Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Can Cisco 5510 configure to do dns forwarder?

Hi,

My client is using the public dns but they don't want dhcp to give dns as public dns. They want it to point to firewall then only firewall forward the dns to public DNS. Would it possible for ASA 5510?


Regards,

Hing

1 ACCEPTED SOLUTION

Accepted Solutions
Cisco Employee

Re: Can Cisco 5510 configure to do dns forwarder?

Hing,

Sort of - you could configure a static statement on the ASA that will equate to the DNS's IP address.  For instance:

static (outside, inside) 10.1.1.253 1.1.1.1

You would also have to ensure that UDP 53 traffic is also allowed via access-list on your inside interface.  On your DHCP server, you would then configure the IP address 10.1.1.253 as your DNS server - in reality, the ASA will simply translate that IP address to the real 1.1.1.1 address.

Hope this helps,

Kevin

3 REPLIES
Cisco Employee

Re: Can Cisco 5510 configure to do dns forwarder?

Hing,

Sort of - you could configure a static statement on the ASA that will equate to the DNS's IP address.  For instance:

static (outside, inside) 10.1.1.253 1.1.1.1

You would also have to ensure that UDP 53 traffic is also allowed via access-list on your inside interface.  On your DHCP server, you would then configure the IP address 10.1.1.253 as your DNS server - in reality, the ASA will simply translate that IP address to the real 1.1.1.1 address.

Hope this helps,

Kevin

New Member

Re: Can Cisco 5510 configure to do dns forwarder?

Hi Kevin,

Thanks alot. That was a brilliant idea.

Regards,

Hing

Cisco Employee

Re: Can Cisco 5510 configure to do dns forwarder?

Hing,

If you have any further questions, please let us know.  If this solution works for you, please be sure to mark this question as answered.

Thanks in advance,

Kevin

591
Views
5
Helpful
3
Replies