Error: Failed to configure DNS / DNS domain name resolution failed (Unable to set preferred/alternate DNS server)
Technical Articles ID:
KB94864
Last Modified: 9/8/2021
Environment
McAfee Advanced Threat Defense (ATD) 4.x
Problem
You aren’t able to set the preferred/alternate DNS server for ATD from either the Manager or command line interface.
The ATD Manager GUI shows the error:
Failed to configure DNS.
The CLI shows the error:
DNS domain name resolution failed.
Cause
ATD verifies DNS server availability by performing a reverse lookup of the IP address of the DNS server. If the DNS server can’t resolve the reverse lookup of its IP address, ATD treats the DNS server as unavailable, and shows the error.
Solution
Configure your DNS server so that it resolves the reverse lookup of its IP address.
Example NOTE: This example assumes the DNS server, used as the preferred DNS server in the ATD configuration is 192.168.100.10/24:
Create a reverse lookup zone of 100.168.192.in-addr.arpa on your DNS server (192.168.100.10).
Create a PTR record of 10.100.168.192.in-addr.arpa in the 100.168.192.in-addr.arpa zone.
Configure the PTR record 10.100.168.192.in-addr.arpa to resolve to the name of the DNS server.
