topic DNS Proxy inheritance source in General Topics

DNS Proxy inheritance source

rgraves — Fri, 17 Feb 2012 21:20:20 GMT

I want all devices on one of my interfaces to use my DNS servers, regardless of their configuration. Seems pretty simple, but I'm stuck.

I can edit and OK/OK out of the DNS proxy dialogs (PANOS 4.1.2), but commit fails with "Inheritance source needs to be specified."

The only option I have for "Inheritance source" is "None." I can only choose "Inherited" for "Primary." Where do inheritance sources come from? DHCP? I don't currently have the firewall acting as a DHCP server.

Re: DNS Proxy inheritance source

sjamaluddin — Wed, 22 Feb 2012 16:16:36 GMT

Inherited sources are available if your PAN FW is set up as DHCP client. If your IP address is received from the ISP then your PAN FW would receive a DNS entry from there too and this then becomes the inheritance source. Hope this helps.

Re: DNS Proxy inheritance source

msullivan — Fri, 15 Feb 2013 22:21:43 GMT

Hi Graves,

The thing about the DNS proxy config is that if the inheritance source is 'none' then you must supply your own primary server (and optionally a secondary). It isn't obvious from the GUI, but you can type the IPs in those fields.

Re: DNS Proxy inheritance source

KSLee — Wed, 21 Apr 2021 15:46:15 GMT

I have encountered the same issue and I found the problem is when the inheritance source = "none", you must specify both primary and secondary DNS server IP, or the one that do not have DNS Server IP must set to "none" instead of "inherited" because when you set to inherited but the inheritance source is none, it will have reference fail issue, that why it fail the commit.