2523 - Creating authoritative secondary zones in NIOS

Scenario

Your training department is operating its own DNS server, with the zone training.techblue.net. You would like to receive a read-only copy of the zone data on the authoritative primary zone. Please configure this authoritative secondary zone in NIOS.

Estimate Completion Time

• 10 to 15 minutes

Credentials

Requirements

• Administrative DNS access to the Grid

Course References

• 2009: Configuring NIOS DNS Services

• 2023: Configuring NIOS DNS Zones

Lab Initiation

Access jump-desktop

Once the lab is deployed, you can access the virtual machines required to complete this lab activity. To initiate the lab, click on the jump-desktop tile and login to the Linux UI:

Username: training

Password: infoblox

Initiate lab

To initiate the lab, double-click the Launch Lab icon on the Desktop.

Choose the lab number from the list and click OK.

After clicking OK, you will see a pop-up message with a brief description of the lab task. If the description looks correct, click Yes to continue lab initiation.

Lab initiation will take a couple of minutes to finish.

Once complete, you will see another pop-up message with the login credentials and the URL for the Grid Manager’s User Interface. Note that the credentials may differ from those from prior labs.

Tasks

1. Creating an authoritative secondary zone.

Task 1: Creating an authoritative secondary zone

The training department's DNS server is imai.techblue.io, with the IP address 184.170.237.34 Please configure a primary secondary zone training.techblue.net to receive data from imai.techblue.io. The Grid secondary members are ibns1.techblue.net and ibns2.techblue.net.

Solutions

Task 1 Solution: Creating an authoritative secondary zone

Create the training.techblue.net Authoritative (Secondary) zone

1. Lookup the IP address of imai.techblue.io (You can use the dig command in a terminal on your VM desktop)

2. Click the Add dropdown menu and select Authoritative Zone

3. Leave the radio button set to Add an authoritative forward-mapping zone

4. Click Next

5. For Name, enter training.techblue.net

6. Leave the remaining settings unchanged and click Next

7. Select the radio button to Use this set of name servers

8. Click the Add drop-down menu and select External Primary

9. For Name Server Name, enter imai.techblue.io

10. For the Name Server Address, enter the IP address that you looked up for imai.techblue.io

11. Check Use TSIG

12. Select the radio button next to Key Name if it is not already selected

13. Populate the Key name, Key algorithm, and Key Data from the file in the folder Shared Drive named tsig_xfer_nios.txt. This is on your jump-desktop VM. (full path is /mnt/shared/tsig_xfer_sha256.txt)

14. Click Add

15. Click the Add drop-down menu again, and select Grid Secondary

16. Click on the Select button, and select ibns1.techblue.net from the name server list

17. Click Add to add it to the list of zone name servers

18. Repeat the above steps to add ibns2.techblue.net as a Grid Secondary

19. Click Save & Close

20. The Zones window now displays the new training.techblue.net authoritative zone (you may need to click Toggle Flat View)

21. Click on the Restart button in the notification banner

22. Click Restart in the Restart Grid Services window