We have a Cisco 2600 router and a 515 PIX. Below is the configuration for the router on the 10.0.0.0 network:
memory-size iomem 30
clock timezone PST8PDT -8
ip subnet-zero
ip cef
no ip domain-lookup
ip host butler 10.0.0.12 (***THIS Server died and was replaced with 10.0.0.7 Windows 2003 DNS server***).
ip domain-name ourcompany.com
!
!
controller T1 1/0
!
controller T1 2/0
!
!
!
!
!
interface FastEthernet0/0
description *** main 10.0.0.0 subnet ***
ip address 10.0.0.1 255.255.255.0
no ip redirects
duplex auto
speed auto
DNS was never properly configured on the network. Currently I can ping yahoo.com from a Windows command prompt, but it only returns the following:
c:\>ping yahoo.com
Pinging yahoo.com [66.94.234.13] with 32 bytes of data:
Request timed out.
Request timed out.
Request timed out.
Request timed out.
Ping statistics for 66.94.234.13:
Packets: Sent = 4, Received = 0, Lost = 4 (100% loss)
Note that I can browse to yahoo.com without issue, but do not receive replies from command prompt.
Nslookup from command prompt returns the following:
c:\>nslookup yahoo.com
Server: UnKnown
Address: 10.0.0.7:53
Non-authoritative answer:
Name: yahoo.com.ourcompany.com
Address: 208.67.219.137
I changed the DNS on our DHCP server to use the OpenDNS addresses 208.67.222.222 and 208.67.220.220. This enabled me to at least get a response from Nslookup, but even after performing an ipconfig/release and renew from a DHCP computer, it still defaults to the old DNS setting of 10.0.0.7
c:\>ipconfig/all
Windows IP Configuration
Host Name . . . . . . . . . . . . : Computername
Primary Dns Suffix . . . . . . . : OURDOMAIN
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : OURDOMAIN
Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . : issaonline.com
Description . . . . . . . . . . . : Broadcom NetXtreme 57xx Gigabit Controll
r
Physical Address. . . . . . . . . : 00-1A-A0-A7-E6-D9
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IPv4 Address. . . . . . . . . . . : 10.0.0.151(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Lease Obtained. . . . . . . . . . : Monday, September 24, 2007 4:02:05 PM
Lease Expires . . . . . . . . . . : Tuesday, October 09, 2007 4:02:30 PM
Default Gateway . . . . . . . . . : 10.0.0.1
DHCP Server . . . . . . . . . . . : 10.0.0.7
DNS Servers . . . . . . . . . . . : 10.0.0.7
208.67.222.222
208.67.220.220
Primary WINS Server . . . . . . . : 10.0.0.7
NetBIOS over Tcpip. . . . . . . . : Enabled
c:\>
What I'm trying to accomplish is to get DNS configured properly. Again, when I ping external websites by name, the ip resolves correctly, but no replies with ping. When I ping our internal websites, they correctly resolve and reply with the internal ip:
c:\>ping internalwebsite.com
Pinging internalwebsite.com [10.0.2.184] with 32 bytes of data:
Reply from 10.0.2.184: bytes=32 time<1ms TTL=127
Reply from 10.0.2.184: bytes=32 time<1ms TTL=127
Reply from 10.0.2.184: bytes=32 time<1ms TTL=127
Reply from 10.0.2.184: bytes=32 time<1ms TTL=127
Ping statistics for 10.0.2.184:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms
c:\>
Have a few more questions than this, but have to run for now. Thanks for any input, as other articles I saw out there didn't quite address it. If you have tips for configuring DNS on a 2003 domain controller, that'd be great, as well. Basically I need DC for our LAN and internal DNS and forwarders for the external websites (google.com, etc). I have a start on it, but there's definitely some things missing.
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.
Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
Is the PIX even configured to allow icmp echo-replies back in? Depending on the OS version you might need either an access-list (6.3 -) or add icmp inspect (7.+)
You need to keep the clients pointing to the DC for DNS or you will break Active Directory.
Set the DC/DNS to use the OpenDNS servers in the forwarders tab
Business Accounts
Answer for Membership
by: llyquidPosted on 2007-09-24 at 19:23:26ID: 19953016
On your DC, set forwarders to all other domains to your ISP... you probably can't ping through your PIX because you need an "permit icmp any any" line in your outside access-list...
Also, when you use nslookup, unless you want to append the dns suffic of your local domain, then you have to use a trailing dot... for example:
nslookup yahoo.com. <---- notice the trailing dot... this means do not append suffix...