DNS Server Performance

Hey!
I'm preparing my 70-410 exam
and would like to nkow some troubleshooting tips when it comes to DNS server performing slowly.
Thanks for your help in advance.

If your Mac is getting good speeds, but page loads are still low it certainly could be due to poor DNS performance.
I have been using 4.2.2.1 and 4.2.2.2 as my DNS for a few years and the performance was much better than those supplied by my ISP.
I have also fooled around with OpenDNS on my PC and it works nicely. I am happy with the performance on my Mac, so I have left it alone. You can get all the info you need on OpenDNS on their page found HERE.

Similar Messages

Hello I'm having a no dns server problem on my time capsule

Hello I'm having this same problem:
Sammy Stefanki
Apr 11, 2012 2:20 PM
Hi everyone,
I just bought a new AirPort Express and Comcast is my ISP. I ditched my old Belkin wireless router, connected the Comcast modem directly to my AirPort Express, and it appears to be working great. I can access the internet wirelessly and also play music using AirPlay through my stereo speakers.
However, when I open the AirPort Utility, the utility tells me that I have two problems with my AirPort Express:
Apparently I have no internet connection (the utility tells me that "Your AirPort base station does not have a valid IP address."), even though I can access the internet just fine.
I don't appear to have any DNS server addresses (the utility tells me that "This AirPort base station doesn't have any DNS server addresses and might have trouble connecting to the internet.")
Does anyone know if these are serious problems that I need to address, or can they be ignored? I don't want to start tinkering with the AirPort Express's settings until I am better informed, because right now everything is working as far as my access to the internet is concerned.
and I tried to :
by Tesserax on Apr 11, 2012 2:25 PM
Anytime you change networking hardware, it is always a good idea to perform a complete power recycle of your networking components.
I would recommend that you do the following as a minimum:
Power-down the modem, AirPort base station, and computer(s).
Disconnect the AirPort base station from the Internet broadband modem.
While all of the devices are powered-down, perform a "factory default" reset on the base station. This will get it back to its "out-of-the-box" configuration and make setting it up much easier, especially if you use the "Assist me" process within the AirPort Utility. (ref: Resetting an AirPort Base Station or Time Capsule)
After the base station resets, go ahead and power it back down.
Reconnect the AirPort base station to the Internet broadband modem. For the Extreme and Time Capsule, be sure to connect the cable to the base station's WAN (circle-of-dots) port.
Power-up the modem; wait at least 10-15 minutes to allow it adequate time to initialize.
Power-up the AirPort base station; wait at least 5-10 minutes. Note: The AirPort's status light may continue to flash amber after it has intialized. That is because, there may be some additional configuration items necessary, like setting up wireless security, before the overall setup is completed to get a green status.
Power-up your computer(s).
In this basic configuration, the AirPort base station will broadcast an unsecured wireless network with a Network Name (SSID) of Apple Network NNNNNN. Network clients, connected to the base station either by wire or wireless, should now be able to access the Internet through the ISP's modem. Once Internet connectivity has been verified, you can use the AirPort Utility to configure the base station for wireless security and any other desired options. Please post back your results.
BUT NOTHING IT STILL SHOWS NO INTERNET CONNECTON on my capsule and NO DNS SERVER ...
I have tried to HARD RESET it resets ( with a Network Name (SSID) of Apple Network NNNNNN) and it connects to internet, it also says setuo complete in airport utility but once I go back into Airport utily cause Time capsule is still flashing amber it says NO INTERNET CONNECTION and NO DNS SERVER ...
anyone has any suggestions PLEASE and Thank you

Check the Ethernet connection to the AirPort Express. Make sure that the Ethernet connection from the Comcast modem is connected to the WAN port on the back of the AirPort Express. The WAN port is the one with the circle of dots shown over the port.
It sounds like you are connected to the Ethernet LAN port.

How do I have a cRIO register its IP address with the DNS server, clearing any previous entries?

