FortiNAC SRV Records on Production DNS
|
|
|
- Owen Perkins
- 5 years ago
- Views:
Transcription
1 FortiNAC SRV Records on Production DNS Version: 8.x Date: 09/10/2018 Rev: B
2 FORTINET DOCUMENT LIBRARY FORTINET VIDEO GUIDE FORTINET KNOWLEDGE BASE FORTINET BLOG CUSTOMER SERVICE & SUPPORT FORTINET COOKBOOK FORTINET TRAINING AND CERTIFICATION PROGRAM NSE INSTITUTE FORTIGUARD CENTER FORTICAST END USER LICENSE AGREEMENT Monday, September 10, 2018
3 Table Of Contents Contents Overview 1 Adding a DNS SRV Record Example 1 Required Production DNS Server Records 1 Multiple FortiNAC Server Environment Requirements 3 Verify SRV Record Configuration 5 DNS Server Records on Production DNS i
4 Overview Agent Server Discovery is a mechanism used by different types of agents to determine the identity of the FortiNAC Server or Application Server to which the agent should connect. Some agents use SRV and TXT records contained within both FortiNAC's DNS server and your production DNS server. The records used by the Agent for identifying and connecting to the FortiNAC server vary depending on the type of Agent used. In addition to DNS records, the Persistent Agent (PA) can also obtain the server identity information via software push (such as GPO). If the con- figurations are not pushed via software, then SRV records on the corporate production DNS servers are required. Adding a DNS SRV Record Example DNS servers will vary based on the operating system of the computer used to house them. The example below is for a DNS server running on a Windows operating system with the SRV records added from a command prompt. You may prefer to use another method to add records to your DNS Server. 1. On the Windows Desktop click Start > Run. 2. On the Run dialog in the Open field type command and click OK. 3. At the command prompt type the following: > dnscmd /RecordAdd yourdomain.com _bradfordagent._udp.yourdomain.com. SRV servername.domainname.com. 4. To add the next record type the following: > dnscmd /RecordAdd yourdomain.com _bradfordagent._tcp.yourdomain.com. SRV servername.domainname.com. In the commands above yourdomain.com is the zone supplied via DHCP (Connectionspecific DNS Suffix on a Windows station in "ipconfig /all" output). servername.domainname.com is the FQDN of the FortiNAC Application Server or server that is running the captive portal. Note that there is a period (.) after.com at the end of the FQDNs and node names. The two zeros (0) in the example indicate priority and weight of this record. Priority is used when there are multiple servers to which the agent can connect, such as in a High Availability environment. Required Production DNS Server Records From the DNS example in the section above you must include specific entries in your production DNS server. The examples below list each entry and provide notes about its function and the agents affected. ios Agent b._dns-sd._udp lb._dns-sd._udp DNS Server Records on Production DNS 1
5 These lines point to the current domain to define the browse (b) and legacy browse (lb) domains for DNS-SD. symbol is a shortcut to the domain defined in the current domain file and indicates where the agent should look for services. ios Agent and Dissolvable Agent 3.1 and Higher _networksentry._tcp PTR AgentConfig._networksentry._tcp AgentConfig._networksentry._tcp SRV servername.domainname.com. TXT path=/registration/agent/config These lines work together to define the AgentConfig service. The first line indicates the name of the service and sets the type (_networksentry._tcp). The second and third lines are the SRV record and indicate the FQDN of the server to which the agent will connect. 443 is the port and should not be changed. In the example, the name of the server is servername.domainname.com. This must match the name in the valid certificate used to secure the portal. Note that the period (.) at the end of servername.domainname.com. is required. The TXT line contains the path. The agent uses the information contained in these entries to construct a URL for the server to which it should connect. Using the records shown above the agent would construct the following: Android Agent _networksentry._tcp.discovery.portal.yourdomain.com.domainname.com. _networksentry._tcp.discovery.portal.yourdomain.com /agent/config SRV servername TXT path=/registration These lines are the SRV record and indicate the FQDN of the server to which the agent will connect. They are the detailed version of the lines below that are included in the domain.zone.reg file shown above. It is recommended that you use the detailed entry when editing your production DNS, however, either entry is acceptable. _networksentry._tcp SRV servername.domainname.com. TXT path=/registration/agent/config 443 is the port and should not be changed. In the example, the name of the server is servername.domainname.com. This must match the name in the valid certificate used to secure the portal. Note that the period (.) at the end of servername.domainname.com. is required. The TXT line contains the path. The agent uses the information contained in these entries to construct a URL for the server to which it should connect. Using the records shown above the agent would construct the following: 2 DNS Server Records on Production DNS
