Hi
I'm having problems with name resolution.
Scenario:

1 - Site1 -> Tree Root Domain (domain.root) -> 4 Domain Controllers all with
Dns Service Installed, AD integrated, replication only between DNS servers
on the tree root domain. (This DNS has 1 delegation for the child domain)
Site1 - Subnet 192.168.0.x/24.
1- DC - 192.168.0.254
2- DC - 192.168.0.253
3- DC - 192.168.0.252
4- DC - 192.168.0.251


2 - Site2 -> Child Domain of the tree root (child.domain.root) -> 1 Domain
Controller with DNS server installed, AD integrated, replication only
between DNS servers on the child domain. (This DNS has 1 delegation for the
grandchild domain) Site2 - Subnet 192.168.1.x/24.

3 - Site3 -> GrandChild Domain of the child.domain.root -> 1 Domain
Controller with DNS server installed, AD integrated, replication only
between DNS servers on the Grandchild domain.Site2 - Subnet 192.168.2.x/24.


The sites are all connected trough routers.

The problem:
The problem refers only to the Tree root resolution.

When we try to ping the domain.root from the child or the grandchild
domains, if all Dns Servers are online there is no problem.

But If we have for example the DC 2 (192.168.0.253) and the DC 3
(192.168.0.252) and the DC 4 (192.168.0.251) Offline, then sometimes we
can't resolve the domain.root.

I run nslookup from the childs domain and i'm able to see all NS records
refering to DC1,DC2,DC3 and DC4.
It seams that when the DCs are offline (disconnected or not accessible), the
DNS on child and grandchild domains aren't able to verify which dns are
offline and returns the address of the disconnected DCs. For example with DC
2,3,4 disconnected and the DC1 connected if I try to ping domain.root it
returns the address of the DC2 which is 192.168.0.253 or sometimes returns
the address of the DC3 which is 192.168.0.252 and so on, and off course with
this behavior the request times out.
Only sometimes it returns the right address of the DC that is connected.

Is this normal??? Is this have to do with the fact that the sites are
connected trough routers and the dns aren't able to see which dns are
offline???
What is the best way to resolve this??

Regards.

GIG wrote:
> Hi
> I'm having problems with name resolution.
> Scenario:
>
> 1 - Site1 -> Tree Root Domain (domain.root) -> 4 Domain Controllers
> all with Dns Service Installed, AD integrated, replication only
> between DNS servers on the tree root domain. (This DNS has 1
> delegation for the child domain) Site1 - Subnet 192.168.0.x/24.
> 1- DC - 192.168.0.254
> 2- DC - 192.168.0.253
> 3- DC - 192.168.0.252
> 4- DC - 192.168.0.251
>
>
> 2 - Site2 -> Child Domain of the tree root (child.domain.root) -> 1
> Domain Controller with DNS server installed, AD integrated,
> replication only between DNS servers on the child domain. (This DNS
> has 1 delegation for the grandchild domain) Site2 - Subnet
> 192.168.1.x/24.
>
> 3 - Site3 -> GrandChild Domain of the child.domain.root -> 1 Domain
> Controller with DNS server installed, AD integrated, replication only
> between DNS servers on the Grandchild domain.Site2 - Subnet
> 192.168.2.x/24.
>
>
> The sites are all connected trough routers.
>
> The problem:
> The problem refers only to the Tree root resolution.
>
> When we try to ping the domain.root from the child or the grandchild
> domains, if all Dns Servers are online there is no problem.
>
> But If we have for example the DC 2 (192.168.0.253) and the DC 3
> (192.168.0.252) and the DC 4 (192.168.0.251) Offline, then sometimes
> we can't resolve the domain.root.
>
> I run nslookup from the childs domain and i'm able to see all NS
> records refering to DC1,DC2,DC3 and DC4.
> It seams that when the DCs are offline (disconnected or not
> accessible), the DNS on child and grandchild domains aren't able to
> verify which dns are offline and returns the address of the
> disconnected DCs. For example with DC 2,3,4 disconnected and the DC1
> connected if I try to ping domain.root it returns the address of the
> DC2 which is 192.168.0.253 or sometimes returns the address of the
> DC3 which is 192.168.0.252 and so on, and off course with this
> behavior the request times out.
> Only sometimes it returns the right address of the DC that is
> connected.
>
> Is this normal??? Is this have to do with the fact that the sites are
> connected trough routers and the dns aren't able to see which dns are
> offline???
> What is the best way to resolve this??

