Use your Cisco router as a primary DNS server

In IOS release 12.3, most Cisco routers can act as primary DNS servers (formerly, this functionality was only available as part of DistributedDirector product), alleviating the need for a host-based DNS server in your perimeter network. To configure a router to act as primary
DNS server for a zone, use the ip dns primary command, for example:

ip dns server
ip dns primary website.com soa ns.website.com
admin@website.com 86400 3600 1209600 86400

Next, you need to define primary and secondary name servers for the domain.
Use the ip host ns command:
ip host website.com ns ns.website.com
ip host website.com ns ns.isp.com
You can also define mail routing for the domain with the ip host mx command:

ip host website.com mx 10 mail.website.com
ip host website.com mx 20 mail.isp.com


Finally, you need to define hosts within your domain (with the traditional form of the ip host command):

ip host ns.website.com 192.168.0.1 ! router's IP address
ip host www.website.com 192.168.1.1
ip host website.com 192.168.1.1 ! alternate for www.website.com
ip host mail.website.com 192.168.1.2

6 comments:

Anonymous said...

This actually caused my 2620XM to run at 98% CPU utilization and stopped my CME from processing calls.

Ivan Pepelnjak said...

You're absolutely right. I wrote a few recommendations on how to protect your router.

Anonymous said...

Whether probably to achieve support DDNS+DHCP of clients on the described configuration?

Ivan Pepelnjak said...

I was not able to get DDNS server working on Cisco IOS. It can send the DDNS requests to an external server, but somehow cannot keep a DDNS cache internally (if that was the question).

Гость said...

Great thanks!
Where I could read about why I can confihure ddns update via Cisco DHCP server and named/bind daemon?

Guest said...

This has worked perfectly on my Cisco 2800, 2600, 1800 and 1700 series routers. I suggest one read Cisco's documentation regarding dynamic name resolution. For example, ip domain list and ip domain name are also required.

Ivan Pepelnjak, CCIE#1354, is the chief technology advisor for NIL Data Communications. He has been designing and implementing large-scale data communications networks as well as teaching and writing books about advanced technologies since 1990. See his full profile, contact him or follow @ioshints on Twitter.