How to configure DNS to support ipv4 and ipv6

I have a 2008 r2 domain controller in my lab.
i'm doing Exchange 2007, 2010 and 2013. I have mix Windows 2008 r2 servers for other applications.
i'm running into issues where i'm thinking it is time to have both IPV4 & IPV6 to run on all lab machines.
I can't get a clear picture on how to accomplish a mix environment. in the DNS administrator do I create a new "reverze lookup zone" with only the IPV6? or do I have to create a new record in the "forward lookup zone" to with both IPV4
& IPV6 which the later points to the new "reverse lookup zone".
I see a lot of internet article but little on "how to".
or on the DC should I enable the DHCP role to support the IPV6?

1. You assign an IPv6 address to the domain controller/DNS server
One method is letting this site (legitimate) create a random private IPv6 range for you:
http://www.simpledns.com/private-ipv6.aspx
For example:
fd06:fcde:8b4e:d6bd:xxxx:xxxx:xxxx:xxxx
You can configure the x's like this (you cannot leave the x's there):
fd06:fcde:8b4e:d6bd:0000:0000:0000:0001
If you close and open IPv6 properties, or do an "ipconfig /all" you'll see that the IPv6 is abbreviated as follows:
fd06:fcde:8b4e:d6bd::1
That's normal.
If you look in your forward lookup zone, you'll now see this IPv6 address (you may have to register that manually - ipconfig /registerdns - but it seemed to happen automatically for me.
So there is no need to create a separate forward lookup zone for IPv6.
OK, but what about the reverse zone?
2. Create reverse lookup
In DNS Manager (what you call administrator), right-click on reverse lookup zone, select New Zone, click, Next, Next (default values are fine) until you choose between IPv6 and IPv4. Selecft IPv6 of course.
Then enter your prefix as shown here:
That's it. The reverse lookup information is configured automatically (your prefix " backwards").
Now, unlike with the forward lookup zone, my domain controller does not seem to be registering its name in the reverse IPv6 zone: there's only the SOA and NS record.
But that's another question.
Please mark as helpful if you find my contribution useful or as an answer if it does answer your question. That will encourage me - and others - to take time out to help you.

Similar Messages

How to configure a COM domain, IPv4 and IPv6

Hi,
I am a new user on the Mac Server, but I have experience in Linux, my problem would be to understand how I configure the Mac Mini Server during installation or after installation, to assign a COM domain.
I would like to configure only the service Apache, FTP, MySQL.
My internet provider, today provided me 4 static IPs IPv4 and 4 IPv6, to use, now I want also to configure two local DNS if possible:
IPv4:
www.mydomain.com
ftp.mydomain.com
mysql.mydomain.com
IPv6:
www6.mydomain.com
For if I can configure DNS in Dual Stack or if I have to record them in a different way.
A control panel is currently not able to find it, you can advise me if something is well accepted, the important it is for business use as I would like to configure the server is for private use.
I hope I was clear, I'm sorry but I do not speak perfect English.
Thanks in advance to all.

To be clear, in your example you only have one domain - mydomain.com - all the other entries are just host records within that domain.
For your IPv4 hosts just add standard A records:
ftp A 1.2.3.4
www A 1.2.3.5
mysql A 1.2.3.6
For your IPv6 hosts just add AAAA records:
www6 AAAA 1234::ab:cd:ef
I seriously doubt you want to put your MySQL server on a public IP address, though, so I'd look carefully at your network setup before going much further.

How to configure DNS on RED HAT 5,4

Hello Linux experts
I'm need to configure dns service for Oracle RAC 11gR2
For dns server, I'm using the hosts for RAC.
How to configure DNS on RED HAT 5.4 ?
Anyone have a manual for do this ?
Best Regardss

Regardless of whether your will find tools or perl scripts like h2n, or manage your configuration files directly, you will need to get yourself familiar with basic DNS concepts and terms. A DNS cluster is a number of nameservers that share DNS records. You may perhaps rather want to setup a DNS server system consisting of a master and slave DNS server for your authoritative zone (domain name) on each node, but also configure for DNS forwarding and perhaps caching to public DNS servers on the internet. You may want to configure primary and secondary DNS records on your client sides in /etc/resolve.conf, perhaps also using some round-robin or timeout options.
I'm afraid Google will be your best friend. You may find below links helpful in your approach:
http://www.linuxhomenetworking.com/wiki/index.php/Quick_HOWTO_%3A_Ch18_%3A_Configuring_DNS
http://tldp.org/LDP/lame/LAME/linux-admin-made-easy/domain-name-server.html
http://www.redhat.com/magazine/025nov06/features/dns/
http://www.chinalinuxpub.com/doc/www.siliconvalleyccie.com/linux-hn/dns-static.htm

How to configure DNS ???

