Configuring Dns Spoofing; Configuring Network Mode Tracking For An Output Interface - HPE FlexNetwork HSR6800 Configuration Manual
Comware 7 layer 3, ip services
Hide thumbs
Also See for FlexNetwork HSR6800:
- Security command reference (538 pages) ,
- Configuration manual (482 pages) ,
- Command reference manual (153 pages)
Table of Contents
Advertisement
Step
4.
Specify a DNS server
IPv4 address in
interface view.
5.
Specify a DNS server
IPv6 address.
Configuring DNS spoofing
DNS spoofing is effective only when:
•
The DNS proxy is enabled on the device.
•
No DNS server or route to any DNS server is specified on the device.
Follow these guidelines when you configure DNS spoofing:
•
You can configure only one replied IPv4 address and one replied IPv6 address for the public
network or a VPN instance. If you use the command multiple times, the most recent
configuration takes effect.
•
You can configure DNS spoofing for both public network and VPN instances.
•
After DNS spoofing takes effect, the device spoofs a DNS request even though a matching
static DNS entry exists.
To configure DNS spoofing:
Step
1.
Enter system view.
2.
Enable DNS proxy.
3.
Enable DNS spoofing and
specify the IP address
used to spoof DNS
requests.
Configuring network mode tracking for an output
interface
This feature tracks the network mode of an output interface and spoofs DNS requests if the network
mode is 2G. This feature takes effect on the cellular interface when the interface acts as the output
interface to reach the DNS server. Spoofing DNS requests avoids DNS packet loss that might be
caused by limited 2G network bandwidth.
To configure network mode tracking for an output interface:
Command
a
Enter interface view:
interface interface-type
interface-number
b
Specify a DNS server IPv4 address:
dns server ip-address [ vpn-instance
vpn-instance-name ]
ipv6 dns server ipv6-address
[ interface-type interface-number ]
[ vpn-instance vpn-instance-name ]
Command
system-view
dns proxy enable
•
Specify an IPv4 address:
dns spoofing ip-address
[ vpn-instance
vpn-instance-name ]
•
Specify an IPv6 address:
ipv6 dns spoofing
ipv6-address [ vpn-instance
vpn-instance-name ]
92
Remarks
By default, no DNS server
address is specified.
Remarks
N/A
By default, DNS proxy is disabled.
By default, DNS spoofing is
disabled.
You can specify both an IPv4
address and an IPv6 address.
Advertisement
Table of Contents
Troubleshooting
