DNS server setup over two sites

[Fox1977]

Hi there,

Just wondering if anyone can help me out with the DNS setup on a part of our network. Not sure how to go about setting it up the best way.

We have two remote sites joined by a VPN. We currently have a couple of domain controllers (running DNS) at one site. I have managed to connect the servers at the other site to the domain. I done this by changing the DNS IPs on the new servers to point to the domain controllers. Now that i proved that the link works I want to be able to have both sites up and running if the link goes down. No good if the link goes down and it pulls a site down.

What is the best way to setup the DNS on the remote site so it automatically mirrors any DNS changes at the other end and works independently?

Thanks in advance

 

[juniper911]

Hello fox

when you say two sites, do you mean two AD sites?

From what I understand of your situation you have 1 site with domain controllers and another site that just contains servers whose DNS servers are those of the domain controllers in the 1st site.

I would suggest that you install a domain controller at the 2nd site and then change the DNS server IPs of those servers to the newly installed domain controllers. This way if the link went down users at that site can logon and also do DNS lookups. As the DNS records will in AD replication will happen on the fly and you can be assured that the records will be up to date.

If you cant install a domain controller, then you'll need a standard DNS server, this will be the secondary and the zones on the 1st site primary. This setup is not great but will suffice for your needs.

 

[kbing]

Also, if you install a DC, which I recommend as well, be sure that your DNS zones are active directory integrated. The second thing to watch out for is the forwarders to the Internet.

If you rely on DNS upstream across your VPN to your main site and even if you provide DNS locally at the remote site, if the VPN breaks so will your Internet access.

I'm assuming this remote site has Internet...if that is the case, then add the DNS of your ISP to the forwarder within the DNS server your installing. Now you'll have local authentication, internal Active Directory DNS and Internet DNS no matter if the VPN is up or not.