This is normal DNS behavior, DNS does not verify that any server is offline,
it only returns the record for the name queried for.

What problem are you trying to resolve?

--
Best regards,
Kevin D. Goodknecht Sr. [MVP]
Hope This s
===================================
When responding to posts, please "Reply to Group"
via your newsreader so that others may learn and
benefit from your issue, to respond directly to
me remove the nospam. from my email address.
===================================
http://www.lonestaramerica.com/
http://support.wftx.us/
https://secure.lsaol.com/
===================================
Use Outlook Express?... Get OE_Quotefix:
It will strip signature out and more
http://home.in.tum.de/~jain/software/oe-quotefix/
===================================
Keep a back up of your OE settings and folders
with OEBackup:
http://www.oe.com/OEBackup/Default.aspx
===================================

Hi Keven
The problem is that the replication sometimes fail because off this problem.

"Kevin D. Goodknecht Sr. [MVP]" <admin@nospam.WFTX.US> wrote in message
news:umvkYqdUGHA.2800@TK2MSFTNGP10.phx.gbl...
> GIG wrote:
>> Hi
>> I'm having problems with name resolution.
>> Scenario:
>>
>> 1 - Site1 -> Tree Root Domain (domain.root) -> 4 Domain Controllers
>> all with Dns Service Installed, AD integrated, replication only
>> between DNS servers on the tree root domain. (This DNS has 1
>> delegation for the child domain) Site1 - Subnet 192.168.0.x/24.
>> 1- DC - 192.168.0.254
>> 2- DC - 192.168.0.253
>> 3- DC - 192.168.0.252
>> 4- DC - 192.168.0.251
>>
>>
>> 2 - Site2 -> Child Domain of the tree root (child.domain.root) -> 1
>> Domain Controller with DNS server installed, AD integrated,
>> replication only between DNS servers on the child domain. (This DNS
>> has 1 delegation for the grandchild domain) Site2 - Subnet
>> 192.168.1.x/24.
>>
>> 3 - Site3 -> GrandChild Domain of the child.domain.root -> 1 Domain
>> Controller with DNS server installed, AD integrated, replication only
>> between DNS servers on the Grandchild domain.Site2 - Subnet
>> 192.168.2.x/24.
>>
>>
>> The sites are all connected trough routers.
>>
>> The problem:
>> The problem refers only to the Tree root resolution.
>>
>> When we try to ping the domain.root from the child or the grandchild
>> domains, if all Dns Servers are online there is no problem.
>>
>> But If we have for example the DC 2 (192.168.0.253) and the DC 3
>> (192.168.0.252) and the DC 4 (192.168.0.251) Offline, then sometimes
>> we can't resolve the domain.root.
>>
>> I run nslookup from the childs domain and i'm able to see all NS
>> records refering to DC1,DC2,DC3 and DC4.
>> It seams that when the DCs are offline (disconnected or not
>> accessible), the DNS on child and grandchild domains aren't able to
>> verify which dns are offline and returns the address of the
>> disconnected DCs. For example with DC 2,3,4 disconnected and the DC1
>> connected if I try to ping domain.root it returns the address of the
>> DC2 which is 192.168.0.253 or sometimes returns the address of the
>> DC3 which is 192.168.0.252 and so on, and off course with this
>> behavior the request times out.
>> Only sometimes it returns the right address of the DC that is
>> connected.
>>
>> Is this normal??? Is this have to do with the fact that the sites are
>> connected trough routers and the dns aren't able to see which dns are
>> offline???
>> What is the best way to resolve this??
>
> This is normal DNS behavior, DNS does not verify that any server is
> offline,
> it only returns the record for the name queried for.
>
> What problem are you trying to resolve?
>
> --
> Best regards,
> Kevin D. Goodknecht Sr. [MVP]
> Hope This s
> ===================================
> When responding to posts, please "Reply to Group"
> via your newsreader so that others may learn and
> benefit from your issue, to respond directly to
> me remove the nospam. from my email address.
> ===================================
> http://www.lonestaramerica.com/
> http://support.wftx.us/
> https://secure.lsaol.com/
> ===================================
> Use Outlook Express?... Get OE_Quotefix:
> It will strip signature out and more
> http://home.in.tum.de/~jain/software/oe-quotefix/
> ===================================
> Keep a back up of your OE settings and folders
> with OEBackup:
> http://www.oe.com/OEBackup/Default.aspx
> ===================================
>
>