topic Re: DNS Server IP change on ISE in Network Access Control

DNS Server IP change on ISE

Gouthami Nair — Wed, 03 May 2023 14:51:07 GMT

Hi All,

Please let me know the ISE CLI command for checking whether a particular DNS IP is reachable or not from ISE.

How can we verify a new dns ip will work before implementing change for existing DNS IP removal and new IPs addition in ISE?.

Re: DNS Server IP change on ISE

Flavio Miranda — Wed, 03 May 2023 15:14:38 GMT

Hello

You can use nslookup.

Check this guide to specifics.

https://www.cisco.com/c/en/us/td/docs/security/ise/2-0/cli_ref_guide/b_ise_CLIReferenceGuide_20/Cisco_ISE_CLI_Commands_in_EXEC_Mode.html#wp1792358141

Re: DNS Server IP change on ISE

ahollifield — Wed, 03 May 2023 15:45:27 GMT

ping [DNS NAME]

Re: DNS Server IP change on ISE

poongarg — Fri, 05 May 2023 03:29:34 GMT

Her is the example, that shows that this dns server is not reachable:

admin/admin# nslookup cisco.com name-server x.x.x.x
Trying "cisco.com"
;; connection timed out; no servers could be reached

Working scenario:

admin/admin# nslookup cisco.com name-server x.x.x.x
Trying "cisco.com"
Trying "cisco.com"
Using domain server:
Name: x.x.x.x
Address: x.x.x.x#53
Aliases:

;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 14564
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 75, AUTHORITY: 0, ADDITIONAL: 11