Hi everybody, please tell me how to configure DNS. Which file is needed configuring???
Thanks alot.

Excuse me, maybe u miss understanding about me. I'm not going to keep that information for myself. I don't know that u are interested in it. I always wanna get knowledge from everybody and share my knowledge ,hope that it is useful to someone.
My problem was: i didn't assign defaultgateway to my networking interface (IP 192.168.1.45). I connect internet through a Lan (through another machine IP 192.168.1.12), so if i wanna to use DNS server, i must route my machine to Gateway in order to connect to DNS server.
Thank u for a straight quote. I'm Vietnamese. We are friends !!!

Dynamic DNS for ipv4 AND ipv6?

tl;dr: do you know any dynamic dns service and updater daemon that supports both ipv4 and ipv6?
Hi,
ever since my provider supplied me with a proper dual stack account (real ipv4, real ipv6) for internet access I got some kind of little problem regarding the services I host at home. So this is mainly about email. I have a server sitting behind my router that has an open submission and IMAPS port. For ipv4 I've been using the NAT and dyndns features of my router (fritzbox) without any problem. For ipv6 there is no NAT (at least as far as my router is concerned). What I can do though is to open the firewall for incoming ports dynamically based on the interface identifier. So if someone wants to connect to an ipv6 address that would map to my server the router knows to not block the traffic. For this to work though I need update a dynamic DNS record with the public ipv6 address that my server gets to use (something out of the prefix my provider assignes me). This server is an arch linux box. I tried to use inadyn-mt with some systemd unit file I found through google but this does not seem to work right. When I'm in ipv4-only networks (on a mobile connection for example) I often can't resolve the right ip address of my server through dyndns. The thing is that my server doesn't know about a changed ipv4 address because this is handled by the router. It does only know about when his own ipv6 address changes/expires. Based on when this happens inadyn-mt might fire an update to dyndns and with that also pick up the new ipv4 address, but this is not guaranteed.
Any suggenstions, tool and/or service proposals? Is there a way dns-wise to add a CNAME alias just for A records and not for AAAA?

I currently use cloudflare as the DNS servers for my domain as it's free and allows to update certain records with their API. I only use it for IPv4, but since they support AAAA records, I assume it will work for IPv6 just as well. It should be quite simple for you to update the script to get the ip of a given interface instead of fetching it from the net.
#!/bin/sh
# modified by jfro from http://www.cnysupport.com/index.php/linode-dynamic-dns-ddns-update-script
# Uses curl to be compatible with machines that don't have wget by default
# modified by Ross Hosman for use with cloudflare.
cfkey=<your api key>
cfuser=<your username>
cfhost=<hostname you want to update>
WAN_IP=`curl -s http://icanhazip.com/`
if [ -f $HOME/.wan_ip-cf.txt ]; then
OLD_WAN_IP=`cat $HOME/.wan_ip-cf.txt`
else
OLD_WAN_IP=""
fi
perl -i -pe 'chomp if eof' /var/log/cfclient.log
if [ "$WAN_IP" = "$OLD_WAN_IP" ]; then
echo -ne "." >> /var/log/cfclient.log
else
echo $WAN_IP > $HOME/.wan_ip-cf.txt
echo -ne "\nUpdating IP to $WAN_IP\n" >> /var/log/cfclient.log
curl -s https://www.cloudflare.com/api.html?a=DIUP\&hosts="$cfhost"\&u="$cfuser"\&tkn="$cfkey"\&ip="$WAN_IP" >> /var/log/cfclient.log
fi
echo -ne "\n" >> /var/log/cfclient.log

How to Configure MS Exchange 2007 CCR and SCC Cluster in a single system

Hi i want to configure ms-exchange 2007 server for both SCC and CCR. i have two Windows Server 2008 on running on my hyper-v. by using cluster on both hyper v i want to install MS-Exchange 2007 for both SCC and CCR. ideally one windows server 2008 has
Active Nodes and another one has passive nodes. please guide me as i am new in the field

Duplicate of
http://social.technet.microsoft.com/Forums/exchange/en-US/edea43a1-59b4-4d26-9b41-76d0f4677095/how-to-configure-ms-exchange-2007-ccr-and-scc-cluster-in-a-single-system?forum=exchangesvrgenerallegacy#c6e08365-c01a-40aa-a8bc-94219757ef13
Blog |
Get Your Exchange Powershell Tip of the Day from here

