You are on page 1of 43

LAB No.

13
ADVANCED MCSA 2003 LAB
Ti liu chuyn su dnh cho ngi chuyn nghip

Mastering DNS Server

TRAINING AND EDUCATION CENTER

Lu hnh ni b 02Bis inh Thin Hong, phng Dakao, qun 1, Tp.HCM Phone 848 8244041 Fax (848) 8244041 Email: training@athenavn.com Web: www.athenavn.com

Training & Education Network 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCMC Tel: (848) 824 4041 Fax: (848) 824 4041 E-mail: training@athenavn.com website: www.athena.com.vn

Ci t DNS Server Cu hnh to Zone cho DNS Server Tm hiu cc lai Record A, CNAME, MX, NS Th nghim thy c chc nng ca NS Record To nhiu Zone, tch hp Zone vo AD Zone Replications DNS Forwarder v RootHints

LAB Pro 13.1:


DNS SOA Record, Name Server list v DNS Replication

LAB Pro 13.2:


Dynamic Updates v DHCP Server

LAB Pro 13.3:


Transfer v tm Record trong DNS bng NSLOOKUP

LAB Pro 13.4:


DNS Zone Transfer (Standard v AD Integrated), s dng Network Monitor thy s khc bit.

Y O ULL

L O V E

T H E

W A Y

W E

M I N D

Y O U R

K N O W L E D G E

57

Training & Education Network 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCMC Tel: (848) 824 4041 Fax: (848) 824 4041 E-mail: training@athenavn.com website: www.athena.com.vn

Y O ULL

L O V E

T H E

W A Y

W E

M I N D

Y O U R

K N O W L E D G E

58

Training & Education Network 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCMC Tel: (848) 824 4041 Fax: (848) 824 4041 E-mail: training@athenavn.com website: www.athena.com.vn

DNS Server
DNS Name khng phn gii sang IP bng cch BroadCast m buc phi s dng DNS Server lm nhim v phn gii tn DNS sang IP v ngc li t IP sang DNS Name. DNS Name c s dng trn ton Internet. Microsoft a DNS Name vo s dng cho h thng Domain 2000 tr v sau ny..

etBIOS Name s dng c ch BroadCast phn gii tn sang IP v ngc li. BroadCast b hn ch s lng my trong mng phi nh, nu h thng ln s dng NetBIOS khng hiu qu v tnh Performance v Security.

DNS Name c cu trc (Hierrachical Name) v khng s dng c ch BroadCast, m dng UniCast phn gii tn DNS Name (Domain Name tn min). DNS Server gi DataBase ton h thng v chu trch nhim cp nht khi c s thay i v tn my v s IP ca cc Host trong mng. DNS Client thc hin Querry vo DNS Server khi c nhu cu phn gii tn dng DNS Name. DNS Client mun s dng DNS Server phi cu hnh IP ch nh v IP ca DNS Server

Y O ULL

L O V E

T H E

W A Y

W E

M I N D

Y O U R

K N O W L E D G E

59

Training & Education Network 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCMC Tel: (848) 824 4041 Fax: (848) 824 4041 E-mail: training@athenavn.com website: www.athena.com.vn

Trc khi cu hnh DNS Server, Admin phi i DNS Suffix cho DNS Server. Trc khi i, xc nh tn Domain s chn l g, ta chn Athenavn.com Vo System Properties

Chn CHANGE Click tip MORE

Y O ULL

L O V E

T H E

W A Y

W E

M I N D

Y O U R

K N O W L E D G E

60

Training & Education Network 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCMC Tel: (848) 824 4041 Fax: (848) 824 4041 E-mail: training@athenavn.com website: www.athena.com.vn

v in DNS Suffix cho DNS Server

Click OK, OK tip tc ng System Properties li. Qua trnh ny buc phi khi ng li Server trc khi ci t v cu hnh DNS Server

Y O ULL

L O V E

T H E

W A Y

W E

M I N D

Y O U R

K N O W L E D G E

61

Training & Education Network 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCMC Tel: (848) 824 4041 Fax: (848) 824 4041 E-mail: training@athenavn.com website: www.athena.com.vn

Admin buc phi Click YES

TIPS DNS Server cng phi cu hnh DNS Preferred v chnh my ca mnh c th s dng c DNS Zone.

