We're using 887VA's at branch offices and leveraging IOS ip dns server for split DNS with IPv4 clients.
Is there a way to have DNS server listen on IPv6 also?
So far I've been unable to locate any specific documentation on this feature, but there are some previous threads hinting it supported on some platforms.
Current config, the ISR doesn't respond to IPv6 request even after removing the default restrict source.
Any advice or pointers would be appreciated.
ip host view RESTRICTED m.youtube.com 22.214.171.124 ip host view RESTRICTED youtubei.googleapis.com 126.96.36.199 ip host view RESTRICTED youtube.googleapis.com 188.8.131.52 ip host view RESTRICTED www.youtube-nocookie.com 184.108.40.206 ip host view RESTRICTED www.youtube.com 220.127.116.11 ip host site.internal.lan X.X.X.X ipv6 host ipv6test.internal.lan 2001:XXXX:XXXX:XXXX::X ip dns view RESTRICTED domain timeout 1 domain retry 0 dns forwarding timeout 2 domain round-robin dns forwarder 18.104.22.168 dns forwarder 22.214.171.124 ip dns view default domain timeout 1 domain retry 0 dns forwarding timeout 2 domain round-robin dns forwarder 126.96.36.199 dns forwarder 188.8.131.52 ip dns view-list INTERNAL view RESTRICTED 5 restrict source access-group ACL-RESTRICTED-HOST view default 10 restrict source access-group 101 ip dns server view-group INTERNAL ip dns server ip dns primary internal.lan soa gw.internal.lan host.internal.lan 3600 300 3600 3600 ! access-list 101 remark Local Networks access-list 101 permit ip 192.168.120.0 0.0.0.255 any access-list 101 deny ip any any log ! ip access-list extended ACL-RESTRICTED-HOST permit ip object-group RESTRICTED-HOSTS any deny ip any any ! object-group network RESTRICTED-HOSTS description Host with restricted internet via DNS View host 192.168.120.32 !
the dns will listen and reply to ipv4 requests for AAAA. So ipv4 will send the request and AAAA records (for ipv6) can be sent. pretty sure. does that solve the issue?
I checked pretty much all available resources, and I could not find anything on an IOS device being capable of being a DNS server for IPv6 (compared to IPv4). So I think it is safe to say that this is not possible (yet)...
There was another thread similar to this, that mentioned that it supported on some platforms? I don't believe anything special needs to be configured above the above commands. On some platforms it listen on both ipv4 and ipv6. Be good to know which platforms/releases support this.
This thread reports 1921 works but not the 1841. I'm using the 887VA which is newer than the 1921.
Where can one find which platforms are supported?