issues with dns recursion policy

M

Minstral000

Hello.

I have two virtual windows server 2016 standard servers in GUI mode. The first one is a primary DNS server the second one is a secondary DNS server with zone replication enabled and functioning.

The first server has 1.1.1.1 and 1.1.1.2 IPs, the second one has 1.1.1.101 and 1.1.1.102 IPs (i tried those couples of IPS both on the same vnic and on two different vnics).

On the primary DNS server I executed the following commands

Set-DnsServerRecursionScope -Name . -EnableRecursion $False
Add-DnsServerRecursionScope -Name “InternalClients” -EnableRecursion $True
Add-DnsServerQueryResolutionPolicy -Name “RecursionControlPolicy” -Action ALLOW -ApplyOnRecursion -RecursionScope “InternalClients” -ServerInterfaceIP “EQ,1.1.1.1”


on the secondary DNS server I executed the following Commands

Set-DnsServerRecursionScope -Name . -EnableRecursion $False
Add-DnsServerRecursionScope -Name “InternalClients” -EnableRecursion $True
Add-DnsServerQueryResolutionPolicy -Name “RecursionControlPolicy” -Action ALLOW -ApplyOnRecursion -RecursionScope “InternalClients” -ServerInterfaceIP “EQ,1.1.1.101”


I found them at the following link: Selective Recursion Control Using DNS Server Policies


Then I launched the nslookup command. I set as DNS server both 1.1.1.1 and 1.1.1.2 (or both 1.1.1.101 and 1.1.1.102). I am always able to resolve external dns names.


Where did I make a mistake?


Thank you in advange for you support

Continue reading...
 
Back
Top Bottom