topic Re: DNS server entries in General Topics

DNS server entries

sue_town — Fri, 16 Sep 2011 06:43:25 GMT

anyone know how to add more than 2 DNS servers on the PA 500 units and also in the client DHCP config

PA say it cant be done and ive requested this to be considered for a future release...but wondering if anyone else has come across this?

cheers

Sue

Bart_Jocque — Fri, 16 Sep 2011 13:15:43 GMT

You could offer 4 DNS server to your clients by creating 2 DNS-proxy-interfaces (loopbacks) on your PAN.

Both DNS-proxies can then do forwarding to two real DNS servers.

This makes 4 in total 🙂

It's a workarround, but do-able.

sue_town — Fri, 16 Sep 2011 13:35:36 GMT

thanks for the reply

device is employed at corporate office - using split tunnelling so local internet access and all other traffic via IPSEC tunnel to corp. network.

i have device (and client DHCP) set with primary DNS pointing to corporate DNS server and secondary pointing to external DSN server

given the above, can you provide detailed information re your solution and how i would implement?

thanks

Sue

Bart_Jocque — Fri, 16 Sep 2011 13:45:14 GMT

Enable dns proxy on your pan.

set a dns forwarding for your corporate dns zones towards your corporate dns servers

set a forwarding rule for internet dns zones to your ISP dns servers.

configure your clients to do dns-resolving with the DNS-proxy IP on your PAN ( make a loopback interface for this )

sue_town — Fri, 16 Sep 2011 16:28:39 GMT

thanks - will try this

Sue