Link to home
Start Free TrialLog in
Avatar of spring80
spring80

asked on

Better DNS configurations for my network

Dear Sir
i want to ask yyu about the better DNS configuration for my network because sometimes the  internet connection became very slow without any reason .
The topology of my network:
1- internet modem with 192.168.100.1 as IP
2- HP server with windows server 2008 installed in it with the Forefront TMG , with 2 NIC
 a- external NIC with 192.168.100.5 as ip address , 192.168.100.1 as gateway
 b- internal NIC with 192.168.0.1 as ip address , 192.168.0.3 as primary DNS server , 192.168.0.5 as secondary dns server
3- 2 serves with windows server 2008 installed, with role is DNS server
first one has 192.168.0.3 as ip , 192.168.0.1 as gateway , 192.168.0.3 and 192.168.0.5 as dns server
secnd one has 192.168.0.5 as ip , 192.168.0.1 as gateway , 192.168.0.3 and 192.168.0.5 as dns
4- all the clients have 192.168.0.1 as gateway and 192.168.0.3 as primary dns and 192.168.0.5 as secondary dns server

What the better configuration for the external and internal NIC to the hp server

Regards
Avatar of Rob Wesley
Rob Wesley
Flag of Canada image

I'd setup the modem in bridge mode and set your external NIC as the WAN configuration. That's based on my experience with ISA.

Are you using DNS forwarders on both DNS servers? Where you could probably use public dns servers such as 8.8.8.8 and 4.2.2.2 and 4.2.2.1

Rob
Avatar of spring80
spring80

ASKER

can you tell me the step to configure the dns forwarders ?? and what the advantages of that
ok i check the url ,but what the better dns server to use as dns forwarder ??
i know 208.67.222.222 and 208.67.220.220
is there somthing better??
what should i configure the external NIC??
should i enter 192.168.0.3 and 192.168.0.5 (the ip of dns server) in the configuration for the external nic ??
or using 192.168.100.1 (the ip of the internet modem )
??
Regards
Avatar of Mohamed Khairy
Hi Spring80:

If you are going to use a Forwarder, you must make sure that the Forwarder is always available, no matter which internet connection you use because some ISPs block access to their DNS servers unless you are connecting from one of their IP addresses.

Also, You must be sure the they doesn't plan on changing their DNS infrastructure by decommissioning old name servers, deploying new ones, or changing the IP addresses of existing ones because If they do change their infrastructure and don't inform you of this, then your name server may suddenly find itself forwarding queries to non-existing name servers resulting in failed name queries and frustrated users flooding help desk with calls.

In this case I think that it's too much better to not use forwarders at all and let your DNS server use the default Root Hint.

http://www.windowsnetworking.com/articles_tutorials/DNS_Conditional_Forwarding_in_Windows_Server_2003.html
ok i understand ,but now what should the better configuration for the external nic for my hp server
is it 192.168.0.3 ,192.168.0.5 as my dns server
or 192.168.100.1 as my internet modem ??

Regards
ASKER CERTIFIED SOLUTION
Avatar of Mohamed Khairy
Mohamed Khairy
Flag of Egypt image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Very helpful