CI t DNS Server

to Zone
DataBase ca DNS Server c hin th di dng Zone. Zone Name chnh l Domain Name m DNS Server qun l. V d athenavn.com l mt Zone Name. DNS Server c th phn gii c tn dng athenavn.com, Admin cn to mt Zone mi tn Athenavn.com. Vo DNS Server

Y O ULL

L O V E

T H E

W A Y

W E

M I N D

Y O U R

K N O W L E D G E

62

Training & Education Network 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCMC Tel: (848) 824 4041 Fax: (848) 824 4041 E-mail: training@athenavn.com website: www.athena.com.vn

Hoc Admin c th s dng phm tt vo RUN v g DNSMGMT.MSC

Vo DNS Server Console, nu DNS Server yu cu kt ni vo my no Admin c th chn The following Computer v in a ch IP. Trong bi LAB ny ta cu hnh my 192.168.1.5 l my ang ngi cu hnh, chn This Computer

Y O ULL

L O V E

T H E

W A Y

W E

M I N D

Y O U R

K N O W L E D G E

63

Training & Education Network 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCMC Tel: (848) 824 4041 Fax: (848) 824 4041 E-mail: training@athenavn.com website: www.athena.com.vn

DNS Server mc nh gm 2 phn Forward Lookup Zone v Reverse Lookup Zone. Forward Lookup Zone phn gii tn DNS Name sang IP, Reverse ngc li phn gii IP sang Name. C 2 Zone ny u cn phi c cu hnh. To Forward Lookup Zone. Click phi chut vo Forward Lookup Zone, chn New Zone

Click Next v chn Primary Zone v Admin ang cu hnh DNS Server u tin cho h thng. Vi Primary Zone, Admin c th qun l trc tip t DNS Server 192.168.1.5

Y O ULL

L O V E

T H E

W A Y

W E

M I N D

Y O U R

K N O W L E D G E

64

Training & Education Network 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCMC Tel: (848) 824 4041 Fax: (848) 824 4041 E-mail: training@athenavn.com website: www.athena.com.vn

Tip n Admin g Zone Name athenavn.com

Y O ULL

L O V E

T H E

W A Y

W E

M I N D

Y O U R

K N O W L E D G E

65

Training & Education Network 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCMC Tel: (848) 824 4041 Fax: (848) 824 4041 E-mail: training@athenavn.com website: www.athena.com.vn

DNS Server yu cu chn DataBase Path file cho Zone va to, Admin nn mc nh.

Y O ULL

L O V E

T H E

W A Y

W E

M I N D

Y O U R

K N O W L E D G E

66

Training & Education Network 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCMC Tel: (848) 824 4041 Fax: (848) 824 4041 E-mail: training@athenavn.com website: www.athena.com.vn

ng dn cho tp tin ny nm trong th mc %systemroot%\system32\dns Tip theo cp nht ng (Dynamic Update) cho DNS Server.

Y O ULL

L O V E

T H E

W A Y

W E

M I N D

Y O U R

K N O W L E D G E

67

Training & Education Network 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCMC Tel: (848) 824 4041 Fax: (848) 824 4041 E-mail: training@athenavn.com website: www.athena.com.vn

Dynamic Update cho php Client t ng cp nht Host name v IP Address vo DNS Server. Trong qu trnh ln Domain, DNS Zone cng phi c cp nht SRV Record cha thng tin v Active Directory nn chc nng Dynamic Update phi c bt. Nhng i khi y cng l mt tnh nng Non-Secure nu Admin cu hnh khng k. Click OK v kt thc phn to Forward Zone. Tip theo, to Reverse Zone vi tn Zone l 192.168.1 (NetID ca h thng). Click phi chut vo Reverse Lookup Zone chn New Zone Vn l Primary Zone. Trong bi Lab cu hnh Multimaster Admin mi cn s dng n Secondary Zone.

