topic DNS on ASA in Network Security

DNS on ASA

lquin1978 — Mon, 11 Mar 2019 20:41:36 GMT

I want to use hostnames in my ACL's instead of IP addresses so I have enabled DNS on the ASA.

I have enabled (or so I think) DNS on the ASA

ciscoasa(config)# dns domain-lookup outside

ciscoasa(config)# dns name-server 4.2.2.2 4.2.2.3

But when I ping www.mydomain.com is says invalid host.. should this work or am I missing something?

Re: DNS on ASA

Maykol Rojas — Thu, 02 Jun 2011 18:23:24 GMT

Hello,

Weird, I put those commands and it worked for me just fine. The final goal is to use domain names on the Access list? As far as I understand that is going to be possible only in version 8.4.2 or its still on deployment.

Would you please do a show run dns?

Mike

DNS on ASA

lquin1978 — Mon, 06 Jun 2011 19:17:28 GMT

dns domain-lookup outside

DNS server-group DefaultDNS

domain-name mydomain.org

DNS server-group MYDNS

name-server [IP address]

DNS on ASA

Maykol Rojas — Mon, 06 Jun 2011 19:37:44 GMT

Would you please put a DNS server on the default dns group?

Mike

DNS on ASA

lquin1978 — Thu, 09 Jun 2011 14:18:43 GMT

okay will try and get back to you thanks.

If I cant use names in teh ACL what is teh DNS used for?

DNS on ASA

Maykol Rojas — Thu, 09 Jun 2011 17:01:27 GMT

Hello,

Mostlikely for features like botnet and so on.

Mike