How configure secondary forward lookup zone for 2 domain

P

Pupo

Hi
i have 2 domain in separate forest, are both DC, DNS server ADintegrated,
charly IP: 10.12.1.1 sub 254.0.0.0 and linus IP:10.10.1.1 sub 255.0.0.0 i
can't ping FQDN.
I read that i need to create secondary forward lookup zone for both domain i
try to do this with no success, can help me to do? I belive to mistake any
step.
Help me please.
Tia Danilo
 
D

Doug Sherman [MVP]

You will have to use the IP addresses of the servers instead of FQDN to
configure zone transfers. Can each machine ping the other's IP? You have
chosen very odd subnet masks if you want to route between these networks.

Doug Sherman
MCSE, MCSA, MCP+I, MVP
 
K

Kevin D. Goodknecht Sr. [MVP]

Pupo said:
Hi
i have 2 domain in separate forest, are both DC, DNS server
ADintegrated, charly IP: 10.12.1.1 sub 254.0.0.0 and linus
IP:10.10.1.1 sub 255.0.0.0 i can't ping FQDN.
I read that i need to create secondary forward lookup zone for both
domain i try to do this with no success, can help me to do? I belive

You are going to have routing issues between the servers, if they are on the
same network they can't communicate because the mask has them on a different
subnet.
If they are on two different networks they can't communicate because they
are overlapping subnets.

CIDR range 10.10.1.1/8
Netmask 255.0.0.0
Wildcard Bits 0.255.255.255
First IP in range 10.0.0.0 (network address)
Last IP in range 10.255.255.255 (broadcast address)
First useable IP in range 10.0.0.1
Last useable IP in range 10.255.255.254
Number of useable IPs in range 16777214


CIDR range 10.12.1.1/7
Netmask 254.0.0.0
Wildcard Bits 1.255.255.255
First IP in range 10.0.0.0 (network address)
Last IP in range 11.255.255.255 (broadcast address)
First useable IP in range 10.0.0.1
Last useable IP in range 11.255.255.254
Number of useable IPs in range 33554430


Do you really need subnets with this many available IP addresses?
 
K

Kurt

254.0.0.0 is not a normal mask. It's basically 2 supernetted Class A
networks (As if 16 million IP addresses weren't enough for a single flat
network). It includes all of the addresses between 10.0.0.1 and
11.255.255.254. There is just no need for this and, as other posters have
noted, you can't route between addresses on the 10.12.0.0 and one on the
10.10.0.0 because either the 255.0.0.0 or 254.0.0.0 puts them both on the
same network (routing is between networks). If you want to be able to browse
both address ranges as a flat network, they'll have to have the same subnet
mask (because the subnet determines the broadcast address for the network
and the browser is broadcast based). Don't confuse DNS domains with subnets.
You can have 2 domains on the same subnet or a single domain can span
multiple subnets. If your zones are working for the local domains but you
can't resolve names between the two, you can either set each as a forwarder
to the other, or create secondaries for each in the other. If you create
secondaries you'll need to enable zone transfers, and either allow zone
transfers to any server or specifically designate the servers you allow
transfers to. You'll need to specify the servers by IP address (since they
can't look each other up by name).

....kurt
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top