6 Persistent Agent _bradfordagent._udp.yourdomain.com _bradfordagent._tcp.yourdomain.com SRV servername.domainname.com. SRV servername.domainname.com. These SRV records indicate the FQDN of the server to which the agent will connect and 4568 are the ports on which the server listens and should not be changed. In the example, the name of the server is servername.domainname. Note that the period (.) at the end of servername.domainname.com. is required. This entry is used by the Persistent Agent and is required. The Persistent Agent has other mechanisms for determining where its server is such as registry entries on the host or information contained in Persistent Agent Properties on the server. However, if those options are not available, the Persistent Agent does use DNS to locate a server. Persistent Agent in L2 or L3 HA Environment In a High Availability environment (L2 or L3), SRV records must be added for all of the servers in order by priority. A priority of zero (0) takes highest precedence. If using L2 HA, only add the names of the physical servers (not the shared name). The below example shows SRV records for the Primary Server with a priority of zero (0) and Secondary Server with a priority of one (1). _bradfordagent._tcp.yourdomain.com _bradfordagent._udp.yourdomain.com _bradfordagent._tcp.yourdomain.com _bradfordagent._udp.yourdomain.com SRV primaryas.domainname.com. SRV primaryas.domainname.com. SRV secondaryas.domainname.com. SRV secondaryas.domainname.com Multiple FortiNAC Server Environment Requirements When using the PA in a multiple FortiNAC Server environment, the best prac- tice is to set the registry keys via software push. If this is not possible, configure SRV records using the below guidelines. Single Production DNS Server Shared By All FortiNAC Servers: Include all FortiNAC Server names with equal priority in the SRV records returned from the production DNS server. The following shows DNS configuration entries for two FortiNAC configurations. These records are used by the Persistent Agent. _bradfordagent._tcp.yourdomain.com SRV appserver1.domainname.com. _bradfordagent._udp.yourdomain.com SRV appserver1.domainname.com. _bradfordagent._tcp.yourdomain.com SRV appserver1.domainname.com. _bradfordagent._udp.yourdomain.com SRV appserver1.domainname.com. In the commands above yourdomain.com is the zone. appserver1.domainname.com and appserver2.domainname.com are the FQDNs of the FortiNAC Application DNS Server Records on Production DNS 3
7 Servers or servers that are running the captive portal. Note that there is a period (.) after.com. at the end of the FQDNs and node names. Single production DNS Server Shared By All FortiNAC Servers. FortiNAC Servers Configured for L2 High Availability (Uses a Shared IP Address): Include all FortiNAC Server (shared ip address) names with equal priority in the SRV records returned from the production DNS server. The following shows DNS configuration entries for two FortiNAC configurations. These records are used by the Persistent Agent. _bradfordagent._tcp.yourdomain.com SRV appserver1.domainname.com. _bradfordagent._udp.yourdomain.com SRV appserver1.domainname.com. _bradfordagent._tcp.yourdomain.com SRV appserver2.domainname.com. _bradfordagent._udp.yourdomain.com SRV appserver2.domainname.com. In the commands above yourdomain.com is the zone. appserver1.domainname.com and appserver2.domainname.com are the FQDNs of the FortiNAC Application Serv- ers or servers that are running the captive portal. Note that there is a period (.) after.com. at the end of the FQDNs and node names. Single Production DNS Server Shared By All FortiNAC Servers. FortiNAC Servers Configured for L3 High Availability (No Shared IP Address): Add SRV records for all of the servers in order by priority. Priority is the first number after SRV in the example. Primary servers should take higher precedence (0). These records are used by the Persistent Agent. _bradfordagent._tcp.yourdomain.com SRV appserver1primaryas.domainname.com. _bradfordagent._udp.yourdomain.com SRV appserver1primaryas.domainname.com. _bradfordagent._tcp.yourdomain.com SRV appserver1secondaryas.domainname.com. _bradfordagent._udp.yourdomain.com SRV appserver1secondaryas.domainname.com. _bradfordagent._tcp.yourdomain.com SRV appserver2primaryas.domainname.com. _bradfordagent._udp.yourdomain.com SRV appserver2primaryas.domainname.com. _bradfordagent._tcp.yourdomain.com SRV appserver2secondaryas.domainname.com. _bradfordagent._udp.yourdomain.com SRV appserver2secondaryas.domainname.com. Separate Production DNS Server Per FortiNAC Server : Include the FortiNAC Server name in the SRV records returned from the pro- duction DNS server local to that FortiNAC Server. Use the entries for the stand- alone server as shown in the previous examples. 4 DNS Server Records on Production DNS
