As the administrator of a Cisco Integrated Services Router (ISR) G2, you are able to use our global network's DNS IP addresses of 220.127.116.11 and 18.104.22.168. Our service offers you visibility into all internet traffic originating from your ISR and results in a faster internet experience for your users.
Note: This guide is for the ISR G2, not the ISR 4K series. See Integration for ISR 4K and ISR 1100 – Security Configuration Guide if you use an ISR 4K.
The following table outlines the differences between the the ISR G2 and the ISR 4K and their available packages.
|Feature||ISR 4K||ISR G2|
|DNS Layer Protection||Yes||Yes|
|Policy Per Interface||Yes||No|
|Transparent DNS Proxy||Yes||No|
|DHCP/Endpoint DNS changes required||No||Yes|
|IP Layer Enforcement||Yes, with Umbrella Roaming Client or AnyConnect Roaming module||Yes, with Umbrella Roaming Client or AnyConnect Roaming module|
|Client IP Reporting||Yes (Requires IOS-XE version 16.6.1 or later)||No|
|Dynamic Public IP Address Support||Automatic||Via Dynamic DNS|
|Umbrella Branch Package available||Yes||No|
|Other Umbrella Packages available||Professional, Insights, Platform||Professional, Insights, Platform|
Our DNS servers can be used as the name servers on your ISR G2. Example:
hostname(config)# ip name-server 22.214.171.124 126.96.36.199
hostname(config)# ip domain lookup
Note: If your ISR G2 needs to resolve internal DNS then it must use internal DNS servers. In this scenario, the internal DNS servers are configured to use Umbrella as their DNS forwarders.
You can also use our DNS servers for your ISR G2's DHCP server. As a result, the devices that receive addressing from your ISR G2 will also be protected. Example:
hostname(config)# ip dhcp pool <pool_number>
hostname(dhcp-config)# dns server 188.8.131.52 184.108.40.206
Once you've configured your ISR G2, see What are the Umbrella Test Destinations? to verify that Umbrella is working.