Configuring DNS for Huawei Firewall

This chapter will tell how to configure DNS for Huawei Symantec.

The Domain Name System (DNS) establishes the mapping between domain names and IP addresses for easy memorization.

A Domain Name System (DNS) is a host naming mechanism in character string format of TCP/ IP to establish the mapping between domain names and IP addresses. It is a mechanism of mapping easy-to-remember and meaningful domain names to IP addresses recognizable for network devices.

DNS delivers the following functions:

1 Device Serving can be as a DNS Client

2 Device Serving can be as a DNS Proxy

3 Device Serving can be as a DDNS Client

USG2100/2200/5100 BSR/HSR & USG2000/5000 (such as USG2220, USG5310)Configuration Guide: Configuring the DNS for Huawei Symantec

Adding a DNS Server

The DNS server accepts the domain name resolution requests initiated by the DNS client. You can statically set an IP address for the DNS server connected to the device through this task. The IP address of the DNS server is generally provided by the ISP. In addition, it can also be automatically obtained, which requires the connection type of at least one interface to be configured as DHCP or PPPoE.

The priority of the DNS server whose IP address is statically configured is higher than the one whose IP address is dynamically obtained. For the DNS servers whose IP addresses are configured in the same way, the one that has an IP address (either obtaining automatically or configured statically) earlier enjoys a higher priority. When resolving domain names, the device sends query packets (according to the priorities) to DNS servers until the query succeeds.

Step 1 Choose Network > DNS > DNS.

Step 2 Enter the IP address of the DNS server in the DNS Server List text box.

Step 3 Click Add.

If the operation succeeds, the new configuration whose Obtaining Mode is Static is displayed in DNS Server List.

Repeat the previous operations to add the IP addresses of multiple DNS servers.

NOTE

l If the obtaining mode of an entry in DNS Server List is DHCP, the IP address of the DNS server is obtained dynamically through DHCP.

l If the obtaining mode of an entry in DNS Server List is PPPoE, the IP address of the DNS server is obtained dynamically through PPPoE.

----End

Deleting a DNS Server

You can deete only the DNS server IP addresses that are obtained statically, but not those obtained through DHCP/PPPoE. If the interface that is connected through DHCP or PPPoE is physically Down, or the interface fails to be connected through DHCP or PPPoE, the corresponding DNS server IP address is deleted automatically from the DNS server list.

Step 1 Choose Network > DNS > DNS.

Step 2 Select the check boxes of multiple entries or the check box in the table header for selecting all.

Step 3 Click Delete.

If the operation succeeds, the entries that are just selected are not displayed in DNS Server List.

----End

More information about the huawei firewall, please visit:

http://huaweifirewall.blogspot.com/

Configuring the IP link for Huawei symantec

Configuring the IP link for Huawei symantec: 

The IP link function automatically detects the status of the links that are not directly connected to the device. When one link is faulty, route switchover or active/standby switchover is triggered, preventing network interruption.

Enabling IP Link

IP link configurations take effect only after IP Link is enabled.

Step 1 Choose System > High Availability > IP Link.

Step 2 Click Enable corresponding to IP Link Function.

Step 3 Click Apply.

----End

Creating an IP Link

Step 1 Choose System > High Availability > IP Link.

Step 2 Click Add in IP Link List.

Step 3 Enter or select parameters.

Step 4 Click Apply.

----End

Modifying an IP Link

Step 1 Choose System > High Availability > IP Link.

Step 2 Click

 in IP Link List.

Step 3 Enter or select parameters. IP Link ID, Destination Address

Configuration, IP Address, and Domain cannot be modified.

Step 4 Click Apply.

----End

Deleting an IP Link

Step 1 Choose System > High Availability > IP Link.

Step 2 In IP Link List, select the check boxes of entries or the check box in the table header for selecting all.

Step 3 Click Delete.

If the operation succeeds, successful operation is displayed on the page and entries that are just selected are not displayed in the list.

----End

The Huawei Symantec competitive price on huanetwork, the popular model as below:

USG2220

USG2250

USG5310

How to Enable the HTTP/HTTPS Services

An administrator can access the web configuration UI of the Huawei Symantec USG using the HTTP or HTTPS service for intuitive configuration and management.

HTTP and HTTPS are enabled on the USG by default. When users use HTTP for access, the device automatically redirects to use HTTPS instead. If the HTTPS service uses default port 8443 but port 8443 is used by another service, the device does not use HTTPS for HTTP access.

NOTE

Once you have used a service to log in to a USG, the service cannot be disabled, and the port running the service cannot be modified.

Step 1 Choose System > Admin > Settings.

Step 2 Select Enable corresponding to HTTP Service or HTTPS Service.

Step 3 In the HTTP Port or HTTPS Port text box, enter the port number.

The default HTTP port number is 80,and the default HTTPS port number is 8443.

Step 4 Click Apply.

----End

After enabling the HTTP/HTTPS Services, should also know enabling the SFTP/STELNET Services:

SSH File Transfer Protocol (SFTP) is short for the SSH File Transfer Protocol. It guarantees secure file transfer over an insecure network by authenticating the client and encrypting data in bidirectional mode.

STELNET ensures secure Telnet services. It guarantees secure file transfer on a traditional insecure network by authenticating the client and encrypting data in bidirectional mode.

Step 1 Choose System > Admin > Settings.

Step 2 Select Enable corresponding to STELNET Service or SFTP Service.

The STELNET and SFTP services can be enabled simultaneously.

Step 3 Enter or select parameters.

Step 4 Click Apply.

                                                

Setting the Web Service Timeout Period

Web service timeout period: If no operation is performed within this period, you will be informed of an timeout error upon an operation attempt. You must relog in to the system.

The default value is recommended.

Step 1 Choose System > Admin > Settings.

Step 2 In the Web Timeout text box, enter the timeout period of the Web service.

Step 3 Click Apply.

----End

More related Huawei symantec firewall, please visit:

How to Configure System Time for USG2000/5000

Application of the Huawei Firewall USG5300

How to Enable DST for USG2000/5000

Huawei Firewall USG5300: Configuring System Parameters

USG2100: Initializing Web Configurations

Secospace USG2100/2200/5100 BSR/HSR & USG2000/5000 (include USG2130, USG2210, USG5310)Configuration Guide-Web:

Upon your first login to the Web page, you need to initialize the Web page to realize basic

network communication.

Procedure

Step 1 Choose Wizard > Startup Wizard. Configure the host name, system time, Internet interface, and LAN interface.

After configurations in Startup Wizard are complete, LAN hosts can access the Internet through the device.

Step 2 Verify software version and license information.

1. Choose System > Dashboard > Status.

2. Check the current software version on the System Information plane.

You can access Software anytime to check the latest software version.

After the latest software version is downloaded.

3. In the License Information plane, check the current license authorization information.

Licenses may affect certain functions of the device. Therefore, check whether the current

license is consistent with the one purchased. If Deactivate is displayed in License State,

If the current authorization information is different from that in the purchase contract, see How to Obtain Technical Support to contact the technical support personnel.

Step 3 Upgrade the signature database.

The signature database of the device for monitoring viruses and behaviors can be upgraded sustainably from the online upgrade center. Generally, the signature database that you obtained for the first time is not the latest version. You can upgrade it online on the network.

Step 4 Back up the configuration file.

After configurations are initialized, click Save on the upper right of the page to save the current configurations. Then save the current configurations as another configuration file to restore configurations in the case of faults or compare configuration files for fault diagnosis in the future.

This operation is recommended each time you perform big changes on the device configurations.

----End