Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
I have a problem where DNS responses over IPv4 are getting dropped between my firewall and switch and are not getting back to the host. This is resulting in failed DNS lookups. Below is my network layout:The DNS standard query responses are getting d...
I have an ASA 5508 and I'm trying to allow hosts on the inside network to ping the ASA outside interface. From my understanding requests from a higher security level to a lower should be implicitly allowed, however it looks like all icmp echo request...
I figured out the problem. It was an ACL issue on the switch. I had the port in the wrong location on the ACL. It was:permit udp any 10.2.0.0 0.0.255.255 eq domainBut needed to be:permit udp any eq domain 10.2.0.0 0.0.255.255Once I updated the ACL th...
I removed the dns inspect from the global_policy policy-map but I'm still unable to resolve DNS queries:class-map inspection_default
match default-inspection-traffic
!
!
policy-map type inspect dns preset_dns_map
parameters
message-length maximum...
I'm running 9.8(2). I ran the debug inspect dns errors and debug inspect dns events and nothing shows up, even after running my dig request again. When I run the debug inspect dns packets a lot of information is constantly spewed to the screen with i...