DNS Configuration
DNS Servers
Section titled “DNS Servers”| Server | IP | Role |
|---|---|---|
| srv-dc-zrh-01 | 10.30.30.10 | Primary (Forest Root) |
| srv-dcc-zrh-01 | 10.30.30.15 | Primary (Child Domain) |
Forward Lookup Zones
Section titled “Forward Lookup Zones”| Zone | Replication | Primary Server |
|---|---|---|
| microsoftlab.ch | Forest | srv-dc-zrh-01 |
| corp.microsoftlab.ch | Forest | srv-dcc-zrh-01 |
Reverse Lookup Zones
Section titled “Reverse Lookup Zones”# On srv-dc-zrh-01 (replicates to all DCs)
# VLAN 10 - MGMTAdd-DnsServerPrimaryZone -NetworkID "10.10.10.0/24" -ReplicationScope "Forest"
# VLAN 30 - ServersAdd-DnsServerPrimaryZone -NetworkID "10.30.30.0/24" -ReplicationScope "Forest"
# VLAN 40 - Clients (/22)Add-DnsServerPrimaryZone -NetworkID "10.40.40.0/22" -ReplicationScope "Forest"
# VLAN 50 - DMZAdd-DnsServerPrimaryZone -NetworkID "10.50.50.0/28" -ReplicationScope "Forest"
# VLAN 60 - VPNAdd-DnsServerPrimaryZone -NetworkID "10.60.60.0/24" -ReplicationScope "Forest"DNS Records
Section titled “DNS Records”Infrastructure Records (corp.microsoftlab.ch)
Section titled “Infrastructure Records (corp.microsoftlab.ch)”# SwitchesAdd-DnsServerResourceRecordA -ZoneName "corp.microsoftlab.ch" -Name "sw-core-zrh-01" -IPv4Address "10.10.10.2"Add-DnsServerResourceRecordA -ZoneName "corp.microsoftlab.ch" -Name "sw-dist-zrh-01" -IPv4Address "10.10.10.3"
# Proxmox HostsAdd-DnsServerResourceRecordA -ZoneName "corp.microsoftlab.ch" -Name "srv-pve-zrh-01" -IPv4Address "10.10.10.11"Add-DnsServerResourceRecordA -ZoneName "corp.microsoftlab.ch" -Name "srv-pve-zrh-02" -IPv4Address "10.10.10.12"
# Raspberry PiAdd-DnsServerResourceRecordA -ZoneName "corp.microsoftlab.ch" -Name "srv-rpi-zrh-01" -IPv4Address "10.10.10.20"PKI Round Robin (microsoftlab.ch)
Section titled “PKI Round Robin (microsoftlab.ch)”# On Forest Root DCAdd-DnsServerResourceRecordA -ZoneName "microsoftlab.ch" -Name "pki" -IPv4Address "10.30.30.22"Add-DnsServerResourceRecordA -ZoneName "microsoftlab.ch" -Name "pki" -IPv4Address "10.30.30.23"PTR Records
Section titled “PTR Records”# VLAN 10Add-DnsServerResourceRecordPtr -ZoneName "10.10.10.in-addr.arpa" -Name "11" -PtrDomainName "srv-pve-zrh-01.corp.microsoftlab.ch"Add-DnsServerResourceRecordPtr -ZoneName "10.10.10.in-addr.arpa" -Name "12" -PtrDomainName "srv-pve-zrh-02.corp.microsoftlab.ch"DNS Best Practices Applied
Section titled “DNS Best Practices Applied”DC DNS Settings
Section titled “DC DNS Settings”| DC | NIC DNS | Why |
|---|---|---|
| srv-dc-zrh-01 | 127.0.0.1 | Query self first |
| srv-dcc-zrh-01 | 127.0.0.1 | Query self first |
Forwarders (Forest Root only)
Section titled “Forwarders (Forest Root only)”# On srv-dc-zrh-01 onlyAdd-DnsServerForwarder -IPAddress 1.1.1.1Add-DnsServerForwarder -IPAddress 8.8.8.8Set-DnsServerForwarder -UseRootHint $falseChild domain DC does NOT have external forwarders - it forwards to parent domain.