Focus

dump dnsservice config all

Table of Contents

Filter

Expand All | Collapse All

Prisma SD-WAN Docs

Administration
Deployment
Incidents & Alerts
CloudBlades
Version
- AWS Transit Gateway
- Azure vWAN
- Azure vWAN with vION
- ChatBot for MS Teams
- ChatBot for Slack
- CloudBlades Integration with Prisma Access
- GCP NCC
- Service Now
- Zoom QSS
- Zscaler Internet Access
Reference
Release Notes
Version
- ION 5.2
- ION 5.3
- ION 5.4
- ION 5.5
- ION 5.6
- ION 6.0
- ION 6.1
- ION 6.2
- ION 6.3
- ION 6.4
- New Features Guide
- On-Premises Controller
- Prisma Access CloudBlade Cloud Managed
- Prisma Access CloudBlade Panorama Managed
- Prisma SD-WAN CloudBlades

dump dhcpstat

dump dpdk cpu

dump dnsservice config all

Use the dump dnsservice config all to display all the configurations related to DNS Service Profile. DNS Service Profiles are used to specify configuration parameters for the Prisma SD-WAN DNS Service. DNS configurations include all the details of authoritative config, dns-forward config, cache config, dns-queries metadata, dns-rebind config, dns-response overrides, dnssec config and domain to address.

Command

dump dnsservice config (all | dns-forward-config | dns-queries-metadata | domain-to-address | dns-response-overrides | cache-config | dns-rebindconfig | dnssec-config | authoritative-config)

Options

all	Enter all to display summary of all the configurations related to DNS.
dns-forward-config	Enter dns-forward-config to view all the DNS-Forward configurations from DNS profile
dns-queries-metadata	Enter dns-queries-metadata to view all the configurations related to dns-queries-metadata from DNS profile.
domain-to-address	Enter domain-to-address to view all the domain-to-address configurations from DNS profile.
dns-response-overrides	Enter dns-response-overrides to view all the configurations related to dns-response-overrides from DNS profile.
cache-config	Enter cache-config to view all the cache configurations from DNS profile.
dns-rebind-config	Enter dns-rebind-config to view all the dns-rebind configurations from DNS profile.
dnssec-config	Enter dnssec-config to view all the DNSSEC configurations from DNS profile.
authoritative-config	Enter authoritative-config to view all the authoritative configurations from DNS profile.

Command Notes

Role	Super, Read Only, Monitor
Related Commands	—
Introduced in	Release 5.4.1

Example

dump dnsservice config all
				Name : Myservicename update 100
				Enabled : true
				Etag : 3ID : 15862297924230215
				DNS Service Profile
				DNS Service Profile
				ID : 15857239920150188
				Etag : 1
				Listen Dnsservice roleID : 15857234131980064
				Listen Port : 53
				
				DNS Forward Config
				
				DNS Servers :
				IP Prefix : 2.2.2.2/24
				Domain Names : [test1.com test2.com]
				DNS Server IP : 2.2.2.2
				DNS Server Port : 60
				Forward DNS Service Role ID : 15857233845640047
				Source Port : 1002
				IP Prefix : 3.3.3.3/32
				Domain Names : [test3.com test4.com]
				DNS Server IP : 3.3.3.3
				DNS Server Port : 70
				Forward DNS Service Role ID : 15857233845640047
				Source Port : 1005
				Minimum Source Port : 1000
				Maximum Source Port : 2000
				Send to all DNS Servers : true
				Enable Strict DomainName : false
				Enable DNS Loop Detection : false
				Edns Packet Max : 100
				DNS Queries Metadata
				Add Customer Premises Equipment :
				Type : text
				IdentifierText : cpeid
				Add Client Mac :
				MacEncodingFormat : FF:FF:AA:BB:AA:BB
				Identifier :
				Type : text
				IdentifierText : mytxt1
				Add Subnets :
				Ipv4 Address : 4.4.4.4
				Ipv4 Prefix Length : 32
				Ipv4 Address : 4.4.4.5
				Ipv4 Prefix Length : 32
				
				Domains To Addresses
				
				Domain Names : [mtest.com mytest.com]
				Enable All Domains : false
				IP Address : 5.5.5.5
				Domain Names : [mtest.com mytest.com]
				Enable All Domains : false
				IP Address : 5.5.5.6
				
