Skip to main content

Netskope Help

Configure the Appliance in DNS Mode

Note

In appliance version 58 and later, the CLI property listener-ip is changed to listener-interface in configuration commands.

To configure the appliance in DNS mode,

  1. Configure the IP address that the appliance uses to listen for DNS requests. This address is the first address specified for the dp1 interface IP. If an IP range was specified for dp1 , use the first IP address in that range (in canonical order), or use dp1 interface's IP.

    set dataplane proxy-mode dns listener-ip 172.16.1.10

    or,

    set dataplane proxy-mode dns listener-interface dp1

  2. Configure the addresses that the appliance uses for DNS responses from cloud app domains. This addresses will be from the range of addresses specified for the dp1 interface IP.

    set dataplane proxy-mode dns application-ips 172.16.1.10-172.16.1.60,172.16.1.64,172.16.1.65-172.16.1.125,172.16.1.200-172.16.1.225

  3. Configure the default IP address that the appliance uses to listen to the client traffic. This address is the first address configured on the dp1 interface.

    set dataplane proxy-listener-ip 172.16.1.10

    or,

    set dataplane proxy-listener-interface dp1

  4. Enable DNS service on the appliance.

    set dataplane proxy-mode dns enable true

  5. Configure the primary upstream DNS Server in the network.

    set dns primary <primary upstream dns server>
set dns secondary <secondary upstream dns server>
In this section: