FW1545 20 0v1 Configuring DNS and DHCP on Sophos Firewall

Prévia do material em texto

<p>Copyright © 2024 Sophos Ltd</p><p>Sophos Firewall</p><p>Configuring DNS and</p><p>DHCP on Sophos</p><p>Firewall</p><p>Version: 20.0v1</p><p>[Additional Information]</p><p>Sophos Firewall</p><p>FW1545: Configuring DNS and DHCP on Sophos Firewall</p><p>January 2024</p><p>Version: 20.0v1</p><p>© 2024 Sophos Limited. All rights reserved. No part of this document may be used or reproduced in any form or by any means without the prior written</p><p>consent of Sophos.</p><p>Sophos and the Sophos logo are registered trademarks of Sophos Limited. Other names, logos and marks mentioned in this document may be the</p><p>trademarks or registered trademarks of Sophos Limited or their respective owners.</p><p>While reasonable care has been taken in the preparation of this document, Sophos makes no warranties, conditions or representations (whether express</p><p>or implied) as to its completeness or accuracy. This document is subject to change at any time without notice.</p><p>Sophos Limited is a company registered in England number 2096520, whose registered office is at The Pentagon, Abingdon Science Park, Abingdon,</p><p>Oxfordshire, OX14 3YP.</p><p>Configuring DNS and DHCP on Sophos Firewall - 1</p><p>Copyright © 2024 Sophos Ltd</p><p>Configuring DNS and DHCP on Sophos Firewall</p><p>In this chapter you will learn how</p><p>to configure the DNS and DHCP</p><p>settings on Sophos Firewall.</p><p>DURATION 5 minutes</p><p>RECOMMENDED KNOWLEDGE AND EXPERIENCE</p><p>✓ Navigating the Sophos Firewall using the web</p><p>admin console</p><p>✓ Managing Sophos Firewall</p><p>Copyright © 2023 Sophos Ltd</p><p>In this chapter you will learn how to configure the DNS and DHCP settings on Sophos Firewall.</p><p>Configuring DNS and DHCP on Sophos Firewall - 2</p><p>Copyright © 2024 Sophos Ltd</p><p>DNS on Sophos Firewall</p><p>1. From your DHCP server</p><p>2. From PPPoE interface settings sent by your Internet provider</p><p>3. Manually, by assigning static server entries</p><p>There are 3 ways to assign DNS servers to Sophos Firewall</p><p>Sophos Firewall needs to be able to resolve hostnames and IP addresses.</p><p>There are three ways to assign DNS servers to Sophos Firewall; From your DHCP server, from PPPoE</p><p>interface settings sent by your Internet provider, and manually, by assigning static server entries</p><p>Configuring DNS and DHCP on Sophos Firewall - 3</p><p>Copyright © 2024 Sophos Ltd</p><p>DNS Settings</p><p>Select how Sophos</p><p>Firewall obtains DNS</p><p>servers</p><p>Set up to three DNS</p><p>servers for IPv4 and IPv6</p><p>DNS is configured in: CONFIGURE > Network > DNS</p><p>During the initial setup you will have to set a DNS server, this can be modified in CONFIGURE ></p><p>Network > DNS.</p><p>Here you can set how Sophos Firewall obtains its DNS server, and you can set up to three DNS servers</p><p>statically for IPv4 and IPv6.</p><p>Configuring DNS and DHCP on Sophos Firewall - 4</p><p>Copyright © 2024 Sophos Ltd</p><p>DNS Server</p><p>Preference between IPv4 and IPv6 DNS</p><p>servers</p><p>DNS records hosted by the Sophos</p><p>Firewall</p><p>Sophos Firewall also acts as a DNS server, using its configured DNS servers to resolve and respond to</p><p>requests. You can set how Sophos Firewall handles the preference between IPv4 and IPv6 lookups.</p><p>You can also configure DNS records on the Sophos Firewall itself. These can include a reverse lookup</p><p>from the IP address back to the hostname.