+ Post New Thread
Results 1 to 9 of 9
How do you do....it? Thread, Best practice check before performing multi site VPN network cutover into new ISP in Technical; Hi All, I'd like to know what's the proper best practice for network cutover which involves multi site internet and ...
  1. #1

    Join Date
    May 2009
    Location
    Sydney
    Posts
    282
    Thank Post
    322
    Thanked 3 Times in 3 Posts
    Rep Power
    11

    Question Best practice check before performing multi site VPN network cutover into new ISP

    Hi All,

    I'd like to know what's the proper best practice for network cutover which involves multi site internet and VPN access ?

    we are moving into new ISP and it is whole new range of IP address and technology, eg. we have to host our own DNS and public facing website.

    if anyone can help or suggest me with the cut over checklist then that'll be great.

    Cheers,
    AWT

  2. #2
    jamesreedersmith's Avatar
    Join Date
    Sep 2009
    Location
    Ruskington
    Posts
    1,178
    Thank Post
    80
    Thanked 261 Times in 233 Posts
    Rep Power
    78
    Plan, plan, allow a few weeks, plan some more, work out how much time you need, add at least 20% to that, double check you havent missed anything, add another 20% for the things you missed first time, carry out the work, spend a week firefightig problems.

  3. Thanks to jamesreedersmith from:

    albertwt (7th September 2010)

  4. #3

    Join Date
    May 2009
    Location
    Sydney
    Posts
    282
    Thank Post
    322
    Thanked 3 Times in 3 Posts
    Rep Power
    11
    thanks for the reply mate,
    we are changing the ISP to new one but our domain name is the same and yes, the thing that is still mystery for us, is the public DNS which previously our provider provides the DNS translation (host the external DNS) but now i have to prepare linux box for that to host our external DNS which resolve the website IP and our email server IP.

    so in this case i need to grab all of our IP addressrange and host it into the external facing DNS ?

  5. #4

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    11,239
    Thank Post
    882
    Thanked 2,742 Times in 2,316 Posts
    Blog Entries
    11
    Rep Power
    784
    Quote Originally Posted by albertwt View Post
    so in this case i need to grab all of our IP addressrange and host it into the external facing DNS ?
    All you need for the external DNS is to setup the zone for your domain (somesite.com.au) and add in the required records for your external resources like www.somesite.com.au and mail.somesite.com.au pointing to your desired external ip addresses.

    You will also need to add MX records to point any mail comming to an address @somesite.com.au to your mail servers external DNS name like smtp.somesite.com.au.

    You can look at your current external setup from your existing host and I would advise you copy it as a template of what you already have by usign the nslookup tool in windows from the command prompt
    Code:
    nslookup -querytype=all somesite.com.au
    This will show you what is set up already so you know what is needed on the new DNS server. I am suprised that you only need one as the general requirement is to have two nameservers, is your new ISP replicating your zone for you automaticlly (which is probably the best way to go about it) to one of their DNS servers also.

  6. Thanks to SYNACK from:

    albertwt (7th September 2010)

  7. #5

    Join Date
    May 2009
    Location
    Sydney
    Posts
    282
    Thank Post
    322
    Thanked 3 Times in 3 Posts
    Rep Power
    11
    thanks for your reply man,

    here's what I've got from the connection at my home
    C:\Users\Administrator>nslookup -querytype=all domain.com.au
    Server: mygateway1.ar7
    Address: 10.1.1.1

    DNS request timed out.
    timeout was 2 seconds.
    DNS request timed out.
    timeout was 2 seconds.
    *** Request to mygateway1.ar7 timed-out
    how come it doesn't give me anything useful ?

  8. #6

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    11,239
    Thank Post
    882
    Thanked 2,742 Times in 2,316 Posts
    Blog Entries
    11
    Rep Power
    784
    If it is giving you that message it con't resolve the DNS name that you gave it, is the domain already live and can you get to it via a browser?

    You can PM me the domain name if you would like me to have a go and send back the results.

  9. Thanks to SYNACK from:

    albertwt (8th September 2010)

  10. #7

    Join Date
    May 2009
    Location
    Sydney
    Posts
    282
    Thank Post
    322
    Thanked 3 Times in 3 Posts
    Rep Power
    11
    Thanks for your willingness to help SYNACK, however this is what I'm doing in the office and it is quite different from home:

    C:\Users\Administrator\Documents> nslookup -querytype=all domain.com.au
    Server: dc-dnsrv01.domain.com.au
    Address: 10.2.2.34

    domain.com.au internet address = 10.2.2.4
    domain.com.au internet address = 10.2.2.34
    domain.com.au nameserver = dc-dnsrv02.domain.com.au
    domain.com.au nameserver = dc-dnsrv01.domain.com.au
    domain.com.au nameserver = branch-dns01.domain.com.au
    domain.com.au
    primary name server = dc-dnsrv01.domain.com.au
    responsible mail addr = root.domain.com.au
    serial = 2008048990
    refresh = 10800 (3 hours)
    retry = 3600 (1 hour)
    expire = 432000 (5 days)
    default TTL = 86400 (1 day)
    domain.com.au MX preference = 50, mail exchanger = mail.domain.com.au
    dc-dnsrv02.domain.com.au internet address = 10.2.2.4
    dc-dnsrv01.domain.com.au internet address = 10.2.2.34
    branch-dns01.domain.com.au internet address = 10.1.2.13
    the result is rather useless as well since i cannot list all of the public IP that this company have. as I'm still learning in networking, I wonder how and where can i get this information from ?

  11. #8

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    11,239
    Thank Post
    882
    Thanked 2,742 Times in 2,316 Posts
    Blog Entries
    11
    Rep Power
    784
    As you are changing ISPs you'll get a bunch of new IPs anyway and you will need to talk to your new provider to find out what those are. By the looks of it the internal DNS is being resolved internally rather than externally as it has all private addresses.

    You will need use an external DNS server to get the external DNS mappings. Given the responce before from DNS at home are you sure that the external domain name is registered and exists. You should be able to resolve it from outside if it is.

  12. Thanks to SYNACK from:

    albertwt (9th September 2010)

  13. #9

    Join Date
    May 2009
    Location
    Sydney
    Posts
    282
    Thank Post
    322
    Thanked 3 Times in 3 Posts
    Rep Power
    11
    thanks for the reply man, it seems that i need to ask the new ISP for my router (public facing) interface hopefully they can provide that.

    and i've just queried my domain from: and it works actually, the response comes from the ISP DNS.

SHARE:
+ Post New Thread

Similar Threads

  1. Network Printers - IP Allocation Best Practice
    By RabbieBurns in forum Wireless Networks
    Replies: 11
    Last Post: 10th May 2010, 05:46 PM
  2. smoothwall express + BE (ISP) Multi IP
    By RabbieBurns in forum Internet Related/Filtering/Firewall
    Replies: 7
    Last Post: 17th March 2010, 01:35 PM
  3. Have google check your site for hacks/spam
    By mossj in forum Web Development
    Replies: 4
    Last Post: 4th March 2010, 03:37 PM
  4. MCTs Server 2008 network infrastructre practice exam
    By Potato-Peeler in forum Courses and Training
    Replies: 2
    Last Post: 24th February 2010, 04:06 PM
  5. spell check the site
    By russdev in forum General EduGeek News/Announcements
    Replies: 2
    Last Post: 7th January 2007, 07:30 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •