Add server IP addresses to SRV responses

[victguti]

Hello,

I have an ISE full distributed deployment 2.0.1.130. All the nodes properly enrolled with MS AD and when I run the diagnostic tool all the tests are successful except one warning for the test "DNS SRV record query". The result and remedy specifies: "SRV Record Found. Not all SRV Records have IP, will need to run additional query for get IP."

I believe this warning is related with the recommendation of including IP addresses into SRV responses:

http://www.cisco.com/c/en/us/td/docs/security/ise/2-0/admin_guide/b_ise_admin_guide_20/b_ise_admin_guide_20_chapter_01101.html?bookSearch=true#reference_EA017E71F25145C9A1374373ABFA102E

I have been trying to find the way to include the IP in SRV response in MS Servers and Infoblox and it seems not to be possible. Could you give me any tip or help to apply this recommendation?

Thanks,

Víctor.

[hslai · Accepted solution]

I have no experience with Infobox but I believe this is up to the DNS server implementation whether its responses to SRV queries include the A record(s) of the resources. In some cases, it could be the sizes too big to return in the responses.

It's more efficient if it does, because no need to make more queries to get the IP resolutions of the recourses. The AD integration might still work ok.

[Craig Hyps]

Found a couple references that may help...

https://supportforums.cisco.com/discussion/13131626/ise-warning-srv-record-foundnot-all-srv-records-have-ip-will-need-ru…

Active Directory Integration - Infoblox Experts Community

/C