Link to home
Start Free TrialLog in
Avatar of eemoon
eemoon

asked on

NSLOOKUP results are correct?

Hi
In Windows2008, A record is configured in DNS with acme.com to 192.168.1.153
Now I dont know why there is 157.131.251.23 at bottom of the below picture. All results are normal?
Thank you



User generated image
Avatar of Seth Simmons
Seth Simmons
Flag of United States of America image

the fact that it says 'unknown' - are you using the correct dns server?
does it have a PTR record (reverse zone) for that IP address?

Because there really is a website / domain at "http://acme.com/" with IP 157.131.251.23 .
SOLUTION
Avatar of David Atkin
David Atkin
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of eemoon
eemoon

ASKER

My purpose is to setup a DNS server on my computer to make ISE work well. I am just following a website's example to setup DNS using windows2008.

so I have two questions on that picture above. One is to confirm if the DNS is setup and work well. Its ip address is 192.168.1.153. Second is I noticed there is additional ip address 157.131.251.23. now i know that is because it comes from outside.

So looks like my DNS does not work well. What command I can use to further check why the DNS server cannot work? thanks

SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
ASKER CERTIFIED SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
I would not use 'acme.com' since it is a legitimate site.  Use some other name that really doesn't exist on the web.
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of eemoon

ASKER

I made some change on dns.  the dns server of win2008 is located at vmware workstation sitting at windows10. Please see below. looks like there are still some abnormal. I did the ping at DNS server/win2008:
User generated image
User generated imageIs this configuration correct? why i got ::1: reply from the first ping above? ipv6 is disabled at its nic


The configuration is correct.  The problem is that your DNS server is responding to the ping request using IPV6 instead of IPV4.  Edit the properties of your DNS zone:

1. Right-click on DDC01 and click Properties.
2. On the Interfaces tab, click the radio button for "Only the following IP addresses".
3. Click the server's IPV6 address to UNCHECK it.
4. Click OK to save.

See if that works better.
Avatar of eemoon

ASKER

ipv6 does not exist there. please see the second picture below. i even disabled ipv6 at interface(see third picture), but it still got reply from ipv6
User generated imageUser generated imageUser generated image

Avatar of eemoon

ASKER

I found out something, but it still need to explain why. Please see below. i cannot ping name such as ise1 and ddc01, but can ping full name such as ise1.abcd.local and ddc01.abcd.local well and get correct ipv4 reply


User generated image
Is ISE1 using DHCP for its IP address or is it statically assigned?  Do you have only the local DNS server assigned to this workstation in the properties of the NIC?


Avatar of eemoon

ASKER

Using static ip address and this DNS is only one for this system. 
Do you have DHCP set up on the server?  If so, change the settings on the workstation so that it obtains its IP address using DHCP.  Once it gets an address, it will stay the same anyway unless you leave the workstation off for a long time (more than 8-10 days probably).

Check your DHCP scope options to be sure it's set to assign the gateway and DNS server addresses also.

If DHCP isn't set up, make sure that the following boxes in the DNS tab in the IPV4 properties are checked/enabled:

  • Append primary and connection specific DNS suffixes.
  • Append parent suffixes of the primary DNS suffix.
  • Register this connection's addresses in DNS.
Avatar of eemoon

ASKER

only DNS role in the server. and all these three mentioned above are enabled.

Now another question is why i can ping ise1.abcd.local, but cannot ping ise1? it is possible to ping ise1? 
i cannot ping name such as ise1 and ddc01, but can ping full name such as ise1.abcd.local and ddc01.abcd.local well and get correct ipv4 reply

does that system have the abcd.local defined as the dns suffix?
Avatar of eemoon

ASKER

Great! after adding suffix(abcd.local), it began to work when ping ise1

but i still got reply from ::1: when ping ddc01
Do not know why ddc01 behavior is different with ise1




but i still got reply from ::1: when ping ddc01
you disabled IPv6 on the intel board; ::1: is the loopback address (can't disable IPv6 on that)

Avatar of eemoon

ASKER

I just enabled it then i got the below message. the ipv6 address changed. how to disable the ipv6?

User generated image

SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of eemoon

ASKER

I believe registry change can disable the ipv6 finally. but I would like to know why ise1 behavior is different with ddc01. and here is more info that i have: ddc01 is located at windows2008 which sits at vmware workstation, and ise1 is also located at this vmware station. The vmware workstation is sitting at window10. ping ise1 and ddc01 from window10 are normal, and ping ise1 from windows2008 is normal, but only ping ddc01 from windows2008 is abnormal (meaning get ipv6 ip reply).