Infoblox 经常需要转发 DNS 查询,要确认它能查询到外部 DNS 可以通过 Consol 或者 SSH 连线到Infoblox,在 infoblox 上运行 dig 命令来做到。下面是通过 SSH 连接到 Infoblox 设备做查询的例子,使用 Consol 连线结果也是完全一致的。
下图说明可成功查询外部 DNS Server。
下图说明查询外部 DNS Server 失败,需要检查到 Infoblox 设备的网络连通性和防火墙设置。
备注:需要将 @ 后面的 DNS 服务器地址替换为转发的 DNS 服务器地址。
下图说明可成功查询外部 DNS Server。
Infoblox > dig @202.96.209.5 www.google.com
digging www.google.com from server 202.96.209.5
; << >> DiG 9.3.4-P1 << >> @202.96.209.5 www.google.com
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 23520
;; flags: qr rd ra; QUERY: 1, ANSWER: 5, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION:
;www.google.com. IN A
;; ANSWER SECTION: www.google.com. 535228 IN CNAME www.l.google.com.
www.l.google.com. 126 IN CNAME www-china.l.google.com.
www-china.l.google.com. 131 IN A 64.233.189.147
www-china.l.google.com. 131 IN A 64.233.189.99
www-china.l.google.com. 131 IN A 64.233.189.104
;; Query time: 56 msec
;; SERVER: 202.96.209.5#53(202.96.209.5)
;; WHEN: Thu Jan 8 09:53:20 2009
;; MSG SIZE rcvd: 124
digging www.google.com from server 202.96.209.5
; << >> DiG 9.3.4-P1 << >> @202.96.209.5 www.google.com
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 23520
;; flags: qr rd ra; QUERY: 1, ANSWER: 5, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION:
;www.google.com. IN A
;; ANSWER SECTION: www.google.com. 535228 IN CNAME www.l.google.com.
www.l.google.com. 126 IN CNAME www-china.l.google.com.
www-china.l.google.com. 131 IN A 64.233.189.147
www-china.l.google.com. 131 IN A 64.233.189.99
www-china.l.google.com. 131 IN A 64.233.189.104
;; Query time: 56 msec
;; SERVER: 202.96.209.5#53(202.96.209.5)
;; WHEN: Thu Jan 8 09:53:20 2009
;; MSG SIZE rcvd: 124
下图说明查询外部 DNS Server 失败,需要检查到 Infoblox 设备的网络连通性和防火墙设置。
Infoblox >dig @202.96.209.5 www.google.com
digging www.google.com from server 202.96.209.5
; <<>> DiG 9.3.4-P1 << >>@202.96.209.5 www.google.com
; (1 server found)
;; global options: printcmd
;; connection timed out; no servers could be reached
digging www.google.com from server 202.96.209.5
; <<>> DiG 9.3.4-P1 << >>@202.96.209.5 www.google.com
; (1 server found)
;; global options: printcmd
;; connection timed out; no servers could be reached
备注:需要将 @ 后面的 DNS 服务器地址替换为转发的 DNS 服务器地址。
