Avatar of jtano
jtanoFlag for United States of America asked on

Secondary DNS server and DHCP

We have a main dns .123 server and a backup dns .789 server. All of our remote sites have 2 spots in the Cicso ASA router for DNS. We had the main dns .123 and the secondary DNS .789 in those spots . It was changed  so that primary dns.123 was our main dns server and then 8.8.8.8 for the secondary in case  our connection went down between us the remote sites could still work. They were divided up so some of the sites used our main DNS.123 server and 8.8.8.8 as the secondary dns and  some sites used our backup DNS.789 and then 8.8.8.8 for secondary.
Do you see any problem with this? I know there are some debates as to whether to use google dns or the ISP DNS, but other than that?
DNSCiscoWindows Server 2008

Avatar of undefined
Last Comment
vivigatt

8/22/2022 - Mon
ASKER CERTIFIED SOLUTION
N-W

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
See how we're fighting big data
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question
David Johnson, CD

You will have problems.. You've implemented something that is highly discouraged. You WILL get unexpected behaviour that is extremely hard to track down.  As noted above implementing a DNS server locally is the proper solution. A micro-ATX machine is ideal for this.
Aaron Tomosky

There are several good articles on the subject but ill explain the basics real quick of how windows uses alternate DNS servers.

Turn on your computer, it uses dns1. At some point if DNS1 doesn't respond, it tries dns2. If dns2 responds, it will continue to use dns2 until it doesn't respond. It will never go back to dns1 unless dns2 fails at some point.

I agree that setting up a DNS server at both sites is best.
Mohammed Khawaja

Best option would be to have local DNS at each sites and DNS servers use root hints.
Experts Exchange has (a) saved my job multiple times, (b) saved me hours, days, and even weeks of work, and often (c) makes me look like a superhero! This place is MAGIC!
Walt Forbes
ASKER
jtano

Thanks for the answers from everyone. I gave the points to N-W since he answered first and basically everyone agreed. I do appreciate the extra comments. If I awarded points incorrectly I apologize.
vivigatt

.789 ?
When you use an IP v4 address (this one is fake), remember that .254 is the max!
You may have used .xyz and .abc to avoid confusion...