Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

header-navigation
keyboard_arrow_up
close
keyboard_arrow_left
Junos CLI Reference
Table of Contents Expand all
list Table of Contents
file_download PDF
{ "lLangCode": "en", "lName": "English", "lCountryCode": "us", "transcode": "en_US" }
English
keyboard_arrow_right

dnssec

date_range 20-Nov-23

Syntax

content_copy zoom_out_map
dnssec {
    disable;
    dlv {
        domain-name domain-name trusted-anchor  trusted-anchor;
        }
secure-domains domain-name;
    trusted-keys {
        (key dns-key | load-key-file url);
    }

Hierarchy Level

content_copy zoom_out_map
[edit system services dns]

Description

Configure domain name service security extensions (DNSSEC) in the DNS server. DNSSEC is an extension of DNS that provides authentication and integrity verification of data by using public-key-based signatures.

Options

disable

Disable DNSSEC.

  • Default: DNSSEC is enabled.

secure-domains [domain-name]

Configure one or more secure domains in the DNS server. The server accepts only signed responses for this domain. For unsigned responses, the server returns SERVFAIL error to the client.

The remaining statements are explained separately. Search for a statement in CLI Explorer or click a linked statement in the Syntax section for details.

Required Privilege Level

system—To view this statement in the configuration.

system-control—To add this statement to the configuration.

Release Information

Statement introduced in Release 10.2 of Junos OS.

footer-navigation