SRX

last person joined: yesterday 

Ask questions and share experiences about the SRX Series, vSRX, and cSRX.

  • 1.  DNS forwarders in cluster doesn't work

    Posted 05-24-2015 11:51

    Hello all,

     

    I can't make DNS forwarders work with a chasis cluster in a SRX240 box:

    I can't query any internal interface for a DNS resolutions, documentation says dns-proxy won't work but I can't find anything related to forwarders. Any help will be apreciated.

     

    root@# show system services dns
    max-cache-ttl 600;
    forwarders {
    8.8.8.8;
    }

    {primary:node0}

     

    root@# show security zones security-zone Trusted
    host-inbound-traffic {
    system-services {
    all;
    dns;
    }
    }
    interfaces {
    reth1.0;
    reth2.0;
    }

     

     



  • 2.  RE: DNS forwarders in cluster doesn't work

    Posted 05-24-2015 18:00

    Hello stormrider,

     

    DNS forwarders are NOT supported in HA/Chassis cluster environment.

     

    Regards,
    C_R
    Please Mark My Solution Accepted if it Helped, Kudos are Appreciated Too



  • 3.  RE: DNS forwarders in cluster doesn't work
    Best Answer

    Posted 05-24-2015 18:02

    To Correct or modiffy my statement :

     

    If the control-plane and data-plane were on different nodes of the cluster, dns-proxy does not work.
However, when one node is primary for both planes, dns-proxy works fine.

     Regards,
    C_R
    Please Mark My Solution Accepted if it Helped, Kudos are Appreciated Too