R21xx-HP FlexFabric 11900 Layer 3 IP Services Configuration Guide

87
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Specify a DNS server IP
address.
• Specify a DNS server IPv4 address:
dns server ip-address [ vpn-instance
vpn-instance-name ]
• Specify a DNS server IPv6 address:
ipv6 dns server ipv6-address
[ interface-type interface-number ]
[ vpn-instance vpn-instance-name ]
Use at least one command.
By default, no DNS server IP
address is specified.
3. (Optional.) Configure a
DNS suffix.
dns domain domain-name
[ vpn-instance vpn-instance-name ]
By default, no DNS suffix is
configured. Only the provided
domain name is resolved.
Configuring the DNS proxy
You can specify multiple DNS servers. The DNS proxy forwards a request to the DNS server that has the
highest priority. If having not received a reply, it forwards the request to a DNS server that has the second
highest priority, and thus in turn.
A DNS proxy forwards an IPv4 name query first to IPv4 DNS servers, and if no reply is received, it
forwards the request to IPv6 DNS servers. The DNS proxy forwards an IPv6 name query first to IPv6 DNS
servers, and if no reply is received, it forwards the request to IPv4 DNS servers.
To configure the DNS proxy:
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Enable DNS proxy.
dns proxy enable
By default, DNS proxy is
disabled.
3. Specify a DNS server IP
address.
• Specify a DNS server IPv4 address:
dns server ip-address [ vpn-instance
vpn-instance-name ]
• Specify a DNS server IPv6 address:
ipv6 dns server ipv6-address
[ interface-type interface-number ]
[ vpn-instance
vpn-instance-name ]
Use at least one command.
By default, no DNS server IP
address is specified.
Configuring DNS spoofing
DNS spoofing is effective only when:
• The DNS proxy is enabled on the device.
• No DNS server or route to any DNS server is specified on the device.
Follow these guidelines when you configure DNS spoofing: