DirectAccess DNS Entries

I am trying to troubleshoot my once working DirectAccess setup and I am thinking it has to do with a possibly corrupt internal DNS.
It's possible that with the recent integration of a UTM50 firewall that my DNS settings got messed up, what are the standard DNS entries for DA with a fresh install?
Is it possible to repopulate the DNS server from DA?

Well until recently we only had one static IP address, I then purchased a block of 5 which I NAT through my firewall (NEGEAR UTM50) it was at this point that I my clients started to experience a whole variety of errors. At first I thought
maybe I had setup the static IP addresses incorrectly and I called NETGEAR to double check my work which appears to be correct as other services such as exchange are working as intended. However, nothing I did or have tried thus far has resolved
my issues with DirectAccess. I have made sure that the rule to forward port 443 is in place and I can verify on the outside that it is in fact open and going to the right internal system.
My clients are seeing the following errors: 
DirectAccess connectivity status for user: <domain>\<user> is
Error: Corporate connectivity is not working. Windows is unable to contact the DirectAccess server. 7/11/2012 6:55:38 (UTC)
Probes List
HTTP: http://directaccess-WebProbeHost.<hostname>.net (Fail)
DTE List
PING: fd75:8204:2033:1000::1 (Fail)
PING: fd75:8204:2033:1000::2 (Fail)
PING: fd41:259d:2605:1000::1 (Fail)
PING: fd41:259d:2605:1000::2 (Fail)
PING: fd86:a2c9:3566:1000::1 (Fail)
PING: fd86:a2c9:3566:1000::2 (Fail)
PING: fd5d:b787:fe28:1000::1 (Pass)
PING: fd5d:b787:fe28:1000::2 (Pass)
I then managed to get some to connect but they quickly disconnect and then eventually they revert back to the above.
When running "ipconfig /all" on both the Server and Client I see the following information.
Server:
Windows IP Configuration
Host Name . . . . . . . . . . . . : DA01
Primary Dns Suffix . . . . . . . : <DOMAIN>.COM
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : <DOMAIN>.COM
Ethernet adapter V105:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : vmxnet3 Ethernet Adapter
Physical Address. . . . . . . . . : 00-50-56-9C-7C-7C
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv6 Address. . . . . . . . . . . : fd5d:b787:fe28:3333::1(Preferred)
Link-local IPv6 Address . . . . . : fe80::34d8:360c:624d:abc1%12(Preferred)
IPv4 Address. . . . . . . . . . . : 10.100.105.10(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 10.100.105.254
DHCPv6 IAID . . . . . . . . . . . : 251678806
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-17-FE-D3-BB-00-50-56-9C-55-BE
DNS Servers . . . . . . . . . . . : 10.100.105.1
NetBIOS over Tcpip. . . . . . . . : Enabled
Tunnel adapter isatap.{4F6ADC57-4821-4E6C-8818-53C8504D6632}:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft ISATAP Adapter
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv6 Address. . . . . . . . . . . : fd5d:b787:fe28:1:0:5efe:10.100.105.10(Preferred)
Link-local IPv6 Address . . . . . : fe80::5efe:10.100.105.10%13(Preferred)
Default Gateway . . . . . . . . . :
DNS Servers . . . . . . . . . . . : 10.100.105.1
NetBIOS over Tcpip. . . . . . . . : Disabled
Tunnel adapter Teredo Tunneling Pseudo-Interface:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Tunnel adapter 6TO4 Adapter:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft 6to4 Adapter
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Tunnel adapter IPHTTPSInterface:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : IPHTTPSInterface
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv6 Address. . . . . . . . . . . : fd5d:b787:fe28:1000::1(Preferred)
IPv6 Address. . . . . . . . . . . : fd5d:b787:fe28:1000::2(Preferred)
IPv6 Address. . . . . . . . . . . : fd5d:b787:fe28:1000:e005:2643:2455:9ab0(Preferred)
Link-local IPv6 Address . . . . . : fe80::e005:2643:2455:9ab0%16(Preferred)
Default Gateway . . . . . . . . . :
NetBIOS over Tcpip. . . . . . . . : Disabled
Client:
Windows IP Configuration
Host Name . . . . . . . . . . . . : PD07
Primary Dns Suffix . . . . . . . : <DOMAIN>.COM
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : <DOMAIN>.COM
Ethernet adapter Ethernet:
Connection-specific DNS Suffix . : <DOMAIN>.COM
Description . . . . . . . . . . . : vmxnet3 Ethernet Adapter
Physical Address. . . . . . . . . : 00-50-56-9A-5E-84
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::3846:c461:adf3:d29f%12(Preferred)
IPv4 Address. . . . . . . . . . . : 10.140.100.185(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Lease Obtained. . . . . . . . . . : Tuesday, November 6, 2012 11:53:32 PM
Lease Expires . . . . . . . . . . : Thursday, December 6, 2012 11:53:32 PM
Default Gateway . . . . . . . . . : 10.140.100.254
DHCP Server . . . . . . . . . . . : 10.140.100.100
DHCPv6 IAID . . . . . . . . . . . : 251678806
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-18-2B-51-40-00-50-56-9A-5E-84
DNS Servers . . . . . . . . . . . : 10.140.100.100
10.140.100.101
10.108.100.100
10.108.100.101
NetBIOS over Tcpip. . . . . . . . : Enabled
Tunnel adapter isatap.<DOMAIN>.COM:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . : <DOMAIN>.COM
Description . . . . . . . . . . . : Microsoft ISATAP Adapter
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Tunnel adapter iphttpsinterface:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : iphttpsinterface
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv6 Address. . . . . . . . . . . : fd5d:b787:fe28:1000:ac36:5c62:5d97:87c6(Preferred)
Temporary IPv6 Address. . . . . . : fd5d:b787:fe28:1000:9c96:477:6b63:c9c7(Preferred)
Link-local IPv6 Address . . . . . : fe80::ac36:5c62:5d97:87c6%14(Preferred)
Default Gateway . . . . . . . . . :
NetBIOS over Tcpip. . . . . . . . : Disabled