I've run into a problem when I try to move a cRIO-9073 from one network segment to another (say 10.1.33.x to 10.1.36.x): The old IP address remains registered on our DNS server, so trying to access the cRIO by its DNS name fails as the DNS server tells my PC to look for the old IP address.
When I search the DNS server from my PC using "NSLOOKUP" with the old IP address, it finds the DNS name of the device. If I repeat the search with the new IP address (MAX finds the device with its new address, but I hate to have users use MAX to find it), it again returns the DNS name, so it appears the DNS name is registered under two IP addresses on our DNS server. I've also repeatedly tried to flush my PC's DNS cache using command "IPCONFIG /FLUSHDNS", but it still tries the old IP address. I also see in MAX that the cRIO is using the same DNS server my PC uses.
Our IT people say that I have to tell the device to re-register its DNS name. They told me a command to do it from Windows (command "ipconfig /registerdns"), but obviously this is VxWorks on the cRIO. Is there a command to do this on the cRIO or a setting in the "NI-RT.INI" file I can change? I honestly don't think this is the issue (as it successfully registered the new IP address under its name), but I want to try it if it's possible.
Thanks!
Erik
ps - Our IT dept. won't let me use static IPs unless I get them assigned by both their MAC address AND the network jack they're connected to, so that's out.

Normally this is actually a function of your DNS server. It needs to perform a periodic flush of stale records. You can check the RFC for the DNS protocol and build the necessary packet yourself.
Mark Yedinak
"Does anyone know where the love of God goes when the waves turn the minutes to hours?"
Wreck of the Edmund Fitzgerald - Gordon Lightfoot

Need a suggestion for a DNS server (BIND etc...)

I am a student in college. I got a little job to help improve the internal DNS management in the college.
Right now they use BIND with nothing else. They edit the zone files by hand. Since the network is quite large, it's sometimes hard to maintain these files.
There are three possibilities:
1) use webmin.
2) use DLZ (still BIND, but uses a database backend)
3) use another DNS server software.
I would really appreciate your advice about:
1) lets assume webmin doesn't support a particular record of the DNS, and I update it manually via directly editing the files, will it interfere with webmin?
2) did you try DLZ? I don't know if it worth the work. Does it noticeably change the performance? Is there a decent GUI for editing the records when using a database?
3) I've heard many good things about PowerDNS. Is it really the best DNS server around? What GUI options does it have? Do you want to recommend another solution?
Thank you!

dnsmasq is hands down the easiest DNS (and DHCP!) solution if it works for your network setup. If you let it handle both DHCP and DNS it will dynamically add DHCP client host names to the DNS so you can look up local DHCP clients by DNS.
I am by no means a DNS expert, but dnsmasq just makes it all so easy.

Strange issues with domain controller/DNS server

Our domain controller/DNS server was working fine this morning. Then suddenly we stopped being able to access certain things on it. I could ping it, RDP into it, and access some files on it, but I couldn't run any applications hosted on it, accessing shared
network files was slow, and different people around the office were getting access denied errors to files and folders they had full control of in NTFS (and in shared permissions).
At first I noticed an NTP error so I registered w32tm and started the service and that got rid of the error but didn't fix anything.
Oddly, machines still had internet access.
We tried rebooting everything, restarting services, nothing has helped.
When I accessed the server directly through the console I could access everything, could connect to any machine in the office, nothing seemed to be wrong with it.
Any ideas?

Is there any recent changes in your network or firewall or antivirus? Is there any change/updates performed in the AD side? I would suggest find out changes being done at the AD or Network/FIrewall level. You can run various diagnostic test within your AD
environment to find the overall health of the AD infra.
What does DCDIAG actually… do?
Active Directory Replication Status Tool Released
http://msmvps.com/blogs/ad/archive/2008/06/03/active-directory-health-checks-for-domain-controllers.aspx
Awinish Vishwakarma - MVP
My Blog: awinish.wordpress.com
Disclaimer This posting is provided AS-IS with no warranties/guarantees and confers no rights.