Y O ULL

L O V E

T H E

W A Y

W E

M I N D

Y O U R

K N O W L E D G E

68

Training & Education Network 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCMC Tel: (848) 824 4041 Fax: (848) 824 4041 E-mail: training@athenavn.com website: www.athena.com.vn

Tip theo g tn Zone, Reverse Zone Name c dng NetID ca h thng. Mng chng ta ang s dng l 192.168.1.0 nn NetID l 192.168.1 l tn Zone Name.

Bc tip theo xc nh tn Zone c cha u, v tn l g

Y O ULL

L O V E

T H E

W A Y

W E

M I N D

Y O U R

K N O W L E D G E

69

Training & Education Network 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCMC Tel: (848) 824 4041 Fax: (848) 824 4041 E-mail: training@athenavn.com website: www.athena.com.vn

Dynamic Update cng phi c bt ln cho Reverse Lookup Zone

Y O ULL

L O V E

T H E

W A Y

W E

M I N D

Y O U R

K N O W L E D G E

70

Training & Education Network 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCMC Tel: (848) 824 4041 Fax: (848) 824 4041 E-mail: training@athenavn.com website: www.athena.com.vn

OK, kt thc qu trnh to Zone, n bc kim tra xem DNS Server chy c hay cha. Mun kim tra, trc ht xem th Name Server trong 2 Zone va to ra ng hay cha, s dng command NSLOOKUP km tra

Default Server: UnKnown DNS Server cu hnh cha ng. kim tra cu hnh ng hay cha, tip tc xem trn Forward Lookup Zone c HOST Record ca my tnh lm Name Server hay cha

Y O ULL

L O V E

T H E

W A Y

W E

M I N D

Y O U R

K N O W L E D G E

71

Training & Education Network 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCMC Tel: (848) 824 4041 Fax: (848) 824 4041 E-mail: training@athenavn.com website: www.athena.com.vn

OK, Name Server l my DC2.athenavn.com, vy Forward Lookup Zone c Host DC2 ch v IP 192.168.1.5, vy Forward Lookup Zone c cu hnh ng. Kim tra tip Reverse Lookup Zone xem POINTER RECORD cho DC2 c to hay cha.

Name Server l Dc2.athenavn.com nhng cn thiu POINTER ch nh v DC2.athenavn.com cho Host DC2. Admin phi to thm POINTER cho DC2. Click phi chut vo 192.168.1.x Subnet Zone, chn New Pointer (PTR)

in a ch IP ca DC2 v Click Browse tm DC2.athenavn.com, hoc Admin c th g bng tay

Y O ULL

L O V E

T H E

W A Y

W E

M I N D

Y O U R

K N O W L E D G E

72

Training & Education Network 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCMC Tel: (848) 824 4041 Fax: (848) 824 4041 E-mail: training@athenavn.com website: www.athena.com.vn

Click OK, kim tra xem POINTER c to hay cha

Kim tra ln na bng lnh NSLOOKUP

Y O ULL

L O V E

T H E

W A Y

W E

M I N D

Y O U R

K N O W L E D G E

73

Training & Education Network 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCMC Tel: (848) 824 4041 Fax: (848) 824 4041 E-mail: training@athenavn.com website: www.athena.com.vn

TIPS trnh Name Server b li khi ci, Admin phi Rename Computer Name v Add thm DNS Suffix cho DNS Server trc khi cu hnh Zone mi.

Cc loi Record A, CNAME, MX, NS


Record (khng nht thit phi dch l bn ghi) nh cc kiu gi tr ca DNS Zone. Khng cn hiu qu phc tp, n gin ta ch cn nm c chc nng ca cc Record ny l OK. A host Record - thng l tn my v kt qu ch nh v IP thc ca my. Minh ha to A Host Record cho DNS Zone CNAME Allias tn gi - ch nh v A Host. Allias thng c s dng lm nhiu tn cho cng 1 my Server. Minh ha to Allias cho Server trong DNS Zone MX Mail Exchanger Record ch nh v Mail Server ca Domain. Domain athenavn.com mun nhn mail buc phi cu hnh MX Record. Hnh minh ha cu hnh MX Record cho Domain Athenavn.com

Y O ULL

L O V E

T H E

W A Y

W E

M I N D

Y O U R

K N O W L E D G E

74

Training & Education Network 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCMC Tel: (848) 824 4041 Fax: (848) 824 4041 E-mail: training@athenavn.com website: www.athena.com.vn

Tm tt cc kiu Record DNS Server

Th nghim thy c chc nng ca NS Record Kim tra NS Record bng cu lnh NSLOOKUP

NS Server ch c lit k nu c trong Danh sch ca Zone. Trng hp khng c trong danh sch NS List, Server ch c gi l Non-authoritative Server khng c kh nng cp nht thng tin vo Zone.

