Windows Forum

Ask something
Discussion Locked

DNS & ACTIVE DIRECTORY

0 helpful
5 replies

by clouis2000

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hi,

I have just installed a windows 2000 with Active directory and setup DNS on the server & the IP address is say 172.16.8.1. I have also installed DHCP,WINS on this server.

I have a leased line to the internet. My ISP have given me 2 DNS numbers for the internet access which i added in the TCP/IP settings.

The problem is this.

I cannot browse the internet and internal network at the same time.If i set the external DNS info as the preferred DNS,then i can connect
to the internet- no lan browsing.
If i change the DNS to local DNS then i can't connect to the internet.

How can i resolve this ?

Thanks.

Charles.

Clouis2000@yahoo.com

5 replies

by emorse

What I recommend is that you get a device that does NAT (network address translation: i.e. Linksys box @CompUSA for about $100) This device will have your ISP provided IP address of 172.x.x.x. Assign all machines internally on you LAN an non-routable ip address (i.e. 192.168.x.x) Use WINS for internal name resolution, and put the ISP provided DNS addresses in your first and secondary entries on your workstations/servers.

- Eli

by typamfiloff

Set all your dns tcp/ip settings to the IP address of your internal(active directory) DNS server(this includes all the workstations/servers in the domain)in your networks setting. Then have your DNS server forward your Isp's ip adresses.

To do this. Delete the "." domain in the forward lookup zone under DNS (in Administrative tools. Not your xdomain.com or xdomain.local domain. Next right click your Dns servers icon and go to properties. In the "forwarders" tab input your ISP's IP's. This should allow your computers to browse the lan via AD and forward internet DNS requests from your local DNS server. You may have to stop and start dns services or close and reopen the mmc console after you make changes!!!!!

Also, Inputing your isp's ip addresses in the forwarders tab may be redundant. After you delete the "." domain the "root hints" tab, next to the "forwarders" tab, gets enabled. DNS is supposed to automatically look for these root domain servers.....but I haven't looked into this yet. Good luck!!

This discussion is closed to new replies.