H3C SecPath Series Operation Manual page 13

Operation Manual – User Access
H3C SecPath Series Security Products
Table 1-12 Enable/disable forced IP address assignment with PPP IPCP negotiation
Forbid the peer to use a self-configured
fix IP address in PPP IPCP negotiation.
Disable forced address assignment in
PPP IPCP negotiation.
By default, the peer can use its self-configured IP address in PPP IPCP negotiation. If
the peer explicitly requests this end for an address, this end acts as requested; if the
peer already has a self-configured IP address, this end does not allocate one to the
peer.
III. Configuring DNS address negotiation
While negotiating PPP address, the firewall can negotiate DNS server address as a
DNS server address provider or recipient, depending on the connected device.
When a PC connects to the firewall using PPP, through dialup for example, the firewall
should allocate a DNS server address to the PC so that the PC can use its domain
name to access the Internet.
When connected using PPP to the network access server (NAS) of the service provider,
the firewall should be able to request the NAS for a DNS server address or accept the
unsolicited DNS server address for revolving domain names.
Perform the following configuration in interface view.
Table 1-13 Configure DNS address negotiation
Enable the firewall to accept the
unsolicited DNS server address
Disable the firewall to accept the
unsolicited DNS server address
Enable the firewall to allocate a DNS
server address to the peer
Disable the firewall to allocate a DNS
server address to the peer
Enable the firewall to request for a DNS
server address
Disable the firewall to request for a DNS
server address
By default, DNS address negotiation is disabled.
Operation
Operation
1-11
Chapter 1 PPP Configuration
Command
ppp ipcp remote-address forced
undo ppp ipcp remote-address
forced
Command
ppp ipcp dns admit-any
undo ppp ipcp dns admit-any
ppp ipcp dns primary-dns-address
[ secondary-dns-address ]
undo ppp ipcp dns
primary-dns-address
[ secondary-dns-address ]
ppp ipcp dns request
undo ppp ipcp dns request