2K8 - Best practice for setting the DNS server list on a DC/DNS server for an interface

We have been referencing the article
"DNS: DNS servers on <adapter name> should include their own IP addresses on their interface lists of DNS servers"
http://technet.microsoft.com/en-us/library/dd378900%28WS.10%29.aspx but there are some parts that are a bit confusing. In particular is this statement
"The inclusion of its own IP address in the list of DNS servers improves performance and increases availability of DNS servers. However, if the DNS server is also a domain
controller and it points only to itself for name resolution, it can become an island and fail to replicate with other domain controllers. For this reason, use caution when configuring the loopback address on an adapter if the server is also a domain controller.
The loopback address should be configured only as a secondary or tertiary DNS server on a domain controller.”
The paragraph switches from using the term "its own IP address" to "loopback" address. This is confusing becasuse technically they are not the same. Loppback addresses are 127.0.0.1 through 127.255.255.255. The resolution section then
goes on and adds the "loopback address" 127.0.0.1 to the list of DNS servers for each interface.
In the past we always setup DCs to use their own IP address as the primary DNS server, not 127.0.0.1. Based on my experience and reading the article I am under the impression we could use the following setup.
Primary DNS: Locally assigned IP of the DC (i.e. 192.168.1.5)
Secondary DNS: The assigned IP of another DC (i.e. 192.168.1.6)
Tertiary DNS: 127.0.0.1
I guess the secondary and tertiary addresses could be swapped based on the article. Is there a document that provides clearer guidance on how to setup the DNS server list properly on Windows 2008 R2 DC/DNS servers? I have seen some other discussions
that talk about the pros and cons of using another DC/DNS as the Primary. MS should have clear guidance on this somewhere.

Actually, my suggestion, which seems to be the mostly agreed method, is:
Primary DNS: Locally assigned IP of the DC (i.e. 192.168.1.5)
Secondary DNS: The assigned IP of another DC (i.e. 192.168.1.6)
Tertiary DNS: empty
The tertiary more than likely won't be hit, (besides it being superfluous and the list will reset back to the first one) due to the client side resolver algorithm time out process, as I mentioned earlier. Here's a full explanation on how
it works and why:
This article discusses:
WINS NetBIOS, Browser Service, Disabling NetBIOS, & Direct Hosted SMB (DirectSMB).
The DNS Client Side Resolver algorithm.
If one DC or DNS goes down, does a client logon to another DC?
DNS Forwarders Algorithm and multiple DNS addresses (if you've configured more than one forwarders)
Client side resolution process chart
http://msmvps.com/blogs/acefekay/archive/2009/11/29/dns-wins-netbios-amp-the-client-side-resolver-browser-service-disabling-netbios-direct-hosted-smb-directsmb-if-one-dc-is-down-does-a-client-
logon-to-another-dc-and-dns-forwarders-algorithm.aspx
DNS
Client side resolver service
http://technet.microsoft.com/en-us/library/cc779517.aspx
The DNS Client Service Does Not Revert to Using the First Server in the List in Windows XP
http://support.microsoft.com/kb/320760
Ace Fekay
MVP, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007 & Exchange 2010, Exchange 2010 Enterprise Administrator, MCSE & MCSA 2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer
Microsoft MVP - Directory Services
Complete List of Technical Blogs: http://www.delawarecountycomputerconsulting.com/technicalblogs.php
This posting is provided AS-IS with no warranties or guarantees and confers no rights.
I agree with this proposed solution as well:
Primary DNS: Locally assigned IP of the DC (i.e. 192.168.1.5)
Secondary DNS: The assigned IP of another DC (i.e. 192.168.1.6)
Tertiary DNS: empty
One thing to note, in this configuration the Best Practice Analyzer will throw the error:
The network adapter Local Area Connection 2 does not list the loopback IP address as a DNS server, or it is configured as the first entry.
Even if you add the loopback address as a Tertiary DNS address the error will still appear. The only way I've seen this error eliminated is to add the loopback address as the second entry in DNS, so:
Primary DNS: The assigned IP of another DC (i.e. 192.168.1.6)
Secondary DNS: 127.0.0.1
Tertiary DNS: empty
I'm not comfortable not having the local DC/DNS address listed so I'm going with the solution Ace offers.
Opinion?

