Windows Server 2016 智能DNS(六)
咱们前面几篇文章介绍了如何Windows Server 2016 智能DNS的相关配置介绍,今天继续介绍Windows Server 2016 智能DNS的配置管理,前面一篇咱们介绍了根据本身的需求来配置相关功能,那今天继续介绍相关记录的编辑操做。
前面介绍的是子网、子网区域、及子网区域的记录进行的平常管理介绍,这些都是基本,最主要的仍是策略,因此咱们今天介绍策略的介绍:
Policy:查看:get-DnsServerQueryResolutionPolicy -ZoneName "byssoft.com"
咱们发现只能查看策略的大概,增长fl及tb后都是不行
那咱们如何查看策略的具体内容:
ne是不等于的意思
eq是等于的意思
经过这条命令咱们就能够看出,匹配FQDN不等于www.byssoft.com、e-colgoy.byssoft.com、g.byssoft.com就会匹配下一条策略ide
$policy = Get-DnsServerQueryResolutionPolicy -ZoneName "byssoft.com" -name "DefaultPolicy" $policy.criteria
策略的优先级:
查看:get-DnsServerQueryResolutionPolicy -ZoneName "byssoft.com"
策略经过ProcessingOrder来命名优先级,
更改优先级:
好比咱们要讲策略名为:CNPolicy的优先级调成最低Set-DnsServerQueryResolutionPolicy -name "CNPolicy" -ZoneName "byssoft.com" -processingOrder 4
接下来就是禁用策略
策略的级别有基于Zone级别的,也有基于域级别的Disable-DnsServerPolicy -name "CNPolicy" -ZoneName "byssoft.com" -level zone
code
接下来就是启用策略enable-DnsServerPolicy -name "CNPolicy" -ZoneName "byssoft.com" -level zone
最后咱们在说说策略增长:Add-DnsServerQueryResolutionPolicy -Name "PolicyName" -Action ALLOW -ClientSubnet "eq,CNSubnet" -ZoneScope "CNSubnetScope,1" -ZoneName "byssoft.com"
策略的删除:remove-DnsServerQueryResolutionPolicy -Name "PolicyName" -Action ALLOW -ClientSubnet "eq,CNSubnet" -ZoneScope "CNSubnetScope,1" -ZoneName "byssoft.com"
删除全部策略:Get-DnsServerQueryResolutionPolicy -ZoneName "byssoft.com" | Remove-DnsServerQueryResolutionPolicy -ZoneName "byssoft.com" -Force -PassThru
策略的修改:set-DnsServerQueryResolutionPolicy -Name "DefaultPolicy" -ZoneScope "byssoft.com,1" -FQDN “ne,www.byssoft.com,e-cology.byssoft.com” -ZoneName "byssoft.com"
blog