Configuring dns server address negotiation, Configure the local end as the client – H3C Technologies H3C SecPath F1000-E User Manual
Page 146
121
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Assign an IP address of
a global address pool
for the peer or specify
the IP address to be
allocated to the peer.
•
(Approach 1) Define a global address pool and
bind it to the interface:
a.
ip pool pool-number low-ip-address
[ high-ip-address ]
b.
interface virtual-template number
c.
remote address pool [ pool-number ]
•
(Approach 2) Specify the IP address to be
allocated to the peer:
a.
interface virtual-template number
b.
remote address ip-address
Use either approach.
As for the remote address
pool command, if the
pool-number argument is
not provided, the global
address pool numbered 0
is used.
To configure the local end as the server (for cases where PPP authentication is enabled):
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Enter domain view.
domain domain-name
N/A
3.
Define the domain address
pool.
ip pool pool-number low-ip-address
[ high-ip-address ]
N/A
4.
Return to system view.
quit
N/A
5.
Create a VT interface and
enter its view.
interface virtual-template number N/A
6.
Specify the address pool for
IP address allocation.
remote address pool
[ pool-number ]
If you execute the remote address
pool command without providing
the pool-number argument, all the
address pools in the domain are
used in turn for IP address
allocation.
7.
Disable the peer end from
using the locally configured IP
address.
ppp ipcp remote-address forced
Optional.
By default, the peer end is allowed
to use the locally configured IP
address. In this case, the local end
does not allocate an IP address to
the peer end if the latter already
has an IP address.
Note that the domain used in defining the pool address is the domain specified when performing PPP
authentication.
Configuring DNS server address negotiation
Configure DNS server settings depending on the role of your device in PPP negotiation.
Configure the local end as the client
To configure settings for DNS server address negotiation when the firewall is functioning as the client in
PPP negotiation:
- H3C SecPath F5000-A5 Firewall H3C SecPath F1000-A-EI H3C SecPath F1000-E-SI H3C SecPath F1000-S-AI H3C SecPath F5000-S Firewall H3C SecPath F5000-C Firewall H3C SecPath F100-C-SI H3C SecPath F1000-C-SI H3C SecPath F100-A-SI H3C SecBlade FW Cards H3C SecBlade FW Enhanced Cards H3C SecPath U200-A U200-M U200-S H3C SecPath U200-CA U200-CM U200-CS H3C SecBlade LB Cards H3C SecPath L1000-A Load Balancer