To configure DNS queries and responses, do the following:
- Grid: In the Data Management tab, select the DNS tab, expand Toolbar, and click Grid DNS Properties.
- Member: In the Data Management tab, open the DNS tab then Members tab, select the member checkbox, and click the Edit icon.
- In the Grid DNS Properties or Member DNS Properties editor, click Toggle Advanced Mode and open the Logging tab.
- Under Data Connection for all DNS Queries/Responses to a Domain, do the following:
- Select the Capture DNS Queries checkbox. This enables the feature set for configuration. After you enable this option at the member level, the appliance will capture DNS queries for the selected members only.
Select the Capture DNS Responses checkbox to start capturing DNS responses. This will enable the feature set for configuration. After you enable this option at the member level, the appliance will capture DNS responses for the selected members only.
Note that simultaneous logging of queries and responses might increase the usage of disk space and adversely affect DNS services and performance. Infoblox recommends that you do not configure simultaneous logging.- Select Capture queries/responses to capture DNS queries and responses for all domains and zones at once.
- Select Limit capture to these domains to capture DNS queries and responses from one domain and one zone at a time.
- To specify domains for DNS-capture operations in the Domain table, click the Add icon and choose Add Domain or Bulk Add Domains from the menu.
- To save DNS queries on the appliance, select Retain captured queries on the local disk. To export DNS queries to Data Connector, select SCP in the Export to drop-down list.
Export to: From the drop-down list, select SCP to back up the DNS queries on the Data Connector and None to save queries only on the appliance. To save the captured DNS queries on both the appliance and the Data Connector, select the Retain captured queries on the local disk checkbox and SCP from the Export to drop-down list.
To define the destination for capture files, do the following:
Note
When you configure an SCP server and enable the MGMT port, the NIOS appliance uses SSH for data transfer. It uses the same authentication and provides the same security as SSH. SCP uses the LAN1 port to communicate with external servers.
- When you select SCP from the Export to drop-down list, do the following:
- In the Directory Path field, enter a directory to which the capture file will be saved on the server. The ~ symbol should/must be used as the directory for the Data Connector VM.
- In the Server Address field, enter the IP address of the Data Connector VM on which the capture files will be saved.
- Enter the values for Username and Password of the file server account. These values are same as those used to configure the NIOS source on the Infoblox Portal.
- The Limit query data collected per file to minutes or 100MB (whichever comes first) option limits the collection of query data per capture file. A capture file for logging DNS queries and responses is rolled over based on the configured time limit or when the file reaches 100 MB in size, whichever is sooner. The default limit is 10 minutes, but you can enter a value from 1 to 10.
5. Save the configuration.