Cisco SD-WAN: Configure Redirect DNS In Service Side VPN
#sdwan #ciscosdwan #ciscotraining #ciscosystems #cisco
00:00 Intro
00:19 Introduce about Redirect DNS
07:11 Configure Centralized Data Policy
08:48 Import Centralized Data Policy to Global Policy
10:16 Check Command Line at Router
10:56 Check Result
-----------------------
Cisco sd-wan provide this feature from ios xe version 17.8.1a and vmanager 20.8.1, allow catalyst sd-wan devices to respond to DNS quiries using specifies configuration and associated host table cache that are selected based on certain characteristics of the queries
Cisco recommend two use cases for applying redirect DNS,
Use case 1: Unconditional redirect DNS: a host sends all the DNS requests to a local edge router, and the local edge router redirects the DNS request to an enterprise DNS server in enterprise network, and this server act as a DNS forwarder.
Use case 2: Conditional Redirect DNS: a host uses a service provider (SP) or managed service provider (MSP) DNS by default. Only the DNS request of known application or custom application is forwarded to the enterprise DNS server using a Cisco Catalyst SD-WAN overlay network. The other DNS requests are sent to the SP DNS server.
About configuration, Redirect DNS feature need use centralized data policy, and need 2 steps to configure:
1. need create Data policy, define match DNS application or DNS request or response, and then action redirection.
2. if you have a global policy already, then just import the data policy to global centralize policy or create new global policy and then import data policy. Finally, active the global policy to vSmart.
---------------------
@NetworkLabRoom
Topology: https://ibb.co/SQL3SRY