Network routing question

FATeknollogee

@Pete-S said in Network routing question:

@FATeknollogee said in Network routing question:

@Pete-S The desktop is connected to vlan10 (my op says that, I think)

Run ip addr and post it.

2: enp8s0f0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000
    link/ether 00:25:90:6d:41:ee brd ff:ff:ff:ff:ff:ff
    inet 10.250.251.242/22 brd 10.250.251.255 scope global dynamic noprefixroute enp8s0f0
       valid_lft 77617sec preferred_lft 77617sec
    inet6 fe80::d10b:e3fd:dfb6:4149/64 scope link noprefixroute 
       valid_lft forever preferred_lft forever
3: enp8s0f1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq master bridge0 state UP group default qlen 1000
    link/ether 00:25:90:6d:41:ef brd ff:ff:ff:ff:ff:ff

19: enp8s0f1.235@enp8s0f1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
    link/ether 00:25:90:6d:41:ef brd ff:ff:ff:ff:ff:ff
    inet 10.50.235.12/24 brd 10.50.235.255 scope global dynamic noprefixroute enp8s0f1.235
       valid_lft 522139sec preferred_lft 522139sec

Run ip route and post it.

default via 10.250.250.254 dev enp8s0f0 proto dhcp metric 102 
default via 10.50.235.254 dev enp8s0f1.235 proto dhcp metric 400 
default via 10.250.250.254 dev bridge0 proto dhcp metric 425 
10.50.235.0/24 dev enp8s0f1.235 proto kernel scope link src 10.50.235.12 metric 400 
10.250.248.0/22 dev enp8s0f0 proto kernel scope link src 10.250.251.242 metric 102 
10.250.248.0/22 dev bridge0 proto kernel scope link src 10.250.251.243 metric 425

Dashrender

I see these two IPv4 networks
10.250.251.242/22 brd 10.250.251.255
10.50.235.12/24 brd 10.50.235.255

Assuming you want to reach 10.50.235.200 for DNS, do you have that address setup as a DNS server?

Also, if you have multiple DNS server setup, it will use the first one until it fails, then it will failover to #2 in the list, etc. so you can't simply list multiple DNS server and expect them all to be used.

Can you ping the IP of the client you want to connect to by IP?

FATeknollogee

@Dashrender said in Network routing question:

I see these two IPv4 networks
10.250.251.242/22 brd 10.250.251.255
10.50.235.12/24 brd 10.50.235.255

Assuming you want to reach 10.50.235.200 for DNS, do you have that address setup as a DNS server?

Also, if you have multiple DNS server setup, it will use the first one until it fails, then it will failover to #2 in the list, etc. so you can't simply list multiple DNS server and expect them all to be used.

Can you ping the IP of the client you want to connect to by IP?

DNS server is at 10.50.235.235
Yes, I can ping the DNS Server and the clients on the 10.50 network by IP address but not by name.
If I disable the 10.250 network, then I can ping & reach the clients by name.

dafyre

@FATeknollogee said in Network routing question:

@Dashrender said in Network routing question:

I see these two IPv4 networks
10.250.251.242/22 brd 10.250.251.255
10.50.235.12/24 brd 10.50.235.255

Assuming you want to reach 10.50.235.200 for DNS, do you have that address setup as a DNS server?

Also, if you have multiple DNS server setup, it will use the first one until it fails, then it will failover to #2 in the list, etc. so you can't simply list multiple DNS server and expect them all to be used.

Can you ping the IP of the client you want to connect to by IP?

DNS server is at 10.50.235.235
Yes, I can ping the DNS Server and the clients on the 10.50 network by IP address but not by name.
If I disable the 10.250 network, then I can ping & reach the clients by name.

What is your machine set to use for DNS server right now?

FATeknollogee

@dafyre said in Network routing question:

What is your machine set to use for DNS server right now?

It gets it's DNS settings from the DHCP server.
10.250.250.254
10.50.235.235

Kelly

@FATeknollogee said in Network routing question:

@dafyre said in Network routing question:

What is your machine set to use for DNS server right now?

It gets it's DNS settings from the DHCP server.
10.250.250.254
10.50.235.235

Does 250.254 have 235.235 in its upstream list or have a secondary zone for 235.x?

FATeknollogee

@Kelly said in Network routing question:

@FATeknollogee said in Network routing question:

Does 250.254 have 235.235 in its upstream list or have a secondary zone for 235.x?

No, 250.254 doesn't have a DNS server, just services provided by the dhcp router.

