Serving static AAAA records with IOS' DNS server

Hi guys,
Has anyone managed to get IOS to serve statically defined AAAA records? I do this just fine with A records as such :
On the router :
ip dns server
ip host ns.example.com 1.1.1.1
ip host somehost.example.com 1.1.1.2
ip dns primary example.org soa ns.example.org [email protected] 21600 900 7776000 86400
From the Linux box :
unixhost$ dig @1.1.1.1 somehost.example.com
; <<>> DiG 9.8.1-P1 <<>> @1.1.1.1 somehost.example.com
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 32168
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION:
;somehost.example.com.        IN    A
;; ANSWER SECTION:
somehost.example.com.    10    IN    A   1.1.1.2
;; Query time: 1 msec
;; SERVER: 1.1.1.1#53(1.1.1.1)
;; WHEN: Wed Aug 15 00:42:11 2012
;; MSG SIZE  rcvd: 50
Interestingly whenever I add a static ipv6 entry, I get the SOA as  an answer instead of the actual AAAA record. But from the router itself,  it can use the statically defined hosts just fine.
On the router :
ipv6 host somehost.example.com 2001:1:1:1::2
From the Linux box :
unixhost$ dig -t AAAA @1.1.1.1 somehost.example.com
; <<>> DiG 9.8.1-P1 <<>> -t AAAA @1.1.1.1 somehost.example.com
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 53347
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;somehost.example.com.        IN    AAAA
;; AUTHORITY SECTION:
somehost.example.com.        86400    IN    SOA  ns.example.com. [email protected]. 3553994542 21600 900 7776000 86400
;; Query time: 1 msec
;; SERVER: 192.168.200.252#53(192.168.200.252)
;; WHEN: Wed Aug 15 00:42:22 2012
;; MSG SIZE  rcvd: 108
But from the router, it works just fine :
router#ping ipv6 somehost.example.com
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 2001:1:1:1::2, timeout is 2 seconds:
Success rate is 100 percent (5/5), round-trip min/avg/max = 0/1/4 ms
I'm running 15.2(2)T1.
Thanks,
Eric Lauriault

Hello Everyone,
in case someone runs into this thread: In our case it turned out that the problem was related to the DNS Server service. Regardless of the above configuration settings on the NIC and in the registry, the DNS server will always register in DNS using
all of its IPs that the service is listening on. To change this behaviour you can tell the DNS service to only register individual IPS in the registry:
HKLM\SYSTEM\CurrentControlSet\Services\DNS\Parameters
      Add a Reg_Multi_SZ called "PublishAddresses" and specify the list of IPs
In our case we added just one of the three configured IPs and from then on the server only registered this address and not the other ones.
Regards
HarryNew

Similar Messages

  • Obtaining DNS servers automatically on Cisco ADSL routers;" not static dns with command dns-server x.x.x.x" ?

    Obtaining DNS servers automatically on Cisco ADSL routers;" not static dns with command dns-server x.x.x.x" ?

    Ok Thank you Karsten

  • Server returned code (500) with message Internal Server Error and content

    Hi cracks,
    I am trying to run the web service
    InternalRequestSRMUpdateRequestConfirmation_In
    an get following error :
    Server returned code (500) with message <Internal Server Error> and content type <text/html; charset=utf-8>.
    any idea?
    rgds
    Vincent

    yes,
    you got crash aka shortdump in your system.
    - webserver: didn't crash, because it issued an error 500, so it works
    - remains either the soap runtime, which usually doesn't dump but throw errors and the application itself.
    I'd look into the tracefiles (ST11) or tie the debugger to the service in question (SICF) and try to find out hat happens/d.
    anton

  • How do I have a cRIO register its IP address with the DNS server, clearing any previous entries?

