Configuration Guide
10. DNS Query Randomization
Version 7.2
73
Security Setup
10 DNS Query Randomization
The device supports DNS query source port and Query ID randomization from Version 6.8.
The purpose of this feature is to prevent DNS spoofing attacks.
There are two modes of operation for DNS Query Randomization:
Forwarding Plan mode:
An external DNS server on the device’s WAN side is
advertised); only the source port is randomized.
DNS proxy mode:
The device is configured as a DNS server on its LAN side.
Both the DNS Query ID and source port used on the device’s WAN side are
randomized. This option activates the randomization feature on all outgoing DNS
queries from the device to the WAN side.
10.1 Configuration Example
This example shows how to activate the DNS query randomization feature above:
# configure data
(config-data)# ip dns randomization
(config-data)# exit
#
Summary of Contents for Mediant 500L MSBR
Page 2: ......
Page 4: ...Mediant MSBRs 4 Document LTRT 31828 Security Setup This page is intentionally left blank...
Page 8: ...Mediant MSBRs 8 Document LTRT 31828 Security Setup This page is intentionally left blank...
Page 12: ...Mediant MSBRs 12 Document LTRT 31828 Security Setup This page is intentionally left blank...
Page 16: ...Mediant MSBRs 16 Document LTRT 31828 Security Setup This page is intentionally left blank...
Page 18: ...Mediant MSBRs 18 Document LTRT 31828 Security Setup This page is intentionally left blank...
Page 24: ...Mediant MSBRs 24 Document LTRT 31828 Security Setup This page is intentionally left blank...
Page 28: ...Mediant MSBRs 28 Document LTRT 31828 Security Setup This page is intentionally left blank...
Page 54: ...Mediant MSBRs 54 Document LTRT 31828 Security Setup This page is intentionally left blank...
Page 62: ...Mediant MSBRs 62 Document LTRT 31828 Security Setup This page is intentionally left blank...
Page 72: ...Mediant MSBRs 72 Document LTRT 31828 Security Setup This page is intentionally left blank...