Configuring dynamic domain name resolution, Configuring the dns proxy – H3C Technologies H3C SecPath F1000-E User Manual
Page 248
223
NOTE:
•
The IPv4 address you last assign to the host name will overwrite the previous one if there is any.
•
You may create up to 50 static mappings between domain names and IPv4 addresses.
Configuring dynamic domain name resolution
To send DNS queries to a correct server for resolution, dynamic domain name resolution needs to be
enabled and a DNS server needs to be configured.
In addition, you can configure a DNS suffix that the system will automatically add to the provided
domain name for resolution.
To configure dynamic domain name resolution:
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Enable dynamic domain
name resolution.
dns resolve
Disabled by default.
3.
Specify a DNS server.
•
(Approach 1) System view
dns server ip-address
•
(Approach 2) Interface view
a.
interface interface-type
interface-number
b.
dns server ip-address
c.
quit
Use either approach.
Not specified by default.
4.
Configure a DNS suffix. dns domain domain-name
Optional.
Not configured by default. Only
the provided domain name is
resolved.
NOTE:
•
You can configure up to six DNS servers, including those with IPv6 addresses, in system view and on all
interfaces of the firewall.
•
A DNS server configured in system view has a higher priority than one configured in interface view. A
DNS server configured earlier has a higher priority than one configured later in the same view. A DNS
server manually configured has a higher priority than one dynamically obtained through DHCP. A
name query request is first sent to the DNS server that has the highest priority. If no reply is received, it
is sent to the DNS server that has the second highest priority, and thus in turn.
•
You can specify up to ten DNS suffixes.
Configuring the DNS proxy
To configure the DNS proxy:
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Enable DNS proxy.
dns proxy enable
Disabled by default.
- H3C SecPath F5000-A5 Firewall H3C SecPath F1000-A-EI H3C SecPath F1000-E-SI H3C SecPath F1000-S-AI H3C SecPath F5000-S Firewall H3C SecPath F5000-C Firewall H3C SecPath F100-C-SI H3C SecPath F1000-C-SI H3C SecPath F100-A-SI H3C SecBlade FW Cards H3C SecBlade FW Enhanced Cards H3C SecPath U200-A U200-M U200-S H3C SecPath U200-CA U200-CM U200-CS H3C SecBlade LB Cards H3C SecPath L1000-A Load Balancer