HP VPN Firewall Appliances Network Management Configuration Guide

225
Ste
p
Command Remarks
3. Specify a DNS server.
• Method 1 (In system view):
dns server ip-address
• Method 2 (In interface view):
a. interface interface-type interface-number
b. dns server ip-address
No DNS server is
specified by default.
Configuring DNS spoofing
DNS spoofing is effective only when:
• The DNS proxy is enabled on the device.
• No DNS server or route to any DNS server is specified on the device.
To configure DNS spoofing:
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Enable DNS spoofing and specify the
translated IP address.
dns spoofing ip-address Disabled by default.
Specifying the source interface for DNS packets
By default, the device uses the primary IP address of the output interface of the matching route as the
source IP address of a DNS request. Therefore, the source IP address of the DNS packets might vary with
DNS servers. In some scenarios, the DNS server only responds to DNS requests sourced from a specific
IP address. In such cases, you must specify the source interface for the DNS packets so that the device
can always use the primary IP address of the specified source interface as the source IP address of DNS
packets.
To specify the source interface for DNS packets:
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Specify the source interface
for DNS packets.
dns source-interface
interface-type
interface-number
By default, no source interface for DNS packets
is specified. The device uses the primary IP
address of the output interface of the matching
route as the source IP address of a DNS request.
Displaying and maintaining IPv4 DNS
Task Command Remarks
Display the static IPv4 domain
name resolution table.
display ip host [ | { begin | exclude |
include } regular-expression ]
Available in any view.
Display IPv4 DNS server
information.
display dns server [ dynamic ] [ | { begin |
exclude | include } regular-expression ]
Available in any view.