8 Verify SRV Record Configuration Once records are in place, confirm DNS server responds to SRV queries appropriately. SRV Queries Using nslookup (where yourdomain.com is the zone) Records for Persistent Agent: nslookup -querytype=srv _bradfordagent._tcp.yourdomain.com nslookup -querytype=srv _bradfordagent._udp.yourdomain.com Records for Dissolvable Agent/iOS Agent: nslookup -querytype=srv _networksentry._tcp.yourdomain.com nslookup -querytype=txt _networksentry._tcp.yourdomain.com nslookup -querytype=srv AgentConfig._networksentry._tcp.yourdomain.com nslookup -querytype=txt AgentConfig._networksentry._tcp.yourdomain.com Records for Android Agent: nslookup -querytype=srv _networksentry._tcp.discovery.portal.yourdomain.com nslookup -querytype=txt _networksentry._tcp.discovery.portal.yourdomain.com Example Using nslookup Querying Records for Persistent Agent Using nslookup where Connection-specific DNS suffix (zone) is bradfordnetworks.com. > nslookup -querytype=srv _bradfordagent._tcp.bradfordnetworks.com Server: DNSServer.bradfordnetworks.com Address: _bradfordagent._tcp.bradfordnetworks.com SRV service location: priority = 0 weight = 0 port = 4568 svr hostname = NetSen.bradfordnetworks.com NetSen.bradfordnetworks.com internet address = > nslookup -querytype=srv _bradfordagent._udp.bradfordnetworks.com Server: DNSServer.bradfordnetworks.com Address: _bradfordagent._udp.bradfordnetworks.com SRV service location: priority = 0 weight = 0 port = 4567 DNS Server Records on Production DNS 5
9 svr hostname = NetSen.bradfordnetworks.com NetSen.bradfordnetworks.com internet address = SRV Queries Using Domain Information Groper Records for Persistent Agent: dig SRV _bradfordagent._tcp.yourdomain.com dig SRV _bradfordagent._udp.yourdomain.com Records for Dissolvable Agent/iOS Agent: dig SRV _networksentry._tcp.yourdomain.com dig TXT _networksentry._tcp.yourdomain.com dig SRV AgentConfig._networksentry._tcp.yourdomain.com dig TXT AgentConfig._networksentry._tcp.yourdomain.com Records for Android Agent: dig SRV _networksentry._tcp.discovery.portal.yourdomain.com dig TXT _networksentry._tcp.discovery.portal.yourdomain.com Example Using Domain Information Groper Querying Records for Persistent Agent Using Domain Information Groper where Connection-specific DNS suffix (zone) is bradfordnetworks.com. > dig SRV _bradfordagent._tcp.bradfordnetworks.com ; <<>> DiG RedHat el7 <<>> SRV _bradfordagent._tcp.bradfordnetworks.com ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 2 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4000 ;; QUESTION SECTION: ;_bradfordagent._tcp.bradfordnetworks.com. IN SRV ;; ANSWER SECTION: _bradfordagent._tcp.bradfordnetworks.com IN SRV NetSen.bradfordnetworks.com. ;; ADDITIONAL SECTION: NetSen.bradfordnetworks.com IN A DNS Server Records on Production DNS
10 ;; Query time: 0 msec ;; SERVER: #53( ) ;; WHEN: Wed Jul 06 08:55:45 EDT 2016 ;; MSG SIZE rcvd: 134 > dig SRV _bradfordagent._udp.bradfordnetworks.com ; <<>> DiG RedHat el7 <<>> SRV _bradfordagent._udp.bradfordnetworks.com ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 2 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4000 ;; QUESTION SECTION: ;_bradfordagent._udp.bradfordnetworks.com. IN SRV ;; ANSWER SECTION: _bradfordagent._udp.bradfordnetworks.com IN SRV NetSen.bradfordnetworks.com. ;; ADDITIONAL SECTION: NetSen.bradfordnetworks.com IN A ;; Query time: 0 msec ;; SERVER: #53( ) ;; WHEN: Wed Jul 06 08:52:13 EDT 2016 ;; MSG SIZE rcvd: 134 DNS Server Records on Production DNS 7
Implementing DNSSEC with DynDNS and GoDaddy
Implementing DNSSEC with DynDNS and GoDaddy Lawrence E. Hughes Sixscape Communications 27 December 2017 DNSSEC is an IETF standard for adding security to the DNS system, by digitally signing every resource
Testing IPv6 address records in the DNS root
Testing IPv6 address records in the DNS root February 2007 Geoff Huston Chief Scientist APNIC Priming a DNS name server 1. Take the provided root hints file 2. Generate a DNS query for resource records
ECE 435 Network Engineering Lecture 7
ECE 435 Network Engineering Lecture 7 Vince Weaver http://web.eece.maine.edu/~vweaver vincent.weaver@maine.edu 25 September 2018 HW#3 was Posted Announcements 1 HW#2 Review C code will be discussed next
How to Enable Internet for Guest Virtual Machine using Datacard Tata Photon.
How to Enable Internet for Guest Virtual Machine using Datacard Tata Photon. Table of Contents 1) Host, Guest and VBox version.... 2 2) Check your current Host and add 3 rd Adapter to Host windows... 3
DNS Setup Guide. Connection Broker. Advanced Connection Management For Multi-Cloud Environments
DNS Setup Guide Connection Broker Advanced Connection Management For Multi-Cloud Environments Version 9.0 June 2018 Contacting Leostream Leostream Corporation 271 Waverley Oaks Rd Suite 206 Waltham, MA
Connection Broker Advanced Connections Management for Multi-Cloud Environments. DNS Setup Guide
Connection Broker Advanced Connections Management for Multi-Cloud Environments DNS Setup Guide Versions 8.2 December 2017 Contacting Leostream Leostream Corporation 271 Waverley Oaks Rd Suite 206 Waltham,
Objectives. Upon completion you will be able to:
Domain Name System: DNS Objectives Upon completion you will be able to: Understand how the DNS is organized Know the domains in the DNS Know how a name or address is resolved Be familiar with the query
Creating Your Virtual Data Center
NET201 Creating Your Virtual Data Center VPC Fundamentals and Connectivity Options Becky Weiss, Principal Engineer, EC2 Networking October 2015 2015, Amazon Web Services, Inc. or its Affiliates. All rights
Crear un centro de datos virtual en AWS
Crear un centro de datos virtual en AWS Fundamentos de VPC y opciones de conectividad Damián Arregui, Solutions Architect, AWS Jueves 1ro de Junio 2016 2016, Amazon Web Services, Inc. or its Affiliates.
