Dns Prob

J

JMS

Hello everyone

My scenario is the following
two different trees

First Site has 2 IpSubnets One Domain controller in each subnet, the DNS is
AD Integrated and replicates two all Dns Servers in the same domain, both
Domain controllers are GCs. This Site have a Tree Root Domain.

Second Site has 1 Ip subnet, 1 Domain Controller is also a GC, the DNS is AD
Integrated and replicates two all Dns Servers in the same domain, This site
has a Second different Tree root domain.

The problem:
On 2nd Site I have condicional forwarding to domain01 (Site1), and i have
especified the ip addresses of the two domain controllers in each ipsubnet.
When one domain controller goes down, if I try to ping the domain01, it
takes some time until it figure out that the domain controller is down and i
get time out error, it takes some time until it start to ping the second
domain that is available.

Is this the normal behavior?

Thks-Regards.
 
H

Herb Martin

[phone number on web site]

JMS said:
Hello everyone

My scenario is the following
two different trees

First Site has 2 IpSubnets One Domain controller in each subnet, the DNS
is AD Integrated and replicates two all Dns Servers in the same domain,
both Domain controllers are GCs. This Site have a Tree Root Domain.

Second Site has 1 Ip subnet, 1 Domain Controller is also a GC, the DNS is
AD Integrated and replicates two all Dns Servers in the same domain, This
site has a Second different Tree root domain.

The problem:
On 2nd Site I have condicional forwarding to domain01 (Site1), and i have
especified the ip addresses of the two domain controllers in each
ipsubnet.

So presumably you are running Win2003 (not Win2000) since
it is the first to support Conditional Forwarding.
When one domain controller goes down, if I try to ping the domain01, it
takes some time until it figure out that the domain controller is down and
i get time out error, it takes some time until it start to ping the second
domain that is available.

Is this the normal behavior?

Not really but if these are small domain/zones you might be better
off with replication across the entire forest (all Forest DNS-DCs).

Then every DC would just hold all of the info and Conditional
Forwarding would not be an issue.
 
J

JMS

Not really, in fact the DNS zones have many Information, so Contional
Forwarding would be faster.

--
Systems Administrator
MCSA + Exchange
Herb Martin said:
[phone number on web site]

JMS said:
Hello everyone

My scenario is the following
two different trees

First Site has 2 IpSubnets One Domain controller in each subnet, the DNS
is AD Integrated and replicates two all Dns Servers in the same domain,
both Domain controllers are GCs. This Site have a Tree Root Domain.

Second Site has 1 Ip subnet, 1 Domain Controller is also a GC, the DNS is
AD Integrated and replicates two all Dns Servers in the same domain, This
site has a Second different Tree root domain.

The problem:
On 2nd Site I have condicional forwarding to domain01 (Site1), and i have
especified the ip addresses of the two domain controllers in each
ipsubnet.

So presumably you are running Win2003 (not Win2000) since
it is the first to support Conditional Forwarding.
When one domain controller goes down, if I try to ping the domain01, it
takes some time until it figure out that the domain controller is down
and i get time out error, it takes some time until it start to ping the
second domain that is available.

Is this the normal behavior?

Not really but if these are small domain/zones you might be better
off with replication across the entire forest (all Forest DNS-DCs).

Then every DC would just hold all of the info and Conditional
Forwarding would not be an issue.
 
H

Herb Martin

JMS said:
Not really, in fact the DNS zones have many Information, so Contional
Forwarding would be faster.

It's unlikely (almost impossible actually) that Conditional Forwarding
would EVER be faster than just HOLDING a COPY of the zone.

Now, Conditional Forwarding might conceivably be better for
your network since it might reduce the number of records transferred.

Even then this would need to be a large zone, and likely a few
thousand records does NOT count as large in most real world
situations.

Remember that even a large zone is seldom going to change
MOST records unless it is all laptops with DHCP assigned
addresses, and even then how much data is really in an update
done through incremental, compressed AD replication?

--
Herb Martin, MCSE, MVP
Accelerated MCSE
http://www.LearnQuick.Com
[phone number on web site]
--
Systems Administrator
MCSA + Exchange
Herb Martin said:
[phone number on web site]

JMS said:
Hello everyone

My scenario is the following
two different trees

First Site has 2 IpSubnets One Domain controller in each subnet, the DNS
is AD Integrated and replicates two all Dns Servers in the same domain,
both Domain controllers are GCs. This Site have a Tree Root Domain.

