Configuring DNS proxy through the web UI of the USG6000 series

1

The USG6000 series can serve as the DNS proxy to forward DNS request and reply packets between the DNS client and DNS server. Specify the DNS server address through the web UI so that the device can serve as the DNS proxy to send domain name resolution requests to the DNS server.
1. Choose Network > DNS > DNS.
2. Click Add in DNS Server List.
3. Set the IP address of the DNS server.
If you do not select the external network interface, the configured DNS server address is the global address. Enter the IPv4 or IPv6 address of the DNS server in the DNS Server Address text box. Click OK.
If you select a specific external network interface, the configured DNS server address is the address bound with the interface and applies only to this interface.
If the operation succeeds, the new configuration whose Obtaining Mode is Manual is displayed in DNS Server List.
Repeat the preceding operations to add the IPv4 or IPv6 addresses of multiple DNS servers.
4. Optional: In Configure DNS Query Packets's Source Address, set the Source Interface or Source Address.
5. Click Apply
.

Other related questions:
Configuring DNS proxy through the web UI of the USG2000&5000 series
The USG2000&5000 series can serve as the DNS proxy to forward DNS request and reply packets between the DNS client and DNS server. Specify the DNS server address through the web UI so that the device can serve as the DNS proxy to send domain name resolution requests to the DNS server. 1. Choose Network > DNS > DNS. 2. Click Add in DNS Server List. 3. Set the IP address of the DNS server. If you do not select the external network interface, the configured DNS server address is the global address. Enter the IPv4 or IPv6 address of the DNS server in the DNS Server Address text box. Click OK. If you select a specific external network interface, the configured DNS server address is the address bound with the interface and applies only to this interface. If the operation succeeds, the new configuration whose Obtaining Mode is Manual is displayed in DNS Server List. Repeat the preceding operations to add the IPv4 or IPv6 addresses of multiple DNS servers. 4. Optional: In Configure DNS Query Packets' Source Address, set the Source Interface or Source Address. 5. Click Apply .

Configuring smart DNS for a single server through the web UI of the USG6000
Configure smart DNS for a single server through the web UI as follows: 1. Choose Network > DNS > Smart DNS. 2. Select Enable of Smart DNS and click Apply. 3. In Smart DNS List, click Add. 4. Select Single-server when only one web server is deployed on the enterprise intranet in Scenario. 5. Enter the description of smart DNS in Description. 6. Enter the global IP address of the internal web server in DNS Reply Address. 7. In Traffic Distribution Mode, select Based on ISP egresses, Round Robin, or Weighted Round Robin as required. 8. Click OK. 9. Choose Policy > NAT Policy > Server Mapping. 10. In Server Mapping List, click Add. 11. In Add Address Mapping, configure server mapping. 12. Click OK. 13. Choose Network > Interface and configure sticky load balancing.

Configuring smart DNS for multiple servers through the web UI of the USG6000
Configure smart DNS for multiple servers through the web UI as follows: 1. Choose Network > DNS > Smart DNS. 2. Select Enable of Smart DNS and click Apply. 3. In Smart DNS List, click Add. 4. Select Multi-server when multiple web servers are deployed on the enterprise intranet in Scenario. 5. Enter the description of smart DNS in Description. 6. DNS Reply Address indicates the internet server address sent by the DNS server to users. The value is automatically generated on the basis of ISP Server Public Address in ISP WAN Interface Mapping List. 7. In Traffic Distribution Mode, select Based on ISP egresses, Round Robin, or Weighted Round Robin as required. 8. Click OK. 9. Choose Policy > NAT Policy > Server Mapping. 10. In Server Mapping List, click Add. 11. In New Server Mapping, configure server mapping. The following table lists server mapping parameters. 12. Click OK. 13. Choose Network > Interface and configure sticky load balancing.

DNS proxy configuration on the USG6000
You can configure the DNS proxy on the firewall as follows: 1. Run the dns proxy enable command to enable the DNS proxy function or run the dns relay enable command to enable the DNS relay function. 2. Run the dns server ip-address command to configure the DNS server accessed by the DNS proxy or DNS relay.

Transparent DNS proxy configuration on the USG6000
The principle for configuring the transparent DNS proxy on the USG6000 is as follows: By configuring the transparent DNS proxy on the NGFW, DNS request packets of intranet users are distributed to DNS servers of ISP1 and ISP2 based on a ratio of 2:1. In this way, network access traffic of the intranet users is also distributed to the DNS servers of ISP1 and ISP2 based on a ratio of 2:1. The smart routing function is required to select an outbound interface. In addition, the ISP address library routing function must be configured. The configuration procedure is as follows: 1. Configure the transparent DNS proxy function. Bind the DNS server address with the outbound interface. Specify the address of the DNS server serving as the transparent DNS proxy, and configure the domain names to be excluded. 2. Configure the ISP address library routing function. If the preset ISP address file is used, skip this step. If a new ISP address file is imported, configure the ISP name and specify the mapping between the ISP name and the ISP address file. 3. Configure the outbound interface. Configure the interface IP address, gateway, bandwidth, bandwidth overload protection threshold, and ISP name corresponding to the interface. 4. Configure the global routing policy. Set the smart routing mode to load balancing, and set outbound interfaces that are directly connected to the NGFW, ISP1 network, and ISP2 network as member interfaces of the smart routing function. For specific configurations, click Method Used to Configure Transparent DNS Proxy on the USG6000.

If you have more questions, you can seek help from following ways:
To iKnow To Live Chat
Scroll to top