Kelly

@FATeknollogee said in Network routing question:

@Kelly said in Network routing question:

@FATeknollogee said in Network routing question:

Does 250.254 have 235.235 in its upstream list or have a secondary zone for 235.x?

No, 250.254 doesn't have a DNS server, just services provided by the dhcp router.

I am confused. Either way, does the DNS server in the subnet where your DNS service is working have the DNS server for the non functioning subnet in its upstream list or a secondary zone for that subnet?

FATeknollogee

@Kelly said in Network routing question:

@FATeknollogee said in Network routing question:

@Kelly said in Network routing question:

@FATeknollogee said in Network routing question:

Does 250.254 have 235.235 in its upstream list or have a secondary zone for 235.x?

No, 250.254 doesn't have a DNS server, just services provided by the dhcp router.

I am confused. Either way, does the DNS server in the subnet where your DNS service is working have the DNS server for the non functioning subnet in its upstream list or a secondary zone for that subnet?

250.254 is my Meraki router (so no "standalone" DNS server)
Not sure if I can add a secondary zone

Kelly

@FATeknollogee said in Network routing question:

@Kelly said in Network routing question:

@FATeknollogee said in Network routing question:

@Kelly said in Network routing question:

@FATeknollogee said in Network routing question:

Does 250.254 have 235.235 in its upstream list or have a secondary zone for 235.x?

No, 250.254 doesn't have a DNS server, just services provided by the dhcp router.

I am confused. Either way, does the DNS server in the subnet where your DNS service is working have the DNS server for the non functioning subnet in its upstream list or a secondary zone for that subnet?

250.254 is my Meraki router (so no "standalone" DNS server)
Not sure if I can add a secondary zone

You can use an IP helper for a Meraki: https://documentation.meraki.com/MX/DHCP/Configuring_DHCP_Relay.

dafyre

@dafyre said in Network routing question:

DNS server is at 10.50.235.235

Configure your computer to look to 235.235 for DNS... and configure the DNS server at 235.235 to forward anything it doesn't recognize along to your Meraki?

FATeknollogee

@Kelly said in Network routing question:

@FATeknollogee said in Network routing question:

@Kelly said in Network routing question:

@FATeknollogee said in Network routing question:

@Kelly said in Network routing question:

@FATeknollogee said in Network routing question:

Does 250.254 have 235.235 in its upstream list or have a secondary zone for 235.x?

No, 250.254 doesn't have a DNS server, just services provided by the dhcp router.

I am confused. Either way, does the DNS server in the subnet where your DNS service is working have the DNS server for the non functioning subnet in its upstream list or a secondary zone for that subnet?

250.254 is my Meraki router (so no "standalone" DNS server)
Not sure if I can add a secondary zone

You can use an IP helper for a Meraki: https://documentation.meraki.com/MX/DHCP/Configuring_DHCP_Relay.

Unfortunately, no MX, I got rid of my MX84.
DHCP is handled by Meraki MS320-24 Layer 3 switch

1337

Why are you discussing DNS? Routing has nothing to do with DNS. DNS is for resolving names.

FATeknollogee

@Pete-S said in Network routing question:

Why are you discussing DNS? Routing has nothing to do with DNS. DNS is for resolving names.

Because I want to access the resources via name resolution (you gotta read my OP)

Kelly

Looks like the MS series supports the DHCP relay setting: https://community.meraki.com/t5/Switching/need-to-configure-DHCP-IP-helper-address-on-VLAN-in-MS-switch/td-p/22806.

FATeknollogee

@Kelly said in Network routing question:

Looks like the MS series supports the DHCP relay setting: https://community.meraki.com/t5/Switching/need-to-configure-DHCP-IP-helper-address-on-VLAN-in-MS-switch/td-p/22806.

I can't use that relay setting since I still need dhcp on the 250.254 network

Kelly

@FATeknollogee said in Network routing question:

@Kelly said in Network routing question:

Looks like the MS series supports the DHCP relay setting: https://community.meraki.com/t5/Switching/need-to-configure-DHCP-IP-helper-address-on-VLAN-in-MS-switch/td-p/22806.

I can't use that relay setting since I still need dhcp on the 250.254 network

If you're using some automation you could push the resolution for specific targets to the hosts file on the end points.

FATeknollogee

@dafyre said in Network routing question:

@dafyre said in Network routing question:

DNS server is at 10.50.235.235

Configure your computer to look to 235.235 for DNS... and configure the DNS server at 235.235 to forward anything it doesn't recognize along to your Meraki?

I added 235.235 as an additional DNS in the 250.254 network.

I tried this yesterday but silly me forgot to "refresh" the NIC so it could grab the new settings.

All is good & working.