Solved

DNS problems for satellite offices

Posted on 2012-04-06
2
579 Views
Last Modified: 2012-05-01
Here is the setup...

One main office that has two physical DNS servers. 192.200.200.10 and 192.200.200.11

6 satellite offices (in same city) that are very small and connect to the main site by MPLS or VPN.

Each satellite has a Sonicwall TZ100 firewall with DNS configured as the following

DNS SErver 1: 192.200.200.10
DNS Server 2: 192.200.200.11
DNS Server 3: null

The problem..

When they lose connectivity to the main site they cannot surf the internet. We attempted to add a public DNS (ex:4.2.2.1) for the third DNS server. When we do this it causes problems. The computers will randomly not be able to ping main site hostnames and/or connect to the terminal server farm. We have to manually log into the machine and flushdns registerdns to get them back up.

The questions...

Having a DNS server at each satellite is out of the question. What is the best way to configure this? Also how can I prevent the problem i am having? Any assistance is appreciated.
0
Comment
Question by:Jryals8900
2 Comments
 
LVL 59

Accepted Solution

by:
Darius Ghassem earned 500 total points
ID: 37817469
Well here is the issue you really can't get around the issue. Here is the problem you clients must connect to internal DNS servers only so, when you have all DNS servers at HQ site and the remote sites lose connection then they will lose DNS resolution. You can NOT have external DNS servers at all in the TCP\IP properties of any system connected to a domain. Even if the external DNS server listed listed third the external DNS server will stilled be used like you have seen and cause issues.

If the internet goes you are kind of stuck unless you had DNS onsite locally.

Normally the clients have to connect to the HQ to get DNS resolution. Does the remote sites connect to the internet directly or through you HQ site?

Not much you can do. You can change DHCP so, when they lose HQ connection they can get a new IP lease with the local DNS servers removed and external added but this can be a pain.
0
 
LVL 1

Expert Comment

by:Colin
ID: 37821092
How many computers do you have at each site? It may be worth editing the hosts files on the computers instead. This is a sure way of getting DNS resolution working perfectly. I assume you have a VPN tunnel between sites? In this case, having one central DNS server and obviously having all the clients configured to point to this DNS server should work fine. Maybe have an external DNS server, i.e. 8.8.8.8 as a second server to help with internet surfing.
0

Featured Post

Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

I wrote this article to explain some important DNS concepts that should be known to avoid some typical configuration errors I often see in forums. I assume that what is described here is the typical behavior of Microsoft DNS client. I don't know …
Sometimes drives fill up and we don't know why.  If you don't understand the best way to use the tools available, you may end up being stumped as to why your drive says it's not full when you have no space left!  Here's how you can find out...
This tutorial will walk an individual through the steps necessary to enable the VMware\Hyper-V licensed feature of Backup Exec 2012. In addition, how to add a VMware server and configure a backup job. The first step is to acquire the necessary licen…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

813 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now