DNS with CBAC

[gearnsc]

Is it possible to do dynamic DNS rewrites using CBAC? I'm looking to do the same type of inspection done in PIX with the 'dns' tag at the end of a static or nat statement with existing IOS hardware.

[JBDanford2002 · Accepted solution]

Yes. And here is a link that will explain it.

http://www.cisco.com/en/US/tech/tk648/tk361/technologies_configuration_example09186a0080093f30.shtml