3-配置和管理DNS全解.ppt

Module 2: Configuring and Troubleshooting DNS Course 6421A * Define DNS notify. Describe the DNS notify process by referring to the slide. A DNS notify is an update to the original DNS protocol specification that permits notification to secondary servers when zone changes occur. Ensure that students understand that this can be useful if they manage a time-sensitive environment where data accuracy is important. Module 2: Configuring and Troubleshooting DNS Course 6421A * Zone information provides a lot of information about an organization. Precautions should be taken to ensure it is secure from malicious access. It also should be protected against being overwritten with bad data (known as DNS poisoning). You can secure 区域传输s to protect your DNS infrastructure. Explain that you can set a list of trusted servers that may transfer the zone. These options also can be used to disallow 区域传输 and to transfer the data to any server that requests it. Explain that you can use Internet Protocol Security (IPsec) or virtual private networks (VPNs) to secure 区域传输s. While the options that specify the servers that may request zone data provides security by limiting the data recipients, it does not secure that data during transmission. If the zone information is highly confidential, we recommend that zone data is replicated over a VPN tunnel or that you use an IPsec policy to secure the transmission. This prevents packet sniffing to resolve information in the data transmission. Explain that using Active Directory-integrated zones can further secure a zone. Using Active Directory-integrated zones replicates the zone data as part of normal Active Directory replications. Therefore, ensure that the students understand that if they need to secure DNS zone traffic in Active Directory-integrated zones, they also must secure the Active Directory replication data. Module 2: Configuring and Troubleshooting DNS Course 6421A * Demonstrate how to: Create and configure DNS zones. Configure DN