How to configure MDT tool kit files and UDI settings to enable lite touch installation

please assist me for lite touch installation. i have integrated MDT 2013 with SCCM 2012 R2 then not sure what next? like how to configure MDT tool kit files and UDI settings to enable lite touch installation

Here are some examples:
http://www.windows-noob.com/forums/index.php?/topic/5250-using-sccm-2012-rc-in-a-lab-part-18-deploying-a-udi-client-task-sequence-with-mdt-2012-rc1-integrated-in-configuration-manager-2012/
http://damonjohns.com/2013/08/20/integrating-udi-into-your-sccm-osd-task-sequences/
My Blog: http://www.petervanderwoude.nl/
Follow me on twitter: pvanderwoude

ZBF in a mixed ipv4 and ipv6 environment, don't touch ipv4

I have a dual stacked router for both ipv4 and ipv6. Ipv4 traffic should pass the zbf untouched due to the fact that there is another rock solid ipv4 firewall egress of the inside Interface. Is there a way that a class map like this could function on ipv6 traffic only?:
class-map type inspect match-any fullproto
description Permitted Traffic to internet
match protocol http
match protocol https
match protocol dns
match protocol imaps
match protocol icmp
match protocol ftp
match protocol ntp
match protocol rtsp
match protocol realmedia
match protocol netshow
match protocol appleqtc
match protocol streamworks
match protocol vdolive
match protocol ssh
match protocol user-rdp
So far there is only a CBAC solution in place for ipv6.
I'm showing my Interfaces:
interface FastEthernet0/0
description *** Inside IPV6 ***
no ip address
speed auto
full-duplex
ipv6 address FE80::1 link-local
ipv6 address ????:????:????:10::1/64
ipv6 nd other-config-flag
ipv6 dhcp relay destination ?:?:?:10::12
ipv6 traffic-filter inne6-inn in
no cdp enable
no mop enabled
interface FastEthernet0/0.4
description *** Inside IPV4 ***
encapsulation dot1Q 4
ip address 82.?.?.129 255.255.255.248
no cdp enable
interface FastEthernet0/1
description *** Outside ***
ip address 82.?.?.42 255.255.255.252
no ip redirects
no ip unreachables
no ip proxy-arp
speed auto
full-duplex
ipv6 address FE80::2 link-local
ipv6 address ?:599::2/126
ipv6 enable
ipv6 nd prefix default no-advertise
ipv6 nd prefix ?:599::/126 no-advertise
ipv6 nd managed-config-flag
ipv6 nd other-config-flag
ipv6 nd router-preference High
ipv6 inspect ipv6-cbac out
ipv6 traffic-filter ut-inn6 in
no cdp enable
no mop enabled
Please advise.
Regards,
Henning

I didn't test it, but what about the following:
Configure a new class-map where you match on an ipv6 access-list "any to any"
Configure a third class map of type ""match all" where you match on your "fullproto" class-map and also the above ipv6 class-map. For this class map you configure your inspections.
For ipv4-traffic you configure a class with a "pass" action in both directions.

