cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
496
Views
4
Helpful
2
Replies

Is that possible to force the router to recheck the domain ip?

Istvan kelemen
Level 1
Level 1

Hello,

Here is a short explain:

Extended IP access list DANGEOURS_WEBSITES

    deny tcp any host www.badsite.hu eq ww 443

    permit ip any any

Translating "www.badsite.hu"...domain server (90.0.0.100)

After the translation:

Extended IP access list DANGEOURS_WEBSITES

    10 deny tcp any host 90.0.0.100 eq www 443

    20 permit ip any any (621 matches)

Is that possible to force the router to check the IP address of hostname in every hour or on every attempt etc..?

2 Replies 2

Andrew Phirsov
Level 7
Level 7

As far as i know, ISRs doesn't support dynamic resolution of domain names. Router resolves name to ip when you configure ACE in ACL, and then, in running config it puts resolved IP-addresses.

This feature works just like you want with ASA, but not with ISR.

Thank you, i'll try it!

Review Cisco Networking for a $25 gift card