Change of DNS server setting caused Exchange outages!

I am trying to google/bing my way through this, but here are the main points:
All remote Exchange servers had a) static IP addresses and b) were instructed to use DNS servers in Edmonton and Calgary
If WAN links dropped, they lost DNS
SOLUTION! Point remote servers to the domain controller in that location as the primary DNS server. WAN outage means Exchange still resolves names locally.
Well the day came and we add the local DNS server for each remote site as the primary DNS server at the top of "DNS server addresses, in order of use" portion of advanced TCP/IP settings dialogue box.
A reboot is performed
Voila! Exchange shits the bed! Hub transport servers in Edmonton and Calgary cannot resolve remote server names; as in no host(a) record exists for them anymore. And we have a 91 minute outage until the DNS is sorted out (ipconfig /registerdns run on each
server).
Has anyone encountered this or have some deep knowledge of DNS (relative to my own) that could at least throw out a theory as to why this might happen?

Hi, please issue Get-ExchangeServer -Identity "ServerName" -status | fl and check:
CurrentDomainControllers
CurrentGlobalCatalogs
CurrentConfigDomainController
The server must been linked to the wrong server. You can change that in powershell too.
Regards, Philippe
Don't forget to mark as answer or vote as helpful to help identify good information. ( linkedin endorsement never hurt too :o) )
Answer an interesting question ? Create a
wiki article about it!

My airport express can't locate a dns server

I am unable to connect to the Internet, with my Mac,iPad or iPhone, even with the light green. I used my airport utility and it can't find a Dns server.
I called my Internet provider and they said everything looked alright on there end.
Does any body know what it might be?

I would recommend that you do the following as a minimum:
Power-down the modem, AirPort base station, and computer(s).
Power-up the modem; wait at least 10-15 minutes to allow it adequate time to initialize.
Power-up the AirPort base station; wait at least 5-10 minutes. Note: The AirPort's status light may continue to flash amber after it has intialized. That is because, there may be some additional configuration items necessary, like setting up wireless security, before the overall setup is completed to get a green status.
Power-up your computer(s).
If the above steps do not solve the problem, start over with step 1 above, but then perform the next steps between steps 1 & 2. above.
Disconnect the AirPort base station from the Internet broadband modem.
While all of the devices are powered-down, perform a "factory default" reset on the base station. This will get it back to its "out-of-the-box" configuration and make setting it up much easier, especially if you use the "Assist me" process within the AirPort Utility. (ref:Resetting an AirPort Base Station or Time Capsule)
After the base station resets, go ahead and power it back down.
Reconnect the AirPort base station to the Internet broadband modem. For the Extreme and Time Capsule, be sure to connect the cable to the base station's WAN (circle-of-dots) port.
Continue with step 2 in the first set of steps.
In this basic configuration, the AirPort base station will broadcast an unsecured wireless network with a Network Name (SSID) of Apple Network NNNNNN. Network clients, connected to the base station either by wire or wireless, should now be able to access the Internet through the ISP's modem. Once Internet connectivity has been verified, you can use the AirPort Utility to configure the base station for wireless security and any other desired options. Please post back your results.

