133
Usage guidelines
This configuration applies to both IPv4 and IPv6.
In IPv4 DNS, the device uses the primary IPv4 address of the specified source interface as the
source IP address of a DNS query. In IPv6 DNS, the device selects an IPv6 address of the specified
source interface as the source IP address of a DNS query. The method of selecting the IPv6 address
is defined in RFC 3484.
The system allows only one source interface for the public network or each VPN instance. If you
execute this command multiple times, the most recent configuration takes effect. You can specify
source interfaces for both public network and VPN instances.
This command takes effect whether the source interface belongs to the VPN instance or not. As a
best practice, specify an interface that belongs to the VPN instance as the source interface.
Examples
# Specify VLAN-interface 2 as the source interface for DNS packets on the public network.
<Sysname> system-view
[Sysname] dns source-interface vlan-interface 2
dns spoofing
Use dns spoofing to enable DNS spoofing and specify the IPv4 address for spoofing DNS requests.
Use undo dns spoofing to disable DNS spoofing.
Syntax
dns spoofing ip-address [ vpn-instance vpn-instance-name ]
undo dns spoofing ip-address [ vpn-instance vpn-instance-name ]
Default
DNS spoofing is disabled.
Views
System view
Predefined user roles
network-admin
Parameters
ip-address: Specifies the IPv4 address used to spoof DNS requests.
vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a
case-sensitive string of 1 to 31 characters. To enable DNS spoofing for the public network, do not
specify this option.
Usage guidelines
Use the dns spoofing command together with the dns proxy enable command.
DNS spoofing functions when the DNS proxy does not know the DNS server address or cannot
reach the DNS server. It enables the DNS proxy to spoof DNS queries of type A by responding with
the specified IPv4 address.
The system allows only one replied IPv4 address for the public network or each VPN instance. If you
execute this command multiple times, the most recent configuration takes effect. You can configure
DNS spoofing for both public network and VPN instances.
To Next Page
Loading...
Need help?
General