AT&T Unified Communications Services. DNS Configuration Guide For Customer s System Administrator

Transcription

1 AT&T Unified Communications Services For Customer s System Administrator V1.0 March, 2016 Disclaimer The contents of the document may be revised by AT&T at any time without notice. Please consult the Service Guide for details of the service and features available with the product. This document is provided as a reference document only and is not intended to modify the agreement between the parties. In the event of a conflict between this document and the Customer agreement (including the Service Guide), the Customer agreement takes priority AT&T Intellectual Property 2016 AT&T Intellectual Property. All rights reserved. AT&T, Globe logo and all other AT&T marks contained herein are trademarks of AT&T Intellectual Property and/or AT&T affiliated companies. All other marks contained herein are the property of their respective owners. AT&T Proprietary.

2 2016 AT&T Intellectual Property Published by: Product: Title: AT&T Intellectual Property AT&T Unified Communications Services Product version: Publication date: March, 2016 Reference number: <UCS><UCV><DNSC><0316> Document revision number: AT&T Intellectual Property. All rights reserved. AT&T and the Globe logo are registered trademarks of AT&T Intellectual Property. Page ii

3 Welcome This manual provides information to transfer domain/zone information from a customer s primary Domain Name Service (DNS) to a secondary DNS server in the AT&T network AT&T Intellectual Property. All rights reserved. AT&T and the Globe logo are registered trademarks of AT&T Intellectual Property. Page iii

4 Table of Contents DNS Server Zone Transfer Information... 1 Configure Secondary DNS Server s IP Address or FQDN... 2 Configure Forward and Reverse Lookup Zones... 9 Configure the TTL for Each Zone to 86,400 Seconds (24 Hours) or Longer AT&T Intellectual Property. All rights reserved. AT&T and the Globe logo are registered trademarks of AT&T Intellectual Property. Page iv

5 Domain Name Service (DNS) Server Zone Transfer Information A customer and AT&T may agree to use Domain Name Service (DNS) name references for some or all customer accessed Unified Communications (UC) Voice systems within the UC Voice service to meet certain customer requirements. DNS name references are often used for customers who are using features that require Secure Sockets Layer (SSL) based certificates or are using the AT&T VPN-less remote access. AT&T UC Voice typically deploys dedicated Internet Protocol (IP) Public Branch exchange (PBX), voic , and Instant Messaging (IM)/presence servers for each customer (usually consisting of four or more separate servers). When DNS name references are used, the DNS entries for these servers typically reside within a customer s DNS domain/zone. To help maximize operational availability, AT&T may provide access to a customer s DNS domain/zone containing these entries to one or more DNS servers within the AT&T UC Voice architecture. The AT&T DNS server in the UC Voice architecture will use DNS domain/zone transfers so that our applications can always resolve DNS name references. To transfer zone information from a primary DNS server in the customer s network to a secondary DNS server in the AT&T network, perform the following steps. They are described in detail in the sections below. 1. The secondary DNS server s IP address or Fully Qualified Domain Name (FQDN) must be added to the pertinent forward and reverse lookup zones on the customer s primary authoritative DNS server. 2. The relevant forward and reverse lookup zones should be configured to notify the secondary DNS automatically of any changes made. Periodic updates may suffice, but setting the primary DNS server s zones to send notifications ensures accurate name to IP address resolution. 3. For added reliability in the event that the customer s primary DNS server is unreachable, it may help to configure the Time To Live (TTL) for each zone to 86,400 seconds (24 hours). If there is an outage of the customer s (primary) DNS server or the UC Voice nodes cannot reach the customer s (primary) DNS server due to a network failure, this extended TTL helps determine if resources within the AT&T network are still able to successfully resolve name references. The secondary DNS server s IP address and each UC Voice system FQDN will be provided by AT&T. The customer s primary DNS server s IP address and associated domains must be provided to AT&T by the customer so the secondary DNS server can be configured to receive DNS record updates AT&T Intellectual Property. All rights reserved. AT&T and the Globe logo are registered trademarks of AT&T Intellectual Property. Page 1

6 Configure Secondary DNS Server s IP Address or FQDN The following is an example for configuring a DNS forward lookup zone on a server running Windows Server 2008 R2. This example is merely one way of configuring the zone transfer, and other methods are also suitable. All addresses used are examples and are not correct in a reallife situation. 1. On a Window 2008 R2 server configured with the DNS role, open the DNS Manager. 2. In the console tree, expand Forward Lookup Zones and right-click the zone to be transferred AT&T Intellectual Property. All rights reserved. AT&T and the Globe logo are registered trademarks of AT&T Intellectual Property. Page 2