To nhiu Zone, tch hp Zone vo Active Directory


Trn DNS Server, ta c th to nhiu Zone. To Zone ch phn gii tn DNS sang IP v ngc li, khng nht thit c DNS Server l phi c Domain (Active Directory), nhng c Active Directory l phi c DNS Server, v Active Directory s dng tn dng DNS Name. Ta s to 2 Zone mi cho DNS Server athenabh.com v athenahcm.com to tn min cho trang web trong Local. Qu trnh to Zone mi ging 100% nh to Zone athenavn.com, Admin cng vui lng kim tra li HOST RECORD v POINTER Record trong Forward Lookup Zone v Reverse Lookup Zone.

Y O ULL

L O V E

T H E

W A Y

W E

M I N D

Y O U R

K N O W L E D G E

75

Training & Education Network 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCMC Tel: (848) 824 4041 Fax: (848) 824 4041 E-mail: training@athenavn.com website: www.athena.com.vn

Tch hp DNS Zone vo Active Directory c li hn so vi trng thi Standard Bo mt hn nh tha k vic m ha ca Active Directory Vic transfer gia cc Zone nhanh v hiu qu hn nh tnh Incremential Update ca Active Directory ch cp nht nhng g mi. Mun Tch hp Zone vo Active Directory Admin Properties Zone, trong TAB General chn Change

Chn tch hp vo Active Directory

Tip tc Admin chn YES

Y O ULL

L O V E

T H E

W A Y

W E

M I N D

Y O U R

K N O W L E D G E

76

Training & Education Network 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCMC Tel: (848) 824 4041 Fax: (848) 824 4041 E-mail: training@athenavn.com website: www.athena.com.vn

v sau OK kt thc phn cu hnh tch hp Zone vo Active Directory. TIPS i khi Admin khng thy dng Store the zone in Active Directory sng ln do Zone ang nm trn DNS Server khng c cha Active Directory tc khng phi my Domain Controller

Zone Replications
DNS Server phn gii tn dng tp trung, mi thao tc Querries u c gi t Client n DNS Server. Nu DNS Server gp s c th ton b h thng khng th truy cp thng tin Domain c. Gii php s dng l to DNS Server th 2, cha cng 1 Zone vi DNS Server 1. DNS Server ny s dng Secondary Zone, ch ly DataBase t DNS Server 1, khng c kh nng cp nht Records. i vi DNS Server 2, th DNS Server l Master Server. Vo DNS Server th 2, ci t DNS v cu hnh Secondary Zone. Admin cng vn chn New Zone

Nhng tip tc li chn Secondary Zone

Y O ULL

L O V E

T H E

W A Y

W E

M I N D

Y O U R

K N O W L E D G E

77

Training & Education Network 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCMC Tel: (848) 824 4041 Fax: (848) 824 4041 E-mail: training@athenavn.com website: www.athena.com.vn

G tn Zone cn to, vn chn l Athenavn.com cng tn Zone vi Primary Zone. DNS Server th 2 vn c s dng phn gii tn min, nhng khng dng qun l HOST v POINTER.

Secondary khng t to mt DataBase mi m s dng DataBase sn c bn Primary Zone Server. Mun Secondary Server nhn thy c Primary, Admin phi khao bo a ch IP ca Primary Server

Y O ULL

L O V E

T H E

W A Y

W E

M I N D

Y O U R

K N O W L E D G E

78

Training & Education Network 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCMC Tel: (848) 824 4041 Fax: (848) 824 4041 E-mail: training@athenavn.com website: www.athena.com.vn

Zone File c ly t DNS Server u tin mang IP 192.168.1.5 Click FINISH v xc kim tra li Zone va toOppss! Failed.

