topic Re: FQDN record keeps wrong ip address in General Topics

FQDN record keeps wrong ip address

TranceforLife — Tue, 22 Aug 2017 11:08:14 GMT

Hi All,

One of our FQDN records keeps wrong ip address (e.g 10.1.12.71) where really it should be 1x6.1x8.1x0.1xx:

> request system fqdn show gives me below output:

When l ping the same FQDN from the FW l get a correct ip address mapping:

> request system fqdn refresh - didn't make any difference.

How can I force firewall to refresh this object?

PA-5050

PAN-OS 7.1.8

Re: FQDN record keeps wrong ip address

kiwi — Tue, 22 Aug 2017 11:16:18 GMT

Hi @TranceforLife,

Is your FQDN refresh job failing by any chance ?

Cheers !

-Kiwi.

Re: FQDN record keeps wrong ip address

reaper — Tue, 22 Aug 2017 11:21:42 GMT

have you tried

> request system fqdn refresh force yes

Re: FQDN record keeps wrong ip address

TranceforLife — Tue, 22 Aug 2017 11:29:03 GMT

Hi All,

Thanks.

@kiwi refresh job looks fine:

@reaper what exactly force yes means and how it is different from " request system fqdn refresh" command? Can l do it in the production?

Re: FQDN record keeps wrong ip address

reaper — Tue, 22 Aug 2017 11:55:34 GMT

a regular refresh will refresh stale entries while a force will refresh all entries

anything that's 'stuck' in cache will be refreshed too

Re: FQDN record keeps wrong ip address

kiwi — Tue, 22 Aug 2017 12:02:29 GMT

Hi @TranceforLife,

Not sure if it's the same issue ... but seeing this in the 7.1.10 release notes :

PAN-62188 - Fixed an issue where, if you configured a large number of FQDN objects, the firewall required multiple commits to refresh the objects.

--EDIT--

Nvm my last comment ... it seems that was fixed in 7.1.6 already :s

Cheers !

-Kiwi.

Re: FQDN record keeps wrong ip address

TranceforLife — Tue, 22 Aug 2017 12:02:56 GMT

Thx force yes did a trick.

MER-POD-LRC3N.xxxx (Objectname MER-POD-LRC3N):

1x6.1x8.1x0.1xx 3572 28

@kiwi I need to check the known issues, but thanks for pointing me in teh right direction

Re: FQDN record keeps wrong ip address

kiwi — Tue, 22 Aug 2017 12:03:49 GMT

I'm just happy everything worked out fine in the end 😄

-Kiwi.

Re: FQDN record keeps wrong ip address

TranceforLife — Tue, 22 Aug 2017 12:04:51 GMT

As always brilliant and powerful community!