HP VPN Firewall Appliances Network Management Configuration Guide

224
Configuration guidelines
Follow these guidelines when you configure dynamic domain name resolution:
You can configure up to six DNS servers, including those with IPv6 addresses, in system view, and
up to six DNS servers on all interfaces of a device.
A DNS server configured in system view has a higher priority than one configured in interface view.
A DNS server configured earlier has a higher priority than one configured later in the same view.
A DNS server manually configured has a higher priority than one dynamically obtained through
DHCP. A name query request is first sent to the DNS server that has the highest priority. If no reply
is received, it is sent to the DNS server that has the second highest priority, and so on in turn.
You can specify a maximum of ten DNS suffixes.
The device can resolve a maximum of four IP addresses for a domain name.
Configuration procedure
To configure dynamic domain name resolution:
Ste
p
Command
Remarks
1. Enter system view.
system-view N/A
2. Enable dynamic domain
name resolution.
dns resolve Disabled by default.
3. Specify a DNS server.
Method 1 (In system view):
dns server ip-address
Method 2 (In interface view):
a. interface interface-type
interface-number
b. dns server ip-address
c. quit
Use at least one method.
No DNS server is specified by
default.
4. Configure a DNS suffix.
dns domain domain-name
Optional.
By default, no DNS suffix is
configured and only the provided
domain name is resolved.
Configuring the DNS proxy
You can specify multiple DNS servers by using the dns server command repeatedly. Upon receiving a
name query request from a client, the DNS proxy forwards the request to the DNS server that has the
highest priority. If having not received a reply, it forwards to the request to a DNS server that has the
second highest priority, and thus in turn.
To configure the DNS proxy:
Ste
p
Command
Remarks
1. Enter system view.
system-view N/A
2. Enable DNS proxy.
dns proxy enable Disabled by default.