				DNS Response Overrides
				
				Max TTL : 10
				Local TTL : 20
				Disable Private IP Lookups : false
				Ignore IP Addresses : [6.6.6.6 7.7.7.7]
				Bogus Nx Domains : [5.6.7.8 8.9.1.4]
				Aliases :
				Original IP : 6.7.8.9
				Original Start IP : 192.168.0.10
				Original End IP : 192.168.0.40
				Replace IP Address : 192.168.5.4
				Replace Mask : mask
				Original IP : 5.5.5.5
				Original Start IP : 7.7.7.7
				Original End IP : 8.8.8.8
				Replace IP Address : 6.6.6.6
				Replace Mask : mask
				
				CacheConfig
				
				Disable Negative Caching : false
				Minimun Cache TTL : 40
				Maximum Cache TTL : 60
				Negative Cache TTL : 50
				Cache Size : 1024
				
				DNSRebindConfig
				
				Stop DNS Rebind Private IP : false
				Enable LocalHost Rebind : true
				Rebind Domains : [domain1.com domain2.com]
				Enable Dnssec Proxy : false
				DnsSecConfigEnabled : false
				DNS Check Unsigned : true
				Disable DNSSec Timecheck : true
				Trust Anchors :
				Class : class
				Domain : domain.com
				KeyDigest :
				Key Tag : 19036
				Algorithm : 8
				Digest Type : 2
				Digest :49AAC11D7B6F6446702E54A1607371607A1A41855200FD2CE1CDDE32F24E8FB5
				Class : class
				Domain : domain.com
				KeyDigest :
				Key Tag : 20326
				Algorithm : 8
				Digest Type : 2
				Digest :E06D44B80B8F1D39A95C0B0D7C65D08458E880409BBC683457104237C7F8EC8D
				
				AuthoritativeConfig
				
				AuthoritativeServers :
				Domain Name : testdomain.com
				DNS Service Role ID : 10
				Domain Name : testdomain1.com
				DNS Service Role ID : 10
				Zones :
				Domain Name : zone.com
				Include Prefix : [2.2.2.2/24 5.5.5.5/32]
				Exclude Prefix : [3.3.3.3/32 6.6.6.6/32]
				Domain Name : zone1.com
				Include Prefix : [2.2.2.2/24 5.5.5.5/32]
				Exclude Prefix : [3.3.3.3/32 6.6.6.6/32]
				SOA :
				Serial Number : 2000
				Host Master : hostmaster
				Refresh : 10
				Retry : 10
				Expiry : 30
				Serial Number : 2000
				Host Master : hostmaster
				Refresh : 10
				Retry : 10
				Expiry : 10
				Secondary Servers : [2.2.2.2 3.3.3.3]
				Peers : [4.4.4.4 5.5.5.5]
				TTL : 100
				HostRecords :
				Domain Names : [domain1.com domain2.com]
				IPV4 Address : 3.3.3.3
				TTL : 300
				Domain Names : [domain1.com domain2.com]
				IPV4 Address : 3.3.3.3
				TTL : 300
				SynthDomains :
				Domain : domain.com
				Start IP Address : 1.1.1.1
				End IP Address : 9.9.9.9
				IP Address Prefix : 5.5.5.5/24
				Domain : domain.com
				Start IP Address : 1.1.1.1
				End IP Address : 9.9.9.9
				IP Address Prefix : 6.6.6.6/24
				SRVHosts :
				Service : service
				Protocol : protocol
				Domain Name : domainname.com
				Service : service
				Protocol : protocol
				Domain Name : domainname.com
				NaptrRecords :
				Name : naptrrecord
				Order : 10
				Preference : 20
				Flags : flg
				Name : naptrrecord
				Order : 10
				Preference : 20
				Flags : flg
				CaaRecords :
				Name : caarecord
				Flags : flags
				Tag : tag
				Value : value
				Name : caarecord
				Flags : flags
				Tag : tag
				Value : value
				CnameRecords :
				Name : [cname cnaam]
				Target : target1
				Tag : ctag
				TTL : 20
				Name : [cname]
				Target : target
				Tag : ctag
				TTL : 10
				DNSResourceRecords :
				Name : rcords
				RR Number : 100
				HEX Data : data
				Name : rcords
				RR Number : 100
				HEX Data : data
				PtrRecords :
				Name : ptrrecord
				Target : target
				Name : ptrrecord
				Target : target
				TxtRecords :
				Domain Name : domaintext.com
				Texts : [testtext]
				Domain Name : domaintext.com
				Texts : [testtext]
				MxHostRecords :
				Mx Name : mx_name
				Hostname : hostname
				Preference : 1
				Mx Name : mx_name
				Hostname : hostname
				Preference : 1
				Max Concurrent DNS Queries : 100
				Dns servicerole Bindings :
				Dns service role ID : 15857234131980064
				Interfaces :
				InterfaceID : cgx_interface:controller1
				InterfaceIP : <nil>
				InterfaceID :
				InterfaceIP : 192.167.176.6
				Dns service role ID : 15857233845640047
				Interfaces :
				InterfaceID : cgx_interface:1
				InterfaceIP : <nil>
				InterfaceID :
				InterfaceIP : 192.167.17.56
				DomainsToInterfaces :
				Domain Names : [mtest.com mytest.com]
				Interface ID : cgx_interface:1
				Domain Names : [mtest.com mytest.com]
				Interface ID : cgx_interface:2

