USG6000 LNS allocating a DNS address to the client

2

The specific content of the DNS address allocated by the USG6000 LNS to the client is as follows:
HRP_Asys
HRP_A[USG6600]interface Virtual-Template 1
HRP_A[USG6600-Virtual-Template1]ppp ipcp dns 8.8.8.8
HRP_A[USG6600-Virtual-Template1]qu
HRP_A[USG6600]

Command introduction:
ppp ipcp dns

Command function:

The ppp ipcp dns command is used to configure the DNS server address.
The undo ppp ipcp dns command is used to restore the default configuration.
Command format:

ppp ipcp dns { primary-dns-address [ secondary-dns-address ] | admit-any | request }
undo ppp ipcp dns { primary-dns-address [ secondary-dns-address ] | admit-any | request }
Parameter description:
primary-dns-address specifies the address of the primary DNS server provided for the peer end. The value is in dotted decimal notation.
secondary-dns-address specifies the address of the secondary DNS server provided for the peer end. The value is in dotted decimal notation.
admit-any specifies any DNS server address provided for the peer end. -
request specifies the request sent to the peer end for the DNS server address -
View

Interface view
Default level:

2: Configuration level
Use guide:

By default, the DNS server address is not configured.
Example:

#Set the IP address of the primary DNS server obtained from the peer end to 10.2.0.70, and the IP address of the secondary DNS server to 10.2.0.71.
system-view
[sysname] interface Dialer 0
[sysname-Dialer0] ppp ipcp dns 10.2.0.70 10.2.0.71

Other related questions:
Can a static IP address be allocated to different clients
S series switches except S1700 switches do not assign IP addresses in use to clients. Before assigning an IP address to a client, a switch functioning as the DHCP server sends ping packets to the IP address to prevent IP address conflicts. You can run the dhcp server ping { packet number | timeout milliseconds } command in the system view to specify the maximum number of ping packets to be sent by a DHCP server and the maximum response time of a ping packet. If there is no response to the ping packet within the maximum response time, the DHCP server continues to send ping packets to this IP address until the number of ping packets reaches the maximum value. If there is still no response, this IP address is not in use and the DHCP server assigns the IP address to a client. This ensures that the IP address assigned to the client is unique.

Check IP addresses dynamically allocated to clients
On S series switches except S1700 switches, you can view IP addresses that have been dynamically assigned to users as follows: - If an interface address pool is used, run the display ip pool interface interface-pool-name used command. - If a global address pool is used, run the display ip pool name ip-pool-name used command. You can obtain the IP address used by each user according to the mapping between IP addresses and MAC addresses in the command output.

Application scenarios where the USG6000 serves as the DNS Client
The firewall serves as the DNS Client and uses DNS to dynamically obtain the IP address corresponding to the domain name for user communications. When the firewall executes the following services, it can serve as the DNS Client to send DNS request packets to the DNS Server. Perform the ping or tracert operation in domain name mode. Access the security center platform in domain name mode to update the signature database. Access the CA server in domain name mode to obtain the certificate online.

Can addresses that cannot be allocated dynamically be used by clients
Run the excluded-ip-address start-ip-address [ end-ip-address ] or dhcp server excluded-ip-address start-ip-address [ end-ip-address ] command to configure the IP addresses that cannot be automatically allocated in the DHCP address pool. The IP addresses are used as reserved addresses and can be used when clients use static addresses.

If you have more questions, you can seek help from following ways:
To iKnow To Live Chat
Scroll to top