</p><p>Configuring DNS and DHCP on Sophos Firewall - 5</p><p>Copyright © 2024 Sophos Ltd</p><p>DNS Request Routes</p><p>Set the DNS server to use to lookup hosts in the sophos.local domain</p><p>Set the DNS server to use to lookup IP addresses in the network 172.16.16.0/24</p><p>If the Sophos Firewall is configured to use your ISPs DNS servers, so that it can resolve hosts on the</p><p>Internet, you can override this for specific domains and networks by configuring DNS request routes.</p><p>A DNS request route defines what DNS server should be used to lookup hosts in the selected domain.</p><p>Request routes can also be created for reverse lookups to define what DNS server should be used to</p><p>lookup IP addresses in the selected network.</p><p>Configuring DNS and DHCP on Sophos Firewall - 6</p><p>Copyright © 2024 Sophos Ltd</p><p>Simulation: Configure DNS Request Routes</p><p>In this simulation you will configure DNS request routes</p><p>on Sophos Firewall.</p><p>https://training.sophos.com/fw/simulation/ConfigureDNS/2/start.html</p><p>LAUNCH SIMULATION CONTINUE</p><p>Please complete this simulation.</p><p>Click Launch Simulation to start. Once you have finished, click Continue.</p><p>[Additional Information]</p><p>https://training.sophos.com/fw/simulation/ConfigureDNS/2/start.html</p><p>Configuring DNS and DHCP on Sophos Firewall - 7</p><p>https://training.sophos.com/fw/simulation/ConfigureDNS/2/start.html</p><p>Copyright © 2024 Sophos Ltd</p><p>Dynamic DNS</p><p>DNS is configured in: CONFIGURE > Network > Dynamic DNS</p><p>If your ISP assigns your IP through DHCP, you can use a dynamic DNS provider to host a DNS record for</p><p>this IP address, and have the Sophos Firewall update the IP address associated with it.</p><p>To configure dynamic DNS, you enter the hostname, and select the WAN interface it should resolve to.</p><p>You then need to select your provider, and enter your login details.</p><p>Configuring DNS and DHCP on Sophos Firewall - 8</p><p>Copyright © 2024 Sophos Ltd</p><p>DHCP Server</p><p>Each DHCP server is assigned to an interface</p><p>The range of IP address it will lease</p><p>DNS is configured in: CONFIGURE > Network > DHCP</p><p>Sophos Firewall can provide DHCP to any networks that are connected to it. Each DHCP server you</p><p>configure on the Sophos Firewall can be either IPv4 or IPv6 and is bound to an interface.</p><p>Configuring DNS and DHCP on Sophos Firewall - 9</p><p>Copyright © 2024 Sophos Ltd</p><p>DHCP Relay</p><p>The interface where the clients are located</p><p>The IP address of the DHCP server to relay</p><p>requests for</p><p>Sophos Firewall can also act as a DHCP relay, passing DHCP requests between clients and a DHCP</p><p>server on another network.</p><p>Configuring DNS and DHCP on Sophos Firewall - 10</p><p>Copyright © 2024 Sophos Ltd</p><p>Chapter Review</p><p>DNS servers can be assigned to Sophos Firewall using DHCP, from PPPoE interface settings and manually.</p><p>DNS request routes define what DNS server should be used to lookup hosts in the selected domain.</p><p>Sophos Firewall can provide DHCP to any networks that are connected to it. It can also pass requests to</p><p>another DHCP server.</p><p>Here are the three main things you learned in this chapter.</p><p>DNS servers can be assigned to Sophos Firewall using DHCP, from PPPoE interface settings and</p><p>manually.</p><p>A DNS request routes define what DNS server should be used to lookup hosts in the selected domain.</p><p>Sophos Firewall can provide DHCP to any networks that are connected to it. It can also pass requests</p><p>to another DHCP server.</p><p>Configuring DNS and DHCP on Sophos Firewall - 16</p><p>Copyright © 2024 Sophos Ltd</p><p>Configuring DNS and DHCP on Sophos Firewall - 17</p>