Similar Messages

  • Content query web part is not working after chaning the DNS entry

    Hi all,
    We have a content query web part in the sharepoint site but it is not working after changing the DNS Entry for the web site ipaddress from one server to other . But it is working fine on the server, if we try to access the site from other system content
    quey server its not working fine and its giving error message as bellow.
    Unable to display this Web Part. To troubleshoot the problem, open this Web page in a Microsoft SharePoint Foundation-compatible HTML editor such as Microsoft SharePoint Designer. If the problem persists, contact your Web server administrator.
    Can anyone help me to fix this issue please.

    I have custom XSLT . But it is working fine before changing the dns entry as soon as we change the DNS entry the content quey web part is not working. I tried to delete the content query web part and add it once again to the page, As soon as content query
    web part is added to the page the fallowing error message is displayed.
    Unable to display this Web Part. To troubleshoot the problem, open this Web page in a Microsoft SharePoint Foundation-compatible HTML editor such as Microsoft SharePoint Designer. If the problem persists, contact your Web server administrator.
    Can anyone help me to fix this issue please.

  • DNS entry for DC not dynamically updating (Server 2008 R2)

    Windows Server 2008 R2. I've got a single DC (I'm preparing to install the 2nd in the next few days). The host (A) record for the DC shows to be static for some reason. I changed the name of the DC recently, then brought down the Exchange server and rebooted
    and it successfully connected again. I might have entered in a static DNS entry for the new server name before renaming the server, but I'm not sure.
    I've tried to delete the static DNS record for the DC and then reload, but it continues to appear as a static entry. The mail server's DNS record still appears as a dynamic entry.
    What am I doing wrong?
    Noel Stanford Oveson
    jeremyNLSO
    MCTS, MCITP, CCENT, CNE, MCSE, CLSE
    Berlin, Germany