    I've run into a problem when I try to move a cRIO-9073 from one network segment to another (say 10.1.33.x to 10.1.36.x):  The old IP address remains registered on our DNS server, so trying to access the cRIO by its DNS name fails as the DNS server tells my PC to look for the old IP address.
    When I search the DNS server from my PC using "NSLOOKUP" with the old IP address, it finds the DNS name of the device.  If I repeat the search with the new IP address (MAX finds the device with its new address, but I hate to have users use MAX to find it), it again returns the DNS name, so it appears the DNS name is registered under two IP addresses on our DNS server.  I've also repeatedly tried to flush my PC's DNS cache using command "IPCONFIG /FLUSHDNS", but it still tries the old IP address.  I also see in MAX that the cRIO is using the same DNS server my PC uses.
    Our IT people say that I have to tell the device to re-register its DNS name.  They told me a command to do it from Windows (command "ipconfig /registerdns"), but obviously this is VxWorks on the cRIO.  Is there a command to do this on the cRIO or a setting in the "NI-RT.INI" file I can change?  I honestly don't think this is the issue (as it successfully registered the new IP address under its name), but I want to try it if it's possible.
    Thanks!
    Erik
    ps - Our IT dept. won't let me use static IPs unless I get them assigned by both their MAC address AND the network jack they're connected to, so that's out.

    Normally this is actually a function of your DNS server. It needs to perform a periodic flush of stale records. You can check the RFC for the DNS protocol and build the necessary packet yourself.
    Mark Yedinak
    "Does anyone know where the love of God goes when the waves turn the minutes to hours?"
    Wreck of the Edmund Fitzgerald - Gordon Lightfoot

  • HT1386 My phone can not activete to the server after updating it with ios 6.1.3 update

    Am using an apple 3g after updating it with ios 6.1.3 update it is failling to activete th the server.What should i do to have it work?

    John Bwalya wrote:
    Am using an apple 3g ...
    The iPhone 3G can Only update as far as iOS 4.2.1
    John Bwalya wrote:
    ... after updating it with ios 6.1.3 update it is failling to activete th the server....
    See this discussion.
    https://discussions.apple.com/message/21189708

  • How to get Scavenged Records from Windows DNS Server uisng WMI API Call?

    Hi Guys,
    I'm facing one problem to find below things,
    DNS Server have list of zones and each zones may have DNS Records. DNS Server provides an option set scavenging interval on server or in zone level.
    Once records are old the server automatically apply scavenging process to remove that record.
    I need to get DNS Records that are scavenged and timestamp using WMI Call?
    sharavanna

    The DNS log has this information.  Just extract it from the log.
    A scavenged record does not exisit when it is scavenged so it cannot be read from the DNS server.  It has been deleted.
    ¯\_(ツ)_/¯

  • Windows server 2012 as primary DC and DNS server and windows server 2003 as secondary DC and DNS

    Migration from windows server 2003 AD DC and DNS server to windows server 2012 R2,
    Cannot I set up Windows server 2012 R2 as primary DC and DNS  , windows server 2003 as secondary DC and DNS ? (for backup server when server 2012 fail, user can continue to login and access internet services)

    You can mix both as long as your Forest and Domain Functional level are Windows Server 2003. However, I would like to bring your attention to this blog about known problems when mixing DCs with Windows Server 2003 and 2012 R2 OS:
    http://blogs.technet.com/b/askds/archive/2014/07/23/it-turns-out-that-weird-things-can-happen-when-you-mix-windows-server-2003-and-windows-server-2012-r2-domain-controllers.aspx
    This posting is provided AS IS with no warranties or guarantees , and confers no rights.
    Ahmed MALEK
    My Website Link
    My Linkedin Profile
    My MVP Profile

  • Integrating Exchange Server in the cloud with Project / Sharepoint Server internal

    Hi,
    I wonder how do I integrate service Exchange Server with Project Server 2010.
    I have a Project Server 2010 you need to send emails with project updates and other integrations with Outlook.O standard procedure is to perform procedures (run commands in Exchange Server Shell) and create users in Project Server.
    But I have a situation where my client uses a service exchange in the cloud and not a server for internal mail.
    How do I integrate Project Server with Exchange this scenario where the mail server is an external service (cloud)?
    I made the settings as the procedure () but got no success, no mail was received to be alert or reminder:
    Below are the screens with the settings that were made.
    Crawl Resource Configuration (http://technet.microsoft.com/pt-br/library/ee806927(v=office.14).aspx)
    1) I Installed SMTP service on my server.
    2) I made the configuations above
    3) I configured the outgoing/Ingoing Setting in Sharepoint Central Administration

    Hi Marcelo,
    Without providing the extended rights to project user, I dont think you will be able to successfully integrate project server with exchange cloud. Here is the technet article about how to integrate it with extended rights which needs running commands running
    on exchange server:
    http://technet.microsoft.com/en-in/library/ff468700%28v=office.14%29.aspx
    Vikram Daruru - MSFT

