Configuring The Dns Trusted Interface; Setting The Dscp Value For Outgoing Dns Packets - HPE FlexNetwork 10500 Series Configuration Manual

When sending an IPv6 DNS request, the device follows the method defined in RFC 3484 to select an
IPv6 address of the source interface.
You can configure only one source interface on the public network or a VPN instance. You can
configure the source interface for both public network and VPN instances.
To specify the source interface for DNS packets:
Step
1. Enter system view.
2. Specify the source
interface for DNS
packets.

Configuring the DNS trusted interface

This task enables the device to use only the DNS suffix and domain name server information
obtained through the trusted interface. The device can then obtain the correct resolved IP address.
This feature protects the device against attackers that act as the DHCP server to assign incorrect
DNS suffix and domain name server address.
To configure the DNS trusted interface:
Step
1. Enter system view.
2. Specify the DNS trusted
interface.

Setting the DSCP value for outgoing DNS packets

The DSCP value of a packet specifies the priority level of the packet and affects the transmission
priority of the packet. A bigger DSCP value represents a higher priority.
To set the DSCP value for outgoing DNS packets:
Step
1. Enter system view.
2. Set the DSCP value for
DNS packets sent by a
DNS client.
Command
system-view
dns source-interface interface-type
interface-number [ vpn-instance
vpn-instance-name ]
Command
system-view
dns trust-interface interface-type
interface-number
Command
system-view
•
DSCP value for IPv4 DNS
packets:
dns dscp dscp-value
•
DSCP value for IPv6 DNS
packets:
ipv6 dns dscp dscp-value
112
Remarks
N/A
By default, no source interface for
DNS packets is specified.
If you execute the command
multiple times, the most recent
configuration takes effect.
If you specify the vpn-instance
vpn-instance-name option, make
sure the source interface belongs
to the specified VPN instance.
Remarks
N/A
By default, no DNS trusted
interface is specified.
You can configure up to 128 DNS
trusted interfaces.
Remarks
N/A
By default, the DSCP value is 0 in
DNS packets sent by a DNS
client.