DNS server entries

[sue_town]

Hi

anyone know how to add more than 2 DNS servers on the PA 500 units and also in the client DHCP config

PA say it cant be done and ive requested this to be considered for a future release...but wondering if anyone else has come across this?

cheers

Sue

[Bart_Jocque]

You could offer 4 DNS server to your clients by creating 2 DNS-proxy-interfaces (loopbacks) on your PAN.

Both DNS-proxies can then do forwarding to two real DNS servers.

This makes 4 in total 🙂

It's a workarround, but do-able.

[sue_town]

thanks for the reply

device is employed at corporate office - using split tunnelling so local internet access and all other traffic via IPSEC tunnel to corp. network.

i have device (and client DHCP) set with primary DNS pointing to corporate DNS server and secondary pointing to external DSN server

given the above, can you provide detailed information re your solution and how i would implement?

thanks

Sue

[Bart_Jocque]

Enable dns proxy on your pan.

set a dns forwarding for your corporate dns zones towards your corporate dns servers

set a forwarding rule for internet dns zones to your ISP dns servers.

configure your clients to do dns-resolving with the DNS-proxy IP on your PAN ( make a loopback interface for this )

[sue_town]

thanks - will try this

Sue