Problem running apache dual stack IPv4 and IPv6

Hello!
I am running a single Lion-Server with one public IPv4 address. Because my Provider is able to support IPv6 now, I ordered a public IPv6 address for my server. (To learn IPv6)
I setup IPv6 address and setup the firewall with ip6fw - everything works fine, I can connect to ssh and afp via IPv4 or IPv6 but when I try to connect to my wiki over IPv6 I get the certificate question (unknown certificate ... blah) click continue and the certificate is loeded againe - I end up in an infinte loop of certificate questions.
The part of the firewall config looks like this:
20515 allow tcp from any to any 443
20516 allow tcp from any to any 8443
20517 allow tcp from any to any 1640
I looked into apache config:
/etc/apache2/sites/virtual_host_global.conf has this entries:
Listen *:443
NameVirtualHost *:443
Listen *:80
NameVirtualHost *:80
I have only one domain and only one single virtual host as defined in /etc/apache2/sites/0000_any_443_.conf:
## Default Virtual Host Configuration
<VirtualHost *:443>
        ServerAdmin [email protected]
        DocumentRoot "/Library/Server/Web/Data/Sites/Default"
        DirectoryIndex index.html index.php /wiki/ default.html
        CustomLog "/var/log/apache2/access_log" combinedvhost
        ErrorLog "/var/log/apache2/error_log"
        <IfModule mod_ssl.c>
                SSLEngine On
                SSLCipherSuite "ALL:!aNULL:!ADH:!eNULL:!LOW:!EXP:RC4+RSA:+HIGH:+MEDIUM"
                SSLProxyEngine On
                SSLProtocol -ALL +SSLv3 +TLSv1
                SSLCertificateFile "/etc/certificates/www.ABCDE.de.1A00F8DFC2738F25D26E3248A4C8F687D7EA7F32.cert.p em"
                SSLCertificateKeyFile "/etc/certificates/www.ABCDE.de.1A00F8DFC2738F25D26E3248A4C8F687D7EA7F32.key.pe m"
                SSLCertificateChainFile "/etc/certificates/www.ABCDE.de.1A00F8DFC2738F25D26E3248A4C8F687D7EA7F32.chain. pem"
                SSLProxyProtocol -ALL +SSLv3 +TLSv1
        </IfModule>
        <Directory "/Library/Server/Web/Data/Sites/Default">
                Options All +MultiViews -ExecCGI -Indexes
                AllowOverride None
                <IfModule mod_dav.c>
                        DAV Off
                </IfModule>
        </Directory>
</VirtualHost>
I have not modified the apache config by hand until now - but this was an upgrade from Snow Leopard Server. At the moment I am a littel scared to upgrade to Mountain Lion server because this server runs mail and calender services for my company.
I tried to setup "Listen" entry with dedicated IP-addresses, one for IPv4 and one for IPv6 but this only leads to the same problem - IPv4 works, IPv6 ends in an infinte loop.
I found somewhere that I had to duplicate virtual hosts setup for IPv4 and IPv6 but afaik "Server.app" will overwrite it, right?
Every hint is welcome, bye
Christoph
P.S. Sorry just saw that I posted to ML-Server discussions not Lion-Server, but maybe someone can tell me that I can upgrade without scare.
Message was edited by: Christoph Ewering1

Hello!
Did some more testing and found that FireFox works with the loopback-address.
https://[::1]/
So, the address above works with FireFox after accepting the certificate - Safari loops in the dialog accepting the certificate.
Then I tried the link-local-address but it looks like apache does not listen to that address at all
Then I tried the global-address and got to:
Safari looping in the certificate dialog
FireFox brings an alert „sec_err_bad_database"
BTW this tests were made on the server that runs the apache. So no firewall between the browser and the server.
No one using Mac OS X server in a dual stack enviroment?
Bye,
eweri

Best way to pass IPv4 and IPv6 traffic over a GRE Tunnel

Hello,
We have two 3825 routers with Advanced Enterprise IOS 12.4.9(T). Each of them serves many IPv4 (private and public) and IPv6 networks on their respective site.
We have created a wireless link between the two, using 4 wireless devices, with IP Addresses 10.10.2.2, 3, 4, 5 respectively (1 and 6 are the two end Ethernet interfaces on the routers).
Then we created a GRE tunnel over this link using addresses 172.16.1.1 and 2 (for the two ends) to route traffic over this link.
Now we want to route IPv6 traffic over the same link. However, we found that simply routing the IPv6 traffic over the above GRE / IP tunnel did not work.
Questions:
Is there a way we can use the same (GRE / IP) tunnel to transport both IPv4 and IPv6 traffic?
If not, can we setup two GRE tunnels over the same wireless link, that is, one GRE / IP for IPv4 traffic and a second one GRE / IPv6 for IPv6 traffic?
In brief, what is the suggested way to transport IPv4 and IPv6 traffic over the aforementioned (wireless) link?
I have read http://www.cisco.com/c/en/us/td/docs/ios/12_4/interface/configuration/guide/inb_tun.html#wp1061361 and other Internet material, however I am still confused.
Please help.
Thanks in advance,
Nick

We have set up two tunnels over the same link, one GRE / IP for the IPv4 traffic and one IPv6 / IP ("manual") for the IPv6 traffic. This setup seems to be working OK.
If there are other suggestions, please advise.
Thanks,
Nick

WRT54G v6 not working with new Motorola SB6141 on Comcast (IPv4 and IPv6)

My WRT54G v6 not working with a new Motorola SB6141 Cable Modem on Comcast (IPv4 and IPv6).
Yesterday, I had my old DOCSIS 1.1 cable modem and the WRT54G had been working just fine for the past 8 years.
Last night, I swap in the DOCSIS 3.0 SB6141 cable modem, and now the WRT54G keeps losing the internet connection. When I go into the status page for the WRT54G, I often do not see DNS servers and sometimes do not even see an IP address.
If I connect a PC directly to the SB6141 cable modem, I have no problems whatsoever. But whenever I connect through the WRT54G and power cycle both devices, then I have internet connectivity for about an hour before it drops out. I have noticed my gateway IP address and DNS servers change at that time as well. I can also force the Linksys to lose connectivity by doing a DHCP release/renew on the Linksys status page.
Is this behavior because of the dual stack (IPv4 and IPv6) coming through the cable modem from Comcast now? Is there any way I can keep using my WRT54G v6 now that I have the SB6141 cable modem?