Authenticating Devices
Authenticating Devices Cisco TelePresence Deployment Guide Cisco VCS X6.1 D14819.01 May 2011 Contents Contents Document revision history... 4 Introduction... 5 Local database... 6 Configuration... 6 H.350
WiFiProbe Case study on Android scripted test
WiFiProbe 1 Case study on Android scripted test Android scripted test 2 The goal of the test is to carry-out and measure the steps and protocol interactions that happen when an Android smartphone connects
RSA and ECDSA. Geoff Huston APNIC. #apricot2017
RSA and ECDSA Geoff Huston APNIC It s all about Cryptography Why use Cryptography? Public key cryptography can be used in a number of ways: protecting a session from third party eavesdroppers Encryption
page 1 Plain Old DNS WACREN, DNS/DNSSEC Regional Workshop Ouagadougou, October 2016
page 1 Plain Old DNS WACREN, DNS/DNSSEC Regional Workshop Ouagadougou, 10-14 October 2016 page 2 IP: Identifiers on the Internet The fundamental identifier on the internet is an IP address. Each host connected
Local DNS Attack Lab. 1 Lab Overview. 2 Lab Environment. 2.1 Install and configure the DNS server. SEED Labs Local DNS Attack Lab 1
SEED Labs Local DNS Attack Lab 1 Local DNS Attack Lab Copyright c 2006-2015 Wenliang Du, Syracuse University. The development of this document is partially funded by the National Science Foundation s Course,
Domain Name System (DNS) DNS Fundamentals. Computers use IP addresses. Why do we need names? hosts.txt does not scale. The old solution: HOSTS.
Domain Name System (DNS) Computers use IP addresses. Why do we need names? Names are easier for people to remember DNS Fundamentals Computers may be moved between networks, in which case their IP address
Is your DNS server up-to-date? Pieter Lexis Senior PowerDNS Engineer April 22 nd 2018
lieter_ PowerDNS pieterlexis PowerDNS Is your DNS server up-to-date? Pieter Lexis Senior PowerDNS Engineer April 22 nd 2018 1 What s all this about? A DNS recap What is EDNS? Issues with EDNS on the internet
Domain Name System (DNS) Session-1: Fundamentals. Joe Abley AfNOG Workshop, AIS 2017, Nairobi
Domain Name System (DNS) Session-1: Fundamentals Joe Abley AfNOG Workshop, AIS 2017, Nairobi Computers use IP addresses. Why do we need names? Names are easier for people to remember Computers may be moved
CPSC 441 COMPUTER COMMUNICATIONS MIDTERM EXAM SOLUTION
CPSC 441 COMPUTER COMMUNICATIONS MIDTERM EXAM SOLUTION Department of Computer Science University of Calgary Professor: Carey Williamson March 2, 2012 This is a CLOSED BOOK exam. Textbooks, notes, laptops,
Information Network I: The Application Layer. Doudou Fall Internet Engineering Laboratory Nara Institute of Science and Technique
Information Network I: The Application Layer Doudou Fall Internet Engineering Laboratory Nara Institute of Science and Technique Outline Domain Name System World Wide Web and HTTP Content Delivery Networks
FortiNAC Citrix XenMobile Device Integration
FortiNAC Citrix XenMobile Device Integration Version: 8.x Date: 09/07/2018 Rev: B FORTINET DOCUMENT LIBRARY http://docs.fortinet.com FORTINET VIDEO GUIDE http://video.fortinet.com FORTINET KNOWLEDGE BASE
Domain Name System (DNS) Session-1: Fundamentals. Computers use IP addresses. Why do we need names? hosts.txt does not scale
Domain Name System (DNS) Computers use IP addresses. Why do we need names? Names are easier for people to remember Session-1: Fundamentals Computers may be moved between networks, in which case their IP
FortiNAC. HiPath. Enterasys. Siemens. Extreme. Wireless Integration. Version: 8.x. Date: 8/28/2018. Rev: B
FortiNAC HiPath Enterasys Siemens Extreme Wireless Integration Version: 8.x Date: 8/28/2018 Rev: B FORTINET DOCUMENT LIBRARY http://docs.fortinet.com FORTINET VIDEO GUIDE http://video.fortinet.com FORTINET
Transition to IPv6. Hui Chen, Ph.D. Dept. of Engineering & Computer Science Virginia State University Petersburg, VA 23806
Transition to IPv6 Hui Chen, Ph.D. Dept. of Engineering & Computer Science Virginia State University Petersburg, VA 23806 10/12/2015 CSCI 445 Fall 2015 1 Acknowledgements Some pictures used in this presentation
Measuring DNS Vulnerabilities and DNSSEC Challenges from an Irish Perspective. SATIN Conference, NPL, London, 04 th April 2011
Measuring DNS Vulnerabilities and DNSSEC Challenges from an Irish Perspective SATIN Conference, NPL, London, 04 th April 2011 Introduction Billy Glynn (working with IEDR for circa. 10 years) IEDR operate
6.033 Computer System Engineering
MIT OpenCourseWare http://ocw.mit.edu 6.033 Computer System Engineering Spring 2009 For information about citing these materials or our Terms of Use, visit: http://ocw.mit.edu/terms. M.I.T. DEPARTMENT
Root Zone DNSSEC KSK Rollover. DSSEC KSK Rollover
Root Zone DNSSEC KSK Rollover 2017 Edward Lewis DSSEC KSK Rollover ENOG 15 Edward.Lewis@icann.org FIRST TC September 11, 2017 5 June 2018 The Basics This talk is related to the Domain Name System, in particular,
Written examination in TDTS06 Computer Networks at 8 12
LiTH, The Institute of Technology at Linköping University 1(6) IDA, The Department of Computer and Information Science Juha Takkinen 2010-10-26 Written examination in TDTS06 Computer Networks 2010-10-23
BIND-USERS and Other Debugging Experiences. Mark Andrews Internet Systems Consortium
BIND-USERS and Other Debugging Experiences Mark Andrews Internet Systems Consortium Mark_Andrews@isc.org http://isc.org BIND-USERS and Other Debugging Experiences We will look at some typical debugging
Answer: B. Answer: D. Answer: C
Question: 1 Your company has a single Active Directory forest that has an Active Directory domain named na.contoso.com. A server named Server1 runs the DNS server role. You notice stale resource records
Naming. CS 475, Spring 2018 Concurrent & Distributed Systems. Slides by Luís Pina
Naming CS 475, Spring 2018 Concurrent & Distributed Systems Slides by Luís Pina (lpina2@gmu.edu) 1 Domain Name System Name Discovery 2 What happens after typing the name of the host? The internet routes
DANE Demonstration! Duane Wessels, Verisign! ICANN 49 DNSSEC Workshop! March 26, 2014!
