Configuring DNS spoofing

DNS spoofing is effective only when:

Follow these guidelines when you configure DNS spoofing:

You can configure only one replied IPv4 address and one replied IPv6 address for the public network or a VPN instance. If you use the command multiple times, the most recent configuration takes effect.
You can configure DNS spoofing for both public network and VPN instances.
After DNS spoofing takes effect, the device spoofs a DNS request even though a matching static DNS entry exists.

To configure DNS spoofing:

Step	Command	Remarks
1. Enter system view.	system-view	N/A
2. Enable DNS proxy.	dns proxy enable	By default, DNS proxy is disabled.
3. Enable DNS spoofing and specify the IP address used to spoof DNS requests.	Specify an IPv4 address: dns spoofing ip-address [ vpn-instance vpn-instance-name ] Specify an IPv6 address:ipv6 dns spoofing ipv6-address [ vpn-instance vpn-instance-name ]	By default, DNS spoofing is disabled. You can specify both an IPv4 address and an IPv6 address.

Step

Command

Remarks

1. Enter system view.

system-view

N/A

2. Enable DNS proxy.

dns proxy enable

By default, DNS proxy is disabled.

3. Enable DNS spoofing and specify the IP address used to spoof DNS requests.

Specify an IPv4 address:
dns spoofing ip-address [ vpn-instance vpn-instance-name ]
Specify an IPv6 address:ipv6 dns spoofing ipv6-address [ vpn-instance vpn-instance-name ]

By default, DNS spoofing is disabled.

You can specify both an IPv4 address and an IPv6 address.

prev	up	next
Configuring the DNS proxy	home	Specifying the source interface for DNS packets