Shulou(Shulou.com)06/02 Report--

Windows Server 2016 Intelligent DNS (2)

Our previous article introduced Windows Server 2016 intelligent DNS (1). We introduced in detail the configuration of DNS Policy to achieve region-isolated access under Windows Server 2016, but I encountered a problem in the previous article, that is, after the increase, I found that there was no problem with web.ixmsoft.com access, but all internal parsing in the default Zone failed. After querying data, we need to add a default policy. And the priority is higher than any policy.

For example, if we check policy,

Get-DnsServerQueryResolutionPolicy-ZoneName "ixmsoft.com"

We passed the test internal parsing

From the screenshot above, we can see that the record in DNS is normal, but it cannot access other resolution records in the default area, but it is normal on DC, so it is still a problem with DNS Policy configuration.

So we need to add a higher priority policy. Before adding, we need to delete the first two entries by default and then add them. We first delete the added Policy.

Remove-DnsServerQueryResolutionPolicy-ZoneName "ixmsoft.com"-Name "beijingPolicy"

Remove-DnsServerQueryResolutionPolicy-ZoneName "ixmsoft.com"-Name "usPolicy"

Delete and complete all Policy

When we add a policy, we first add the default policy, and then the other two subnet policies

Add-DnsServerQueryResolutionPolicy-Name DefaultPolicy-Action ALLOW-ZoneScope "ixmsoft.com,1"-FQDN "ne,web.ixmsoft.com"-ZoneName "ixmsoft.com" Add-DnsServerQueryResolutionPolicy-Name "beijingPolicy"-Action ALLOW-ClientSubnet "eq,beijingsubnet"-ZoneScope "beijing,1"-ZoneName "ixmsoft.com" Add-DnsServerQueryResolutionPolicy-Name "usPolicy"-Action ALLOW-ClientSubnet "eq,ussubnet"-ZoneScope "us,1"-ZoneName "ixmsoft.com"

After the increase, we will check

Get-DnsServerQueryResolutionPolicy-ZoneName "ixmsoft.com"

And then we test.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.