Configuring The Dns Proxy; Configuring Dns Spoofing - HP 5920 Series Configuration Manual

Step
2. Specify a DNS server IP
address.
3. (Optional.) Configure a
DNS suffix.

Configuring the DNS proxy

You can specify multiple DNS servers. The DNS proxy forwards a request to the DNS server that has the
highest priority. If having not received a reply, it forwards the request to a DNS server that has the second
highest priority, and thus in turn.
A DNS proxy forwards an IPv4 name query first to IPv4 DNS servers, and if no reply is received, it
forwards the request to IPv6 DNS servers. The DNS proxy forwards an IPv6 name query first to IPv6 DNS
servers, and if no reply is received, it forwards the request to IPv4 DNS servers.
To configure the DNS proxy:
Step
1. Enter system view.
2. Enable DNS proxy.
3. Specify a DNS server IP
address.

Configuring DNS spoofing

DNS spoofing is effective only when:
The DNS proxy is enabled on the device.
•
No DNS server or route to any DNS server is specified on the device.
•
Follow these guidelines when you configure DNS spoofing:
You can configure only one replied IPv4 address and one replied IPv6 address for the public
•
network or a VPN. If you use the command multiple times, the most recent configuration takes effect.
• You can configure DNS spoofing for the public network and a maximum of 1024 VPNs.
To configure DNS spoofing:
Command
•
Specify a DNS server IPv4 address:
dns server ip-address [ vpn-instance
vpn-instance-name ]
•
Specify a DNS server IPv6 address:
ipv6 dns server ipv6-address
[ interface-type interface-number ]
[ vpn-instance vpn-instance-name ]
dns domain domain-name [ vpn-instance
vpn-instance-name ]
Command
system-view
dns proxy enable
•
Specify a DNS server IPv4 address:
dns server ip-address [ vpn-instance
vpn-instance-name ]
•
Specify a DNS server IPv6 address:
ipv6 dns server ipv6-address
[ interface-type interface-number ]
[ vpn-instance vpn-instance-name ]
79
Remarks
Use at least one command.
By default, no DNS server IP
address is specified.
By default, no DNS suffix is
configured. Only the provided
domain name is resolved.
Remarks
N/A
By default, DNS proxy is
disabled.
Use at least one command.
By default, no DNS server IP
address is specified.