You just have to install it correctly.
http://kb.linksys.com/Linksys/ukp.aspx?pid=80&login=1&app=search&vw=1&articleid=3686

How to configure Oracle SSO for forms and apex

Hi All,
I am trying to configure oracle SSO for forms and apex using third party external authentication. Please help me how to configure. I a have tried all possible things
from web but I am not able to do it. Is there any doc or links are much appreciated.
Info: Some reason my oiddas web link is not working it used to work fine before and also the from /pls/orasso/ link I am not able to login may be because of my oiddas issue
Thanks

Hi Andreas,
Thanks you for your help. I am trying to implement third party external LDAP authentication for APEX and Forms.
So I started with OID and SSO setup to create external Partner Applications. Some reason my oid and sso web login links are not working. I didn't find any errors. I need some help in finding the problem and direction, I already read docs on web but no proper direction. I appreciate your help.
Thanks

How to configure Appointment, Phone Calls,Task and Emails

HI All,
I have requirement to build the Appointment, Task, Phone Calls and Emails as in the standard.
Same like it is available in the Opportunity Sales Activity.
Can you please suggest how to configure the same
Thanks & Regards,
Malkit Singh

Hello Malkit,
Does this blog from Alessandro Iannacci helps you?
HTH,
Horst

EA4500 loses IPv4 and IPv6 information

No changes made but router will lose all information for IPv connectivity. I have paid twice to support to fix this issue and it still occurs every few months.
I tried rebooting router, and doing an IP Release/ Renew and router does not get IP address. I'd prefer not to have to pay again to fix this router. Any ideas?

Sorry - thought I had info:
I don't see anything on the router indicating a model other than EA4500. There is a serial number. Its plugged directly into a
Toshiba PCX2500 modem. If I connect my PC directly to the modem I have internet.
The router maintains all settings that Cisco helped me set up before except there are not IPv4 or IPv6 settings. I have screen shots from the setup. The Cisco rep had to clone the MAC of the modem to get the router to work. (Admin tab).
I unplugged modem and router and rebooted each. Everything appears to come up normally except for no IPv4/6 settings. I tried a release/renew but those settings stay blank.
I have internal network connectivity with the router, just no internet. I use Road Runner. I have a second network also on Road Runner but on a different modum and domain that is working fine. Unfortunately I have hard wired connections and kids games that rely on the EA4500

How to configure DNS server to redirect all web traffic to one external website?

I'd like to use the DNS service on my OS X Server as a way to force all all web traffic to one specific, external website. Not quite sure how to go about configuring it, though - any recommendations?
(BTW, this is, obviously, not our primary DNS server; I intend to silently update the preferred DNS server for users who fail to complete their timesheets in order to force the issue)

Web clients don't generate uniquely-identifiable DNS queries; there's no SRV request or related traffic that you could select on and spoof. So if you do implement this, everything querying the spoofing DNS server will get the spoofed host, or you'll have to spot specific queries that are likely web queries; Facebook, Google, Bing, etc.
If you still want to implement this, then I'd probably replace the DNS server with a runt DNS server (maybe hack dnsmasq or maraDNS, or create yourself a trivial DNS server) and have that always return the specified IP address. This avoids having to hack BIND to be universally authoritative, which is probably on par with hacking a simpler DNS server to always return a fixed IP address, and the latter is probably easier to undo.
A firewall can spot TCP port 80 and port 443 traffic, unlike a DNS server. Firewalling outbound port 80 traffic is more typical of these requests, and either trap that traffic to a specific web page based on the capabilities of the firewall, or the web proxy approach that Camelot suggests. There are folks that tie access into the web proxies into external authentication and related; that'd be able to do what you want. Web proxies are usually combined with firewall blocks, as most sites want only the web proxy to have external access, too. But this is also rather more pieces than a DNS redirect, too.

How to configure DNS to support ipv4 and ipv6

Similar Messages

Maybe you are looking for