From: Jay Greenberg (groupstudylist@execulink.com)
Date: Tue Dec 31 2002 - 19:13:04 GMT-3
I agree, this feature is needed. Much of our Unix-based access control
is DNS based. It would be an asset to be able to configure Cisco ACLs
with permanent DNS based information.
e.g., permit ip any name *.operations.cisco.com any
I understand that name based access-control is not as secure as packet
header access-control, but the choice should be left up to the Admin.
Jay Greenberg
On Tue, 2002-12-31 at 13:11, Chuck Church wrote:
> Sorry about the OT, but I'm not sure where to request an IOS feature. When
> entering an NTP server's DNS name, it will always resolve it to an IP
> address, and put the address in the config. This is fine until the IP
> address changes. Any chance they'd ever keep it in the config as a host
> name, and then re-check the address say when the DNS TTL expires? Of
> course, if there is a way to do it currently, I'd love to know the way.
> Didn't see anything in any docs.
>
> Thanks,
>
> Chuck Church
> CCIE #8776, MCNE, MCSE
> .
.
This archive was generated by hypermail 2.1.4 : Fri Jan 17 2003 - 17:21:55 GMT-3