What is the trick in adding a "secondary zone" to my DNS server

Question

_{Tuesday, November 11, 2014 12:03 AM}

Hello,

I am having a hard time adding a secondary zone to my dns server. I followed the instructions carefully but I still get the "refuse" on my zone transfer.  Do I need to go to the "NIC" of my interface card and make the primary DNS as the server itself and the secondary DNS the IP of the  "remote" DNS server? 

Also, do  I need to start configuring the "reverse Lookup zone" (before even starting to add a "secondary zone" and perform a -ZONE -TRANSFER), and add first the "a" record of the other (remote)  DNS server?

Thanks,

Teapaq Long.   

Event Type: Error
Event Source: DNS
Event Category: None
Event ID: 6525
Date:  11/10/2014
Time:  2:07:21 PM
User:  N/A
Computer: REM-LAB-2K3.leftremote.com
Description:

A zone transfer request for the secondary zone localright.com was refused by
the master DNS server at 192.168.77.92. Check the zone at the master server
192.168.77.92 to verify that zone transfer is enabled to this server.  To do
so, use the DNS console, and select master server 192.168.77.92  as the appli
cable server, then in secondary zone localright.com Properties,view the set-
tings on the Zone Transfers tab.  Based on the settings you choose, make any
configuration adjustments there (or possibly in the Name Servers tab) so that
a zone transfer can be made to this server.

For more information, see Help and Support Center at http://go.microsoft.com/
fwlink/events.asp.

Event Type: Error
Event Source: DNS
Event Category: None
Event ID: 6525
Date:  11/10/2014
Time:  12:03:18 PM
User:  N/A
Computer: LOC-LAB-2K8.localright.com
Description:

A zone transfer request for the secondary zone leftremote.com was refused by
the master DNS server at 192.168.95.92. Check the zone at the master server
192.168.95.92 to verify that zone transfer is enabled to this server. To do
so, use the DNS console, and select master server 192.168.95.92 as the appli
cable server, then in secondary zone leftremote.com Properties,view the set-
tings on the Zone Transfers tab.  Based on the settings you choose, make any
configuration adjustments there (or possibly in the Name Servers tab) so that
a zone transfer can be made to this server.

For more information, see Help and Support Center at http://go.microsoft.com/
fwlink/events.asp.

All replies (1)

_{Wednesday, November 12, 2014 8:07 AM ✅Answered}

Hi,

According to the event ID 6525, this may be caused by a refuse of zone transfer request.

In normal, the secondary DNS server just configured with a preferred DNS server as itself, the alternate DNS server is optional, it depends on your needs.

When you fill the master DNS server’s IP address when you add secondary zone in the secondary DNS server, it will prompt a warming information if you do not add a PTR record in the master DNS server in the reverse lookup zone, but this won’t affect the zone transfer process.

Have you followed the description of event log and check to see if the master server has enabled zone transfer(Properties of zone->Zone Transfer tab->Allow zone transfer)?

Besides, verify that the master server of the secondary zone is authoritative for the zone. Reference steps below:
1. On the secondary DNS server, open DNS manager.
2. Right-click zone, select the General tab, note the IP address of the server that is listed in Master Servers.
3. In the console tree, right-click DNS, and then click Connect to DNS Server.
4. Click The following computer, type the IP address of the master DNS server, and then click OK.
5. In the console tree, expand the master DNS server, and then expand the folder that contains the zone.
Note: If the zone is not in the folder, the server is not authoritative for the zone. In this case, you must configure the secondary server to transfer the zone from the correct master server.
6. Right-click the zone, click Properties, and then click the Name Servers tab.
7. Confirm that the secondary server is listed with the correct IP address. To correct the list, do one of the following:
If the secondary server is not in the list, click Add.
If the IP address of the secondary server is incorrect, click the server in the list, and then click Edit.

If this problem still exits, from the event log I notice that there are 2 secondary DNS server, REM-LAB-2K3.leftremote.com and LOC-LAB-2K8.localright.com. Are they belong to different domain(leftremote.com and localrght.com) ? what the relationship between them?

It would be helpful if you could provide the network topology. And describe the IP configuration of master DNS server and secondary DNS server.

Best Regards,           
Eve Wang