Petri.co.il forums Home Forums Start Page Forums Frequently Asked Questions FAQ Member List Members List
Go Back   Petri IT Knowledgebase Forums > Microsoft Networking Services > Active Directory
Petri.co.il is happy to award RicklesP the title of Most Valuable Member !!!
Register Calendar Calendar Search Petri IT Knowledgebase Forums Search Todays Posts Today's Posts Mark Forums Read
Notices

Multisite DNS - Seperating AD DNS Resolving & Internet DNS Resolving

Multisite DNS - Seperating AD DNS Resolving & Internet DNS Resolving

this thread has 5 replies and has been viewed 4037 times

Closed Thread
 
Thread Tools Search this Thread Display Modes
  #1  
Old 16th June 2008, 20:31
shon shon is offline
Casual
Casual
 
 Join Date: Jun 2008
  6 month star 12 month star
 Posts: 3
 Reputation: shon is on a distinguished road (10)
Default Multisite DNS - Seperating AD DNS Resolving & Internet DNS Resolving

I have three Sites that are broken up by the following:

Site A: 192.168.10.xxx (New York)
Primary DC for : domain.local
Primary DNS for: domain.local
Additional Roles: File and Print Server, GAL
Network Card Properties:
IP: 192.168.10.5
Sub: 255.255.255.0
GW: 192.168.10.1
Primary DNS: 192.168.10.5
Secondary: None
DNS Server Properties
Forwarders: isp.dnsserver-1.com, isp.dnsserver-2.com


Site B: 192.168.20.xxx (Miami)
Secondary DC for : domain.local
Secondary DNS for: domain.local
Additional Roles: File and Print Server, GAL
Network Card Properties:
IP: 192.168.20.5
Sub: 255.255.255.0
GW: 192.168.20.1
Primary DNS: 192.168.10.5 <-- New York DC
Secondary: None
Forwarders: isp.dnsserver-2.net, isp.dnsserver-2.net (Local ISP's DNS Servers of Miami's site)

Site C: 192.168.30.xxx (Los Angeles)
Secondary DC for : domain.local
Secondary DNS for: domain.local
Additional Roles: File and Print Server, GAL
Network Card Properties:
IP: 192.168.30.5
Sub: 255.255.255.0
GW: 192.168.30.1
Primary DNS: 192.168.10.5 <-- New York DC
Secondary: None
Forwarders: isp.dnsserver-3.org, isp.dnsserver-3.org (Local ISP's DNS Servers of Los Angeles site)


Everything works fine except for when Site A's internet connectivity goes down.

That means that anyone who is at Site B, or C can no longer surf the internet.

The sites are fully redundant and have a Primary and Secondary Internet connections with Primary and Secondary VPN tunnels back to Site A.

I'm under the impression for AD to function correctly between Primary DC/DNS and Secondary DC/DNS Servers that the Secondary DC/DNS Servers need to be pointed to the Primary DC/DNS Servers in the network card properties. (As seen in my config above)

Ultimately I would like the Secondary DNS Servers(Site B, and C) use the DNS Servers that are local to them for internet DNS queries only AND for anything destine for domain.local to obviously query the Primary DNS Servers.

Thanks!

Last edited by shon; 16th June 2008 at 21:26.. Reason: Changed Primary DNS to 192.168.10.5 for Site A
  #2  
Old 16th June 2008, 21:23
AndyJG247's Avatar
AndyJG247 AndyJG247 is offline
Senior Member
Wrote the book
 
 Join Date: Mar 2008
  6 month star 12 month star
 Location: London
 Posts: 3,842
 Reputation: AndyJG247 is a jewel in the roughAndyJG247 is a jewel in the roughAndyJG247 is a jewel in the roughAndyJG247 is a jewel in the rough (349)
Default Re: Multisite DNS - Seperating AD DNS Resolving & Internet DNS Resolving

I believe for DCs per site that you have the primary pointing at another server and the secondary as the local server. This allows AD to start when a server is restarted. Interestingly you have written in Site A that the primary DNS is the router?

I wouldn't setup any DC in 1 site to use a DNS in another site unless you have specific reasons for that.

