SRX

 View Only
  • 1.  Juniper SRX 300 Allowing DNS Updates from Split DNS

    Posted 19 days ago

    Hello!

    I have my Juniper SRX 300s configured as split DNS proxies that send all internal domain lookups to my internal DNS servers and public lookups to external servers. The Juniper then hands out the split DNS IP as the name server for clients. However it seems like my clients can no longer update their existing internal DNS records when they get a new DHCP lease from the juniper. 

    Is there a way to make this working in my setup?

    The flow of how things work is like this:
    Client requests IP -> SRX-300 hands out IP with DNS proxy as the single name server -> client can query DNS but not update its internal record./

    Thanks for any help!



    ------------------------------
    ZAKRIS SHMAGRANOFF
    ------------------------------


  • 2.  RE: Juniper SRX 300 Allowing DNS Updates from Split DNS

    Posted 19 days ago

    In all likelihood, the DNS Proxy in JunOS simply doesn't know how to handle UPDATE DNS requests (RFC2136). You should be able use the monitor traffic command on the DNS proxy interface to observe the UPDATE requests coming in, and what the DNS proxy sends back in response.



    ------------------------------
    Nikolay Semov
    ------------------------------