Solved: how to configure different DNS for different interfaces on Firepower

ITal229332657 · ‎08-22-2021

Good afternoon!
How to configure different DNS for different interfaces on Cisco Firepower 1010 Threat Defense (Software 6.6.5-81)?

Via GUI i can add only for data (can't split) and management interface.
is it possible to do via CLI?

Marvin Rhoads · ‎08-23-2021

If you're talking about using the FTD as the DHCP server, then it is limited to using a single configured DNS server for all DHCP scopes it serves.

Most people instead use an actual DHCP server (for instance one running on Windows server) and in that setup you can specify alternate DNS servers (and all the other DHCP options) for every scope.

View solution in original post

Marvin Rhoads · ‎08-22-2021

Configuration is only allowed via the management GUI (except for the initial setup and a very limited set of seldom-used commands). So what's exposed in the GUI is generally the limit of what you can do.

What exactly are you trying to achieve with multiple DNS settings?

ITal229332657 · ‎08-22-2021

i have three local interfaces (1x for corp network and 2x for guest networks). And want to setup different DNS settings for different interfaces (corp = IP of the local dns server, guest1 = ISP dns, giest2 = Umbrella DNS)

Marvin Rhoads · ‎08-23-2021

If you're talking about using the FTD as the DHCP server, then it is limited to using a single configured DNS server for all DHCP scopes it serves.

Most people instead use an actual DHCP server (for instance one running on Windows server) and in that setup you can specify alternate DNS servers (and all the other DHCP options) for every scope.