HP MSR SERIES Command Reference

566
• blacklist ipv6
client-verify dns enable
Use client-verify dns enable to enable DNS client verification on an interface.
Use undo client-verify dns enable to restore the default.
Syntax
client-verify dns enable
undo client-verify dns enable
Default
DNS client verification is disabled on an interface.
Views
Layer 3 interface view
Predefined user roles
network-admin
Usage guidelines
Enable DNS client verification on the interface that connects to the external network. This function
protects internal DNS servers against DNS flood attacks.
To configure the DNS client verification to collaborate with DNS flood attack prevention, specify
client-verify as the DNS flood attack prevention action. In collaboration, upon detecting a DNS flood
attack, the device adds the victim IP addresses to the protected IP list and verifies the suspected sources.
You can use the display client-verify dns protected ip command to display the protected IP list for DNS
client verification.
Examples
# Enable DNS client verification on interface GigabitEthernet 2/1/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 2/1/1
[Sysname-GigabitEthernet2/1/1] client-verify dns enable
Related commands
• client-verify dns protected ip
• display client-verify dns protected ip
client-verify http enable
Use client-verify http enable to enable HTTP client verification on an interface.
Use undo client-verify http enable to restore the default.
Syntax
client-verify http enable
undo client-verify http enable

HP MSR SERIES Specifications

General

Product Series	MSR Series
Manufacturer	HP
Category	Network Router
Ports	Varies by model
WAN Interfaces	Varies by model
LAN Interfaces	Varies by model
VPN Support	Yes
Firewall	Yes
Dimensions	Varies by model
Weight	Varies by model
Wireless Support	Varies by model
Management	Web-based, CLI
Power Supply	Varies by model
Operating Temperature	0°C to 45°C
Storage Temperature	-40°C to 70°C
Humidity	5% to 95% non-condensing