O'Reilly logo

ScreenOS Cookbook by Sunil Wadhwa, Joe Kelly, Ken Draper, David Delcourt, Vik Davar, Stefan Brunner

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

6.4. Configure the Device's Name Service

Problem

You need to configure DNS settings on the firewall.

Solution

Configure the hostname, domain name, and DNS servers:

	ssg20-> set hostname FIREWALL-A
	FIREWALL-A-> set domain oreilly.com
	FIREWALL-A-> set dns host dns1 68.87.64.146
	FIREWALL-A->set dns host dns2 68.87.75.194

Discussion

During initial firewall installation, it is recommended that you change the firewall's hostname to something meaningful, typically according to your organization's naming convention. By default, Juniper firewalls ship with a default name that is the same as the name of the product. In this example, an SSG20 is being configured with a new hostname, FIREWALL-A. Note that once the hostname is set, the prompt changes to reflect the hostname. In an NSRP environment, the hostname is not a synchronized portion of the configuration, so this step must be performed on each member of an NSRP cluster. Next, the domain name of the local device is set.

Finally, the primary and secondary DNS servers' IPs are configured. In cases where the DNS servers are on the other end of a tunnel, you can specify the source interface for DNS requests using the src-interface keyword at the end of the set dns host command. This allows the head-end VPN device to route DNS replies through the tunnel. ScreenOS supports up to three DNS servers that can be used for name resolution. You can use this resolution for different purposes. One of the primary purposes for name resolution is for troubleshooting: ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required