dns global

The following operations can be performed on "dns global":

bind | unbind | show

bind dns global

Binds the specified DNS policy globally.

Synopsys

bind dns global <policyName> <priority> [-gotoPriorityExpression <string>] [-type <type>] [-invoke (<labelType> <labelName>) ]

Arguments

policyName

Name of the DNS policy to bind globally.

priority

Integer specifying the policy's priority. The lower the number, the higher the priority.

Minimum value: 1

gotoPriorityExpression

Expression or other value specifying the next policy to be evaluated if the current policy evaluates to TRUE. Specify one of the following values:

• NEXT - Evaluate the policy with the next higher priority number.

• END - End policy evaluation.

• USE_INVOCATION_RESULT - Applicable if this policy invokes another policy label. If the final goto in the invoked policy label has a value of END, the evaluation stops. If the final goto is anything other than END, the current policy label performs a NEXT.

• A default syntax expression that evaluates to a number.

If you specify an expression, the number to which it evaluates determines the next policy to evaluate, as follows:

• If the expression evaluates to a higher numbered priority, the policy with that priority is evaluated next.

• If the expression evaluates to the priority of the current policy, the policy with the next higher numbered priority is evaluated next.

• If the expression evaluates to a priority number that is numerically higher than the highest numbered priority, policy evaluation ends.

An UNDEF event is triggered if:

• The expression is invalid.

• The expression evaluates to a priority number that is numerically lower than the current policy's priority.

• The expression evaluates to a priority number that is between the current policy's priority number (say, 30) and the highest priority number (say, 100), but does not match any configured priority number (for example, the expression evaluates to the number 85). This example assumes that the priority number increments by 10 for every successive policy, and therefore a priority number of 85 does not exist in the policy label.

type

Type of global bind point to which to bind the DNS policy.

Possible values: REQ_OVERRIDE, REQ_DEFAULT, RES_OVERRIDE, RES_DEFAULT

invoke

Invoke flag.

labelType

Type of policy label invocation.

Possible values: policylabel

labelName

Name of the label to invoke if the current policy rule evaluates to TRUE.

Example

bind dns global pol9 9

unbind dns global

Unbinds the specified DNS policy from the global bind point.

Synopsys

unbind dns global <policyName> [-type <type>]

Arguments

policyName

Name of the DNS policy to unbind.

type

Type of global bind point to which to bind the DNS policy.

Possible values: REQ_OVERRIDE, REQ_DEFAULT, RES_OVERRIDE, RES_DEFAULT

Example

unbind dns global pol9

show dns global

Displays the DNS policies bound to the specified global bind point. If a global bind point is not specified, the command displays the global bind points that have policies bound to them, and the number of policies bound to each of those bind points.

Synopsys

show dns global [-type <type>]

Arguments

type

Type of global bind point for which to show bound policies.

Possible values: REQ_OVERRIDE, REQ_DEFAULT, RES_OVERRIDE, RES_DEFAULT

Outputs

stateflag

policyName

Name of the dns policy.

priority

Specifies the priority of the policy with which it is bound. Maximum allowed priority should be less than 65535

gotoPriorityExpression

Expression or other value specifying the next policy to be evaluated if the current policy evaluates to TRUE. Specify one of the following values:

• NEXT - Evaluate the policy with the next higher priority number.

• END - End policy evaluation.

• USE_INVOCATION_RESULT - Applicable if this policy invokes another policy label. If the final goto in the invoked policy label has a value of END, the evaluation stops. If the final goto is anything other than END, the current policy label performs a NEXT.

• A default syntax expression that evaluates to a number.

If you specify an expression, the number to which it evaluates determines the next policy to evaluate, as follows:

• If the expression evaluates to a higher numbered priority, the policy with that priority is evaluated next.

• If the expression evaluates to the priority of the current policy, the policy with the next higher numbered priority is evaluated next.

• If the expression evaluates to a priority number that is numerically higher than the highest numbered priority, policy evaluation ends.

An UNDEF event is triggered if:

• The expression is invalid.

• The expression evaluates to a priority number that is numerically lower than the current policy's priority.

• The expression evaluates to a priority number that is between the current policy's priority number (say, 30) and the highest priority number (say, 100), but does not match any configured priority number (for example, the expression evaluates to the number 85). This example assumes that the priority number increments by 10 for every successive policy, and therefore a priority number of 85 does not exist in the policy label.

invoke

Invoke flag.

labelType

Type of policy label invocation.

labelName

Name of the label to invoke if the current policy rule evaluates to TRUE.

numpol

The number of policies bound to the bindpoint.

flowType

flowtype of the bound rewrite policy.

flags

upgraded

It is internally used to tell that the policy is a upgraded policy.

builtin

Flag to determine whether DNS policy binding is default or not

globalBindType

devno

count

Example

show dns globalshow dns global -type REQ_DEFAULTshow dns global -type RES_DEFAULT