Second Site has 1 Ip subnet, 1 Domain Controller is also a GC, the DNS
is AD Integrated and replicates two all Dns Servers in the same domain,
This site has a Second different Tree root domain.

The problem:
On 2nd Site I have condicional forwarding to domain01 (Site1), and i
have especified the ip addresses of the two domain controllers in each
ipsubnet.

So presumably you are running Win2003 (not Win2000) since
it is the first to support Conditional Forwarding.
When one domain controller goes down, if I try to ping the domain01, it
takes some time until it figure out that the domain controller is down
and i get time out error, it takes some time until it start to ping the
second domain that is available.

Is this the normal behavior?

Not really but if these are small domain/zones you might be better
off with replication across the entire forest (all Forest DNS-DCs).

Then every DC would just hold all of the info and Conditional
Forwarding would not be an issue.



--
Herb Martin, MCSE, MVP
Accelerated MCSE
http://www.LearnQuick.Com
Thks-Regards.
 
J

JMS

I am not it try to subjugate your knowledge, but I have 700 dhcp users per
site that uses a 128kbps Wan Link, and they still use some apps over the
link, and they keep coming and going everytime, so my DHCP Lease has a very
short period time duration because i have a limited number of IPs to Attrib,
the users for dns purposes only use local domains, rarely they need to use
remote dns, and I have a Gc per Site, so Bandwith is very important.


--
Systems Administrator
MCSA + Exchange
Herb Martin said:
JMS said:
Not really, in fact the DNS zones have many Information, so Contional
Forwarding would be faster.

It's unlikely (almost impossible actually) that Conditional Forwarding
would EVER be faster than just HOLDING a COPY of the zone.

Now, Conditional Forwarding might conceivably be better for
your network since it might reduce the number of records transferred.

Even then this would need to be a large zone, and likely a few
thousand records does NOT count as large in most real world
situations.

Remember that even a large zone is seldom going to change
MOST records unless it is all laptops with DHCP assigned
addresses, and even then how much data is really in an update
done through incremental, compressed AD replication?

--
Herb Martin, MCSE, MVP
Accelerated MCSE
http://www.LearnQuick.Com
[phone number on web site]
--
Systems Administrator
MCSA + Exchange
Herb Martin said:
[phone number on web site]

Hello everyone

My scenario is the following
two different trees

First Site has 2 IpSubnets One Domain controller in each subnet, the
DNS is AD Integrated and replicates two all Dns Servers in the same
domain, both Domain controllers are GCs. This Site have a Tree Root
Domain.

Second Site has 1 Ip subnet, 1 Domain Controller is also a GC, the DNS
is AD Integrated and replicates two all Dns Servers in the same domain,
This site has a Second different Tree root domain.

The problem:
On 2nd Site I have condicional forwarding to domain01 (Site1), and i
have especified the ip addresses of the two domain controllers in each
ipsubnet.

So presumably you are running Win2003 (not Win2000) since
it is the first to support Conditional Forwarding.

When one domain controller goes down, if I try to ping the domain01, it
takes some time until it figure out that the domain controller is down
and i get time out error, it takes some time until it start to ping the
second domain that is available.

Is this the normal behavior?

Not really but if these are small domain/zones you might be better
off with replication across the entire forest (all Forest DNS-DCs).

Then every DC would just hold all of the info and Conditional
Forwarding would not be an issue.



--
Herb Martin, MCSE, MVP
Accelerated MCSE
http://www.LearnQuick.Com
Thks-Regards.
 
H

Herb Martin

JMS said:
I am not it try to subjugate your knowledge, but I have 700 dhcp users per
site that uses a 128kbps Wan Link, and they still use some apps over the
link, and they keep coming and going everytime, so my DHCP Lease has a very
short period time duration because i have a limited number of IPs to
Attrib, the users for dns purposes only use local domains, rarely they need
to use remote dns, and I have a Gc per Site, so Bandwith is very important.

Bandwidth (which I mentioned might be an issue) is different
from speed (which you said in the earlier message.) We
actually agree now.

If you are using private addressing there is likely little reason
for short lease periods however. (You aren't using class-C
size subnets for 750 possible clients just because you think this
is required, are you? Just make a bigger block of addresses,
e.g., 1000+.)

There is nothing wrong with Conditional Forwarding (but it
isn't 'faster' than holding the zone.)

--
Herb Martin, MCSE, MVP
Accelerated MCSE
http://www.LearnQuick.Com
[phone number on web site]
--
Systems Administrator
MCSA + Exchange
Herb Martin said:
JMS said:
Not really, in fact the DNS zones have many Information, so Contional
Forwarding would be faster.