Kim tra xem ti sao Failed? Secondary Zone ly Zone File t DNS Server cha Primary Zone, vy kim tra xem ng truyn t DNS Server 2 n DNS Server 1 c tt hay cha, s dung lnh PING

OK, Reply from 192.168.1.5 tt ht 4 gi tin gi i. ng truyn c xc nh l OK, k n Admin ngh xem chuyn g xy ra? Nn c li bng FAILED trn DNS Server Console ca Server 2.

Y O ULL

L O V E

T H E

W A Y

W E

M I N D

Y O U R

K N O W L E D G E

79

Training & Education Network 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCMC Tel: (848) 824 4041 Fax: (848) 824 4041 E-mail: training@athenavn.com website: www.athena.com.vn

K tip ta nn ngh n vn Quyn, liu Server th 2 ny c c quyn ly Zone File hay khng? OK, vy l phi kim tra Quyn ly Zone File trn DNS Server u tin Qua DNS Server 1, Properties Zone File Athenavn.com, chn tab Zone Transfer

Chn Tab Zone Transfer, cu hnh in a ch IP ca Server 2, cho php Server 2 c php Transfer Zone File.

Y O ULL

L O V E

T H E

W A Y

W E

M I N D

Y O U R

K N O W L E D G E

80

Training & Education Network 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCMC Tel: (848) 824 4041 Fax: (848) 824 4041 E-mail: training@athenavn.com website: www.athena.com.vn

Quay li DNS Server 2, chn Transfer From Master ly Zone File ln 2

Cui cng kim tra li Zone xem c ly c ni dung hay cha.


81

Y O ULL

L O V E

T H E

W A Y

W E

M I N D

Y O U R

K N O W L E D G E

Training & Education Network 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCMC Tel: (848) 824 4041 Fax: (848) 824 4041 E-mail: training@athenavn.com website: www.athena.com.vn

Kt thc qu trnh to Non-authoritative DNS Server. DNS Serve Secondary to ra theo cch ny ch c th s dng querry Record, khng c kh nng cp nht Record t DNS Server ny. DNS Server 2 vi Secondary Zone nu mun s dng lm DNS Server cho mt Domain th phi c cu hnh thnh mt Authoritatve DNS Server. Mun cu hnh DNS Server thnh Authoritative Server th Server phi nm trong danh sch Name Server ca Zone. Kim tra xem Name Server List ca Zone athenavn.com gm bao nhiu Name Server

Name Server hin ti ch c mt DC2.athenavn.com, Admin mun s dng DC1 lm DNS Server cho Domain Controller th 2, buc phi cu hnh Name Server trn Zone athenavn.com Add thm Name Server cho DC1.athenavn.com, mang IP 192.168.1.2 QUESTION Cu hnh Name Server cho Zone Athenavn.com phi lm DNS Server no? Server Primary hay Secondary? V sao?

Cu hnh Name Server List

Y O ULL

L O V E

T H E

W A Y

W E

M I N D

Y O U R

K N O W L E D G E

82

Training & Education Network 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCMC Tel: (848) 824 4041 Fax: (848) 824 4041 E-mail: training@athenavn.com website: www.athena.com.vn

TIPS Standard Primary Zone v Secondary Zone c DataBase nm dng PlainText trong th mc %systemroot%\system32\DNS. Replication gia cc DNS Server Standard c dng AXFR Replicate ton b DataBase di dng Plaintext trn ng truyn.

Rt hn ch nu ta s dng Standard Zone, v trong Standard, ch c 1 Server duy nht c quyn gi Primary Zone. Cc Server cn li phi dng Secondary - ch transfer t Master (Primary Server). Mi thao tc cp nht Zone u phi thc hin Primary. Gim tnh Performance trong h thng v Replicate nguyn DataBase v Non-Secure v transfer Zone di dng Plaintext. Zone ca DNS Server c th c cha trong Active Directory, vi iu kin trn my DNS Server phi c Active Directory (trn Domain Controllers). Zone tch hp trong Active Directory gi l Active Directory Integrated Zone v c Replicate theo Active Directory v dng IXFR (Incremential) ch Replicate nhng Records no mi thay i. IXFR lm tng tnh Performance v Secure v c transfer di dng Encrypted (m ha). Mun tch hp Zone vo Active Directory ta ch cn thc hn tch hp - Integrate TIPS Khi tch hp, DNS Zone s c Replicate ti tt c cc my Domain Controllers c cha cng Active Directory (MultiMaster). Active Directory Integrated Zone th DNS Server c th cp nht bt k DNS Server no, mi DNS Server trong Domain lc ny u l Primary Zone.

