Quantcast
Channel: Network Infrastructure Servers forum
Viewing all articles
Browse latest Browse all 5877

DNS issue : DHCP relay + VLANs + multiple AD Sites

$
0
0

Hi,

We're having an issue with our primary DNS Server... Let me explain the Network.

We have 6 VLANs :
VLAN clients : 192.168.0.0/24
VLAN ToIP : 192.168.2.0/25
VLAN AD (with DHCP relay on routers for VLAN Clients and ToIP) : 192.168.16.0/24
VLAN Admin : 192.168.19.0/25
VLAN Europe 1 : 192.168.73.0/25
VLAN EUrope 2 : 192.168.104.0/25

We have 3 AD Sites :
Site Paris : VLANs clients, ToIP, AD, Admin
Site Europe 1 : VLAN Europe 1
Site Europe 2 VLAN Europe 2

Each site has its own domain controller with AD/DNS/DHCP...
IPs are :
Paris : 192.168.16.1
Europe 1 : 192.168.73.1
Europe 2 : 192.168.104.1

For all clients in site Paris (VLANs clients, ToIP, Admin), the address of the DNS server is set by DHCP to point to 192.168.16.1, which is correctly authoritative for these VLANs.

 

The problem we are experiencing is that all clients from Paris sites (VLANs clients, ToIP, Admin) are resolving the AD domain MYDOMAIN.LOCAL as 192.168.73.1 (Europe 1) instead of 192.168.16.1 (Paris).
Round robin is disabled on all DNS Servers and netmask ordering is enabled.

I know that a DNS server returns the closest result for a DNS query, and that's why clients in Europe 1 resolve MYDOMAIN.LOCAL as 192.168.73.1, clients in Europe 2 resolve MYDOMAIN.LOCAL as 192.168.104.1, and others servers in the VLAN AD resolve MYDOMAIN.LOCAL as 192.168.16.1.
But the problem is that all clients from VLANs "clients", "ToIP", or "Admin" resolve MYDOMAIN.LOCAL as 192.168.73.1... I know they're not on the VLAN 192.168.16.0 but it's the closest subnet...

A NSLOOKUP for the local domain with a computer in 192.168.0.0/24 gives :
Server : paris.mydomain.local
Address : 192.168.16.1

Name : mydomain.local
Addresses : 192.168.73.1
                  192.168.104.1
                  192.168.16.1

Has anyone already seen this ? Do you have any idea ?

Thanks a lot!

Thibaut


Viewing all articles
Browse latest Browse all 5877


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>