DANE Demonstration! Duane Wessels, Verisign! ICANN 49 DNSSEC Workshop! March 26, 2014! Outline! What is DANE?! The TLSA Record! TLSA Browser Plugin! Generating the TLSA Record! Other uses for DANE! 2!
CS118 Discussion 1A, Week 3. Zengwen Yuan Dodd Hall 78, Friday 10:00 11:50 a.m.
CS118 Discussion 1A, Week 3 Zengwen Yuan Dodd Hall 78, Friday 10:00 11:50 a.m. 1 Outline Application Layer Protocol: DNS, CDN, P2P Transport Layer Protocol: UDP, principles of reliable transport protocol
Copyright and Trademarks
Copyright and Trademarks Specops Password Reset is a trademark owned by Specops Software. All other trademarks used and mentioned in this document belong to their respective owners. 2 Contents Key Components
Worst Current Practice. Lutz Donnerhacke IKS GmbH
Worst Current Practice Lutz Donnerhacke IKS GmbH Worst Current Practice Not a talk about simple bugs Too many WTFs to talk about Sometimes instructive anyway SEOS: IPv6 packets crash Ether Channels: Card
How to Add Domains and DNS Records
Configure the Barracuda NextGen X-Series Firewall to be the authoritative DNS server for your domains or subdomains to take advantage of Split DNS or dead link detection. Step 1. Make the X-Series Firewall
Best practices. Defining your own EGO service to add High Availability capability for your existing applications. IBM Platform Symphony
IBM Platform Symphony Best practices Defining your own EGO service to add High Availability capability for your existing applications Leo Lin IBM Systems & Technology Group, Software Defined Systems Advisory
Lesson 9: Configuring DNS Records. MOAC : Administering Windows Server 2012
Lesson 9: Configuring DNS Records MOAC 70-411: Administering Windows Server 2012 Overview Exam Objective 3.2: Configure DNS Records Configuring DNS Record Types Using the DNSCMD Command to Manage Resource
WE POWER YOUR MOBILE WORLD ENUM INTEGRATION MANUAL
ENUM INTEGRATION MANUAL 1 CONTENTS INTRODUCTION... 3 CONNECTIVITY... 3 TECHNICAL SPECIFICATION... 4 Valid format for ENUM server query... 4 ENUM server responses... 6 ENUM responses in case of error processing
2017 DNSSEC KSK Rollover. DSSEC KSK Rollover
2017 DNSSEC KSK Rollover 2017 Edward Lewis DSSEC KSK Rollover APNIC 44 Edward.Lewis@icann.org FIRST TC September 11, 2017 13 September 2017 DNSSEC Signing vs. Validation DNS Security Extensions Digital
DNS Load Balancing in ONTAP
Technical Report DNS Load Balancing in ONTAP Configuration and Best Practices Justin Parisi, NetApp October 2016 TR-4253 Abstract This document explains how to configure NetApp storage systems with NetApp
Qwest IPv6. Engineering & Certification 1/31/2011. Government Services
Qwest IPv6 Engineering & Certification 1/31/2011 Agenda Qwest IPv6 history IPv4 Depletion & Carrier Timeline IPv6 Service objectives Qwest IP Networks => IPv6 Networks? IPv6 Implementation: Public port
DNS over IPv6 - A Study in Fragmentation
DNS over IPv6 - A Study in Fragmentation DNS OARC, September 2017 Geoff Huston, Joao Damas APNIC Labs What happens to a large DNS response? (Where large is > 1280 octets) What happens to a large DNS response?
