2013年8月8日星期四

NAT DNS payload replacement. Very funny, Cisco.

Question:

ip nat inside source WS-C3750X-12S-S list bunch_of_hosts pool some_pool overload
ip nat inside source static 10.10.10.10 91.91.91.91 no-payload


there is a DNS record:

some_host.some.domain     IN     A     91.91.91.91

from host in bunch_of_hosts list:

$ dig some_host.some.domain @8.8.8.8

;;ANSWER SECTION:
some_host.some.domain     IN     A     10.10.10.10

Who's idea was that? How to disable it??


Clarification: DNS server, hosting some.domain is NOT inside our network. It's completely different organisation and thir DNS gives the right answer when asked outside this NAT setup.

Answer:


Can you try using these commands? They should stop IOS rewriting the DNS contents as part of its NAT ALG.

no ip nat service alg tcp dns

no ip nat service alg udp dns

没有评论:

发表评论