Ask a consultant blog
Spit Horizon DNS setup
Ideally you want your users to be able to connect always to the myserver.mycompany.com, independent if they are at the office or anywhere else in the world. This is fairly simple with the DNS split horizon setting. The split horizon trick is to run a local DNS server behind the companies fire wall. This DNS server LAN local ip address of the server to local LAN machines. (For instance 192.168.1.200 for any machine on the 192.168.1.x subnet) Machine on the internet get your public ip address when they try to connect to the server (For instance 74.125.224.16) You will need to switch the the advanced GUI of server admin. Int he DNS settings define your primary zone. myserver.mycompany.com That record is probably already there, courtesy of Apple. You may want to add an A record for the www.mycompany.com ip address and an A record for mail.mycompany.com, pointing to the public IP address. If you have network printers, you would want to add a record like myprinter.mycompany.com pointing to the network printer. start the DNS server and test to see if you get the correct answers form your DNS server using the 'host' command. The next step is that the DHCP server you use will only list the private DNS server. Also check if your server uses itself for DNS queries. Once y the local clients renew their IP lease they should be able to resolve myserver.mycompany.com An added advantage is that 1) If your ISP DNS server is overtasked, your users might see also a browsing speed performance increase. 2) An attacher form the outside would not see IP address form internal resources. |
|
|
Ask Mac Consultant


