Specify DNS servers for DHCP server in FTD

[deyster94]

I know in ASA's, under the DHCP server settings for a particular interface, you can set the DNS servers that are handed out.  Can this be done in FTD?  Reason I ask is my client current has two guest wireless networks.  One that just uses the WLC web-auth and the other will use ISE.  The current prod guest wireless uses public DNS servers for resolution.  However, for the other guest wireless using ISE, I need it to use internal DNS servers so it can resolve the internal DNS servers for the redirect.  However, in the FTD DHCP server settings there isn't a way to do set DNS servers for the DHCP server settings assigned to a particular interface.  I checked an ASA config and the command is:

dhcpd dns 1.1.1.1 1.1.1.2 interface int_name

I tried do use the above command in FlexConfig, but I got an error when I deployed the policy.  Any ideas?  

TIA,

Dan

[Francesco Molino]

Hi

Are you using FDM or FMC?

[deyster94]

FMC

[Francesco Molino]

Take a look on that documentation:

https://www.cisco.com/c/en/us/support/docs/security/firepower-ngfw/200475-Configure-DHCP-Server-Relay-on-FTD-Using.html#anc6

[deyster94]

Francesco,

Thank you for the response.  However, I have seen that config guide, but it does not solve my issue.  The client has two DHCP scopes.  The one uses the public DNS servers listed in the Override Auto Configured Settings.  What I need is for the second scope to use their internal DNS servers to resolve ISE on from the DMZ to the internal network.  On the ASA's, you can assign each interface that has DHCP running on it specific DNS servers.  I need to find a way to do the same in FMC for FTD.  Flexconfig does not work for this setting.

Dan

[Francesco Molino · Accepted solution]

Sorry i misunderstood your question.

What you're trying to do isn't possible on FTD.

There's also a bug id (feature enhancement request for that) :

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvg68863/?referring_site=bugquickviewclick

[deyster94]

Francesco,

Thank you for the link to the bugID for the feature request.  I will pass this onto my client.

Dan

[Francesco Molino]

You're Welcome Dan

[bmurphree@myemma.com]

Too bad that FDM isn't included in the Feature Request. I'm no longer using FMC and never wish to go back to it.

[bmurphree@myemma.com]

Is there a way to escalate this with Cisco engineering? It's truly a break/fix, not a new feature.