DNS Forwarder v RootHints


DNS Forwarder l thao tc Query gia cc DNS Servers. DNS Prefferred l gia Client v DNS Server.

Thi gian Replicate ca cc DNS Server mc nh l 15 pht, trong 15 pht nu c s thay i cha kp Replicate th sao? DNS Forwarder s gii quyt chuyn ny. Nu DNS Server 1 khng gii quyt c Record no , hoc khng gii quyt c Zone no DNS Server 1 s Query sang hi DNS Server 2, hoc DNS Server no m Admin Forwarder n.

Y O ULL

L O V E

T H E

W A Y

W E

M I N D

Y O U R

K N O W L E D G E

83

Training & Education Network 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCMC Tel: (848) 824 4041 Fax: (848) 824 4041 E-mail: training@athenavn.com website: www.athena.com.vn

Thng thng trong h thng mang nhiu DNS Server, Admin nn cu hnh Forwarder ln nhau gia cc DNS Server ny. Properties DNS Server, chn tab Forwarder

in IP Address ca cc DNS Server khc trong h thng vo Tab Forwarder. Nu DNS Server Local khng c kh nng phn gii tn s t ng Forward n Server 192.168.1.10. TIPS thng thng, Admin cu hnh FORWARDER gia DNS Server cha Secondary sang DNS Server cha Primary Zone. Nhng cng c trng hp khi cc Zone u cha trong Active Directory (AD Integrated Zone) th cn cu hnh FORWARDER gia cc DNS Server vi nhau, v lc ny tt c cc Zone u trng thi Primary

Y O ULL

L O V E

T H E

W A Y

W E

M I N D

Y O U R

K N O W L E D G E

84

Training & Education Network 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCMC Tel: (848) 824 4041 Fax: (848) 824 4041 E-mail: training@athenavn.com website: www.athena.com.vn

TIPS Ton h thng s dng Domain, cc my Clients phi Preffered v nhng DNS Server ca Local. Clients c nhu cu ra mng Internet buc phi phn gii tn DNS Internet sang IP (cc trang web c dng DNS Name) nhng DNS Servers ca Local khng th phn gii c cc tn ny. Gii php l Forwarder sang nhng DNS Server ca cc ISP gn nht nh phn gii dm Internet Name. Thao tc thc hin t DNS Server Local ra DNS Server ca ISP.

Y O ULL

L O V E

T H E

W A Y

W E

M I N D

Y O U R

K N O W L E D G E

85

Training & Education Network 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCMC Tel: (848) 824 4041 Fax: (848) 824 4041 E-mail: training@athenavn.com website: www.athena.com.vn

Trong trng hp khng Forwarder nhng DNS Server Local vn phn gii c Internet Name? Trong DNS Server c 1 danh sch cc Server Root trn internet gi l Root Hints List, nm trong tp tin CACHE.DNS trong th mc %systemroot%\system32\DNS. Root Hints thc ra cng l dng Forwarder nhng l mc nh ca DNS Server. Ni thm v Root Hints 13 a ch IP nhng gm nhiu h thng My tnh chy cc h iu hnh khc nhau. Nhiu my tnh cng chy 1 IP gi l Cluster hoc Network Load Balancing. Mc ch tng cng tnh chu li (Fault Tolerance) ca h thng. Cc DNS Server Root c phn b 5 a im chnh trn ton th gii, v c bo mt bng h thng qun s.

