, the Split DNS doc on Cisco website isn't the most straightfoward I've ever seen.  It also doesn't give you a working example.  I managed to succeed with this, and have added an example config assuming you still need to get this working.  This was done on an 877W, with a split tunnel to PIX 515E.  Now passes DNS query to internal DNS servers via the Tunnel, and all other DNS queries to the ISP Public DNS servers.  Access list 101 is part of the inbound ACL assigned to the Dialer0 interface.

Thanks,

Kevin

interface BVI1
ip dns view-group mycomp_viewlist

ip dns view  mycomp
domain name-server  192.168.1.x
domain name-server   192.168.1.x
dns forwarder 192.168.1.x
dns forwarder 192.168.1.x
dns forwarding source-interface BVI1
ip dns view default
domain  name-server  212.x.x.x
domain name-server  212.x.x.x
dns  forwarder 212.x.x.x
dns forwarder 212.x.x.x
dns forwarding  source-interface BVI1
ip dns view-list default
ip dns view-list  mycomp_viewlist
view mycomp 5
  restrict name-group 10
view  default 10
ip dns name-list 10 permit .*.mycomp.CO.UK
ip dns  server

access-list  101 permit udp host 212.x.x.x eq domain any gt 1023
access-list 101  permit udp host 212.x.x.x eq domain any gt 1023

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Review Cisco Networking products for a $25 gift card