FortiNAC. Palo Alto Networks Integration. Version 8.x Date: 8/29/2018. Rev: B
FortiNAC Palo Alto Networks Integration Version 8.x Date: 8/29/2018 Rev: B FORTINET DOCUMENT LIBRARY http://docs.fortinet.com FORTINET VIDEO GUIDE http://video.fortinet.com FORTINET KNOWLEDGE BASE http://kb.fortinet.com
SIP Server Deployment Guide. SRV address support in Contact and Record-Route headers
SIP Server Deployment Guide SRV address support in Contact and Record-Route headers 1/17/2018 Contents 1 SRV address support in Contact and Record-Route headers 1.1 Feature Configuration 1.2 Feature Limitations
Preparation Test AAAA and EDNS0 support Share Your Results Results Reported Testing Period
Testing Recursive Name Servers for IPv6 and EDNS0 Support SAC 017 15 March 2007 Preparation Test AAAA and EDNS0 support Share Your Results Results Reported Testing Period Background The DNS Root Server
Introduction to the Domain Name System
The Domain Name System (DNS) handles the growing number of Internet users. DNS translates names, such as www.cisco.com, into IP addresses, such as 192.168.40.0 (or the more extended IPv6 addresses), so
FortiNAC. Aerohive Wireless Access Point Integration. Version 8.x 8/28/2018. Rev: E
FortiNAC Aerohive Wireless Access Point Integration Version 8.x 8/28/2018 Rev: E FORTINET DOCUMENT LIBRARY http://docs.fortinet.com FORTINET VIDEO GUIDE http://video.fortinet.com FORTINET KNOWLEDGE BASE
DNS. Karst Koymans & Niels Sijm. Friday, September 14, Informatics Institute University of Amsterdam
DNS Karst Koymans & Niels Sijm Informatics Institute University of Amsterdam Friday, September 14, 2012 Karst Koymans & Niels Sijm (UvA) DNS Friday, September 14, 2012 1 / 32 1 DNS on the wire 2 Zone transfers
How to Configure the DNS Server
Make the Barracuda Link Balancer an Authoritative DNS host and configure the DNS Server for inbound load balancing. Step 1. Enable Authoritative DNS Enable Authoritative DNS on the Barracuda Link Balancer
DNS & DHCP CONFIGURATION
WELCOME DNS & DHCP CONFIGURATION Group Members Anmol Nazakat Ameena Fatima Shakeel ur Rehman Gulraiz Azam Irfan Ullah 1 2 3 4 5 BSIT-F14-E78 BSIT-F14-E100 BSIT-F14-E66 BSIT-F14-E69 BSIT-F14-E79 3 Today
Agha Mohammad Haidari General ICT Manager in Ministry of Communication & IT Cell#
Install a DNS server in Windows Server 2008 IT administrators who have little or no experience with Domain Name System (DNS), can learn to install, configure and troubleshoot a Windows Server 2008 DNS
Defeating DNS Amplification Attacks. UKNOF Manchester Central, UK January Ralf Weber Senior Infrastructure Architect
Defeating DNS Amplification Attacks UKNOF Manchester Central, UK January 21 2014 Ralf Weber Senior Infrastructure Architect History of DNS Amplification DNS amplification attacks aren't new Periodically
Chapter 19. Domain Name System (DNS)
Chapter 19 Domain Name System (DNS) TCP/IP Protocol Suite 1 Copyright The McGraw-Hill Companies, Inc. Permission required for reproduction or display. OBJECTIVES: To describe the purpose of DNS. To define
DNS. Some advanced topics. Karst Koymans. Informatics Institute University of Amsterdam. (version 17.2, 2017/09/25 12:41:57)
DNS Some advanced topics Karst Koymans Informatics Institute University of Amsterdam (version 17.2, 2017/09/25 12:41:57) Friday, September 22, 2017 Karst Koymans (UvA) DNS Friday, September 22, 2017 1
DHCP and DDNS Services
This chapter describes how to configure the DHCP server or DHCP relay as well as dynamic DNS (DDNS) update methods. About, page 1 Guidelines for, page 3 Configure the DHCP Server, page 4 Configure the
Cisco Expressway ENUM Dialing
Cisco Expressway ENUM Dialing Deployment Guide First Published: December 2013 Last Updated: November 2015 Cisco Expressway X8.7 Cisco Systems, Inc. www.cisco.com 2 Introduction ENUM (E.164 Number Mapping)
FortiNAC. Cisco Airespace Wireless Controller Integration. Version: 8.x. Date: 8/28/2018. Rev: B
FortiNAC Cisco Airespace Wireless Controller Integration Version: 8.x Date: 8/28/2018 Rev: B FORTINET DOCUMENT LIBRARY http://docs.fortinet.com FORTINET VIDEO GUIDE http://video.fortinet.com FORTINET KNOWLEDGE
CS 3640: Introduction to Networks and Their Applications
CS 3640: Introduction to Networks and Their Applications Fall 2018, Lecture 19: Application Layer III (Credit: Prof. Phillipa Gill @ University of Massachusetts) Instructor: Rishab Nithyanand Teaching
Domain Name System (DNS)
Domain Name System (DNS) Smith College, CSC 249 Feb 6, 2017 1 TODAY: Domain Name System qthe directory system for the Internet v Used by other application layer protocols v via socket programming qmaps
Add Dns Entry Windows 7 Command Line
Add Dns Entry Windows 7 Command Line Add-DnsServerConditionalForwarderZone Windows PowerShell is a task-based command-line shell and scripting language designed especially for system administration. Clears
!!!!!!! Printopia Pro ADMINISTRATION GUIDE. Revision 2 December 4, Version 1.0.3
