Networks

Ask something
Discussion Locked

DNS/IIS Server Addressing with NAT

0 helpful
2 replies

by chris 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I am running, but not sure if i am doing things as they should be done. I have a cisco router with 5 usable static ip's mapped to various machines using nat to the 192.168.x.x space. At present my two dns servers and all IIS, FTP, and Mail servers are configured on the internal ip's. Is this correct or should the dns servers be configured with the public ip's. I've been trying to put in Active Directory and keep running into problems where the SRV records are not being created correctly (dynamic updates are enabled). If running DNS on the public ip's, then could I set up a bridge connection to allow access to those machines from the 192.168 internal network?

2 replies

by cg it

not quite sure of the "what" the problem is. You mention that you are using 2 DNS servers. I assume that one is public for FQDN to IP addressing and one for LAN workstations. Which server is having AD DNS records creation problems? also if you have 2 DNS's are they trying to replicate with each other and are they any relication problems shown in the Event Viewer? Might be one DNS has one set of records different than the other and they then try to replicate with each other.

by curlergirl

What DNS records are not being created properly - I assume this is happening when you try to install AD? What error message are you getting? This might help determine what the problem is - but it does not have anything to do with public v. private IP addresses. If your own internal DNS server(s) are authoritative for your public domain name, then they have to be published on the Internet, and therefore they have to have public IP addresses. If your public domain DNS hosting is done by your ISP, then your internal DNS servers do not have to have any public IP addresses. They should, however, be set up to use your ISP's DNS server(s) as forwarders.

Hope this helps!

This discussion is closed to new replies.