    Hello,
    Like Mike suggested, it is normal that it is a static record.
    However, if your DC with its new name is not updating its DNS record, check that "Register this connection' addresses in DNS" is checked on the DC's adapter and then run
    ipconfig /registerdns using an elevated prompt.
    This
    posting is provided "AS IS" with no warranties or guarantees , and confers no rights.   
    Microsoft
    Student Partner 2010 / 2011
    Microsoft
    Certified Professional
    Microsoft
    Certified Systems Administrator: Security
    Microsoft
    Certified Systems Engineer: Security
    Microsoft
    Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration
    Microsoft
    Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration
    Microsoft
    Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration
    Microsoft
    Certified Technology Specialist: Windows 7, Configuring
    Microsoft
    Certified Technology Specialist: Designing and Providing Volume Licensing Solutions to Large Organizations
    Microsoft Certified IT Professional: Enterprise Administrator
    Microsoft Certified IT Professional: Server Administrator
    Microsoft Certified Trainer

  • How to add DNS entry Post Installation in Solaris 10?

    Hi, I have installed Solaris 10 without mentioning the DNS entry while installation. How do I add that now in order to make that Solaris 10 to get connected to Internet ?
    Thanks in Advance.
    Girish Prabhakara.

    Solaris 10 changed the way that some things work regarding networking, but this should still work.
    1. Change the hosts: line in /etc/nsswitch.conf to include dns.
    For example, change:
    hosts files
    to
    hosts files dns
    2. Create /etc/nsswitch.conf with the IP addresses of your DNS servers:
    Example:
    nameserver 192.168.1.100
    nameserver 192.168.2.100
    3. kill -HUP 1
    4. Run nslookup or ping another server via host name (not IP address) to determine if the system is properly communicating with your DNS servers.

  • Windows Server 2008 R2 DNS Entry Auto remove not working

    Dear All,
    I have configured DNS Ageing for 30 days removal of unwanted host entry.but it will not work.
    Active directory DNS having all unwanted host in forward lookup zone and as well as reverse lookup zone.
    how to solve this ?
    pls help
    Sunil
    SUNIL PATEL SYSTEM ADMINISTRATOR

    Hi,
    This is a rather common problem when configuring Scavenging and Aging of stale DNS entries.  This has to be set in two spots, not just one as so many admins have difficulties with.  It isn't very obvious. 
    Aging and Scavenging must be set on both the DNS Server and on the Zone
    that you want to clean.  In addition, DNS needs to be Active Directory integrated and resource records need to be dynamically registered.  Static entries are ignorned.
    First step: 
    To set aging and scavenging properties for the DNS Zones using the Windows interface           
    Open DNS Manager.
    In the console tree, right-click the applicable DNS server, and then click
    Set Aging/Scavenging for all zones.
    Select the Scavenge stale resource records check box.
    Modify other aging and scavenging properties as needed.
    Second Step:
    To set aging and scavenging properties for the DNS Server using the Windows interface           
    Open DNS Manager.
    In the console tree, right-click the applicable DNS server, and then click
    Properties.
    Select the Advanced tab,and then enable Enable automatic scavenging of stale records
    check box. Once done, specify the Scavenging period (That is recurring
    interval for Scavenging on a DNS server)  and click on OK
    That will do it.  Your DNS entries will then start auto scavenging based on the times you have determined. Word of caution - do not set your aging too aggressively - I have seen where an admin had set aging down to 1 day and when it finally kicked
    off, nearly brought the company to a halt. 

  • Unknown Host Unable to locate the server requested --- the server does not have a DNS entry. Perhaps there is a misspelling in the server name, or the server no

    Hello,
    Today i tried accessing transitbux.com with mozilla, but i'm getting this kind of a error as mentioned below:
    Unknown Host
    Description: Unable to locate the server requested --- the server does not have a DNS entry. Perhaps there is a misspelling in the server name, or the server no longer exists. Double-check the name and try again.
    Can anyone help me please, and the same website is accessible with my phone.
    Help me please. :(
    Regards
    -

    Try http://www.transitbux.com/
    Clear the cache and remove cookies only from websites that cause problems.
    "Clear the Cache":
    *Firefox/Tools > Options > Advanced > Network > Cached Web Content: "Clear Now"
    "Remove Cookies" from sites causing problems:
    *Firefox/Tools > Options > Privacy > "Use custom settings for history" > Cookies: "Show Cookies"

  • How to add a DNS entry

    Hi all,
    I would like to know if there exists any API method to add a DNS entry from an authorized client on a DNS server in the network. The DNs server supports dynamic updation.
    thanks in advance
    Sudheesh

    Do you get any solution ?

