1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

DNS islanding in Static IP scheme???

Discussion in 'Active Directory Exams' started by itdaddy, Aug 9, 2006.

  1. itdaddy

    itdaddy Byte Poster

    116
    0
    14
    okay gurus from your experience is this correct?
    scenario

    4 servers that are DCs and their own primary DNS

    example:
    DC1/DNS 192.168.1.1 win 2000 PDC emulator
    DC2/DNS 192.168.2.1 ""
    DC3/DNS 192.168.3.1 ""
    DC4/DNS 192.168.4.1 win 2003
    All are Active Directory Integrated DNS

    Issue:
    we use to have all the of the DNS point to self as Primary DNS server
    and criss cross the secondary DNS..

    First question:
    I have heard there is no primary and no secondary in AD integrated!?
    true or false explain..


    Second Question:
    This tech came in and reconfigured all DC/DNS to point to the
    PDC emulator 192.168.1.1 to prevent islanding ; he says
    so AD can replicate out to each DC cause they cannot find each other
    if set the other way. (to point to themselves)

    All static IPs on servers and workstations. IPs on servers never change
    Local subnets point to the subnet respect DNS/DC for their local DNS resolution.


    WTF is he getting at. is he correct? Explain to me I am a dummy then

    itdaddy :oops:





    :rolleyes: :eek:
     
  2. zebulebu

    zebulebu Terabyte Poster

    3,748
    330
    187
    First point - yes, but with caveats. AD Integrated zones are replicated completely between integrated DNS servers as a 'master' zone. Basically, the AD-Integrated zone mimics a Primary zone and ALL integrated DCs get a copy of it. The only time you should need a Secondary zone with AD Integrated DNS is if you need to resolve a DC in another domain (but we won't go into that here, as it doesn't apply to your situation).

    However, there are known issues with AD integrated zones in a non-native W2K3 environment, which leads me on to your second question. Although he probably is just repeating parrot-fashion what he's been told or read elsewhere, there ARE issues with DNS Islanding in W2K.

    Its complicated to explain and this article does a much better job of doing it than I ever could!
     
    Certifications: A few
    WIP: None - f*** 'em
  3. itdaddy

    itdaddy Byte Poster

    116
    0
    14
    TANX
    SWEET REFERENCE; JUST WHAT I NEEDED.
    UD THE MAN!

    NICE AVATAR!
    :eek:
     
  4. zebulebu

    zebulebu Terabyte Poster

    3,748
    330
    187
    "Garlic Bread. Its the future..."

    :D
     
    Certifications: A few
    WIP: None - f*** 'em

Share This Page

Loading...