What is the trick in adding a "secondary zone" to my DNS server

Hello,
I am having a hard time adding a secondary zone to my dns server. I followed the instructions carefully but I still get the "refuse" on my zone transfer. Do I need to go to the "NIC" of my interface card and make the primary DNS
as the server itself and the secondary DNS the IP of the "remote" DNS server?
Also, do I need to start configuring the "reverse Lookup zone" (before even starting to add a "secondary zone" and perform a -ZONE -TRANSFER), and add first the "a" record of the other (remote) DNS server?
Thanks,
Teapaq Long.
Event Type: Error
Event Source: DNS
Event Category: None
Event ID: 6525
Date:  11/10/2014
Time:  2:07:21 PM
User:  N/A
Computer: REM-LAB-2K3.leftremote.com
Description:
A zone transfer request for the secondary zone localright.com was refused by
the master DNS server at 192.168.77.92. Check the zone at the master server
192.168.77.92 to verify that zone transfer is enabled to this server. To do
so, use the DNS console, and select master server 192.168.77.92 as the appli
cable server, then in secondary zone localright.com Properties,view the set-
tings on the Zone Transfers tab. Based on the settings you choose, make any
configuration adjustments there (or possibly in the Name Servers tab) so that
a zone transfer can be made to this server.
For more information, see Help and Support Center at
http://go.microsoft.com/
fwlink/events.asp.
Event Type: Error
Event Source: DNS
Event Category: None
Event ID: 6525
Date:  11/10/2014
Time:  12:03:18 PM
User:  N/A
Computer: LOC-LAB-2K8.localright.com
Description:
A zone transfer request for the secondary zone leftremote.com was refused by
the master DNS server at 192.168.95.92. Check the zone at the master server
192.168.95.92 to verify that zone transfer is enabled to this server. To do
so, use the DNS console, and select master server 192.168.95.92 as the appli
cable server, then in secondary zone leftremote.com Properties,view the set-
tings on the Zone Transfers tab. Based on the settings you choose, make any
configuration adjustments there (or possibly in the Name Servers tab) so that
a zone transfer can be made to this server.
For more information, see Help and Support Center at
http://go.microsoft.com/
fwlink/events.asp.

Hi,
According to the event ID 6525, this may be caused by a refuse of zone transfer request.
In normal, the secondary DNS server just configured with a preferred DNS server as itself, the alternate DNS server is optional, it depends on your needs.
When you fill the master DNS server’s IP address when you add secondary zone in the secondary DNS server, it will prompt a warming information if you do not add a PTR record in the master DNS server in the reverse lookup zone, but this won’t affect the zone
transfer process.
Have you followed the description of event log and check to see if the master server has enabled zone transfer(Properties
of zone->Zone Transfer tab->Allow zone transfer)?
Besides, verify that the master server of the secondary zone is authoritative for the zone. Reference steps below:
1. On the secondary DNS server, open DNS manager.
2. Right-click zone, select the General tab, note the IP address of the server that is listed in
Master Servers.
3. In the console tree, right-click DNS, and then click
Connect to DNS Server.
4. Click The following computer, type the IP address of the master DNS server, and then click
OK.
5. In the console tree, expand the master DNS server, and then expand the folder that contains the zone.
Note: If the zone is not in the folder, the server is not authoritative for the zone. In this case, you must configure the secondary server to transfer the zone from the correct master server.
6. Right-click the zone, click Properties, and then click the
Name Servers tab.
7. Confirm that the secondary server is listed with the correct IP address. To correct the list, do one of the following:
If the secondary server is not in the list, click Add.
If the IP address of the secondary server is incorrect, click the server in the list, and then click
Edit.
If this problem still exits, from the event log I notice that there are 2 secondary DNS server, REM-LAB-2K3.leftremote.com and LOC-LAB-2K8.localright.com. Are they belong to different domain(leftremote.com and localrght.com) ? what the relationship between
them?
It would be helpful if you could provide the network topology. And describe the IP configuration of master DNS server and secondary DNS server.
Best Regards,
Eve Wang

