SDN

[kagisolebambo458]

What is the purpose of enabling dns in vpn 0 in vmanage

[M02@rt37]

Hello @kagisolebambo458,

Devices in the SD-WAN network may need to perform DNS resolution to translate domain names into IP addresses. This is a crucial function for applications and services that rely on domain names (such as accessing websites or connecting to cloud services).

-By enabling DNS in VPN 0, you allow the vEdge routers (and other SD-WAN devices) to act as DNS proxies. This means that the devices can locally resolve DNS queries for the connected network without having to forward the queries to external DNS servers.

-Enabling DNS in VPN 0 allows you to control and apply DNS policies, such as blocking specific domain names or categories of websites, ensuring compliance with security and content filtering requirements.

->enabling DNS in VPN 0 on vManage is just one part of the overall SD-WAN configuration. Proper DNS configuration on both the vEdge routers and external DNS servers is necessary to ensure seamless DNS resolution and service availability.

[Kanan Huseynli]

Hi,

For example, you have vbond with hostname in configuration and vmanage need to resolve it. If it is publicly available dns name, then dns server information is needed under vpn0.

Or some services require dns resolution. This mainly includes cloud services where vmanage should reach such as cisco pnp (for automatic certs), smart account (for licenses, device list) etc.