DNSStepbyStep Server管理.docx
- 文档编号:9487654
- 上传时间:2023-02-04
- 格式:DOCX
- 页数:26
- 大小:123.18KB
DNSStepbyStep Server管理.docx
《DNSStepbyStep Server管理.docx》由会员分享,可在线阅读,更多相关《DNSStepbyStep Server管理.docx(26页珍藏版)》请在冰豆网上搜索。
DNSStepbyStepServer管理
DNSStep-by-StepGuide
MicrosoftCorporation
Published:
October2005
Authors:
AndreaWeissandJimGroves
Editors:
JustinHallandCarolynEller
Abstract
ThisdocumentcanhelpyouimplementDomainNameSystem(DNS)onMicrosoft®Windows Server™ 2003onasmallnetwork.DNSisthemainwaythatWindowsServer 2003translatescomputernamestonetworkaddresses.AnActiveDirectory®-baseddomaincontrolleralsocanactasaDNSserverthatregistersthenamesandaddressesofcomputersinthedomainandthenprovidesthenetworkaddressofamembercomputerwhenqueriedwiththecomputer'sname.
ThisguideexplainshowtosetupDNSonasimplenetworkconsistingofasingledomain.
Informationinthisdocument,includingURLandotherInternetWebsitereferences,issubjecttochangewithoutnotice.Unlessotherwisenoted,theexamplecompanies,organizations,products,domainnames,e-mailaddresses,logos,people,places,andeventsdepictedhereinarefictitious,andnoassociationwithanyrealcompany,organization,product,domainname,e-mailaddress,logo,person,place,oreventisintendedorshouldbeinferred.Complyingwithallapplicablecopyrightlawsistheresponsibilityoftheuser.Withoutlimitingtherightsundercopyright,nopartofthisdocumentmaybereproduced,storedinorintroducedintoaretrievalsystem,ortransmittedinanyformorbyanymeans(electronic,mechanical,photocopying,recording,orotherwise),orforanypurpose,withouttheexpresswrittenpermissionofMicrosoftCorporation.
Microsoftmayhavepatents,patentapplications,trademarks,copyrights,orotherintellectualpropertyrightscoveringsubjectmatterinthisdocument.ExceptasexpresslyprovidedinanywrittenlicenseagreementfromMicrosoft,thefurnishingofthisdocumentdoesnotgiveyouanylicensetothesepatents,trademarks,copyrights,orotherintellectualproperty.
©2005MicrosoftCorporation.Allrightsreserved.
Microsoft,MS-DOS,Windows,WindowsNT,WindowsServer,areeitherregisteredtrademarksortrademarksofMicrosoftCorporationintheUnitedStatesand/orothercountries.
Allothertrademarksarepropertyoftheirrespectiveowners.
Contents
DomainNameSystemStep-by-StepGuide5
PlanningDNS6
UnderstandingtheDNSNamespace6
DesigningaDNSNamespace8
CreatinganInternetDNSDomainName9
CreatingInternalDNSDomainNames9
CreatingDNSComputerNames10
InstallingandConfiguringActiveDirectoryandDNS11
ConfiguringDNSClientSettings(DNSStep-by-Step)17
AdvancedDNSConfiguration(DNSStep-by-Step)21
AddingResourceRecords21
HostAResourceRecords22
MXResourceRecords23
AutomaticallyRemovingOutdatedResourceRecords25
ConfiguringaForwarderforInternetAccess28
TroubleshootingDNS(DNSStep-by-Step)28
DomainNameSystemStep-by-StepGuide
DomainNameSystem(DNS)isasystemfornamingcomputersandnetworkservicesthatorganizesthemintoahierarchyofdomains.DNSnamingisusedonTCP/IPnetworks,suchastheInternet,tolocatecomputersandservicesbyusinguser-friendlynames.WhenauserenterstheDNSnameofacomputerinanapplication,DNScanlookupthenameandprovideotherinformationassociatedwiththecomputer,suchasitsIPaddressorservicesthatitprovidesforthenetwork.Thisprocessiscallednameresolution.
NamesystemssuchasDNSmakeiteasiertousenetworkresourcesbyprovidingusersawaytorefertoacomputerorservicebyanamethatiseasytoremember.DNSlooksupthatnameandprovidesthenumericaddressthatoperatingsystemsandapplicationsrequiretoidentifythecomputeronanetwork.Forexample,usersenterinsteadoftheserver'snumericIPaddresstoidentifytheMicrosoftWebserverontheInternet.
DNSrequireslittleongoingmaintenanceforsmallandmedium-sizedbusinesses,whichtypicallyhaveonetofourDNSservers(largermedium-sizedorganizationsusuallyhavebetweenfourand14DNSservers).DNSproblems,however,canaffectavailabilityforyourentirenetwork.MostDNSproblemsarisebecauseofDNSsettingsthatareincorrectlyconfigured.Byfollowingtheproceduresinthisguide,youcanavoidsuchproblemswhenyoudeployDNSinasimpleMicrosoft®Windows Server™ 2003–basednetwork.
ThisguideexplainshowtoinstallandconfigureabasicDNSimplementationinanetworkthatconsistsofasinglenewActiveDirectory®domain.Itthenaddressessomeadvancedtopicsthatmedium-sizedorganizationsmightneedtoconsider.Finally,itincludessomebasicDNStroubleshootingstepsyoucantakeifyoususpectyourenvironmentishavingproblemswithDNS.