DNS server process, high CPU usage

Hello,
I am having a problem with high CPU usage on DNS process. We have 1921 setup in network of about 100 workstations that use it as DNS server. It also performs split view functionality for couple of domains in order to avoid hairpin NAT. I know that a router is not fit for heavy server duty but such setup was unfortunately necessary.
In peak work hours we oftenly have CPU hitting 100% with DNS server process being the root cause,and on several occasions we had DNS process stuck in such state for prolonged periods of time during which other router functions were affected (t's a default gateway, IPsec concentrator etc.). Sometimes shutting the process and restarting it would solve the problem, but once it required a full reload in order to restore functionality (such was the description that engineer on duty reported to me).
Forwarder queue statistics:
Current size = 0
Maximum size = 86
Drops        = 0
IOS upgrade did not help, we are currently running 15.2(2)T.
The question is ... is such behaviour (CPU load) to be expected on LAN with 100 workstations due to slow CPU on router or we have bugged IOS DNS server (requiring a TAC case)?
The previous solution seem to do this functionality quite nicely (even though it was also a router), so I am not inclined to think that we are dealing with someone DoS-ing the DNS (WAN access to DNS is of course forbidden)
P.S.
Since we moved servers off the routers DNS, we do not receive complaints, but we had a couple of unresolved messages a day while mail server was using router for DNS. I am suspecting that an old bug where IOS DNS servers occasionaly sends clients back empty DNS replies (properly formatted message but without A record) could be still around?

hi,
i have the same problem on UC540 and 2911 on IOS 15.0.1. CPU high, router crashed. Reboot helps but until CPU usage spikes again. the only fix is to remove "ip dns server" from config and use a different DNS server
                    111                       1111    1111111111
          999999999900077777777799999777778888000099990000000000
    322222111119999900077776666622222111119999000088880000000000
100            ********                       ******************
90       *************         *****     **********************
80       ***************************     **********************
70       ******************************************************
60       ******************************************************
50       ******************************************************
40       ******************************************************
30       ******************************************************
20       ******************************************************
10       ******************************************************
   0....5....1....1....2....2....3....3....4....4....5....5....6
             0    5    0    5    0    5    0    5    0    5    0
               CPU% per second (last 60 seconds)
after removed IP dns server
                                       111
                             99999999990007777777779999977777888
              33333333332222211111999990007777666662222211111999
100                               ********
90                          *************         *****     ***
80                          ***************************     ***
70                          ***********************************
60                          ***********************************
50                          ***********************************
40                          ***********************************
30                          ***********************************
20                          ***********************************
10                          ***********************************
   0....5....1....1....2....2....3....3....4....4....5....5....6
             0    5    0    5    0    5    0    5    0    5    0
               CPU% per second (last 60 seconds)

DHCP giving out incorrect DNS server information

Migrated my ONLY DHCP server from a 2k3 server to a new 2k8 server and I cannot figure out why it wont give out the correct DNS server settings.
Here is what I have tried so far:
Stopped service on the old DHCP server and forced a /release /renew on the workstation.
Stopped service on both DHCP servers to see if there is some other DHCP server, computers wouldn't get any IPs.
If I setup a reservation for the workstation it will give out the CORRECT DNS settings.
Ran a GPO Policy result for the user and computer I'm testing and no IP configuration is configured at all for any GPO.
Other Information:
Only have 1 scope setup.
When I run a ipconfig /all it does show the DHCP server as the correct one (new server).
This problem was happening on the old server as well, I thought maybe migrating to a newer server would help but I'm getting the exact same results.
Thanks!

Hi,
We can perform a network capture on the client. It will show the process of the DHCP.
Please check the DHCP offer message sent by the DHCP server and the DHCP request message sent by the client.
Make sure that the server gives the right DHCP setting.
If the server is giving the right setting, it should be a client issue. Please check the event log of the DHCP client.
If the server is giving the wrong setting, it should be a sever issue. Please check the configuration of the DHCP sever.
To download Network Monitor, please click the link below,
http://www.microsoft.com/en-us/download/details.aspx?id=4865
Best Regards.
Steven Lee
TechNet Community Support

Airport extreme stopped conneting asking for dns server?

my internet connection sopped out of nowhere and in airport utility it's asking for the dns server(s) numbers which 2 spaces are blank...