DNS SOA Record, Name Server list v DNS Replication


SOA Record qun l thi gian cp nht v Replicate cho DNS Zone. SOA s dng s Serial phn bit thay i mi xy ra trong Zone. Kim tra SOA Record bng cch Properties Zone

Y O ULL

L O V E

T H E

W A Y

W E

M I N D

Y O U R

K N O W L E D G E

86

Training & Education Network 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCMC Tel: (848) 824 4041 Fax: (848) 824 4041 E-mail: training@athenavn.com website: www.athena.com.vn

Chn Tab Start of Authority (SOA)

Y O ULL

L O V E

T H E

W A Y

W E

M I N D

Y O U R

K N O W L E D G E

87

Training & Education Network 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCMC Tel: (848) 824 4041 Fax: (848) 824 4041 E-mail: training@athenavn.com website: www.athena.com.vn

Cc tham s trong SOA Zone Refresh Interval - thi gian Replicate bao nhiu lu Retry Interval - thi gian th Replicate ln 2 nu ln 1 khng thnh cng Expired After - nu DNS Server Primary gp s c trong thi gian 1 ngy, Secondary t ng v hiu ha Zone ca mnh, khng gii quyt tn DNS cho Client nu sau 1 ngy. TTL Cache trong b nh nhng g Forwarder c t cc DNS Server khc. LAB Pro 17.2:

Dynamic Updates v DHCP Server


Dynamic Update cho php Client v Services c th t ng cp nht Record cho Zone. Nu chc nng Dynamic Update ny tt, Admin phi thc hin vic to Record bng tay (Manual).

Y O ULL

L O V E

T H E

W A Y

W E

M I N D

Y O U R

K N O W L E D G E

88

Training & Education Network 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCMC Tel: (848) 824 4041 Fax: (848) 824 4041 E-mail: training@athenavn.com website: www.athena.com.vn

Trong qu trnh DCPROMO ln Domain v khi ng Domain Controllers, Service NET LOGON ng k SRV Record cha thng tin v Active Directory vo DNS Zone, nn Dynamic Update phi c bt ln. Khi Join Domain, Client t to cho mnh 1 Record trong Zone (vi Windows 2000 tr ln) khng cn Admin phi tham gia, nn Dynamic Update phi c bt. DHCP Server c chc nng cp a ch IP, ng thi cp nht PTR Record cho Host c cp IP vo DNS Server. Mun DHCP cp nht PTR, Reverse Zone phi c bt Dynamic Update. Cp nht Dynamic Update vo Properties Zone cn cp nht

None - tt chc nng Dynamic Update Non Secure and Secure - bt, cp nht tt c cc Client Secure only - ch cp nht cc my tnh nm trong Active Directory, tham gia Domain.

Y O ULL

L O V E

T H E

W A Y

W E

M I N D

Y O U R

K N O W L E D G E

89

Training & Education Network 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCMC Tel: (848) 824 4041 Fax: (848) 824 4041 E-mail: training@athenavn.com website: www.athena.com.vn

Trn Client, mun cp nht Host vo DNS Zone, ta s dng Command IPCONFIG/REGISTERDNS. Client phi chn DNS Suffix ph hp, cng tn vi Zone trn DNS Server (chn ng Zone cn cp nht) S dng command IPCONFIG/REGISTERDNS ng k Host vo Zone.

Ngoi ra cn mt trng hp na cng s dng Dynamic Update l khi DHCP Server cp IP cho Client s t ng cp nht HOST v POINTER cho Client . Mc nh DHCP Server ch cp nht POINTER, nu mun DHCP Server cp nht lun phn HOST (cho nhng Client khng h tr t ng cp nht nh WIN 9X) Admin phi cu hnh DHCP Server Cu hnh DHCP Server t ng cp nht HOST v POINTER cho Clients. Properties DHCP Server

Chn TAB DNS

Y O ULL

L O V E

T H E

W A Y

W E

M I N D

Y O U R

K N O W L E D G E

90

Training & Education Network 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCMC Tel: (848) 824 4041 Fax: (848) 824 4041 E-mail: training@athenavn.com website: www.athena.com.vn

LAB Pro 17.3:

Transfer v tm Record trong DNS bng NSLOOKUP


NSLOOKUP Command c th thc hin thao tc Transfer Zone v kim tra Record trong DNS Server. NSLOOKUP mun lit k c danh sch A host, SOA, SRV th phi nm trong danh sch Name Server List hoc c ch nh nm trong danh sch IP Server c quyn Replicate