  • AAA auth with ip http server not working

    Hi all,
    I am unable to get ip http server to authenticate against tacacs. attached is the debug output when logging in with the user "mark".
    Router config:
    aaa new-model
    aaa authentication login default group tacacs+ local enable
    aaa authentication login ALREADY-IN none
    aaa authentication login web group tacacs+ local enable
    aaa authorization exec web group tacacs+ local if-authenticated
    aaa session-id common
    ip http server
    ip http authentication aaa login-authentication web
    ip http authentication aaa exec-authorization web
    the priv-lvl 15 attribute is being sent, but IP HTTP Auth fails.. any ideas why?
    Cheers,
    Mark
    Update: Fixed it! I believe the access-enable autocommand was the cause!

    Hi,
    I have seen that additional attributes such as "access-enable timeout 1920" would not allow http authentication to work with certain IOS versions.
    Regards,
    Vivek

  • Problem with ios certificate server not updating the CRL

    Hi all,
    The background is that i'm currently setting up a DMVPN solution with the ipsec tunnels between the spokes created using certificates.
    I'm using a cisco 877 as the CA server (its running 12.4(6)T5) to provide the certificates to the spoke routers. This part is working fine - the spokes can request a certificate and get one issue all well and good.
    The problem is on the CA, the CRL lifetime is set to 24 hours but the CA is not updating the CRL so when the spokes look for the revocation list (as set in their trustpoint) they are reporting an error that the CRL is out of date and won't connect.
    If is do a '#sh crypto pki server' it lists a 'CRL NextUpdate timer. this has a timestamp that is 24 hours after the last certificate was revocked. The only way i can get the CRL to be re-generated is to revoke a certificate.
    So, my question is, have i missed something here? I thought the CA would automatically generat a new CRL file every 24hours.
    Can anyone help?
    thanks.

    Hi Mark (?)
    this seems to match this bug:
    CSCsy95838    IOS CA: CRL not updated, update timer no started
    However it does not mention if 12.4(6)T5 is affected, only that it was found in 12.4(15)T3 and resolved in 12.4(15)T10 and other more recent releases.
    I would suggest trying the latest 12.4(15)Tx, 15.0(1)Mx or 15.1(4)Mx release if you can.
    I supposed you've though of it, but just in case: as a workaround you can disable the CRL check on all the DMVPN routers, obviously they will still allow connections from routers with a revoked spoke.
    As a (temporary?) replacement for a CRL, you could use a "certificate ACL" with which you can kind of create a "manual local CRL" :
      crypto pki certificate map certACL 10
       serial-number ne
       serial-number ne
       etc.
      crypto pki trustpoint myTP
       match certificate certACL
    (note the "ne" stands for "not equal" so you are permitting any certificate whose serial number is not listed)
    Obviously you would have to configure (and maintain!) this on each router participating in the DMVPN so this is cumbersome, but I suppose if you don't often revoke certs it might be an option.
    hth
    Herbert
    If this post answers your question, please click the "Correct Answer" button

  • Cisco AAA authentication with windows radius server

    Cisco - Windows Radius problems
    I need to created a limited access group through radius that I can have new network analysts log into
    and not be able to commit changes or get into global config.
    Here are my current radius settings
    aaa new-model
    aaa group server radius IAS
     server name something.corp
    aaa authentication login USERS local group IAS
    aaa authorization exec USERS local group IAS
    radius server something.corp
     address ipv4 1.1.1.1 auth-port 1812 acct-port 1813
     key mypassword
    line vty 0 4
     access-class 1 in
     exec-timeout 0 0
     authorization exec USERS
     logging synchronous
     login authentication USERS
     transport input ssh
    When I log in to the switch, the radius server is passing the corrrect attriubute
    ***Jan 21 13:59:51.897: RADIUS:   Cisco AVpair       [1]   18  "shell:priv-lvl=7"
    The switch is accepting it and putting you in the correct priv level.
    ***Radius-Test#sh priv
       Current privilege level is 7
    I am not sure why it logs you in with the prompt for  privileged EXEC mode when
    you are in priv level 7. This shows that even though it looks like your in priv exec
    mode, you are not.
    ***Radius-Test#sh run
                    ^
       % Invalid input detected at '^' marker.
       Radius-Test#
    Now this is where I am very lost.
    I am in priv level 7, but as soon as I use the enable command It moves me up to 15, and that gives me access to
    global config mode.
    ***Radius-Test#enable
       Radius-Test#
    Debug log -
    Jan 21 14:06:28.689: AAA/MEMORY: free_user (0x2B46E268) user='reynni10'
    ruser='NULL' port='tty390' rem_addr='10.100.158.83' authen_type=ASCII service=ENABLE priv=15 vrf= (id=0)
    Now it doesnt matter that I was given priv level 7 by radius because 'enable' put me into priv 15
    ***Radius-Test#sh priv
       Current privilege level is 15
       Radius-Test#
    I have tried to set
    ***privilege exec level 15 enable
    It works and I am no longer able to use 'enable' when I am at prv level 7, but I also cannot get the commands they will need to work.
    Even if I try to do
    ***privilege exec level 7 show running-config (or other variations)
    It will allow you to type sh run without errors, but it doest actually run the command.
    What am I doing wrong?
    I also want to get PKI working with radius.

