DC with 2 NICs and DNS resolving in the different subnets

-

have dcs 2 nics on each dc. have 2 subnets. 192.168.0.1/24 (subnet 1 ) , 192.168.0.10/24 (subnet 2)

first nic on each dc looks to  subnet 1 , second nic on each dc looks subnet 2

client makes dns request dc's dns , got respond dns contains 2 ips subnet 1 , subnet 2

example client asks dns about  dc's ip , gets ips subnet 1 , subnet 2. because  routing not exist between subnet 1 , subnet 2 sometime when client tries use ip subnet connections/operations failed.

question is exist way how setup dns servers return answer ip contains ip correct subnet. example if dns request subnet 2 clients should ip subnet 2 .

dns ms dns server.


dns configuration best practice on dc , clients/member servers:

-->>multihoming domain controllers not recommended, results in multiple problems.
------------------------------------
1. domain controllers should not multi-homed
2. being vpn server , running rras makes multi-homed.
3. dns itself, better on single homed machine.
4. domain controllers pdc role automatically domain master browser. master browsers should not multi-homed

272294 - active directory communication fails on multihomed domain controllers http://support.microsoft.com/default.aspx?scid=kb;en-us;272294

191611 - symptoms of multihomed browsers
http://support.microsoft.com/default.aspx?scid=kb;en-us;191611

-->>dns configuration on domain controller:
------------------------------------------
1. each dc / dns server points private ip address primary dns server , other internal/remote dns servers secondary dns in tcp/ip property.
2. each dc has 1 ip address , 1 network adapter enabled (disable unused nics).
3. if multiple nics (enabled , disabled) present on server, make sure active nic should on top in nic binding.
4. contact isp , valid dns ips them , add in forwarders, not set public dns server in tcp/ip setting of dc.

-->> ip configuration on clients , member servers:
-----------------------------------
1. each workstation/member server should point local dns server primary dns , other remote dns servers secondary.
2. not set public dns server in tcp/ip setting of client/member server.

once done above, run "ipconfig /flushdns & ipconfig /registerdns", restart dns server , netlogon service on each dc.

best regards,

sandesh dubey.

mcse|mcsa:messaging|mcts|mcitp:enterprise adminitrator | blog

disclaimer: posting provided "as is" no warranties or guarantees , , confers no rights.



Windows Server  >  Directory Services



Comments

Post a Comment

Popular posts from this blog

Edit Group Policy

-
i have pc has power settings pushed out default domain policy in ad environment. of course on local machine "some settings managed system adminstrator". the machine temporarily no longer in contact domain controller (it's been physically moved , not on same network now) can't updated gpo settings. i believe if edit local group policy won't make difference because of group policy processing , precedence. since it's temporary away ad network, still want use settings of ad user. is there somewhere in registry stored can edit power plan manually until can sync domain? (i need prevent sleeping while plugged in - it's set 1 hour) thanks! allen crist i found site: http://gpsearch.azurewebsites.net/#7916 i able add policy to hkey_local_machine\software\policies\microsoft\power using specs found on site. looks solved issue. i'll report if didn't. thanks! allen crist ...
Read more

Hyper-V VM not reaching OS 'Logon' screen

-
i trying migrate vm vmware hyper-v. so far have done following (seemingly successfully): prepare vmware vm conversion hyper-v format (vhd) within vmware workstation 8.0 environment following steps guide: http://social.technet.microsoft.com/forums/en/winserverhyperv/thread/ef8c12f7-c45d-442e-9a30-c43cd87df3b3   (i.e. remove vm tools, add new ide hard disk…) use vmdk2vhd application convert individual vmdk files vhd ones create new vm in hyper-v exporting in 3 newly converted vhd files at point have checked settings , powered on vm in hyper-v find although windows begins load expected manages reach screen prior login screen saying either of following messages: “windows starting up…” “the active directory rebuilding indices… please wait” to knowledge, albeit limited in area, vm should present me login screen since appears in vmware. if start vm in safe mode can login not desired affect. below details of vm: operating system: windows server 2003 (enterprise edit...
Read more

DNS question...

-
i new setting dns server....my domain name expl. "domain.com"....i set "a" record in forward lookup for  www.domain.com itself...."server's local ip"....i've added no other zones , i seem able resolve names except own....www.domain.com.....also, do i put my isp's dns ip's....for external dns's server can't resolve?....forwarding or in nic setup?......i want setup in my dns server don't have include them on client side..... thanks mark     not put isp dsn server address in settings on nic dc or clients. should point local dns server on dc. set dns forward public dns, such isp. bill Windows Server  >  Network Infrastructure Servers
Read more