We have a windows 2012 domain with 2 different sites connected via vpn.
Site 1 has a dc with dns, Site 2 has two dc with dns
Most dns zones are integrated into AD, so a change is reflected on all 3 dns.
Site 1 and Site 2 have both more subnets (please consider a lan and dmz) while the vpn links only lan to lan. In both dmz there are servers which are accessible from internet so there is no need to add other vpn for every combination of subnets between the sites.
What I would like to achieve is to access a dmz server through its private address if I'm in the same site, through the associated public ip if it is in the other site.
So name resolution should be different based on the site where the client is. May be I can create zones not integrated in AD, so they can be different on each dns.
I assume clients on site1 will ask dns on site1 first, otherwise this configuration will not work.
Site 2 has two dns: do I have to manually align them for non AD integrated zones ? Can I do something magic with primary/secondary/stub zones ?
I assume clients on site1 will ask dns on site1 first
- Yes, if you configure the clients that way.Site 2 has two dns: do I have to manually align them for non AD integrated zones ?
- Yes.Can I do something magic with primary/secondary/stub zones ?
- It's not magic. You just need to set up a Primary and Secondary copy of the zone. – joeqwerty Sep 19 '18 at 12:09