标签:windows server 2016 DNS
Windows Server 2016 智能DNS(五)我们前面几篇文章介绍了如何Windows Server 2016 智能DNS的相关配置介绍,今天继续介绍Windows Server 2016 智能DNS的配置打点,前面一篇我们介绍了按照本身的需求来配置相关成果,那今天继续介绍相关记录的编纂操纵。
前面介绍的是子网、子网区域、及子网区域的记录进行的日常打点介绍,这些都是根基,,最主要的还是计谋,所以我们今天介绍计谋的介绍:
Policy:
检察:get-DnsServerQueryResolutionPolicy -ZoneName "byssoft.com"
我们发明只能检察计谋的概略,增加fl及tb后都是不行
那我们如何检察计谋的具体内容:
ne是不即是的意思
eq是即是的意思
通过这条命令我们就可以看出,匹配FQDN不即是、e-colgoy.byssoft.com、g.byssoft.com就会匹配下一条计谋 $policy = Get-DnsServerQueryResolutionPolicy -ZoneName "byssoft.com" -name "DefaultPolicy" $policy.criteria
计谋的优先级:
检察:get-DnsServerQueryResolutionPolicy -ZoneName "byssoft.com"
计谋通过ProcessingOrder来定名优先级,
变动优先级:
好比我们要讲计谋名为:CNPolicy的优先级调成最低
Set-DnsServerQueryResolutionPolicy -name "CNPolicy" -ZoneName "byssoft.com" -processingOrder 4
接下来就是禁用计谋
计谋的级别有基于Zone级另外,也有基于域级另外
Disable-DnsServerPolicy -name "CNPolicy" -ZoneName "byssoft.com" -level zone
接下来就是启用计谋
enable-DnsServerPolicy -name "CNPolicy" -ZoneName "byssoft.com" -level zone
最后我们在说说计谋增加:
Add-DnsServerQueryResolutionPolicy -Name "PolicyName" -Action ALLOW -ClientSubnet "eq,CNSubnet" -ZoneScope "CNSubnetScope,1" -ZoneName "byssoft.com"
计谋的删除:
remove-DnsServerQueryResolutionPolicy -Name "PolicyName" -Action ALLOW -ClientSubnet "eq,CNSubnet" -ZoneScope "CNSubnetScope,1" -ZoneName "byssoft.com"
计谋的改削:
set-DnsServerQueryResolutionPolicy -Name "DefaultPolicy" -ZoneScope "byssoft.com,1" -FQDN “ne,,e-cology.byssoft.com” -ZoneName "byssoft.com"
Windows Server 2016 智能DNS(五)
标签:windows server 2016 DNS