No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

CLI-based Configuration Guide - IP Service

AR500, AR510, AR531, AR550, AR1500, and AR2500 V200R010

This document describes the concepts and configuration procedures of IP Service features on the device, and provides the configuration examples.
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Example for Configuring IPv6 DNS Proxy

Example for Configuring IPv6 DNS Proxy

Networking Requirements

As shown in Figure 10-4, Users access the DNS server to resolve domain names through RouterA enabled with DNS proxy. If the route from RouterA to the DNS server is unreachable, the IPv6 address configured for DNS spoofing is used to respond to the DNS query packets.

NOTE:
AR500&AR530&AR550 can function only as RouterA in this scenario.
Figure 10-4  Network diagram for configuring IPv6 DNS proxy

Configuration Roadmap

The configuration roadmap is as follows:

  1. Configure the IPv6 address for the DNS server on RouterA to forward DNS packets.

  2. Configure IPv6 DNS spoofing on RouterA.

Procedure

  1. Configure an IPv6 address for GE1/0/0.

    <Huawei> system-view
    [Huawei] sysname RouterA
    [RouterA] ipv6
    [RouterA] interface gigabitethernet 1/0/0
    [RouterA-GigabitEthernet1/0/0] undo portswitch
    [RouterA-GigabitEthernet1/0/0] ipv6 enable
    [RouterA-GigabitEthernet1/0/0] ipv6 address fc00:1::1 64
    [RouterA-GigabitEthernet1/0/0] quit
    

  2. Configure a DNS server.

    # Enable dynamic DNS resolution.

    [RouterA] dns resolve
    

    # Configure a DNS server that the DNS proxy or relay connects to.

    [RouterA] dns server ipv6 fc00:2::2
    

    # Enable IPv6 DNS proxy.

    [RouterA] dns proxy ipv6 enable
    

  3. Configure DNS spoofing and specify the IPv6 address in response messages as fc00:3::3.

    [RouterA] dns spoofing ipv6 fc00:3::3

  4. Configure a static route.

    [RouterA] ipv6 route-static fc00:2:: 64 fc00:1::2 
    NOTE:

    You need to configure a static IPv6 route on the DNS server so that DNS packets can be sent and received properly.

  5. Verify the configuration.

    # Run the display current-configuration command to view the DNS proxy configuration on RouterA.

    <RouterA> display current-configuration | include dns 
     dns resolve                                                                    
     dns server ipv6 FC00:2::2                                                          
     dns proxy ipv6 enable                                                               
     dns spoofing ipv6 FC00:3::3                                                            
    

Configuration File

  • Configuration file of RouterA

    #
     sysname RouterA
    #
    ipv6
    #
    interface GigabitEthernet1/0/0
     undo portswitch
     ipv6 enable                                     
     ipv6 address FC00:1::1/64                                 
    #
    dns resolve 
    dns server ipv6 FC00:2::2
    dns proxy ipv6 enable
    dns spoofing ipv6 FC00:3::3
    #
    ipv6 route-static FC00:2:: 64 FC00:1::2   
    #
    return
    
  • Configuration file of RouterB

    #
     sysname RouterB
    #
    ipv6
    #
    interface GigabitEthernet1/0/0
     undo portswitch
     ipv6 enable                                     
     ipv6 address FC00:1::2/64 
    #
    interface GigabitEthernet2/0/0
     undo portswitch
     ipv6 enable                                     
     ipv6 address FC00:2::1/64 
    #
    return
    
Translation
Download
Updated: 2019-05-20

Document ID: EDOC1100034231

Views: 79773

Downloads: 51

Average rating:
This Document Applies to these Products
Related Version
Related Documents
Share
Previous Next