Configuring DNS for Huawei Firewall

A Domain Name System (DNS) is a host naming mechanism in character string format of TCP/IP to establish the mapping between domain names and IP addresses It is a mechanism of mapping easy!to!remember and meaningf"l domain names to IP addresses recogni#able for networ$ de%ices DNS deli%ers the following f"nctions& Device Serving as a DNS Client Device Serving as a DNS Proxy Device Serving as a DDNS Client After yo" specify the DNS ser%er address on the de%ice' the de%ice can ser%e as the DNS client or DNS pro(y to send domain name resol"tion re)"ests to the DNS ser%er Adding a DNS Server The DNS ser%er accepts the domain name resol"tion re)"ests initiated by the DNS client *o" can statically set an IP address for the DNS ser%er connected to the de%ice thro"gh this tas$ The IP address of the DNS ser%er is generally pro%ided by the ISP In addition' it can also be a"tomatically obtained' which re)"ires the connection type of at least one interface to be config"red as D+CP or PPPo, The priority of the DNS ser%er whose IP address is statically config"red is higher than the one whose IP address is dynamically obtained -or the DNS ser%ers whose IP addresses are config"red in the same way' the one that has an IP address (either obtaining a"tomatically or config"red statically) earlier en.oys a higher priority /hen resol%ing domain names' the de%ice sends )"ery pac$ets (according to the priorities) to DNS ser%ers "ntil the )"ery s"cceeds Step 1 Choose Network 0 DNS 0 DNS Step 2 ,nter the IP address of the DNS ser%er in the DNS Server ist te(t bo( Step ! Clic$ Add If the operation s"cceeds' the new config"ration whose "#taining $ode is Static is displayed in DNS Server ist 1epeat the pre%io"s operations to add the IP addresses of m"ltiple DNS ser%ers N"%& l If the obtaining mode of an entry in DNS Server ist is D+CP' the IP address of the DNS ser%er is obtained dynamically thro"gh D+CP l If the obtaining mode of an entry in DNS Server ist is PPPo,' the IP address of the DNS ser%er is obtained dynamically thro"gh PPPo, ''''&nd
1

Deleting a DNS Server *o" can delete only the DNS ser%er IP addresses that are obtained statically' b"t not those obtained thro"gh D+CP/PPPo, If the interface that is connected thro"gh D+CP or PPPo, is physically Down' or the interface fails to be connected thro"gh D+CP or PPPo,' the corresponding DNS ser%er IP address is deleted a"tomatically from the DNS ser%er list Step 1 Choose Network 0 DNS 0 DNS Step 2 Select the chec$ bo(es of m"ltiple entries or the chec$ bo( in the table header for selecting all Step ! Clic$ Delete If the operation s"cceeds' the entries that are ."st selected are not displayed in DNS Server ist ''''&nd DDNS /hen the de%ice ser%es as the DDNS client' the DNS ser%er can dynamically "pdate the mapping between domain names and IP addresses after notified by the DDNS ser%ice pro%ider' ens"ring correct IP addresses being resol%ed from domain names &na#ling t(e DDNS ,nabling the DDNS enables other related DDNS f"nctions Altho"gh yo" can perform related DDNS config"rations in the case of DDNS disabled' the config"rations do not ta$e effect Step 1 Choose Network 0 DNS 0 DDNS Step 2 Select the &na#le chec$ bo( corresponding to DDNS in Configure DDNS Step ! Clic$ Apply If the 2peration s"cceeded dialog bo( is displayed' the f"nction is s"ccessf"lly enabled ''''&nd Creating a DDNS Policy A DDNS policy is a collection of s"ch information as the DDNS ser%er address' login "ser name' password' DDNS client domain name' and bo"nd interface The same DDNS policy can be bo"nd to different interfaces' which simplifies the DDNS config"ration Step 1 Choose Network 0 DNS 0 DDNS Step 2 Clic$ Add in DDNS Policy ist Step ! ,nter or select the parameters listed in %a#le 1 Step ) Clic$ Confir* If the operation s"cceeds' the new config"ration is displayed in DDNS Policy ist 1epeat the pre%io"s operations to create m"ltiple DDNS policies %a#le +'1, Parameters of the DDNS policy
2

''''&nd $odifying a DDNS Policy Step 1 Choose Network 0 DNS 0 DDNS Step 2 Clic$ of the line where the entry to be modified resides Step ! ,nter or select parameters listed in %a#le +'1, Policy Na*e cannot be modified Step ) Clic$ Confir* If the operation s"cceeds' DDNS Policy ist is displayed on the page and data in the list has changed with the config"rations
3

+owe%er' the config"ration in Password is in%isible in DDNS Policy ist ''''&nd -iewing t(e Status of t(e DDNS Policy In the case of the DDNS f"nction enabled' if the DDNS policy is bo"nd to an interface' the interface a"tomatically initiates the "pdate re)"est to the DDNS ser%ice pro%ider /hen the IP address of the interface changes' or the stat"s of the interface changes' the interface initiates the "pdate re)"est to the DDNS ser%ice pro%ider again /ith the DDNS policy stat"s' yo" can learn abo"t the dynamic "pdate of the mapping between IP addresses and domain names on the DNS ser%er Step 1 Choose Network 0 DNS 0 DDNS Step 2 3iew Status of the corresponding DDNS policy in DDNS Policy ist %a#le 2lists the meanings of se%eral %al"es

''''&nd Deleting a DDNS Policy Step 1 Choose Network 0 DNS 0 DDNS Step 2 Select the chec$ bo(es of m"ltiple entries or the chec$ bo( in the table header for selecting all Step ! Clic$ Delete If the operation s"cceeds' the entries that are ."st selected are not displayed in DDNS Policy ist ''''&nd

$ore related. +2/ T2 P1,3,NT INT,1-,1,NC, /I1,4,SS 125T,1

4

+2/ T2 S243, DD2S ATTAC6 2- S/ITC+ $ore Huawei products and /eviews you can visit. http&//www h"anetwor$ com/blog

+"anetwor$ com is a world leading +"awei networ$ing prod"cts distrib"tor' we wholesale original new +"awei networ$ing e)"ipments' incl"ding +"awei switches' +"awei ro"ters' +"aweisymantec sec"rity prod"cts' +"awei IAD' +"awei S-P and other +"awei networ$ing prod"cts 2"r c"stomers incl"de telecom operators' +"awei resellers' ISP and system integrators 1ight now most of o"r sales are contrib"ted by reg"lar c"stomers 2"r website& http&//www h"anetwor$ com Telephone& 789:!;<9<=>?< ,mail& sales@h"anetwor$ com Address& :;/- 4"c$y Pla#a' ;=9!;:= 4oc$hart 1oad' /anchai' +ong$ong