How to create a reverse look up zone in Windows DNS


I am preparing to deploy a new VCenter Server Appliance and the new VCSA is to be setup in a VLan that is for Servers.  We have 3 primary corporate VLans:

  • VLan-1 = (for Client Devices
  • VLan-11 = (for Servers)

We do have another Client VLan that uses but that is at a satalite location.  Our concern right now is at the primary location.

According to the resources I have researched in regards to setting up a new VCenter Server Appliance (version 6.0 Update 2).  I must have a  DNS reverse lookup zone and and entry for the IP Segment that the VCSA will reside in.

All routing between has been established for 1.5 years.  I believe I just need to setup a reverse lookup zone in DNS for VLan-11.  My resources include:

Any thoughts
PkafkasNetwork EngineerAsked:
Who is Participating?
footechConnect With a Mentor Commented:
You can't define a /25 subnet, and you already have one for 172.20.1.x, so I would just add one for the 172.20.11.x (/24) subnet.  It doesn't matter that you only use a /25 subnet, but are defining a /24 subnet in DNS.
I would make it AD integrated and allow secure dynamic updates.
PkafkasNetwork EngineerAuthor Commented:
I just started google searching

But something tells me there is more to it than this.  I wanted to make sure.
MAS (MVE)Connect With a Mentor Technical Department HeadCommented:
You can have a Reverse DNS zone with 172.20 which will include all subnets under 172.20
i.e. it will cover 172.20.x.x
We Need Your Input!

WatchGuard is currently running a beta program for our new macOS Host Sensor for our Threat Detection and Response service. We're looking for more macOS users to help provide insight and feedback to help us make the product even better. Please sign up for our beta program today!

MAS (MVE)Technical Department HeadCommented:
Agree with footech regarding AD integrated and secure updates.
PkafkasNetwork EngineerAuthor Commented:
So the answer is to:

1.  Make a reverse lookup zone.
2.  Create a pointer for the IP address that I want to associate with the new VCSA.
3.  The mechanics on how to setup a new reverse lookup zone can be shown in:

Are the above points correct?
MAS (MVE)Connect With a Mentor Technical Department HeadCommented:
For now just add 172.20.11. Please check below video
PkafkasNetwork EngineerAuthor Commented:
We are to do this today.  Lets see how everything unfolds.
PkafkasNetwork EngineerAuthor Commented:
Everyone's advice worked like a champ.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.