    I can run a test on my radius system, will report back accordingly, as it's a different server than where I am currently located.
    Troubleshooting, have you deleted the certificate/network profile on the devices and started from scratch?

  • Installing Ad with separate dns server

    I have two servers, Dc1-Server 2012 GUI,Dc2 - Server 2012 Core  I want to install Ad in Dc1 and DNS and DHCP in Dc2 Primary DNS run on Dc2, And also need to create Secondary DNS ON Dc1 Can u Ex plane the what are the step to configure this network  
    My email [email protected]

    Hi,
    You can refer the following similar thread solution:
    To configure dns in a seperate system outside the active directory
    http://social.technet.microsoft.com/Forums/windowsserver/en-US/cfd959e6-37d1-4a9f-8589-4a799b58e45f/to-configure-dns-in-a-seperate-system-outside-the-active-directory?forum=winserverNIS
    Hope this helps.
    We
    are trying to better understand customer views on social support experience, so your participation in this
    interview project would be greatly appreciated if you have time.
    Thanks for helping make community forums a great place.

  • Static when recording with microphone

    Posting from my new iPad 2. Has anyone else had issues with the microphone? Whenever I record from any app there is tons of static when playing it back.

    So I am one more joining the group . after "thinking" about it , reading some stuff from the internet and doing some tries , these are what i have figured out .
    Please note that these are not solutions , they are thoughts and might be 100 % wrong.
    1) The The front-facing camera assembly includes the camera, headphone jack, and microphone and passes just exactly underneath the magnets from the smart cover. (please if possible each one with the issue verify that you own a smart cover) .. after reading not sure if I was reading @ the correct sites , i have found out - understood that the wires from microphones are protected with a magnetic shield.
    So , i think , I had faulty magnetic shield at those cables and with the smart cover the issue came up - p.s. my microphone worked fine for some days .
    2) I did some restores .. at my first restore -set up as new - i opened the camera app to video record and test the mic by talking , I did not hear my voice , but I was not hearing the static noise either. 2nd restore I think the sound is worse than the first time i spotted the issue . 3rd restore is being done at the moment so if there is something new I will post again. - So could it be firmware wise ? If yes, how come it worked for some days ?

  • Using Network Policy Server Polices in conjunction with RRAS on Server 2012 R2

    Within the RRAS MMC console there is an option called Remote Access Logging & Polices.
    If I right mouse click and can get to the NPS and tried to configure a couple of basic settings (e.g. group membership of Domain Admins required) for granting access.
    However when testing this, the policy did not seem to apply (aka the user got on even though group membership was not correct).
    I have made sure that the dial-in properties for the user was set to Control access through NPS Network Policy.
    Q/ For the above to work, do I actually need to install the NPS role itself or can it work independently?

    Hi,
    It seems that Remote Access logging and policy configuration is now performed through NPS since Windows server 2008.
    As you have tested for this, I assume that you would need to install the NPS role to perform RADIUS accounting and Network Polices.
    More information:
    Network Policy Server
    In addition, since it is related to network, I will move it to the Network Access Protection forum for better assistance. Thanks for your understanding and support.
    Best regards,
    Susie

  • Adobe InDesign Server CC 2014 compatible with Windows 2012 Server R2.

    The systemrequirements are maybe not up to date.
    There i can not see the R2 version supported.
    Are all newer releases supported?
    Thx

    So has Adobe Officially Released Server CC 2014?

Maybe you are looking for