Solved

Microsoft DNS Delegation Zone

Posted on 2009-05-13
8
692 Views
Last Modified: 2012-05-06
Hi,
I have to Active Directory domains which are called:
domain1.local with 2 DNS servers dns11.domain1.local and dns12.domain1.local
and
domain2.local with 2 DNS servers dns21.domain2.local and dns22.domain2.local
I create in dns11.domain1.local a zone called domain2.local. On this new zone I create a new delegation which is pointing to dns21.domain2.local and dns22.domain2.local.
When I am using my client computer to ping machines from domain2.local those are not answering.
Mu delegation is not working, can you please help me with this.
Thank you.
0
Comment
Question by:BetfairRomania
  • 4
  • 4
8 Comments
 
LVL 70

Expert Comment

by:Chris Dent
ID: 24375239

> On this new zone I create a new delegation

Do you created something like sub.domain2.local in there?

From the sound of it you don't want to be using a Delegation here. You want to resolve names in domain2.local? Instead you want to use any of...

1. Conditional Forwarder
2. Stub Zone
3. Secondary Zone

Which is most appropriate depends a bit on the DNS server. Most are capable of 1, but Windows 2000 isn't.

Chris
0
 

Author Comment

by:BetfairRomania
ID: 24375311
Hi,
thank you for your answer.
What I really need is from my client computer when I run this commands ping -a 192.168.180.23 and this ping server1.domain2.local I need this machine called server1.domain2.local to respond.
I create in dns11.domain1.local a reverse lookup zone for 180.168.192 and also in this DNS server I create a forward lookup zone called domain2.local which i delegated to dns21.domain2.local.
Thank you.
0
 
LVL 70

Expert Comment

by:Chris Dent
ID: 24375386

> ping -a 192.168.180.23

This is an entirely different matter. Ping -a attempts to resolve a name from the given IP address. That requires Reverse Lookup not Forward. Where is the Reverse Lookup Zone?

When you run "ping server1.domain2.local" the DNS server your client uses will need a way to find the records in domain2.local. This one comes to the next bit.

> delegated to dns21.domain2.local

Zones can only be delegated from a parent zone. To delegate domain2.local you would have to have a zone called "local.".

You cannot Delegate this and expect to be able to resolve names. You must use one of the three options I quoted above.

Chris
0
 

Author Comment

by:BetfairRomania
ID: 24375622
Hi,

> domain1.local
dns11.domain1.local and dns12.domain1.local

>domain2.local
dns21.domain1.local and dns22.domain2.local

What I need is:
> when you ping server1.domain2.local = 192.186.180.23
> when you ping -a 192.168.180.23 = server1.domain2.local

What I have done:
>in dns11.domain1.local and dns12.domain1.local I create a reverse lookup zone called 180.168.192
>in dns11.domain1.local and dns12.domain1.local I create a forward lookup zone colled domain2.local and from new delegation wizard I select dns21.domain2.local and dns22.domain2.local
>I create a new PTR record entry as 23  in reverse lookup zone called 180.168.192

Thank you.
0
VMware Disaster Recovery and Data Protection

In this expert guide, you’ll learn about the components of a Modern Data Center. You will use cases for the value-added capabilities of Veeam®, including combining backup and replication for VMware disaster recovery and using replication for data center migration.

 
LVL 70

Accepted Solution

by:
Chris Dent earned 125 total points
ID: 24375777

> in dns11.domain1.local and dns12.domain1.local I create a forward lookup
> zone colled domain2.local and from new delegation wizard I select
> dns21.domain2.local and dns22.domain2.local

So you have New Delegation. You clicked Next, then put what in the box that needs a value before you can continue?

You can only delegate responsibility for a zone from the Parent Zone. You cannot delegate on the same level.

Delete the "domain2.local" zone from the two servers on domain1.local then create a new Stub Zone as follows.

1. Right click and select New Zone click Next on the first page
2. Select Stub Zone and click Next
3. Enter the name domain2.local then click Next
4. Allow it to create a file with the default name then click Next
5. Enter the IP Addresses for dns21 and dns22. Click Next then Finish

No problems with the Reverse Lookup Zone.

Chris
0
 

Author Comment

by:BetfairRomania
ID: 24376672
HI,
in this way reverse is working only for DNS machine domain2.local (dns21 and dns22).
How can I make it  work  for all machine from domain2.local domain
Thank you.
0
 
LVL 70

Expert Comment

by:Chris Dent
ID: 24376711

Do both domains share the same IP range?

Are you wanting them to use Dynamic Updates to add themselves to the zone?

You might create a Secondary zone for the Reverse Lookup on the DNS servers in domain2.local.

Chris
0
 

Author Comment

by:BetfairRomania
ID: 24376881
Hi,
on both DNS servers from domain2.local I have a reverse lookup zone for all machines served by those DNS servers.
No this domains are using diffren IP range.
Thank you.
0

Featured Post

DevOps Toolchain Recommendations

Read this Gartner Research Note and discover how your IT organization can automate and optimize DevOps processes using a toolchain architecture.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

If you have a multi-homed DNS setup in windows, you can have issues with connectivity to the server that hosts the DNS services (or even member servers of your domain if this same DNS server is a DC). This is because windows registers all of its IPs…
Resolve DNS query failed errors for Exchange
This Micro Tutorial will teach you how to censor certain areas of your screen. The example in this video will show a little boy's face being blurred. This will be demonstrated using Adobe Premiere Pro CS6.
As a trusted technology advisor to your customers you are likely getting the daily question of, ‘should I put this in the cloud?’ As customer demands for cloud services increases, companies will see a shift from traditional buying patterns to new…

911 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

22 Experts available now in Live!

Get 1:1 Help Now