Newsgroup: it.comp.reti.cisco
Titolo: help con DNS

Sto provando a configurare un cisco 801, ma non mi riesce di fare lavorare
il DNS:
sono partito dalla configurazione base (che ha lo stesso problema) generata
dall'utility Fast-Step e ho provato a fare qualche modifica.
probabilmente faccio qualche errore nella access-list....
qualcuno mi puň aiutare?
Grazie, Paolo

Gią che ci sono, fiducioso di un aiuto, allego la configurazione attuale
(che ha anche il problema ulteriore di non permettermi di raggiungere il
router via telnet...):
Using 3323 out of 8076 bytes
!
! Last configuration change at 12:40:42 UTC Mon Dec 22 2003
! NVRAM config last updated at 12:41:09 UTC Mon Dec 22 2003
!
version 12.2
no service pad
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname router
!
enable secret 5 KKKKKKKKKK
!
username router password 7 WWWWWWWW
ip subnet-zero
no ip source-route
!
no ip domain-lookup
isdn switch-type basic-net3
!
!
!
interface Ethernet0
 ip address 192.168.2.1 255.255.255.0
 ip access-group 101 in
 no ip proxy-arp
 ip nat inside
!
interface BRI0
 no ip address
 ip nat outside
 encapsulation ppp
 dialer pool-member 1
 isdn switch-type basic-net3
 no cdp enable
 ppp authentication chap pap callin
!
interface Dialer1
 description ISP
 ip address negotiated
 ip access-group 111 in
 no ip proxy-arp
 ip nat outside
 encapsulation ppp
 no ip split-horizon
 dialer pool
 dialer remote-name Cisco1
 dialer idle-timeout 300
 dialer string nnnnnnnnnnnn
 dialer hold-queue 10
 dialer-group 1
 pulse-time 0
 ppp authentication chap pap callin
 ppp chap hostname XXXXXXXX
 ppp chap password 7 YYYYYYYYYYYY
 ppp pap sent-username XXXXXXX password 7 ZZZZZZZZZZZZ
!
ip nat inside source list 18 interface Dialer1 overload
ip nat inside source list 100 interface Dialer1 overload
ip http server
ip classless
ip route 0.0.0.0 0.0.0.0 Dialer1
!
!
map-class dialer DialClass
access-list 18 permit 192
access-list 100 deny   udp any any eq netbios-dgm
access-list 100 deny   udp any any eq 135
access-list 100 deny   udp any any eq ntp
access-list 100 deny   eigrp any any
access-list 100 deny   udp any any eq rip
access-list 100 deny   tcp any 192.168.0.0 0.0.0.255 eq telnet
access-list 100 permit tcp any 192.168.0.0 0.0.0.255 established
access-list 100 permit tcp any any
access-list 100 permit udp any any
access-list 101 deny   udp any eq netbios-dgm any
access-list 101 deny   udp any eq netbios-ns any
access-list 101 deny   udp any eq netbios-ss any
access-list 101 deny   tcp any eq 137 any
access-list 101 deny   tcp any eq 138 any
access-list 101 deny   tcp any eq 139 any
access-list 101 permit ip 192.168.0.0 0.0.0.255 any time-range TIME
access-list 101 deny   ip any any
access-list 111 permit icmp any any administratively-prohibited time-range
TIME
access-list 111 permit icmp any any echo time-range TIME
access-list 111 permit icmp any any echo-reply time-range TIME
access-list 111 permit icmp any any pack
access-list 111 permit icmp any any time-exceeded time-range TIME
access-list 111 permit icmp any any traceroute time-range TIME
access-list 111 permit icmp any any unreachable time-range TIME
access-list 111 deny   ip any any
access-list 111 permit tcp host 62.211.69.150 192.168.0.0 0.0.0.255 eq
domain
access-list 111 permit tcp host 212.48.4.15 192.168.0.0 0.0.0.255 eq domain
access-list 111 permit udp host 62.211.69.150 192.168.0.0 0.0.0.255 eq
domain
access-list 111 permit udp host 212.48.4.15 192.168.0.0 0.0.0.255 eq domain
dialer-list 1 protocol ip permit
!
line con 0
 exec-timeout 120 0
 stopbits 1
line vty 0 4
 exec-timeout 0 0
 login local
!
no rcapi server
!
!
time-range TIME
 periodic daily 0:00 to 23:59
!
end


stai facendo un po' di confusione. i client vanno configurati con un 
DNS. il router NON e' un server DNS e non viene interrogato dai client 
(windows o altro che siano). impostare uno o piu' DNS sul router 
significa che il router puo' risolvere nomi-ip ma non i client che 
stanno dietro la rete.
per "navigare" hai altre possibilita':
1- monti una proxy sulla quale configuri un DNS
2- setti il DNS a mano sui client
3- monti un server DNS (anche cache only)
4- monti un DHCP che tra le varie cose fornisce anche il DNS
ovviamente al strada 2 e' la piu' veloce.
ciao, arx

 > qualcuno mi può aiutare?
