Contact US

Log In

Come Join Us!

Are you a
Computer / IT professional?
Join Tek-Tips Forums!
  • Talk With Other Members
  • Be Notified Of Responses
    To Your Posts
  • Keyword Search
  • One-Click Access To Your
    Favorite Forums
  • Automated Signatures
    On Your Posts
  • Best Of All, It's Free!

*Tek-Tips's functionality depends on members receiving e-mail. By joining you are opting in to receive e-mail.

Posting Guidelines

Promoting, selling, recruiting, coursework and thesis posting is forbidden.

Students Click Here

DNS best advice over 2 site connected via hardware VPN

DNS best advice over 2 site connected via hardware VPN

DNS best advice over 2 site connected via hardware VPN

Hi am having problems with my current DNS and would like some advice as I have started to doubt my self.
Both sites are connected 24/7 via a hardware VPN (Sonicwall and Juniper)
site 1 on 192.168.1.x network
site 2 on 192.168.3.x network
Site 2 is all servers and in a data center, no clients and no need for DHCP
All servers have a static IP address (some have numerous due to multiple websites)
IP address are binded to particular a website and the juniper firewall is configured to redirect traffic to the specific IP address
AD server and DNS server are in site 1
we host a number of websites (about 12) that are available both internally and externally
The current DNS is AD integrated (server 2008 r2) and replicates between both sites ( I dont know if I need this)
I believe that site 1 should have a manual forwarder entered and pointing to the internal IP in site 2 (rather than go via the internet)
I believe that site 2 should have a manual forwarder entered and pointing to the external IP in site 2 for the websites hosted.
We use certificates (we need to) on the web servers in site 2, hence we need to point to the external ip address so that it connects to a URL needed by the certificate.

Site 2 works, but if I change site 1 to internal ip addresses it fails and clients cant connect.
NSlookup works and I can ping them

any advice is appreciated and I am willing to start again and re think this if you can explain why.


Red Flag This Post

Please let us know here why this post is inappropriate. Reasons such as off-topic, duplicates, flames, illegal, vulgar, or students posting their homework.

Red Flag Submitted

Thank you for helping keep Tek-Tips Forums free from inappropriate posts.
The Tek-Tips staff will check this out and take appropriate action.

Reply To This Thread

Posting in the Tek-Tips forums is a member-only feature.

Click Here to join Tek-Tips and talk with other members! Already a Member? Login

Close Box

Join Tek-Tips® Today!

Join your peers on the Internet's largest technical computer professional community.
It's easy to join and it's free.

Here's Why Members Love Tek-Tips Forums:

Register now while it's still free!

Already a member? Close this window and log in.

Join Us             Close