  • SSRS 2008 r2 - the Report Manager won't load unless "/Reports" is added to the DNS entry in address bar

    Need some direction, please.
    We are moving off  SSRS 2005 to a new server with SSRS 2008R2. The old installation (2005) a DNS entry was created "reports" with the ip address and port number simple. In the Configuration manager the Report Manager Virtual Directory
    is "Reports". Website is Default web site. Typing "reports" into the address bar opens up report manager. When this is done the address shows as reports/reports/pages/folder etc.
    The new installation is configured the same(?). DNS entry "reports2" with new ip address and port number. In the Configuration manager the Report manager URL virtual directory is "Reports" URLs: =
    http://servername:port/Reports. The issue is when typing "Reports2" into the address bar the report manager won't open unless "reports" is added to the dns name i.e. http://reports2/reports
    is entered.
    This thread took me to more like kind thread than my searches. Went into IIS in the default web site I added an htm file with a redirect. Then started it, it works. Maybe due to my inexperience but seems counter intuitive as I thought Reporting Services did
    away with any reliance on IIS.

    Hi Urquhart,
    According to your description, if you type "Reports2" in the browser, then you want to redirect to the report manager homepage in SSRS 2008 R2, right?
    In Reporting Services 2008 R2, it uses HTTP.SYS for HTTP access and it’s independent of Internet Information Server(IIS). The role for HTTP.sys in Reporting Services is that, HTTP.sys receive the user's request, and then send it to report server. Report
    Server handle the request(e.g. authenticate the users), and then use HTTP.sys the send HTTP responses again. In a word, HTTP.sys is just a driver, which allow us to communicate the clients(browser) with Report Server without Microsoft Internet Information
    Server(IIS).
    So, since HTTP.SYS doesn’t provide URL redirection function, we are not able to redirect "Reports2" to report manager homepage by default. If we want to use redirect function, we should add a .html file in IIS to redirect the user to the report
    manager.
    Similar thread for your reference:
    SSRS 2008 URL Redirecting
    SSRS 2008 R2 Homepage Redirection
    If you have any question, please feel free to ask.
    Best regards,
    Qiuyun Yu
    Qiuyun Yu
    TechNet Community Support

  • No Name Available / No Reverse DNS Entry in System Log

    On our network, we have two Macs running different versions of OSX Server software. Our "main" server is a G5 dual 2GHz (2.5 Gb RAM) running Leopard Server 10.5.6, and it runs most of our major services such as Open Directory (it’s designated an OD Master), Mail, Web, FTP and DNS. Our "secondary" server is an XServe dual 2.3GHz (G5) (2 Gb RAM) running Tiger Server 10.4.11. It only runs the AFP service and exists solely as our company’s fileserver. Both of its ethernet ports are connected to our company’s 10/100 switch, and the ports are configured as follows: Built-in Ethernet 2 (BSD Device Name en1) IP addr. 10.1.10.154; Built-in Ethernet 1 (BSD Device Name en0) IP addr. 10.1.10.152. In the Network control panel’s Network Port Configurations, Built-in Ethernet 2 (IP address 10.1.154) is moved to the top of the configuration window and as a result, Network Status indicates that that XServe "is connected to the Internet via Built-in Ethernet 2."
    That said, I see the following every 30 minutes in the System log:
    Apr 20 11:01:51 NAGXServe2 servermgrd: servermgr_dns: no name available via DNS for 10.1.10.154
    Apr 20 11:01:51 NAGXServe2 servermgrd: servermgr_dns: no reverse DNS entry for server, various services may not function properly
    This doesn’t cause any apparent problems in daily operation but if it’s something I could fix myself, I’d be willing to try. In the TCP/IP configuration for both ports, the DNS Server entry points to our "main" G5 server (which has a static IP address) and the Search Domain entry is that "main" G5 server’s domain name.
    In the DNS setup on the "main" G5 server, its domain name is entered in the "Primary Zone" field and its static IP address is entered in the Reverse Zone field; Whois lookups work successfully both forward and backward. But there is no mention of our "secondary" server anywhere in the "main" G5 server’s DNS setup.
    Thanks for any help!

