LAB 8 CONFIGURING DNS ZONES

Transcription

1 LAB 8 CONFIGURING DNS ZONES THIS LAB CONTAINS THE FOLLOWING EXERCISES AND ACTIVITIES: Exercise 8.1 Exercise 8.2 Exercise 8.3 Exercise 8.4 Exercise 8.5 Exercise 8.6 Exercise 8.7 Lab Challenge Installing DNS Creating Primary and Secondary Zones Creating an Active Directory Integrated Zone Configuring Zone Delegation Configuring a Stub Zone Configuring Forwarding and Conditional Forwarding Zones Configuring Zone Transfers Using the DNSCMD Command To Manage Zones Exercise 8.1 Installing DNS Domain Name System (DNS) is already installed on RWDC01. However, we need a second DNS server for future exercises. Therefore, during this exercise, you install a second DNS server on Server01. DNS is a naming service that is used by TCP/IP network and is an essential service used by the Internet. For years, Windows servers have included the DNS role.

2 11. When the installation is done, take a screen shot of the Add Roles and Features Wizard by pressing Alt+Prt Scr and then paste it into your Lab08_worksheet file in the page provided by pressing Ctrl+V. 1 For a typically large organization, how many DNS servers should you install? For me personally I would install a minum of two. If one dns server goes down you don have active directory, meaning your network is down. If you have more than one server the other will just pickup the load. Exercise 8.2 Creating Primary and Secondary Zones During this exercise, you create primary and secondary zones on RWDC01 and Server01. For the Contoso Corporation, you are building a new network. Therefore, you need to install DNS to support your network. You have three primary sites. When you use primary and secondary zones, you can have only one primary zone. The other sites have to be secondary zones. Therefore, you will have one primary zone and two secondary zones. 15 minutes Creating a Standard Forward Lookup Primary Zone 2 What is the primary tool to manage DNS in Windows? The primary tool is dns manager.

3 10. When the Completing the New Zone Wizard page displays, take a screen shot of the New Zone wizard by pressing Alt+Prt Scr and then paste it into your Lab08_worksheet file in the page provided by pressing Ctrl+V. Creating a Standard Reverse Lookup Primary Zone 8. When the Completing the New Zone Wizard page opens, take a screen shot of the New Zone Wizard by pressing Alt+Prt Scr and then paste it into your Lab08_worksheet file in the page provided by pressing Ctrl+V.

4 Exercise 8.3 Creating an Active Directory Integrated Zone During this exercise, you create an Active Directory Integrated zone. You decide that you want to improve the DNS system for your company and you are thinking of switching to Active Directory-Integrated zones. Active Directory-Integrated zones are fault tolerant, they offer better security, and they have more efficient replication. With these features, you don t have to worry about primary and secondary zones because each DNS server acts as a master. 5 minutes 3 What is needed to perform secure dynamic updates? It creates an acl. 8. Take a screen shot of the New Zone Wizard by pressing Alt+Prt+Scr and then paste it into your Lab08_worksheet file in the page provided by pressing Ctrl+V.

5 Exercise 8.4 Configuring Zone Delegation In this exercise, you delegate a subdomain called support under fabrikam.com on a different DNS server. Subdomains allow you to break up larger domains into smaller, more manageable domains. Then by using delegation, you place the subdomain on another DNS server. 5 minutes 4 You discovered that one server is heavily utilized by many request from the support domain. What can you do to break up the workload of the server? 12. When the wizard is complete, take a screen shot of the New Zone Wizard by pressing Alt+Prt Scr and then paste it into your Lab08_worksheet file in the page provided by pressing Ctrl+V.

6 Exercise 8.5 Creating a Stub Zone In this exercise, you create a stub zone that points directly to another DNS server. A stub zone is a copy of a zone that contains only necessary resource records Start of Authority (SOA), Name Server (NS), and Address/Host (A) record in the master zone and acts as a pointer to the authoritative name server. 5 Which featuredoes Stub Zones bring to DNS: better performance, redundancy, or both? 16. On RWD01, take a screen shot of the DNS Manager window (with the litware.com node selected) by pressing Alt+Prt Scr and then paste it into your Lab08_worksheet file in the page provided by pressing Ctrl+V.

7 Exercise 8.6 Configuring Forwarding and Conditional Forwarding Zones To improve performance, you can control which DNS servers requests are forwarded to when performing naming resolution by configuring forwarding and creating conditional forwarding zones. In this exercise, you configure forwarding and create a conditional forwarding zone. By default, when a client contacts a DNS server and the DNS server does not know the answer, it performs an iterative query to find the answer (which means it first contacts the root domain and additional DNS servers until it finds the authoritative DNS server for the zone). However, DNS servers can be configured to be forwarded to another DNS server or a conditional forwarder based on the domain name queried. Configuring Forwarders 6 Your company uses an ISP for Internet connection. How would you relay all DNS request through the ISP DNS servers? You would set the forward from your primary dns server to the isp dns server. 192 Configuring Conditional Forwarders

8 7 How do you forward queries to a specific DNS server for a specified domain? You create conditional forwarders. 6. On RWDC01, with the lucernepublishing.com node selected, take a screen shot of the DNS Manager console by pressing Alt+Prt Scr and then paste it into your Lab08_worksheet file in the page provided by pressing Ctrl+V. Exercise 8.7 Configuring Zone Transfers By configuring zone transfers, you can control to which servers DNS information is copied. You need to configure zone transfers between multiple DNS servers. What are the three types of zone transfer available?

9 8 Which type of transfer copies the entire zone, which is done when a new DNS secondary service for an existing zone is added? Full Transfer. LAB REVIEW QUESTIONS Completion time 1. In Exercise 8.2, what must you create before creating the secondary zone? You must create a primary forward lookup zone. 2. In Exercise 8.3, what is the prerequisite to have Active Directory-Integrated zones? Storing the zone in active directory only if the dns server is a writeable domain controller. 3. In Exercise 8.6, how do you configure all queries that a DNS server cannot directly resolve be forwarded to your ISP s DNS server? Create a forwarder. This forward all dns queries that hit this server to the server on the intetnet or a different lan. 4. In Exercise 8.6, where did you configure forwarding? Server properties under forwarding. 5. In Exercise 8.7, how did you configure zone transfers? Going into the zone properties clicking the zone transfers tab and selecting edit. Lab Challenge Using the DNSCMD Command to Manage Zones To complete this challenge, you must demonstrate how to use the DNSCMD command to manage zones. You need to configure a few scripts that will create DNS zones.

10 You need to configure a few scripts that will create DNS zones. Therefore, what commands would you use to perform the following on RWDC01.contoso.com: 1. Create a primary zone called fabrikam.com. a. dnscmd /zoneadd fabrikam.com /Dsprimary 2. Create a secondary zone called contoso.com. The primary server is located at a. dnscmd /zoneadd contoso.com /secondary Create an Active Directory integrated zone called litware.com. a. dnscmd /zoneadd litware.com /Dsprimary 4. Delete a secondary zone called lucernpublishing.com. a. dnscmd /zonedelete lucernpublushing.com 5. Force a zone replication for the lucernpublishing.com zone. a. dnscmd /zonerefresh lucernpublishing.com End of lab. You can log off or start a different lab. If you want to restart this lab, you ll need to click the End Lab button in order for the lab to be reset.