InThisGuide
∙PlanningDNS
∙InstallingandConfiguringActiveDirectoryandDNS
∙ConfiguringDNSClientSettings(DNSStep-by-Step)
∙AdvancedDNSConfiguration(DNSStep-by-Step)
∙TroubleshootingDNS(DNSStep-by-Step)
PlanningDNS
DNSistheprimarymethodfornameresolutionintheMicrosoft®Windows Server™ 2003,StandardEdition;WindowsServer 2003,EnterpriseEdition;andWindowsServer 2003,DatacenterEditionoperatingsystems(collectivelyreferredtoas"WindowsServer 2003"inthisguide).DNSisarequirementfordeployingtheActiveDirectory®directoryservice.IntegratingDNSwithActiveDirectoryenablesDNSserverstotakeadvantageofthesecurity,performance,andfaulttolerancecapabilitiesofActiveDirectory.
Typically,youorganizeyourDNSnamespace(theassociationofdomains,subdomains,andhosts)inawaythatsupportshowyouplantouseActiveDirectorytoorganizethecomputersonyournetwork.FormoreinformationaboutusingActiveDirectorytoorganizeyournetwork,see"DesigningtheActiveDirectoryLogicalStructure"inDesigningandDeployingDirectoryandSecurityServicesonMicrosoftWindowsServer 2003TechCenter(oronMicrosoftDownloadCenter(
UnderstandingtheDNSNamespace
DNSisahierarchicalnamingsystem.ADNSnameincludesthenamesofalloftheDNSnamespacesthatitbelongsto.ThefollowingillustrationshowshowtheDNSnamespaceisorganized.
TheDNSnamespacebeginswithalogicalrootdomainthatisnotnamed,partlybecauseitisimplicitinallDNSnames.TherootdomaininturncontainsalimitednumberofsubdomainsthathelporganizetheDNSnamespace.Thesesubdomainsarecalledtop-leveldomains(TLDs)becausetheyarethehighest-levelormostinclusivepartoftheDNSnamespacethatpeopleuse.Thenamesofthesetop-leveldomainsareeitherfunctionalorgeographical.
Functionaltop-leveldomainssuggestthepurposeoftheorganizationthathasregisteredasubdomaininthetop-leveldomain.Someofthemostcommonfunctionaltop-leveldomainnamesare:
∙The.comtop-leveldomain,whichisusuallyusedtoregisterDNSdomainnamesthatbelongtocommercialentities,suchascorporations.
∙The.edutop-leveldomain,whichismostoftenusedbyeducationalinstitutions,suchascollegesandpublicandprivateschools.
∙The.govtop-leveldomain,whichisusedbygovernmententities,includingfederal,state,andlocalgovernments.
∙The.nettop-leveldomain,whichisoftenusedbyorganizationsthatprovideInternetservices,suchasInternetserviceproviders(ISPs).
∙The.orgtop-leveldomain,whichistypicallyusedforprivate,nonprofitorganizations.
Geographicaltop-leveldomainsindicatethecountryorregionwheretheorganizationthatregisteredthedomainislocated.Forexample,anorganizationthatwantstoemphasizethatitislocatedinCanadawouldregisteritsInternetdomainnameinthe.catop-leveldomain,whileanorganizationthatwantstoshowthatitisbasedinBrazilwouldregisteritsInternetdomainnameinthe.brtop-leveldomain.
MostorganizationsthatwanttohaveanInternetpresence,suchasforaWebsiteorsendingandreceivinge-mail,registeranInternetdomainnamethatisasubdomainofatop-leveldomain.Usuallytheychooseasubdomainnamebasedontheirorganization'sname,suchasor.RegisteringanInternetdomainnamereservesthenamefortheexclusiveuseoftheorganizationandconfiguresDNSserversontheInternettoprovidetheappropriateInternetProtocol(IP)addresswhentheyarequeriedforthatname.Inotherwords,itcreatestheequivalentofatelephonedirectoryentryfortheInternetdomainname.Butinsteadofprovidingatelephonenumberforthename,itprovidestheIPaddressthatacomputerrequirestoaccessthecomputersintheregistereddomain.
TheDNSnamespaceisnotlimitedtojustthepubliclyregisteredInternetdomainnames.OrganizationsthathavenetworkswiththeirownDNSserverscancreatedomainsfortheirinternaluse.Asthenextsectionexplains,theseinternalDNSnamespacescanbe,butarenotrequiredtobe,subdomainsofapublicInternetdomainname.
DesigningaDNSNamespace
YoucandesignanexternalnamespacethatisvisibletoInternetusersandcomputers,andyoucanalsodesignaninternalnamespacethatisaccessibleonlytousersandcomputersthatarewithintheinternalnetwork.
OrganizationsthatrequireanInternetpresenceaswellasaninternalnamespacemustdeploybothaninternalandanexternalDNSnamespaceandmanageeachnamespaceseparately.Inthiscase,itisrecommendedthatyoumakeyourinternaldomainasubdomainofyourexternaldomain.Usinganinternaldomainthatisasubdomainofanexternaldomain:
∙RequiresyoutoregisteronlyonenamewithanInternetnameauthorityevenifyoulaterdecidetomakepartofyourinternalnamespacepubliclyaccessible.
∙Ensuresthatallofyourinternaldomainnamesaregloballyunique.
∙Simplifiesadministrationbyenablingyoutoadministerinternalan
- 配套讲稿:
如PPT文件的首页显示word图标,表示该PPT已包含配套word讲稿。双击word图标可打开word文档。
- 特殊限制:
部分文档作品中含有的国旗、国徽等图片,仅作为作品整体效果示例展示,禁止商用。设计者仅对作品中独创性部分享有著作权。
- 关 键 词:
- DNSStepbyStep Server管理 Server 管理