    I am going to assume that the IP addresses you have given are REAL.
    You have to add an entry for NAGXServe2 in the DNS server's (NAGXServe1?) configs.
    First, what you need to enter are hostnames. The zone/domainname (example.com) should resolve to one representative server (your main server) for www service's sake, but otherwise, even your main server should have its own hostname (hostname.example.com).
    Let's say you already have an entry for your domain, example.com. This zone should already have one (or even two) A record, nagxserve1.example.com (and maybe example.com, without any hostname). You need to add another A record for nagxserve2.example.com with the IP address 10.1.10.154.
    You do this buy selecting "Computer (A) record" from the "Add record" dropdown button. A new A record called "newMachine" should appear under the zone record. If you can't see it, try clicking on the little triangle next to the zone/domain name.

  • Can't save dns entries

    I recently had a server that's ip changed.  I set it up as static, the hostname appeared fine.  I ran changeip -checkhostname and got the new ip address with the hostname x.x.x and it said that the dns entries were bad and needed to be repaired.  I did changeip old ip new ip and it said I needed to match the hostname too so I did changeip o n o n  for both.  It looked like everything went fine.  Still able to connect and I rebooted too I think.  Then I went to dns and edited the primary zone, a record, web service and reverse zone.  I removed them all at one point and tried to re-add them.  Whatever I tried whenever I tried to enter all the information for both after pressing save it deleted all entries except the primary zone which didn't have a nameserver listed.  I'm sure that I entered all the information correctly except the primary zone name may be x.x.x where before it was x.x.  I tried both x.x.x and x.x and neither would save.  At one point I restarted and there weren't any entries listed there save the one incomplete one and now I can't access the server because I think its dns info isn't valid. A ping brings nothing.  So I have to help someone change the information.  Can anyone help with this?  changeip -checkhostname and host both came back fine with the exception that the dns entries needed to be changed in the first.
    Also, the hostname is a registered hostname but because the ip changed recently when setting up a new router dyndns hasn't been updated.  I don't know if this causes a problem when trying to save a dns record without it being able to identify the hostname or not.

    One other thing is that whenever it would auto create a reverse zone or even in the primary one, the default ip listed before I change it is always 10.0.0.1 instead of 10.0.1.7 which is what it is now.  It has never been the former that I know of.  When setting up the reverse zone, the entry looked correct but I couldn't change it  It had the reverse ip minus 7.  at the beginning.  That didn't seem right and when I tried to change it it just kept what was listed.

  • Server 2008 RRAS Internal adaptor causing duplicate DNS entry for host

    I have Server 2008 configured with AD, DNS, DHCP and Routing and Remote Access.  The Server is set-up with a static IP address 192.168.127.2 and the DHCP allocates addresses in the range 192.168.127.100/199 to clients.  The RRAS is automatically configured with three adaptors "Loopback" (127.0.0.1), "Local Area Connection" (192.168.127.2) and "Internal" (192.168.127.112 allocated by DHCP).
    The problem is that there are two entries created in DNS for the host, MYSERVER 192.168.127.2 and MYSERVER 192.168.127.112.  This cause a problem with the client computers when they do a DNS lookup in that the MYSERVER ip address is sometimes returned as 192.168.127.112 at logon causing network shares assignment in the logon script to fail (among others).  If the DNS entry is deleted manually everything functions again for a while until the DNS entry is mysteriously created again.
    Can anyone help???

    I agree with Bill, you should not run RRAS service on DC.
    If you need workaround
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Adapters\<Interface name>\MaxNumberOfAddressesToRegister
    Data type: REG_DWORD
    Range: 0x0 - 0xFFFFFFFF
    This setting determines the maximum number of IP addresses that can be registered in DNS for this adaptor.
    If the value of this entry is 0, IP addresses cannot be registered for this adaptor.
    OR
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\<Interface name>\DisableDynamicUpdate
    0      Enables DNS update registration
    1      Disables DNS update registration
    Please place one of above registry key for adapter that you don't want to register in DNS.
    Hope this helps.

