?
Solved

DNS problems for satellite offices

Posted on 2012-04-06
2
Medium Priority
?
584 Views
Last Modified: 2012-05-01
Here is the setup...

One main office that has two physical DNS servers. 192.200.200.10 and 192.200.200.11

6 satellite offices (in same city) that are very small and connect to the main site by MPLS or VPN.

Each satellite has a Sonicwall TZ100 firewall with DNS configured as the following

DNS SErver 1: 192.200.200.10
DNS Server 2: 192.200.200.11
DNS Server 3: null

The problem..

When they lose connectivity to the main site they cannot surf the internet. We attempted to add a public DNS (ex:4.2.2.1) for the third DNS server. When we do this it causes problems. The computers will randomly not be able to ping main site hostnames and/or connect to the terminal server farm. We have to manually log into the machine and flushdns registerdns to get them back up.

The questions...

Having a DNS server at each satellite is out of the question. What is the best way to configure this? Also how can I prevent the problem i am having? Any assistance is appreciated.
0
Comment
Question by:Jryals8900
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 59

Accepted Solution

by:
Darius Ghassem earned 2000 total points
ID: 37817469
Well here is the issue you really can't get around the issue. Here is the problem you clients must connect to internal DNS servers only so, when you have all DNS servers at HQ site and the remote sites lose connection then they will lose DNS resolution. You can NOT have external DNS servers at all in the TCP\IP properties of any system connected to a domain. Even if the external DNS server listed listed third the external DNS server will stilled be used like you have seen and cause issues.

If the internet goes you are kind of stuck unless you had DNS onsite locally.

Normally the clients have to connect to the HQ to get DNS resolution. Does the remote sites connect to the internet directly or through you HQ site?

Not much you can do. You can change DHCP so, when they lose HQ connection they can get a new IP lease with the local DNS servers removed and external added but this can be a pain.
0
 
LVL 1

Expert Comment

by:Colin
ID: 37821092
How many computers do you have at each site? It may be worth editing the hosts files on the computers instead. This is a sure way of getting DNS resolution working perfectly. I assume you have a VPN tunnel between sites? In this case, having one central DNS server and obviously having all the clients configured to point to this DNS server should work fine. Maybe have an external DNS server, i.e. 8.8.8.8 as a second server to help with internet surfing.
0

Featured Post

Complete VMware vSphere® ESX(i) & Hyper-V Backup

Capture your entire system, including the host, with patented disk imaging integrated with VMware VADP / Microsoft VSS and RCT. RTOs is as low as 15 seconds with Acronis Active Restore™. You can enjoy unlimited P2V/V2V migrations from any source (even from a different hypervisor)

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

BIND is the most widely used Name Server. A Name Server is the one that translates a site name to it's IP address. There is a new bug in BIND (https://kb.isc.org/article/AA-01272), affecting all versions of BIND 9 from BIND 9.1.0 (inclusive) thro…
A procedure for exporting installed hotfix details of remote computers using powershell
This tutorial will show how to push an installation of Backup Exec to an additional server in both 2012 and 2014 versions of the software. Click on the Backup Exec button in the upper left corner. From here, select Installation and Licensing, then I…
This tutorial will walk an individual through the steps necessary to configure their installation of BackupExec 2012 to use network shared disk space. Verify that the path to the shared storage is valid and that data can be written to that location:…
Suggested Courses

777 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question