topic Configuring DNS proxy - interface is invalid in General Topics

Configuring DNS proxy - interface is invalid

ibge — Fri, 20 Apr 2018 12:33:59 GMT

I have network sub interface with DHCP enabled, I'm trying to attach DNS proxy to it because I need to resolve a name which is not resolved by the DNS server we are using (say 8.8.8.8) but I'm getting erros:

Details:
. Validation Error:
. network -> dns-proxy -> TV_DNS_INTERNO -> interface 'ethernet1/7.302' is already in use
. network -> dns-proxy -> TV_DNS_INTERNO -> interface is invalid
. Commit failed

TV_DNS_INTERNO is shared but I also get erros when it's vsys.

I also have doubts regarding how dns proxy works, should I set the IP of this sub-interface as the DNS to my clients?

Thank you.

Re: Configuring DNS proxy - interface is invalid

OtakarKlier — Fri, 20 Apr 2018 14:05:20 GMT

Hello,

You need to use the interface that is configured with the vlan's IP. My guess is that the interface you are using is setup as a L2 insteaf of a L3. Do you have a vlan interface that is setup as a L3? If yes then try and use it.

https://www.paloaltonetworks.com/documentation/80/pan-os/pan-os/networking/dns/use-case-3-firewall-acts-as-dns-proxy-between-client-and-server

Check step 4. the physical interface doesnt have to be L3 but the vlan should have a L3 interface so it can route the packets.

Hope that helps.