R3721-F3210-F3171-HP High-End Firewalls Network Management Configuration Guide-6PW101

240
Figure 149 Network diagram
Configuration procedure
NOTE:
Before configuring DDNS on the Firewall, register with username steven and password nevets at
http://www.oray.cn/, add the Firewall's host name-to-IP address mapping to the DNS server, and make
sure that the devices are reachable to each other.
# Create a DDNS policy named oray.cn and enter its view.
<Firewall> system-view
[Firewall] ddns policy oray.cn
# Specify for DDNS update requests the URL address with the login ID steven and password nevets.
[Firewall-ddns-policy-oray.cn] url oray://steven:[e-mail]
# Set the DDNS update request interval to 12 minutes.
[Firewall-ddns-policy-oray.cn] interval 0 0 12
[Firewall-ddns-policy-oray.cn] quit
# Enable dynamic domain name resolution on the Firewall.
[Firewall] dns resolve
# Specify the IP address of the DNS server as 1.1.1.1.
[Firewall] dns server 1.1.1.1
# Apply the DDNS policy to interface GigabitEthernet 0/1 to enable DDNS update and dynamically
update the mapping between whatever.gicp.cn and the primary IP address of GigabitEthernet 0/1.
[Firewall] interface GigabitEthernet 0/1
[Firewall-GigabitEthernet0/1] ddns apply policy oray.cn fqdn whatever.gicp.cn
After the preceding configuration is completed, the Firewall will notify the DNS server of its new domain
name-to-IP address mapping through the PeanutHull server, whenever the IP address of the Firewall
changes. Therefore, the Firewall can always provide Web service at whatever.gicp.cn.
Firewall
DDNS client
www.oray.cn
DDNS server
DNS server
IP network
GE0/1
1.1.1.1