Kim tra Zone Transfer Tab xem Server no c quyn Replicate DNS Zone

Y O ULL

L O V E

T H E

W A Y

W E

M I N D

Y O U R

K N O W L E D G E

91

Training & Education Network 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCMC Tel: (848) 824 4041 Fax: (848) 824 4041 E-mail: training@athenavn.com website: www.athena.com.vn

V kim tra danh sch Name Server bng cch chuyn qua Tab Name Server

Y O ULL

L O V E

T H E

W A Y

W E

M I N D

Y O U R

K N O W L E D G E

92

Training & Education Network 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCMC Tel: (848) 824 4041 Fax: (848) 824 4041 E-mail: training@athenavn.com website: www.athena.com.vn

Hin ti ch c DC2.athenavn.com vi IP 192.1681.10 l c quyn gi v cp nht Zone athenavn.com. Admin mun s dng Dc1.athenavn.com lm Name Server th phi Add thm DC1.athenavn.com vo danh sch Name Server. Cng vic cp nht Name Server List by gi ch c th thc hin c trn Primary Zone DNS Server (tc DC2) Vo Tab Name Server, click Add

Y O ULL

L O V E

T H E

W A Y

W E

M I N D

Y O U R

K N O W L E D G E

93

Training & Education Network 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCMC Tel: (848) 824 4041 Fax: (848) 824 4041 E-mail: training@athenavn.com website: www.athena.com.vn

Click OK, tr li vi Name Server, bn s thy mt Name Server mi

Ra ngoI Zone kim tra li, thy Name Server xut hin thm DC1.athenavn.com. Tng t nh vy, Admin cu hnh to thm Name Server Dc1.athenavn.com cho Reverse Lookup Zone 192.168.1.x Subnet

Y O ULL

L O V E

T H E

W A Y

W E

M I N D

Y O U R

K N O W L E D G E

94

Training & Education Network 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCMC Tel: (848) 824 4041 Fax: (848) 824 4041 E-mail: training@athenavn.com website: www.athena.com.vn

Allow Zone Transfer cho php Transfer Zone hay khng To Any Servers - bt c Server no cng c th Transfer Zone Windows 2000 mc nh non-secure To Server in the Name Server List - ch nhng DNS Server no nm trong danh snh Name Server (NS list) mi c th transfer Zone To the specified Server listed below xc nh bng a ch IP nhng DNS Server no c quyn Transfer Zone.

S dng Command NSLOOKUP xem DNS Zone


Xem NS Record xc nh xem Zone c bao nhiu DNS Server

Xem A host Records xem h thng c bao nhiu my tnh tt c, Server tn g

Y O ULL

L O V E

T H E

W A Y

W E

M I N D

Y O U R

K N O W L E D G E

95

Training & Education Network 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCMC Tel: (848) 824 4041 Fax: (848) 824 4041 E-mail: training@athenavn.com website: www.athena.com.vn

Xem SRV record - kim tra h thng c Domain hay khng, Domain Controllers l nhng msy no

Xem ton b danh sch Record trong Zone transfer ton b ni dung Zone v NSLOOKUp

Y O ULL

L O V E

T H E

W A Y

W E

M I N D

Y O U R

K N O W L E D G E

96

Training & Education Network 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCMC Tel: (848) 824 4041 Fax: (848) 824 4041 E-mail: training@athenavn.com website: www.athena.com.vn

LAB Pro 17.4:

DNS Zone Transfer (Standard v AD Integrated), s dng Network Monitor thy s khc bit
S dng Network Monitor thy s khc bit trong vic Replicate gia AXFR (Standard Zone) v IXFR (Integrated Zone) Monitor gia DNS1 v DNS2 bng Standard Primary Zone v Secondary Zone, ta s thy dng PlainText trong cu trc gi tin. Vi IXFR mi chuyn s khc, Data c m ha trong khi Replicate.

Y O ULL

L O V E

T H E

W A Y

W E

M I N D

Y O U R

K N O W L E D G E

97

You might also like