topic Re: DNS Servers - can you set 3? in General Topics

DNS Servers - can you set 3?

networkadmin — Thu, 19 Jun 2014 15:58:40 GMT

As subject, the GUI lets you set two, ideally we want to set 3 as we have one at a remote site.

Re: DNS Servers - can you set 3?

pulukas — Thu, 19 Jun 2014 16:25:36 GMT

Sorry, only two from the cli as well.

# set deviceconfig system dns-setting servers

+ primary Primary DNS server IP address

+ secondary Secondary DNS server IP address

<Enter> Finish input

Re: DNS Servers - can you set 3?

kadak — Thu, 19 Jun 2014 16:31:34 GMT

Hello networkadmin,

Currently there is a limitation on the firewall to configure only two DNS servers. However, I see a feature request (FR ID : 2569) submitted to our content development team for the PAN to have the capability to add Tertiary and Quaternary DNS servers as well. You can request your account's sales engineer to vote for it so that we can include it in our future software releases as soon as possible

Hope that helps!

Thanks and regards,

Kunal Adak

Re: DNS Servers - can you set 3?

networkadmin — Thu, 19 Jun 2014 16:32:00 GMT

Damn

Feature request? (sorry never sure who actually works for Palo Alto as you guys don't identify yourselves with a logo or anything )

Re: DNS Servers - can you set 3?

pulukas — Thu, 19 Jun 2014 16:42:19 GMT

I'm an end-user in the enterprise space.

Feature Requests are an internal Palo Alto database of new features users have requested from sales engineering. You can ask your sales team to add your company as a "vote" for the new feature.

I''m told that if a lot of users vote for a feature they move it up on the development timeline.

Re: DNS Servers - can you set 3?

dmburgess — Tue, 05 Mar 2024 17:56:15 GMT

Any updates on this?

Re: DNS Servers - can you set 3?

PavelK — Wed, 06 Mar 2024 00:14:18 GMT

Hello @dmburgess

although I can't provide an update on status of that feature request, I think you can use one of below alternative approaches to overcome 2 IP address limitation. Either use a load balancer to point DNS requests to or use Anycast IP for DNS servers.

Kind Regards

Pavel