For some reason, the communication between the Time Capsule and the Internet modem has stopped working properly.
I would recommend that you do the following as a minimum:
Power-down the modem, AirPort base station, and computer(s).
(OPTIONAL) While all of the devices are powered-down, perform a "factory default" reset on the base station. This will get it back to its "out-of-the-box" configuration and make setting it up much easier, especially if you use the "Assist me" process within the AirPort Utility. (ref: Resetting an AirPort Base Station or Time Capsule)
After the base station resets, go ahead and power it back down.
Power-up the modem; wait at least 10-15 minutes.
Power-up the base station; wait at least 5-10 minutes.
Power-up your computer(s).
In this basic configuration, computers connected to the base station, either by wire or wireless (as appropriate for the base station type), should now be able to access the Internet through the ISP's modem. Once Internet connectivity has been verified, you can use the AirPort Utility to configure the base station for wireless security and any other desired options.

Primary DNS server

Hello,
I am trying to setup a local primary dns server that will resolve local server names but at the same time forward request that it doens't have.
like i would like it to resolve our internal web address and still pull up google.com. I put in about ten records and all those work but when i try anything else it doesn't work. Can someone help?
Thanks,
Jay

What's different about 10.4.9 in this
case?
10.4.9 update "Addresses slow performance of non-cached DNS queries and provides an update to BIND version 9.3.2."
You may still prefer to add forwarders but, taking above on face value, no longer necesary for those who do not want to manually edit files.
Mind you, I have not actually tested the default DNS in 10.4.9 so cannot confirm that the previous problems do not still occur (but just to a lesser extent .
-david

Question about changing the IP of a Windows DC, that is also acting as a DNS server?

I have two subnets (network A, network B) located within the same single Windows domain site.
Each site has two DCs, which each are running AD-integrated DNS.
I need to move one server from network B, into network A. If I change the IP address, subnet mask, and gateway and DNS entries on this server, shut it down, and then bring it back up on network A, should the server automatically register itself
in DNS under its new IP address, and behaving like a normal domain controller in the new subnet? Or will I need to perform an ipconfig /registerdns on the domain controller once it comes back up in network A, in order for it to be seen as a domain controller/DNS
server under its new IP address?

If you change the IP of the DC, the command isn't going to be a IPCconfig/RegisterDNS.
DC's register their essential records when the NETLOGON service starts, so restart that.
**Are your clients using DHCP? Are you sure you've eliminated the dependancies on that IP address for all your clients?
- Chris Ream -
**Remember, if you find a post that is helpful, or is the answer, please mark it appropriately.**

VPN Client is not adding DNS server IP addresses

Hello all,
I'm new to the forum and could use a little help.
I use a CheckPoint VPN-1 to connect to my work network. The problem that I have is that I need to add two name servers to access the various sites and applications at work. I have not been able to find a way to do this within VPN-1. I found a listing in for DNS servers in the user.C file but as soon as I edit it and add them (and the edit back up so that it doesn't just over write my changes) it says the files are corrupt and reloads it from the network. What a pain.
Right now I am manually adding the IP address to my DNS list when I connect, then cursing when I use a browser after dosconneting, then removing them manually. If it were not for the fact that network access is dramatically slower when I'm not using the VPN and have the additional name servers listed, I would just leave them there and be done with it. But network performance seems to suffer dramatically when they are listed and the VPN is not active. As soon as I remove them, performance returns to normal.
What I need is a way to add two DNS Server IP Address when VPN-1 connects to the network and remove them when I shut down the VPN. I personally don't care if it's a separate utility, Automator Script, Apple Script, or even a different VPN client, as long as it will connect to a CheckPoint FW.
I have started looking at other clients. I have looked at PSecuritas, it connected to the FW fine, had a place to add the DNS IPs but did not add them correctly either. I also looked briefly at VPN Tracker, for $120 .... I don't think so ..... it's a hassle, not broken.
Any help would be appreciated.
--Ray

This is possibly CSCec68049 (see http://www.cisco.com/cgi-bin/Support/Bugtool/onebug.pl?bugid=CSCec68049&Submit=Search for details. 3.6 had a few issues with DNS servers not being populated. Try upgrading a few of your PC's to the latest 4.0 client and that should resolve it.

DNS Server Performance

Similar Messages

Maybe you are looking for