DNS keyword is not working in cisco asa - The Cisco Learning Network

Skip navigation

Up to Discussions in CCSP Study Group

1604 Views 2 Replies Latest reply: Jan 30, 2012 4:48 AM by A.N

Currently Being Moderated

DNS keyword is not working in cisco asa

Jan 30, 2012 12:45 AM

A.N

Hi ALL,

we have server inside the network which face to public.DNS record also on Public DNS.

I am using DNS keyword at last. which should change DNS reply packet with internal ip

But its not working. when i ping with hostname it show only public ip. I clear DNS cache still not help

Thanks
A.N

Like (0)

Paul Stewart - CCIE Security, CCSI
6,897 posts since
Jul 18, 2008

Currently Being Moderated

1. Jan 30, 2012 3:40 AM (in response to A.N)
Re: DNS keyword is not working in cisco asa

Make sure dns inspection is not disabled. This should look something like the following.

policy-map global_policy
class inspection_default
inspect dns preset_dns_map

If this is disabled, the dns keyword does not work. Additionally, you need to make sure you flush the cache on any internal dns server and client. This will force the actual dns request to go through the ASA.

Report Abuse

Like (0)
A.N

Currently Being Moderated

2. Jan 30, 2012 4:48 AM (in response to Paul Stewart - CCIE Security, CCSI)
Re: DNS keyword is not working in cisco asa

Hi Paul,

Thanks for your help. its working now

I need one more help . i posted one more issue.but no one have replied. may be you can help

https://learningnetwork.cisco.com/message/208356#208356

See this.if you can help tell me please

Thanks & Regards
A.N

Report Abuse

Like (0)

Go to original post

Actions

Register / Login to Access Content & Participate in the Community
Learn More About
The Cisco Learning Network
View print preview