Symantec Security 5600 Series, Security 5400 Series,Clientless VPN 4400 Series, Administration Manual

Page: 142 / 861

142 Establishing your network
About the security gateway’s implementation of DNS
Configuring an authoritative name server with delegation
You can also set up an authoritative name server to delegate subdomains to other name servers. In
Figure 5-12 , you need to set up two DNS servers. The first DNS server is set up as the authoritative
name server for symantecs.org. The second (external) DNS server is located at the branch office and is
configured as authoritative for eng.symantecs.org. This requires you to delegate the subdomain
engineering name space to their server.
Figure 5-12 Example network layout of an authoritative name server with delegation
To create an authoritative name server with delegation, configure the following records on the internal
DNS server, which in this case, is represented by symantec.org:
Authority record See “Defining an authoritative server with a DNS authority record” on page 145.
Host record See “Identifying a host in a domain with a DNS host record” on page 146.
(optional)
Mail server record See “Defining your email server with a DNS mail server record” on page 147.
(optional)
Name server record See “Defining the server that performs lookups with a DNS name server record” on
page 148.
If you have selected outside systems for which DNS should be provided, you must also
configure a recursion record.
Recursion record See “Resolving host name requests for an outside system by creating a DNS recursion
record” on page 149.
(optional)
Subnet record See “Delegating naming authority with a DNS subnet record” on page 151.
(optional)