Huawei AR150 series - Example for Configuring DNS Proxy

#
ospf 1
area 0.0.0.0
network 2.1.0.0 0.0.255.255
network 3.1.0.0 0.0.255.255
network 4.1.1.2 0.0.0.0
#
return
4.7.2 Example for Configuring DNS Proxy
Networking Requirements
As shown in Figure 4-2, no DNS server is deployed on NetworkA. Users on NetworkA access
the external DNS server to resolve domain names through RouterA enabled with DNS proxy.
If the route between RouterA and the DNS server is unreachable, the IP address configured for
DNS spoofing is returned.
NOTE
AR150/200 is RouterA.
Figure 4-2 Network diagram for configuring DNS proxy
RouterA
DNS Server
DNS Proxy
2.1.1.1/16
RouterB
1.1.1.1/16
Eth1/0/0
1.1.1.2/16
Eth2/0/0
2.1.1.2/16
Eth1/0/0
NetworkA
Configuration Roadmap
The configuration roadmap is as follows:
1. Configure a DNS server.
2. Configure DNS spoofing.
Data Preparation
To complete the configuration, you need the following data:
l IP address of the DNS server.
l Aging time of DNS entries.
l IP address configured by DNS spoofing.
Procedure
Step 1 Configure an IP address for Eth1/0/0.
<Huawei> system-view
[Huawei] sysname RouterA
[RouterA] interface ethernet 1/0/0
Huawei AR150&200 Series Enterprise Routers
Configuration Guide - IP Service 4 DNS Configuration
Issue 02 (2012-03-30) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
98