E
edehsa
I have my server set up with Active Directory with DNS without DHCP (IPs are handled by a Ubiquity USG also the VPN users connections).
As a normal operation on the Ubiquity devices, I had to assing a different IP pool for users VPN connections and them users are passed trough NAT to my main network.
Main network: 10.0.0.0/16
VPN network: 172.16.0.0/24
So I have some resources on my network that their connection are being handled by hostnames without the domain extensions ("db-server" instead of "db-server.mynetname.local"). in the internal network there arent any problems on querying the hostname "db-server" BUT when I do a query from a VPN connection to "db-server" I get a SERVFAIL response if I change the query to "db-server.mynetname.local" I get the IP.
PD: Hotnames for connecting resources is needed because I use redundancy on the resources like "db-server" has two IPs under it, also cant add the domain extension because I have a Site-To-Site VPN meaning that:
Site 1 "db-server" is: 10.0.0.10, 10.0.0.11
Site 2 "db-server" is: 10.1.0.10, 10.1.0.11
With this I skeep publishing my APP two times each for site, since I do this same procedure on the update location.
Continue reading...
As a normal operation on the Ubiquity devices, I had to assing a different IP pool for users VPN connections and them users are passed trough NAT to my main network.
Main network: 10.0.0.0/16
VPN network: 172.16.0.0/24
So I have some resources on my network that their connection are being handled by hostnames without the domain extensions ("db-server" instead of "db-server.mynetname.local"). in the internal network there arent any problems on querying the hostname "db-server" BUT when I do a query from a VPN connection to "db-server" I get a SERVFAIL response if I change the query to "db-server.mynetname.local" I get the IP.
PD: Hotnames for connecting resources is needed because I use redundancy on the resources like "db-server" has two IPs under it, also cant add the domain extension because I have a Site-To-Site VPN meaning that:
Site 1 "db-server" is: 10.0.0.10, 10.0.0.11
Site 2 "db-server" is: 10.1.0.10, 10.1.0.11
With this I skeep publishing my APP two times each for site, since I do this same procedure on the update location.
Continue reading...