2523 - Creating authoritative secondary zones in NIOS
Scenario
Your training department is operating its own DNS server, with the zone training.techblue.net. You would like to receive a read-only copy of the zone data on the authoritative primary zone. Please configure this authoritative secondary zone in NIOS.
Estimate Completion Time
10 to 15 minutes
Credentials
Description | Username | Password | URL or IP |
---|---|---|---|
Grid Manager UI | admin | infoblox |
Requirements
Administrative DNS access to the Grid
Course References
2009: Configuring NIOS DNS Services
2023: Configuring NIOS DNS Zones
Lab Initiation
Access jump-desktop
Once the lab is deployed, you can access the virtual machines required to complete this lab activity. To initiate the lab, click on the jump-desktop tile and login to the Linux UI:
Username: training
Password: infoblox
Initiate lab
To initiate the lab, double-click the Launch Lab icon on the Desktop.
Choose the lab number from the list and click OK.
After clicking OK, you will see a pop-up message with a brief description of the lab task. If the description looks correct, click Yes to continue lab initiation.
Lab initiation will take a couple of minutes to finish.
Once complete, you will see another pop-up message with the login credentials and the URL for the Grid Manager’s User Interface. Note that the credentials may differ from those from prior labs.
Tasks
Creating an authoritative secondary zone.
Task 1: Creating an authoritative secondary zone
The training department's DNS server is imai.techblue.io, with the IP address 184.170.237.34 Please configure a primary secondary zone training.techblue.net to receive data from imai.techblue.io. The Grid secondary members are ibns1.techblue.net and ibns2.techblue.net.
Solutions
Task 1 Solution: Creating an authoritative secondary zone
Create the training.techblue.net Authoritative (Secondary) zone
Lookup the IP address of imai.techblue.io (You can use the
dig
command in a terminal on your VM desktop)Click the Add dropdown menu and select Authoritative Zone
Leave the radio button set to Add an authoritative forward-mapping zone
Click Next
For Name, enter
training.techblue.net
Leave the remaining settings unchanged and click Next
Select the radio button to Use this set of name servers
Click the Add drop-down menu and select External Primary
For Name Server Name, enter imai.techblue.io
For the Name Server Address, enter the IP address that you looked up for imai.techblue.io
Check Use TSIG
Select the radio button next to Key Name if it is not already selected
Populate the Key name, Key algorithm, and Key Data from the file in the folder Shared Drive named tsig_xfer_nios.txt. This is on your jump-desktop VM. (full path is
/mnt/shared/tsig_xfer_sha256.txt
)Click Add
Click the Add drop-down menu again, and select Grid Secondary
Click on the Select button, and select ibns1.techblue.net from the name server list
Click Add to add it to the list of zone name servers
Repeat the above steps to add ibns2.techblue.net as a Grid Secondary
Click Save & Close
The Zones window now displays the new training.techblue.net authoritative zone (you may need to click Toggle Flat View)
Click on the Restart button in the notification banner
Click Restart in the Restart Grid Services window