Solved

nslookup does not work correctly across vlans

Posted on 2008-11-03
3
1,487 Views
Last Modified: 2012-05-05
We are having some issues with DNS but I am not sure where the problem is. We noticed it while doing nslookups. We have multiple vlans. Our servers reside on the 10.3.x.x subnet. Our desktops are on 10.8.x.x. Here is the scenario:

1) When doing an nslookup to resolve dns name to IP address it works everytime from every subnet. For example: nslookup "servername" returns the correct IP address. This works from a server on the 10.3.x.x trying to resolve a 10.3.x.x or a 10.8.x.x. It also works from a desktop on the 10.8.x.x trying to resolve a 10.3.x.x. or a 10.8.x.x.
2) When doing an nslookup to do a reverse lookup (give it an IP and return a dns name) it works going from a 10.3.x.x to a 10.3.x.x or a 10.8.x.x to a 10.3.x.x. For example: nslookup 10.3.1.254 returns "servername.domain.com"
3) When doing an nslookup to do a reverse lookup it does NOT work going from a 10.3.x.x to a 10.8.x.x or from a 10.8.x.x to a 10.8.x.x. When we type nslookup 10.8.99.101 for example we get this response:

*** <one of our DNS servers>.domain.com can't find 10.8.99.101: Non-existent domain

So to summarize doing dns to IP works across all vlans. Doing IP to dns only works when the dns name you are looking for resides on the vlan on which our dns servers reside. Doing IP to dns does not work when the dns name you are looking for resides on a vlan other than the one that the DNS servers reside on.

Any ideas as to what could be going on and how to resolve it? Thanks!
0
Comment
Question by:neptuneit
  • 2
3 Comments
 
LVL 23

Accepted Solution

by:
Erik Bjers earned 500 total points
Comment Utility
Make sure all your vlans can route properly to your server vlan, then make sure all your computers (INCLUDING SERVERS) are looking at your internal DNS servers and only your internal DNS servers for DNS lookups.  Your DNS servers should then be configured with forwarders or root hints to handle lookups of outside hosts.

After that is verified check your reverse lookup zones.

eb
0
 
LVL 1

Author Comment

by:neptuneit
Comment Utility
Ok, it looks like there may be an issue with the reverse lookup zones. I can see a bunch of entries but they are all from before we did the vlan implementation. Forgive my inexperience with DNS but I don't quite follow the directory structure. Under the Reverse Lookup Zones I see an entry for 3.10.in-addr.arpa. Underneath this are some numbers (0,1,20,20,220,3,4,5) All of our PCs used to be in the 10.3.3.x, 10.3.4.x, or 10.3.5.x subnets. Under the 3,4,and 5 subfolder I find pointers for all the PCs with what is I assume the last octet of their old IP address. For example We've got a PC that i assume used to have the IP address 10.3.4.11 and there is a pointer under the folder Reverse Lookup Zones -> 3.10.in-addr.arpa ->4->11. (the name of the pointer is 11).

There are no entries from our current infrastructure of 10.8.x.x for PCs.

Some records are updating however, we have a subnet of 10.5.1.x PCs and they are all correct. They have Pointers under the folder Reverse Lookup Zones -> 5.10.in-addr.arpa->1 and these records are being updated currently.
0
 
LVL 1

Author Comment

by:neptuneit
Comment Utility
We added the 10.8.x.x subnet in our Reverse lookup zones and now it works
0

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
If you need to start windows update installation remotely or as a scheduled task you will find this very helpful.
In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now