7 3. From the context menu, select the Properties option (Figure 1). Figure 1. Select the Properties option from the menu 4. The selected zone s Properties window displays (Figure 2). Figure 2. Properties window 2016 AT&T Intellectual Property. All rights reserved. AT&T and the Globe logo are registered trademarks of AT&T Intellectual Property. Page 3

8 5. Select the Zone Transfers tab (Figure 3). Figure 3. Zone Transfers tab 6. Check the box labeled Allow zone transfers (Figure 4). Figure 4. Select the Allow Zone Transfers box 2016 AT&T Intellectual Property. All rights reserved. AT&T and the Globe logo are registered trademarks of AT&T Intellectual Property. Page 4

9 7. Select the radio button labeled Only to the following servers (Figure 5). Figure 5. Select the Only to the following servers radio button 8. Click the Edit button (Figure 5). The Allow Zone Transfers window opens (Figure 6). Figure 6. Allow Zone Transfers window 2016 AT&T Intellectual Property. All rights reserved. AT&T and the Globe logo are registered trademarks of AT&T Intellectual Property. Page 5

10 9. Click on <Click here to add a > as shown in Figure 7. Figure 7. Select <Click here to add a > 10. Enter the FQDN or IP address of the secondary DNS server (the DNS server in the AT&T UC Voice architecture). NOTE: Do not use the address shown in Figure 8. This is only an example. Use the address provided by AT&T. Figure 8. Enter the FQDN or IP address of the secondary DNS server 2016 AT&T Intellectual Property. All rights reserved. AT&T and the Globe logo are registered trademarks of AT&T Intellectual Property. Page 6

11 11. Press Enter to attempt to resolve the address. 12. If an error of No such host is known is received (Figure 9), select that line item then click the Delete button, leaving only the validated server (Figure 10). Figure 9. Allow Zone Transfers window after Enter is selected Figure 10. Removed entries containing No such host is known 2016 AT&T Intellectual Property. All rights reserved. AT&T and the Globe logo are registered trademarks of AT&T Intellectual Property. Page 7

12 13. Click the OK button to return to the zone s Properties window. The server that was added to the Allow Zone Transfers window should now be listed (Figure 11). Figure 11. Properties window 2016 AT&T Intellectual Property. All rights reserved. AT&T and the Globe logo are registered trademarks of AT&T Intellectual Property. Page 8

13 Configure Forward and Reverse Lookup Zones The relevant forward and reverse lookup zones should be configured to automatically notify the AT&T secondary DNS of any changes. 1. Click the Notify button (Figure 12). Figure 12. Select the Notify button 2. The Notify window opens. Click where <Click here to add is displayed as shown in Figure 13. Figure 13. Select <Click here to add a > 2016 AT&T Intellectual Property. All rights reserved. AT&T and the Globe logo are registered trademarks of AT&T Intellectual Property. Page 9

14 3. Where <Click here to add an IP Address or DNS Name> is shown (Figure 14), enter the FQDN or IP address of the secondary DNS server. Figure 14. Enter the FQDN or IP address of the secondary DNS server 4. Press the Enter key to attempt to resolve the address. 5. If an error of No such host is known is received, select that line item (Figure 15) then click the Delete button, leaving only the validated server. Figure 15. Notify window after Enter is selected 2016 AT&T Intellectual Property. All rights reserved. AT&T and the Globe logo are registered trademarks of AT&T Intellectual Property. Page 10

15 6. Click the OK button (Figure 16) to return to the Properties window. The server that was added to the Notify window should now be listed (Figure 17). Figure 16. Removed entries containing No such host is known Figure 17. Properties window 2016 AT&T Intellectual Property. All rights reserved. AT&T and the Globe logo are registered trademarks of AT&T Intellectual Property. Page 11

16 Configure the TTL for Each Zone to 86,400 Seconds (24 Hours) or Longer For each zone, perform the following steps. 1. Select the Start of Authority (SOA) tab (Figure 18). Figure 18. Start of Authority (SOA) tab 2. Near the bottom of the window is the label TTL for this record. Set the field next to the label to 1 and the next field to 0 as shown below. See Figure AT&T Intellectual Property. All rights reserved. AT&T and the Globe logo are registered trademarks of AT&T Intellectual Property. Page 12

17 Figure 19. Set TTL for this record 3. Click the Apply button and then the OK button to save the changes and exit the zone s Properties window. Repeat these steps for any other forward lookup zones or reverse lookup zones that need to be replicated to the secondary DNS server AT&T Intellectual Property. All rights reserved. AT&T and the Globe logo are registered trademarks of AT&T Intellectual Property. Page 13