• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 399
  • Last Modified:

DNS server are denied access to each other

I have 2 2008 R2 DNS servers and 2 2008 DNS servers that are on different  network segments.  The are connected by Point to point VPNs.  When I try to access a  DNS server on another segment from a local one I get an access denied error.

Any Ideas on how to fix this?
0
jimmylew52
Asked:
jimmylew52
  • 3
  • 3
1 Solution
 
nociSoftware EngineerCommented:
A firewall in between needs to pass though UDP port 53 in both ways.
If zone transfers are needed also allow TCP port 53.
0
 
jimmylew52Author Commented:
All traffic is allowed through the Point to point VPN.
0
 
nociSoftware EngineerCommented:
btw, what exactly do you mean by access denied...

nslookup fails?
or
you cannot connect using 'net use' or using rdp?
or
you cannot forward queries?
or
you cannot do zonetransfers?

they can ping?

or the VPN does not connect?
...
I think you need to be more precise.., the mentioning of DNS seems to implicate DNS problems..
Point to Point VPN means from the initiator only to the remote host only not from any other node on the network.. so one of the DNS's need to be initiating the point to point and the other DNS server needs to accept it.
0
Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

 
jimmylew52Author Commented:
Answers

nslookup fails? nslookup fails, eve with an entry in dns on the server
or
you cannot connect using 'net use' or using rdp? net use & RDP work by IP address
or
you cannot forward queries? cannot forward queries
or
you cannot do zonetransfers? zone transfers do not work

they can ping?  ping works be IP address

or the VPN does not connect?  VPN is up and functioning
0
 
nociSoftware EngineerCommented:
when configuring the DNS infra structure you ONLY used ip addresses?
(forwarders, masters/slaves...)

both servers serve different zones...
(site1.local and site2.local) or (site1.example.com & site2.example.com) or a likewise combo?

if you want to connect site1 & site2 you can either forward to each other (all queries are either cached or forwarded).
Or you build a master slaveset (a slave as a copy of the master zone content).
0
 
jimmylew52Author Commented:
Parts of each answer attempt were part of the problem. Also the primary DNS server was not working.
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

  • 3
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now