Configuring Dns Spoofing; Setting The Dscp Value For Dns Packets; Specifying The Source Interface For Dns Packets - HP 3600 v2 Series Configuration Manual

Step
3. Specify a DNS server.

Configuring DNS spoofing

DNS spoofing is effective only when:
• The DNS proxy is enabled on the device.
No DNS server or route to any DNS server is specified on the device.
•
To configure DNS spoofing:
Step
1. Enter system view.
2. Enable DNS spoofing and
specify the translated IP
address.

Setting the DSCP value for DNS packets

An IPv4 packet header contains an 8-bit Type of Service (ToS) field. As defined in RFC 2474, the first six
bits set the Differentiated Services Code Point (DSCP) value, and the last two bits are reserved. Network
devices use the DSCP value as a reference to determine the packet priority for transmission.
To set the DSCP value for DNS packets:
Step
1. Enter system view.
2. Set the DSCP value for
DNS packets.

Specifying the source interface for DNS packets

By default, the device uses the primary IP address of the output interface of the matching route as the
source IP address of a DNS request. Therefore, the source IP address of the DNS packets may vary with
DNS servers. In some scenarios, the DNS server only responds to DNS requests sourced from a specific
IP address. In such cases, you must specify the source interface for the DNS packets so that the device
can always use the primary IP address of the specified source interface as the source IP address of DNS
packets.
To specify the source interface for DNS packets:
Command
•
(Method 1) In system view:
dns server ip-address
•
(Method 2) In interface view:
a. interface interface-type
interface-number
b. dns server ip-address
Command
system-view
dns spoofing ip-address
Command
system-view
dns dscp dscp-value
92
Remarks
Use at least one method.
No DNS server is specified by
default.
Remarks
N/A
Disabled by default
Remarks
N/A
Optional.
By default, the DSCP value for DNS
packets is 0.