Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

What is best practice. Run DNS and DHCP on BIND product, or MS AD, or DNS MS and DHCP on BIND product?

Posted on 2008-06-09
5
Medium Priority
?
596 Views
Last Modified: 2009-06-15
I am a Systems Architect and have been asked to get involve witha DNS/DHCP replacement project that has already decided to run DNS on AD and DHCP on Infoblox. We are migrating from Nortel's NETID. I feel best practice would be to run DNS and DHCP on Infoblox or IPControl and keep AD updated vai zone transfers. Opinions?
0
Comment
Question by:PMcDevitt
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
5 Comments
 
LVL 8

Expert Comment

by:Sinder255248
ID: 21746082
I'd be enclined to go with you.  I've seen the demo of infoblox (we went with bluecat), but their solution is really nice if you have the licenses for it.  It's a much more resilient DNS solution, and from what I saw DDNS worked perfectly on it.  We're much happier now we've migrated our DNS off to bluecat.  

You can host your AD zones in your infoblox boxes, and then put a secondary zone on all your AD boxes if you want too, although it isn't really necessary as long as all clients/dc's/servers are pointing to the infoblox boxes.

That being said though there are many companies running their AD's on AD Integrated zones (we did the same for 4+ years), but in the end we decided that it was best to go with DHCP and DNS serviced from one box.  

The infoblox boxes are also far easier to delegate administration for zones to less qualified engineers, or simply block the zone from manual enteries and go with DDNS only.  Logging is also a nice feature, and one that the auditors love.
0
 

Author Comment

by:PMcDevitt
ID: 21746949
Thanks Snider255248.  
I appreciate the bfeedback.

I was also hoping someone would comment on issues that could arrise if DNS is on AD and DHCP not.

BTW: Did you also look at IP Control from Diamond IP (now owned by BT/INS)?
0
 
LVL 8

Expert Comment

by:Sinder255248
ID: 21749831
Nope we only looked at Bluecat and Infoblox, the BT guys took too long and couldn't organise a time to visit so we decided it wasn't the route for us (especially as we're not a small client base).  

You'll have no problems if you want to keep the two seperate (apart from probably DDNS on AD), but I would go with everything on your Infoblox boxes for complete resilience.  DNS on AD doesn't always update DDNS etc, but other than that it's not bad for a free solution. I've never had any problems with zone replication, and it seems to hold up pretty well in an enterprise environment.
0
 

Author Comment

by:PMcDevitt
ID: 21750865
Thanks. I have heard of issues with DDNS, can you elaborate on what the issue is?
0
 
LVL 8

Accepted Solution

by:
Sinder255248 earned 750 total points
ID: 21758744
Clients don't update themselves in DNS, and you have to manually add them..  Works on some, others it doesn't.  After moving to Bluecat I've not seen this issue once so I can only assume it's a problem with the DNS server and not the clients trying to register.
0

Featured Post

Introducing the WatchGuard 420 Access Point

WatchGuard's newest access point includes an 802.11ac Wave 2 chipset, providing the fastest speeds for VoIP, video and music streaming, and large data file transfers. Additionally, enjoy the benefits of strong security as the 3rd radio delivers dedicated WIPS protection!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Had a business requirement to store the mobile number in an environmental variable. This is just a quick article on how this was done.
Active Directory can easily get cluttered with unused service, user and computer accounts. In this article, I will show you the way I like to implement ADCleanup..
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…
Suggested Courses

722 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question