question

Jimmy2521 avatar image
Jimmy2521 asked ·

Split Brain DNS policy for conditional forwarders?

Hi,

I'm testing out DNS policy for split brain DNS and it's working OK except for conditional forwarded requests as they are not being processed by the policy. The way I have this set up is as follows:

I have 2 different domains talking to each other with 2-way trusts, etc. On DC1 (domain A), I have DNS policy set up for split DNS so that requests from subnet A are directed to internal resource, and requests from subnet B are directed to external resource and this works fine.

On DC1 (domain B), I have conditional forwarders set up so when subnet C on domain B makes a request for a zone that lives in DC1 (domain A), the requests are resolved with no issues.

The above is working OK but a new requirement has come up and I need to direct requests from subnet C to point to external resource instead of internal one. So, I created a another policy on DC1 (domain A) to direct requests coming from subnet C on domain B to go to external resource. This doesn't work and I'm not sure if it is possible to get the policies to work in this scenario.

Can anyone please shed some light on this?

Thank you.

windows-dhcp-dns
2 comments
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi,
 
Just want to confirm the current situations.
 
Please feel free to let us know if you need further assistance.
 
Best Regards,
Sunny

0 Votes 0 · ·

Hi,

Just checking in to see if the information provided was helpful.

If yes, you may accept useful reply as answer, if not, welcome to feedback.

Best Regards,
Sunny

0 Votes 0 · ·

1 Answer

SunnyQi-MSFT avatar image
SunnyQi-MSFT answered ·

Hi,

Thanks for posting in Q&A platform.

Before we go further, could you please help to post the Network topology diagram of your whole environment structure? It will help us understand your environment more clearly.

Please understand, due to the environmental limitation, we have no such environment to test in our lab. It is hard for us to reproduce and analyze this issue from Q&A platform support level.

If your issue is urgent, I would suggest you open a case with Microsoft where more in-depth investigation can be done so that you would get a more satisfying explanation and solution to this issue.

Also, in this way , they can have a clear picture about your issue ( requirements ) and your environment by phone communication and live share session.

You may find phone number for your region accordingly from the link below:

https://support.microsoft.com/en-us/gp/customer-service-phone-numbers


Best Regards,
Sunny


If the Answer is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


Share
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.