EDIT: To confirm. Change the DNS in each site to local servers. As it stands if you lose Site A you will start having issues. I assume your clients all us local DCs for DNS?
__________________
cheers
Andy

Please read this before you post:
http://support.microsoft.com/kb/555375

Quis custodiet ipsos custodes?
  #3  
Old 16th June 2008, 21:35
shon shon is offline
Casual
Casual
 
 Join Date: Jun 2008
  6 month star 12 month star
 Posts: 3
 Reputation: shon is on a distinguished road (10)
Default Re: Multisite DNS - Seperating AD DNS Resolving & Internet DNS Resolving

Quote:
Originally Posted by AndyJG247 View Post
I believe for DCs per site that you have the primary pointing at another server and the secondary as the local server. This allows AD to start when a server is restarted. Interestingly you have written in Site A that the primary DNS is the router?

I wouldn't setup any DC in 1 site to use a DNS in another site unless you have specific reasons for that.

EDIT: To confirm. Change the DNS in each site to local servers. As it stands if you lose Site A you will start having issues. I assume your clients all us local DCs for DNS?
Yes your assumption is correct that clients for all sites (A,B,C) query their local servers for DNS.

*I edited Site A to reflect the right Primary DNS Server that its currently set too*
  #4  
Old 16th June 2008, 23:29
AndyJG247's Avatar
AndyJG247 AndyJG247 is offline
Senior Member
Wrote the book
 
 Join Date: Mar 2008
  6 month star 12 month star
 Location: London
 Posts: 3,842
 Reputation: AndyJG247 is a jewel in the roughAndyJG247 is a jewel in the roughAndyJG247 is a jewel in the roughAndyJG247 is a jewel in the rough (349)
Default Re: Multisite DNS - Seperating AD DNS Resolving & Internet DNS Resolving

Ok, it is one of two things, DNS or connectivity. Can you ping public IP etc when it fails?
__________________
cheers
Andy

Please read this before you post:
http://support.microsoft.com/kb/555375

Quis custodiet ipsos custodes?
  #5  
Old 17th June 2008, 00:42
shon shon is offline
Casual
Casual
 
 Join Date: Jun 2008
  6 month star 12 month star
 Posts: 3
 Reputation: shon is on a distinguished road (10)
Thumbs up Re: Multisite DNS - Seperating AD DNS Resolving & Internet DNS Resolving

Quote:
Originally Posted by AndyJG247 View Post
Ok, it is one of two things, DNS or connectivity. Can you ping public IP etc when it fails?
It was only DNS that I was wondering about. Thanks for the advice you've answered all my questions.

Thanks
  #6  
Old 17th June 2008, 14:36
guyt's Avatar
guyt guyt is offline
[MSFT]
Guru
 
 Join Date: Nov 2003
  6 month star 12 month star
 Location: Israel
 Posts: 1,766
  Send a message via MSN to guyt
 Reputation: guyt is a name known to allguyt is a name known to allguyt is a name known to allguyt is a name known to allguyt is a name known to allguyt is a name known to all (592)
Default Re: Multisite DNS - Seperating AD DNS Resolving & Internet DNS Resolving

Are you using primary/secondary zones or AD integrate zones ?
__________________
Guy Teverovsky
http://blogs.technet.com/b/isrpfeplat/
"Smith & Wesson - the original point and click interface"
Closed Thread


Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
DNS & DHCP: DNS Update Failed ntwaddell Active Directory 9 10th August 2007 14:08
DNS not resolving remote server name JDMils Windows Server 2000 / 2003 / 2003 R2 3 6th July 2007 05:52
Properly resolving Windows 2000 DNS Server forwarders daveymu Windows Server 2000 / 2003 / 2003 R2 1 19th May 2006 10:47
DNS not resolving a domain MrCaps Active Directory 4 12th August 2005 10:30
DNS zone from External DNS to Internal DNS poweredge4000 Windows Server 2000 / 2003 / 2003 R2 0 10th July 2005 17:26


All times are GMT +3. The time now is 16:36.

Steel Blue 3.5.4 vBulletin Style ©2006 vBEnhanced
Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
 

Valid XHTML 1.0!   Valid CSS!

Copyright 2005 Daniel Petri