dump dnsservice config all
Name    :  dns_service1
Enabled :  true
Etag    :  1
ID      :  1676871344643003896
DNS Service Profile
   ID                           :  1675823408415012596
   Etag                         :  58
   Name                         :  Dns_profile1
   Listen Dnsservice roleID     :  1675768429191002596
   Listen Port                  :  53
   DNS Forward Config
      DNS Servers :
         DNS Server IP                  :  192.16.72.2
         Forward DNS Service Role ID    :  1675823222537008896

         DNS Server IP                  :  2702::abcc
         Forward DNS Service Role ID    :  1675823222537008896

         IP Prefix                      :  2000::/4
         DNS Server IP                  :  2103::13
         Forward DNS Service Role ID    :  1675823237643021496

      Minimum Source Port       :  1024
      Send to all DNS Servers   :  true
   Enable Strict DomainName     :  false
   Enable DNS Loop Detection    :  false
   Edns Packet Max              :  4096
   DNS Queries Metadata
      Add Customer Premises Equipment   :
         Type                           : text
      Add Client Mac                    :
         MacEncodingFormat              :  base64
      Add Subnets                       :
         Ipv6 Address                   :  2899:1123::
         Ipv6 Prefix Length             :  127

         Ipv4 Address           :  19.1.1.0
         Ipv4 Prefix Length     :  24

   Domains To Addresses
   DNS Response Overrides
      Disable Private IP Lookups        :  false
      Ignore IP Addresses               :  []
      Aliases                           :
   CacheConfig
      Disable Negative Caching  :  false
      Minimun Cache TTL         :  3600
      Cache Size                :  150
   DNSRebindConfig
      Stop DNS Rebind Private IP        :  false
      Enable LocalHost Rebind           :  false
   Enable Dnssec Proxy                  :  false
   DnsSecConfig
      Enabled                   :  false
      DNS Check Unsigned        :  false
      Disable DNSSec Timecheck  :  false
      Trust Anchors             :
   No AuthoritativeConfig
Max Concurrent DNS Queries      :  150
Dns servicerole Bindings        :
   Dns service role ID          :  1675823222537008896
   Interfaces                   :
      InterfaceID               :  1675750379317012696
      InterfaceIP               :  <nil>
   Dns service role ID          :  1675823237643021496
   Interfaces                   :
      InterfaceID               :  1675746176821021496
      InterfaceIP               :  <nil>
DomainsToInterfaces             :

dump dhcpstat

dump dpdk cpu

Prisma SD-WAN Docs

dump dnsservice config all

Prisma SD-WAN Docs

dump dnsservice config all

Command

Options

Command Notes

Example

Activation & Onboarding

SASE

Visibility & Monitoring

Hardware Reference

Hardware Quick Start Guides

Virtual ION Deployment

Prisma SD-WAN Integration

Prisma SD-WAN Experts Corner

Best Practices