Printopia Pro Version 1.0.3 ADMINISTRATION GUIDE Revision 2 December 4, 2013 www.printopiapro.com Legal Copyright 2013 Ecamm Network, LLC. Printopia is a registered trademark of Ecamm Network, LLC. Mac,
ENUM Dialing on Cisco Expressway
ENUM Dialing on Cisco Expressway Deployment Guide Cisco Expressway X8.2 D15064.02 June 2014 Contents Introduction 3 Configuring the Expressway 4 Configuring an ENUM zone and search rule 4 Configuring the
Goal of this session
DNS refresher Overview Goal of this session What is DNS? How is DNS built and how does it work? How does a query work? Record types Caching and Authoritative Delegation: domains vs zones Finding the error:
Hurricane Electric IPv6 Certification
IPv6 Primer Step 1. Registering a Domain Name at GoDaddy The best way I found to do this is to spend $3.17 of real money. I couldn't find a free service that was good enough. Even most paid services aren't
DHCP and DDNS Services for Threat Defense
The following topics explain DHCP and DDNS services and how to configure them on Threat Defense devices. About DHCP and DDNS Services, on page 1 Guidelines for DHCP and DDNS Services, on page 3 Configure
IP Office Platform R11.0
Issue 03d - (09 October 2018) Contents 8. Remote SIP Deskphones 8.1 Provisioning... the Deskphones 59 8.2 Configuring... Application Rules 61 1.1 Example Schematic... 4 8.3 Configuring... Media Rules 61
The accidental hacker DNS Amplifica7on Norid registrar seminar Registrarseminar 2013 Oslo, NO wed, december 4th, 2013 Marco Davids
The accidental hacker DNS Amplifica7on Norid registrar seminar 2013 Registrarseminar 2013 Oslo, NO wed, december 4th, 2013 Marco Davids 1 Pleased to meet you! Personalia: Marco Davids Technical Advisor
Privileged Access Agent on a Remote Desktop Services Gateway
Privileged Access Agent on a Remote Desktop Services Gateway IBM SECURITY PRIVILEGED IDENTITY MANAGER User Experience and Configuration Cookbook Version 1.0 November 2017 Contents 1. Introduction 5 2.
Troubleshooting DNSSEC Visually
Troubleshooting DNSSEC Visually Sandia National Laboratories is a multi-program laboratory operated by Sandia Corporation, a wholly owned subsidiary of Lockheed Martin company, for the U.S. Department
Network+ Guide to Networks, Seventh Edition Chapter 2, Solutions
Network+ Guide to Networks, Seventh Edition Chapter 2, Solutions Review Questions 1. Which part of a MAC address is unique to each manufacturer? A. The network identifier B. The OUI C. The device identifier
DNS Basics BUPT/QMUL
DNS Basics BUPT/QMUL 2018-04-16 Related Information Basic function of DNS Host entry structure in Unix Two system calls for DNS database retrieving gethostbyname () gethostbyaddr () 2 Agenda Brief introduction
Response Differences between NSD and other DNS Servers
Response Differences between NSD and other DNS Servers Jelte Jansen, NLnet Labs Wouter Wijngaards, NLnet Labs NLnet Labs document 2006-004 November 2, 2006 Abstract This note describes observed differences
Infoblox Authenticated DHCP
Infoblox Authenticated DHCP Unified Visitor Management amigopod Technical Note Revision 1.1 5 July 2010 United States of America +1 (888) 590-0882 Europe, Middle East & Asia +34 91 766 57 22 Australia
Installing MyDNS And The MyDNSConfig Control Panel On Fedora 8
By Falko Timme Published: 2007-12-06 19:24 Installing MyDNS And The MyDNSConfig Control Panel On Fedora 8 Version 1.0 Author: Falko Timme Last edited 12/03/2007 In this tutorial
edp 8.2 Info Sheet - Integrating the ediscovery Platform 8.2 & Enterprise Vault
edp 8.2 Info Sheet - Integrating the ediscovery Platform 8.2 & Enterprise Vault 12.0.1 Date: December 2017 Author: Technical Field Enablement (II-TEC@veritas.com) Applies to: ediscovery Platform 8.x and
IPv6-only mobile network
IPv6-only mobile network Tomasz Kossut, Michał Czerwonka Orange Poland IPv6 Day Kopenhagen, 06.11.2017 1 table of contents Chapter 1 Chapter 2 Chapter 3 Chapter 4 Chapter 5 Chapter 6 Chapter 7 Possible
Domain Name Service. DNS Overview. October 2009 Computer Networking 1
Domain Name Service DNS Overview October 2009 Computer Networking 1 Why DNS? Addresses are used to locate objects (contain routing information) Names are easier to remember and use than numbers DNS provides
FortiNAC ADTRAN vwlan Wireless Controllers Integration
FortiNAC ADTRAN vwlan Wireless Controllers Integration Version 8.x Date: 8/28/2018 Rev: C FORTINET DOCUMENT LIBRARY http://docs.fortinet.com FORTINET VIDEO GUIDE http://video.fortinet.com FORTINET KNOWLEDGE
Microsoft Skype for Business (aka Lync ) Federation
Microsoft Skype for Business (aka Lync ) Federation Procedures for federating an Enterprise using Skype for Business (aka Lync ) with the PGi Virtual Meeting Room Service Note: For brevity the previous
Exam Questions
Exam Questions 70-685 Pro: Windows 7, Enterprise Desktop Support Technician https://www.2passeasy.com/dumps/70-685/ 1.Portable computer users report that they can use Internet Explorer to browse Internet
Domain Name Service. FAQs. Issue 07 Date HUAWEI TECHNOLOGIES CO., LTD.
