topic Cisco ASA DNS lookup question in Network Security

Cisco ASA DNS lookup question

adil.nasser3 — Tue, 12 Mar 2019 06:26:35 GMT

Hello,

I want to configure a different set of DNS servers for the Cisco ASA to use for DNS lookups for it's outside interface than what is used for its inside interface. Is there a way to do this? The "dns server-group DefaultDNS" is already defined with company internal DNS servers so I cannot use this server-group for external DNS resolution. Is there a way to define a different dns server group and insert public dns servers inside it then configure only the outside interface to use this dns server-group?

Adil

Hi,Yes , you can do this

Vibhor Amrodia — Sun, 30 Aug 2015 15:54:41 GMT

Hi,

Yes , you can do this using the "interface name" for the "name-server" command

Refer:-

http://www.cisco.com/c/en/us/td/docs/security/asa/asa-command-reference/I-R/cmdref2/n.html#pgfId-1818266

Also , enable the "dns domain-lookup" command for those interfaces.

http://www.cisco.com/c/en/us/td/docs/security/asa/asa-command-reference/A-H/cmdref1/d3.html#pgfId-2044521

Thanks and Regards,

Vibhor Amrodia