Can we set up NON-AD integrated secondary DNS server in DMZ and configure zone transfer from AD intergrated primary DNS in domain.

liban fahad 21

Hi Team,

Can we set up NON-AD integrated secondary DNS server(work group server) in DMZ and configure zone transfer from AD intergrated primary DNS in domain.

if it is possible then what ports to be enable and how to configure the zone transfer.

Kindly suggest.

1 answer

Charles Thivierge 4,066 Reputation points

2022-03-29T14:16:11.817+00:00

You can configure a secondary zone in your DMZ that will replicate your primary (AD integrated) zone from our internal network.
Zone transfer require TCP and UDP 53 and you must allow zone transfer on your primary zone.
Please sign in to rate this answer.
liban fahad 21 Reputation points

2022-03-29T14:45:25.993+00:00

Hi cthivierge,

Thanks for the above details.

will it work if the secondary DNS which is in DMZ is not join to domain.

Thanks
Fahad

Charles Thivierge 4,066 Reputation points

2022-03-29T14:58:05.94+00:00

Yes, no problem.

On your primary DNS Server

Right click on the zone you want to transfer and go in the zone transfers

Click the check box Allow zone transfer and then click on the radio button Only to the following servers

In the list, add the IP address of your DNS server in the DMZ and it's done.

On your DNS Server in the DMZ, in the DNS console

Right click on Forward lookup zone

Select New Zone

Click Next and select Secondary zone

Type the name of the zone you want to transfer (ex: mydomain.internal) and click next

type the IP address of the internal DNS server from which you want to read the zone (the AD Server)

Click Next and click finish

hth

Anonymous

2022-03-29T18:18:23.813+00:00

Ok, so I stood up a new one in workgroup and can confirm this absolutely will work but it is imperative that you create the reverse zone as first step.

liban fahad 21 Reputation points

2022-03-30T08:39:31.38+00:00

Hi cthivierge/Patric,

thanks for the above answer.

i will test it and confirm you.

Thanks
Fahad
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Can we set up NON-AD integrated secondary DNS server in DMZ and configure zone transfer from AD intergrated primary DNS in domain.

1 answer

Your answer