1. Networking requirements
There is no DNS server in the LAN, and the PC with the internal 10.1.1.0/24 network segment must be able to resolve the domain name through the Internet DNS server.
Requirements: 1. The Gateway Router supports DNS Proxy; 2. the IP address of the Internet DNS server is 10.72.66.36/24. 2. Networking Diagram
Www.2cto.com
Figure 3-3 typical DNS Proxy configuration example
Www.2cto.com 3. configuration steps
(1) configure the vro# # configure the IP address of Ethernet 1/0/0 (intranet port. [Router] interface ethernet 1/0/0 [Router-Ethernet 1/0/0] ip address 10.1.1.1 255.255.255.0 # configure the NAT service so that the client can access the Internet through DNS Proxy. [Router] acl number 2000 [Router-acl-basic-2000] rule 0 permit source 10.1.1.0 0.0.255 [Router-acl-basic-2000] quit # configure the IP address of Ethernet 1/0/1 (Internet port. [Router] interface ethernet 1/0/1 [Router-Ethernet1/0/1] ip address 10.1.2.1 255.255.255.0 [Router-Ethernet1/0/1] nat outbound 2000 [Router-Ethernet1/0/1] quit # enable the DNS Proxy function. [Router] dns-proxy enable # configure the DNS server address. [Router] dns server 10.72.66.36 (IP address of the DNS server in the internet) # configure the route to ensure that the route between the DNS client and the server is reachable. (2) configure PC # specify the gateway and DNS server as 10.1.1.1. (Multiple network segments only specify the DNS server as 10.1.1.1)
Source http://sdbaby.blog.51cto.com/149645/716205