GTM secondary DNS to active directory

Hi,

Take a look at DNS express.

https://support.f5.com/kb/en-us/products/big-op_gtm/manuals/product/gtm_implementations_11_0_0/10.html

This will enable the GTM to serve out the addresses that you configure on your AD Servers. You'll need to setup TSIG to allow zone transfers.

That link should read.

https://support.f5.com/kb/en-us/products/big-ip_gtm/manuals/product/gtm_implementations_11_0_0/10.html

I am running 11.5.1 HF5 so the menus do quite match up to the article. I found all of the options under the DNS menu (not Local Traffic Manager).

I created a TSIG

I created my zone using TSIG (I created a nameserver pointing to my AD domain controller)

under zonerunner I modified the named configuration

all of the listners (one for UDP and 1 for TCP) use the dns-express profile

when I tail the ltm log the gtm fails to transfer from AD.

Did you set up TSIG on the AD controller as well?

no TSIG is not on the AD domain.

Video response. 🙂 

This is the easiest way to get this done. I have personally configured this in a Tier 1 Service Provider mobility environment, so I can tell you that performance is QUITE high, when tuned appropriately with a udp profile.

This also allows you to add a full proxy caching dns firewall in front of your AD DNS.