It's unlikely (almost impossible actually) that Conditional Forwarding
would EVER be faster than just HOLDING a COPY of the zone.

Now, Conditional Forwarding might conceivably be better for
your network since it might reduce the number of records transferred.

Even then this would need to be a large zone, and likely a few
thousand records does NOT count as large in most real world
situations.

Remember that even a large zone is seldom going to change
MOST records unless it is all laptops with DHCP assigned
addresses, and even then how much data is really in an update
done through incremental, compressed AD replication?

--
Herb Martin, MCSE, MVP
Accelerated MCSE
http://www.LearnQuick.Com
[phone number on web site]
--
Systems Administrator
MCSA + Exchange
[phone number on web site]

Hello everyone

My scenario is the following
two different trees

First Site has 2 IpSubnets One Domain controller in each subnet, the
DNS is AD Integrated and replicates two all Dns Servers in the same
domain, both Domain controllers are GCs. This Site have a Tree Root
Domain.

Second Site has 1 Ip subnet, 1 Domain Controller is also a GC, the DNS
is AD Integrated and replicates two all Dns Servers in the same
domain, This site has a Second different Tree root domain.

The problem:
On 2nd Site I have condicional forwarding to domain01 (Site1), and i
have especified the ip addresses of the two domain controllers in each
ipsubnet.

So presumably you are running Win2003 (not Win2000) since
it is the first to support Conditional Forwarding.

When one domain controller goes down, if I try to ping the domain01,
it takes some time until it figure out that the domain controller is
down and i get time out error, it takes some time until it start to
ping the second domain that is available.

Is this the normal behavior?

Not really but if these are small domain/zones you might be better
off with replication across the entire forest (all Forest DNS-DCs).

Then every DC would just hold all of the info and Conditional
Forwarding would not be an issue.



--
Herb Martin, MCSE, MVP
Accelerated MCSE
http://www.LearnQuick.Com
Thks-Regards.
 
A

Ace Fekay [MVP]

In
JMS said:
Hello everyone

My scenario is the following
two different trees

First Site has 2 IpSubnets One Domain controller in each subnet, the
DNS is AD Integrated and replicates two all Dns Servers in the same
domain, both Domain controllers are GCs. This Site have a Tree Root
Domain.
Second Site has 1 Ip subnet, 1 Domain Controller is also a GC, the
DNS is AD Integrated and replicates two all Dns Servers in the same
domain, This site has a Second different Tree root domain.

The problem:
On 2nd Site I have condicional forwarding to domain01 (Site1), and i
have especified the ip addresses of the two domain controllers in
each ipsubnet. When one domain controller goes down, if I try to ping
the domain01, it takes some time until it figure out that the domain
controller is down and i get time out error, it takes some time until
it start to ping the second domain that is available.

Is this the normal behavior?

Thks-Regards.

I would just setup each tree's zone as AD Integrated Forest Wide so the zone
will be available on EVERY DC in any domain or tree in the forest. Just set
it and you will see the zone eventually appear by itself on the other DCs
(no need to create it on the other DCs, it will appear automatically).

And no, conditional forwarding, as Herb mentioned, is NOT faster than
hosting the zone locally, matter of fact during issues such as what you've
experienced, which can be attributed to the fact the bandwidth is so slow,
it may cause time-out issues.

Curious, are there any errors in the event viewer concerning AD replication
traffic?

--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Having difficulty reading or finding responses to your post?
Instead of the website you're using, I suggest to use OEx (Outlook Express
or any other newsreader), and configure a news account, pointing to
news.microsoft.com. This is a direct link to the Microsoft Public
Newsgroups. It is FREE and requires NO ISP's Usenet account. OEx allows you
to easily find, track threads, cross-post, sort by date, poster's name,
watched threads or subject.

It's easy:
How to Configure OEx for Internet News
http://support.microsoft.com/?id=171164

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
Microsoft MVP - Directory Services
Microsoft Certified Trainer

Infinite Diversities in Infinite Combinations
Assimilation Imminent. Resistance is Futile
"Very funny Scotty. Now, beam down my clothes."

The only thing in life is change. Anything more is a blackhole consuming
unnecessary energy. - [Me]
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

Please Help - Dns Issue 2
Secondary DNS 4
dns on multiple domains 7
New DNS server 4
DNS replication on 2 domain on 2 forests 23
Replication/DNS question 4
New AD DNS Configuration Question 12
Event ID: 3000 9

Top