Configuring the dns proxy, Configuring dns spoofing, Configuration prerequisites – H3C Technologies H3C WX3000E Series Wireless Switches User Manual

Page 86

Advertising
background image

75

To do…

Use the command…

Remarks

Configure a DNS suffix

dns domain domain-name

Optional
Not configured by default. Only

the provided domain name is
resolved.

NOTE:

You can configure up to six DNS servers, including those with IPv6 addresses, in system view and on all
interfaces of a device.

A DNS server configured in system view has a higher priority than one configured in interface view. A
DNS server configured earlier has a higher priority than one configured later in the same view. A DNS
server manually configured has a higher priority than one dynamically obtained through DHCP. A

name query request is first sent to the DNS server that has the highest priority. If no reply is received, it

is sent to the DNS server that has the second highest priority, and thus in turn.

You can specify up to ten DNS suffixes.

Configuring the DNS proxy

Follow these steps to configure the DNS proxy:

To do…

Use the command…

Remarks

Enter system view

system-view

Enable DNS proxy

dns proxy enable

Required
Disabled by default.

Specify a DNS server

System view

dns server ip-address Required

Configure the DNS
server in at least one

view.
No DNS server is
specified by default.

Interface view

interface interface-type
interface-number

dns server ip-address

NOTE:

You can specify multiple DNS servers by using the dns server command repeatedly. Upon receiving a
name query request from a client, the DNS proxy forwards the request to the DNS server that has the

highest priority. If having not received a reply, it forwards to the request to a DNS server that has the
second highest priority, and thus in turn.

Configuring DNS spoofing

Configuration prerequisites

DNS spoofing is effective only when:

The DNS proxy is enabled on the device.

No DNS server or route to any DNS server is specified on the device.

Advertising