  • Global Load Balancing / Failover....what about dns entries being cached?

    It is my understanding that DNS is used to provide data center redundancy. How does one resolve the problem of dns entries being cached across the Internet? For example, I fail-over to my secondary datacenter, the IP addresses of my primary datacenter will likely be cached in dns servers across the Internet. What are some options for datacenter redundancy that can overcome these issues of dns propogation delays?
    Thanks!

    The only option that you have is to run with a low TTL.
    Unfortunately, there are applications out that that don't behave very well to a low TTL. Microsoft Internet Explorer, for example, needs to be restarted for it to do another name lookup. The same holds true for some proxies etc.
    -A

  • Servermgr_dns: no reverse DNS entry for server

    Hi all,
    After installing and configuring OS X Server, Tiger, I realized I had given the machine the wrong IP-address. After changing it, I'm getting the following errors every half hour:
    Jun 28 12:54:26 g4 servermgrd: servermgr_dns: no name available via DNS for 10.0.0.3
    Jun 28 12:54:26 g4 servermgrd: servermgr_dns: no reverse DNS entry for server, various services may not function properly
    Can anyone enlighten me, as to wether this is something serious or not. The server is running fine, so it isn't mission critical, but you know, nobody likes error messages
    PowerMac G4, Dual 1.25, 768 MB RAM, Pro ADSL 4096/768   Mac OS X (10.4.6)   Mac OS X Tiger Server

    look at changeip
    <pre>
    ~>man changeip
    changeip(8) BSD System Manager's Manual changeip(8)
    NAME
    changeip -- Change IP adress related configuration.
    SYNOPSIS
    changeip -checkhostname
    changeip [directory-node | -] old-ip new-ip [old-hostname new-hostname]
    DESCRIPTION
    changeip is used to update configuration records when a server's IP
    address changes or check/fix the hostname of the server. It needs to be
    run by root on the machine who's IP address is changing. If the machine
    is hosting a parent directory (NetInfo or LDAP) or is connected to a par-
    ent directory, then the Open Directory path to the node must be used (eg
    /LDAPv3/192.12.0.43). Otherwise use a dash ("-") for the directory node
    argument. The tool may prompt for an admin user name and password for
    the directory node. After the tool has successfully completed, change
    the network settings in the Network Control Panel and reboot the server.
    </pre>
    you need to run this when you change your servers ip
    hope this helps.

  • Event Manager question. Monitoring DNS entry.

    Hello everybody,
    I  want to use Cisco Embedded Event Manager in a router for monitoring a  DNS entry that normally resolves 1.1.1.1 but if it changes to 2.2.2.2 the  router has to change some access list automatically in order to permit different  routes.
    I  know how to configure de "action" sentences for change the ACLs but I  dont know how to configure a track or a SLA in order to check the DNS  entry and react if it changes.
    Someone knows how to do that?
    event manager applet ChangeRoutesWhenDNSEntryChanges
    event track 21 state ??????????????????????????????????????????????????<----------
    action 1.0 cli command "enable"
    action 2.0 cli command "configure terminal"
    action 3.0 cli command "ip access...
    Thank you in advance!!
    Marcos.

