DNS Server IP change on ISE

[Gouthami Nair]

Hi All,

Please let me know the ISE CLI command for checking whether a particular DNS IP is reachable or not from ISE.

How can we verify a new dns ip will work before implementing change for existing DNS IP removal and new IPs addition in ISE?.

[Flavio Miranda · Accepted solution]

Hello

 You can use nslookup. 

Check this guide to specifics.

https://www.cisco.com/c/en/us/td/docs/security/ise/2-0/cli_ref_guide/b_ise_CLIReferenceGuide_20/Cisco_ISE_CLI_Commands_in_EXEC_Mode.html#wp1792358141 

[ahollifield · Accepted solution]

ping [DNS NAME]

[poongarg · Accepted solution]

Her is the example, that shows that this dns server is not reachable:

admin/admin# nslookup cisco.com name-server x.x.x.x
Trying "cisco.com"
;; connection timed out; no servers could be reached

Working scenario:

admin/admin# nslookup cisco.com name-server x.x.x.x
Trying "cisco.com"
Trying "cisco.com"
Using domain server:
Name: x.x.x.x
Address: x.x.x.x#53
Aliases:

;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 14564
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 75, AUTHORITY: 0, ADDITIONAL: 11