For the life of me, I am not able to figure out the error. I have two DNS’s running behind a Cisco 2621XM router.
When the domain name used a host for the DNS the web traffic, etc can get to the server without a problem. When I change the DNS over to the two internal servers (public addresses), lookup’s time out and never resolve.
Any help would be appreciated, here is my router config:
-=-=-=- SNIP -=-=-=-=-=
Building configuration…
Current configuration : 3165 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname router-wp
!
boot-start-marker
boot-end-marker
!
enable secret 5 xxxxxxxxxxxxxxx
!
no aaa new-model
no network-clock-participate slot 1
no network-clock-participate wic 0
ip cef
!
!
no ip dhcp use vrf connected
ip dhcp excluded-address 192.168.1.1 192.168.1.100
ip dhcp pool webport
network 192.168.1.0 255.255.255.0
dns-server xxx.xxx.xxx.xxx xxx.xxx.xxx.xxx
domain-name mysite.com
default-router 192.168.1.1
!
!
no ip domain lookup
ip name-server xxx.xxx.xxx.xxx
ip name-server xxx.xxx.xxx.xxx
ip name-server xxx.xxx.xxx.xxx
ip name-server xxx.xxx.xxx.xxx
ip auth-proxy max-nodata-conns 3
ip admission max-nodata-conns 3
!
!
interface FastEthernet0/0
description Connection to WAN
ip address xx.xx.xx.98 255.255.252.0 secondary
ip address xx.xx.xx.99 255.255.252.0 secondary
ip address xx.xx.xx.100 255.255.252.0 secondary
ip address xx.xx.xx.101 255.255.252.0 secondary
ip address xx.xx.xx.97 255.255.252.0
ip access-group FILTER-WAN-IN in
ip access-group FILTER-WAN-OUT out
ip nat outside
ip virtual-reassembly
duplex auto
speed auto
!
interface FastEthernet0/1
description Connection to LAN
ip address 192.168.1.1 255.255.255.0
ip nat inside
ip virtual-reassembly
duplex auto
speed auto
!
!
router rip
version 2
network xx.0.0.0
network 192.168.1.0
no auto-summary
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 xx.xx.xx.1
!
!
no ip http server
no ip http secure-server
ip nat inside source list 1 interface FastEthernet0/0 overload
ip nat inside source static udp 192.168.1.105 53 xx.xx.xx.98 53 extendable
ip nat inside source static 192.168.1.105 xx.xx.xx.98 extendable
ip nat inside source static 192.168.1.99 xx.xx.xx.99 extendable
ip nat inside source static 192.168.1.100 xx.xx.xx.100 extendable
!
ip access-list extended FILTER-LAN-OUT
permit ip any any
ip access-list extended PILTER-LAN-IN
permit ip any any
permit tcp any host xx.xx.xx.97 eq pop3
permit tcp any host xx.xx.xx.97 eq smtp
permit tcp any host xx.xx.xx.97 eq ftp
permit tcp any host xx.xx.xx.97 eq ftp-data
permit tcp any host xx.xx.xx.97 eq 443
permit tcp any host xx.xx.xx.97 eq 22
permit udp any host xx.xx.xx.97 eq 22
permit udp any host xx.xx.xx.97 eq domain
permit udp any host xx.xx.xx.97 eq 23
permit tcp any host xx.xx.xx.97 eq telnet
permit udp any host xx.xx.xx.97 eq 25
permit udp any host xx.xx.xx.97 eq 50
permit tcp any host xx.xx.xx.97 eq 50
permit tcp any host xx.xx.xx.97 eq www
permit udp any host xx.xx.xx.97 eq 80
permit udp any host xx.xx.xx.97 eq 110
permit udp any host xx.xx.xx.97 eq 220
permit tcp any host xx.xx.xx.97 eq 220
permit udp any host xx.xx.xx.97 eq 443
permit udp any host xx.xx.xx.97 eq 3389
permit tcp any host xx.xx.xx.97 eq 3389
!
access-list 1 permit 192.168.1.0 0.0.0.255
access-list 1 permit xx.xx.xx.0 0.0.0.255
access-list 1 permit any
!
!
!
control-plane
!
line con 0
line aux 0
line vty 0 4
password xxxxxxxxxxxx
login
!
!
end
router-wp#