IP (not zone) delegation

Dean Carrera Dean.Carrera at intcx.com
Wed Sep 18 13:53:57 UTC 2002


If you want to do this. It can be done in the windows GUI of windows =
DNS. For instance...if the domain is test.net and your created a forward =
delegation of ms.test.net (say the IP address range falls in =
10.100.15.X) In order to have a reverse delegation you would configure =
this in the following manner... create a reverse domain addressed as =
100.10.in-addr.arpa  Then following this you would right click on the =
reverse domain and select delegation... when asked for the domain name =
you would then enter 15 so the domain at this point would read =
15.100.10.in-addr.arpa, following this you select next and enter the =
name of the domain server.  Click finish and this will create the =
reverse delegation domain. =20

-----Original Message-----
From: Barry Finkel [mailto:b19141 at achilles.ctd.anl.gov]
Sent: Wednesday, September 18, 2002 9:45 AM
To: bind-users at isc.org
Cc: john.smith at minolta-qms.com
Subject: Re: IP (not zone) delegation


"Smith, John" <john.smith at minolta-qms.com> wrote:

>	Background: We are in the process of installing DNS internally.
>Based on a consultant's design suggestions we are configuring the zones =
as
>follows (I will use test.net as the *example* zone):
>
>	------------
>	| test.net | (All non-Windows boxes are in this zone.  This will be a =
Bind server.)
>	------------
>	      |
>	      | delegation
>	      |
>	---------------
>	| ms.test.net | (All Windows boxes are in this subzone.  This will be =
a Windows 2000 DNS server.)
>	---------------
>
>	The question I have is how to handle in-addr.arpa delegations.  One
>side of our router has 172.16.111.0/24 addresses that contain a mixture =
of
>Windows and non-Windows systems.  The other side of our router has
>172.16.112.0/24 addresses that are primarily Windows boxes but have a =
small
>percentage of 'others'.
>
>	Given this set up how should or can we handle in-addr.arpa
>delegations, or is another design 'better' and why?

What is the purpose of segregating the Windows and non-Windows
computers into separate zones?  The answer to this question will
determine the best solution.  If you are plannning on having the Windows
boxes do self-registration or DHCP dynamic registration, then I have
to agree with the others who have replied - there is no clean solution.
If you are planning on static DNS registrations or DHCP registrations
with long term leases (i.e., no dynamic DNS), then I would use the
MS W2k DNS Server only for the four "_" zones.  On my W2k DNS Server
I have 15 sets of "_" zones.  I also have one forward zone and its
five reverse zones.  I can do this because each of the reverse zones
(/24) is assigned to the forward zone, and everything in these zones
are dynamic, controlled by DHCP.  I have a handful of static nodes
for our Library group in that subnet, because there is a branch library
in that building.  But I handle these five nodes in the reverse zone
by entering them manually in the W2k DNS Server via the GUI; the
forward entries are in my BIND server, along with all of the other
library entries.
----------------------------------------------------------------------
Barry S. Finkel
Electronics and Computing Technologies Division
Argonne National Laboratory          Phone:    +1 (630) 252-7277
9700 South Cass Avenue               Facsimile:+1 (630) 252-4601
Building 222, Room D209              Internet: BSFinkel at anl.gov
Argonne, IL   60439-4828             IBMMAIL:  I1004994




More information about the bind-users mailing list