    Indeed, I just provided the above example to demonstrate how we can force a DNS lookup and parse the IP address...
    I was actually thinking about using the IP SLA DNS probe, but I could not find a way to get the IP address from the results... It just shows the response time.
    In order to make the script work, we would most likely need to use some timer to trigger it periodically.
    This is an adaptation of my previous example to actually accomplish a periodic check:
    event manager applet CHECK-DNS
    event timer watchdog time 60
    action 1.0 cli command "ena"
    action 1.1 cli command "ping host1 repeat 1 timeout 0"
    action 2.0 regexp "ICMP Echos to (.*), timeout is 0 seconds:" "$_cli_result" _match _ip
    action 3.0 if $_ip ne 1.1.1.1
    action 4.0  syslog msg "host1 is now $_ip"
    action 5.0 end
    If you want to do something as a reaction to detecting the change, that would have to go into the "4.0" block (you can use 4.1, 4.2 etc)
    Another thing to consider is that this script would run every minute, so as long as the DNS query resolves to anything but 1.1.1.1 we would re-apply the config changes, which is not that good...
    A way to solve this can be seen in the next example:
    event manager applet HOST1-NOT-1.1.1.1
    event timer watchdog time 60
    action 1.0 cli command "ena"
    action 1.1 cli command "ping host1 repeat 1 timeout 0"
    action 2.0 regexp "ICMP Echos to (.*), timeout is 0 seconds:" "$_cli_result" _match _ip
    action 2.1 track read 100
    action 3.0 if $_ip eq 1.1.1.1
    action 4.0  if $_track_state eq down
    action 4.1   track set 100 state up
    action 4.2   syslog msg "host1 is now 1.1.1.1 again"
    action 4.9  end
    action 5.0 else
    action 6.1  if $_track_state eq up
    action 6.2   track set 100 state down
    action 6.3   syslog msg "host1 is not 1.1.1.1, new ip is $_ip"
    action 6.9  end
    action 7.0 end
    Basically we are using a stub tracking object to maintain state. Track object 100 would be up if we know host1=1.1.1.1, but if we detect it is something else we change it to down. Only after we detect that host1=1.1.1.1 again we change the track object back to up, which would enabled detecting another change...
    Any actions you want to take should go into section "6" and any clean up (when host1=1.1.1.1 again) has to go into section "4".
    It is possible to make this detect any change and not just have a static 1.1.1.1 value by assigning the newly detected value to a variable and basically look for a change... Not sure what is your requirement.
    The output below shows how this works...
    Router#show run | inc ip host
    ip host host1 1.1.1.1
    Router#conf t
    Enter configuration commands, one per line.  End with CNTL/Z.
    Router(config)#ip hos
    Router(config)#ip host host1 2.2.2.2
    Router(config)#^Z
    Router#
    *Nov  9 18:23:18.009: %TRACKING-5-STATE: 100 stub   Up->Down
    *Nov  9 18:23:18.021: %HA_EM-6-LOG: HOST1-NOT-1.1.1.1: host1 is not 1.1.1.1, new ip is 2.2.2.2
    Router#
    *Nov  9 18:23:18.065: %SYS-5-CONFIG_I: Configured from console by console
    Router#
    Router#
    Router#conf t
    Enter configuration commands, one per line.  End with CNTL/Z.
    Router(config)#ip host host1 1.1.1.1
    Router(config)#^Z
    Router#
    *Nov  9 18:23:42.805: %SYS-5-CONFIG_I: Configured from console by console
    Router#
    *Nov  9 18:24:18.025: %TRACKING-5-STATE: 100 stub   Down->Up
    Router#
    *Nov  9 18:24:18.033: %HA_EM-6-LOG: HOST1-NOT-1.1.1.1: host1 is now 1.1.1.1 again

  • DNS Entry for User link Versus Admin Link

    I have been asked to create easy links for end users to access their user settings in BOTH Unity Connection and Unifed Personal Communicator.
    For example...
    I want a DNS entry called -- voicemail.  When an end user types that in to a web browser I want it to take them to
    https://ipt-connection1:8443/ciscopca/
    I can only figure out via DNS how to get them to
    http://ipt-connection1/
    I remember back in my days of Windows NT 4.0 I could specify IIS to reconzie what it was being passed and redirect but I have not found a document or option to do this in BOTH Unity Connection and Unifed Personal Cummunicator.
    BOTH Unity Connection and Unifed Personal Communicator are at version 8.6
    Thanks in advance for any guidence.
    Del

    You would need to create user-friendly DNS entries (e.g. https://voicemail ), resolve them to another server that you can modify the IIS/Apache configuration of, and cause it to perform an HTTP redirect to the correct URL for the user. You have no OS access so there is no method for you to modify Apache/Tomcat as you used to with IIS.

Maybe you are looking for