Networks

Ask something
Question Locked

cannot access DNS from internal on Cisco ASA 5520

0 helpful
3 replies

by rmp.dmd1229

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hi,

We're using Cisco ASA 5520.

I have set-up the following interface

outside: 172.20.55.240 (security:0)
zone1: 192.10.10.1 (security: 100)

i have a server 192.10.10.21 that I need to allow external DNS access

I have a static NAT
source: 192.10.10.21
NAT: 172.20.55.240
service 53 (TCP and UDP)

and FW rule
allow source 192.10.10.21 to any for service 53 (TCP and UDP)

however this is not working.

Are there more configuration required?

thanks!

3 replies

by netman1958

Do you have an access-list applied to the outside interface for inbound traffic? If so, does it allow DNS replies in? If it doesn't and/or you don't have an access-list on that interface, are you inspecting DNS traffic in the outbound direction so that it will dynamically allow it back in?

This discussion is closed to new replies.