Issue 07 Date 2019-03-05 HUAWEI TECHNOLOGIES CO., LTD. Copyright Huawei Technologies Co., Ltd. 2019. All rights reserved. No part of this document may be reproduced or transmitted in any form or by any
Some advanced topics. Karst Koymans. Tuesday, September 16, 2014
DNS Some advanced topics Karst Koymans Informatics Institute University of Amsterdam (version 44, 2014/09/15 08:39:47) Tuesday, September 16, 2014 Karst Koymans (UvA) DNS Tuesday, September 16, 2014 1
Authoritative-only server & TSIG
Authoritative-only server & TSIG cctld workshop Apia, Samoa,20 23 June 2006 Andy Linton (Materials by Alain Aina) Different type of servers Several types of name servers Authoritative servers master (primary)
OPS535 Lab 5. Dynamic DNS. RFC 2136 Dynamic Updates in the Domain Name System (DNS UPDATE)
OPS535 Lab 5 Dynamic DNS Overview In this lab, you add a forward lookup zone and a reverse lookup zone to your primary DNS server and configure both zones to support dynamic updates. Dynamic DNS zone accepts
20411D D Enayat Meer
Lab A Module 8: Implementing Direct Access by Using the Getting Started Wizard Scenario: Recommended lab time is 240 Minutes {a complete class session is dedicated for this lab} Many users at A. Datum
Internet Engineering. DNS Message Format. Contents. Robert Elz.
Internet Engineering 241-461 Robert Elz kre@munnari.oz.au kre@coe.psu.ac.th http://fivedots.coe.psu.ac.th/~kre Contents The Domain Name System The DNS Database DNS Protocols DNS Message Formats ueries
Cisco VVB Installation
System Requirements, on page 1 Create VM for Cisco VVB, on page 2 Create a Virtual Machine from the OVA, on page 2 Configure DNS Server, on page 3 Mount ISO Files, on page 3 Install Cisco VVB, on page
VMware Identity Manager Cloud Deployment. Modified on 01 OCT 2017 VMware Identity Manager
VMware Identity Manager Cloud Deployment Modified on 01 OCT 2017 VMware Identity Manager You can find the most up-to-date technical documentation on the VMware Web site at: https://docs.vmware.com/ The
VMware Identity Manager Cloud Deployment. DEC 2017 VMware AirWatch 9.2 VMware Identity Manager
VMware Identity Manager Cloud Deployment DEC 2017 VMware AirWatch 9.2 VMware Identity Manager You can find the most up-to-date technical documentation on the VMware website at: https://docs.vmware.com/
FortiNAC Motorola Wireless Controllers Integration
FortiNAC Motorola Wireless Controllers Integration Version: 8.x Date: 8/29/2018 Rev: B FORTINET DOCUMENT LIBRARY http://docs.fortinet.com FORTINET VIDEO GUIDE http://video.fortinet.com FORTINET KNOWLEDGE
ForeScout CounterACT. Plugin. Configuration Guide. Version 1.2
ForeScout CounterACT Core Extensions Module: DNS Query Extension Plugin Version 1.2 Table of Contents About the DNS Query Extension... 3 Configure the Extension... 3 Verify That the Plugin Is Running...
Presto 2.5. Administrator Guide
Presto 2.5 Administrator Guide 1 Table of Contents Overview 3 Installation 4 Presto Server 5 How It All Works 7 DNS Configuration 9 Configuration 15 Rules 16 Rule Configuration 18 Rule Conditions 21 Services
Course Organization. The Internet as a Blackbox: Applications. Opening the Blackbox: The IP Protocol Stack
Course Organization The Internet as a Blackbox: Applications Basic terminology & concepts (protocols, API ) Dive into DNS, Email, HTTP, SNMP & their interface to the blackbox Opening the Blackbox: The
Lab 6 Implementing DNSSEC
Lab 6 Implementing DNSSEC Objective: Deploy DNSSEC-signed zones. Background DNSSEC (or DNS Security Extensions) provide security to the zone files. Note: In the steps below, we are using myzone.net - our
Last updated: January 19, Webtop Setup User Guide
Last updated: January 19, 2017 Webtop Setup User Guide Table of Contents ServicePRO Webtop Setup User Guide... 2 1. ServicePRO Portal Setup Information to Note... 2 2. Setting up ServicePRO Webtop in Client
Grandstream Networks, Inc. DNS SRV Guide
Grandstream Networks, Inc. Table of Contents SUPPORTED DEVICES... 4 INTRODUCTION... 5 DNS-SRV... 6 DNS-SRV Format... 6 Configuring DNS-SRV On Grandstream Devices... 6 DNS-SRV Lookup... 8 Registration Process...
Managing Resource Records
CHAPTER 16 This chapter explains how to configure some of the more advanced DNS zone and server parameters by using the Cisco Prime Network Registrar web UI and CLI. Before you proceed with the concepts
Configuring DNS. Finding Feature Information. Prerequisites for Configuring DNS
The Domain Name System (DNS) is a distributed database in which you can map host names to IP addresses through the DNS protocol from a DNS server. Each unique IP address can have an associated host name.
Configuring DNS for Mobile Access Service Discovery
Configuring Discovery The Nasuni Mobile application needs the following information to access your Nasuni Filers: host address, port number, and user credentials. The administrator has several options
Migrating from Citrix XenApp (IMA / FMA) to Parallels Remote Application Server
Parallels Remote Application Server Migrating from Citrix XenApp (IMA / FMA) to Parallels Remote Application Server Contents 1. Introduction a. Why Should You Migrate from Citrix to Parallels RAS b. Overview