☰

Dcdiag 失敗，Windows Server 2012 R2 上的新 DNS 伺服器出現錯誤 408 404 和 407

tag-icon • tag-icon domain-name-system windows-server-2012-r2
Dcdiag 失敗，Windows Server 2012 R2 上的新 DNS 伺服器出現錯誤 408 404 和 407

我正在嘗試在運行 Windows 2012 R2 的新伺服器上設定 AD/DNS。我已經安裝了角色，配置了靜態 IP，設定了正向和反向區域等。運行 dcdiag 時，連線測試失敗：

Testing server: Default-First-Site-Name\DCName
   Starting test: Connectivity
      The host <numbers>._msdcs.domain.foo could not be resolved to an IP address. Check
      the DNS server, DHCP, server name, etc.
      Got error while checking LDAP and RPC connectivity. Please check your firewall settings.
      ......................... DCName failed test Connectivity

我擔心如果靜態 ip 和“DNS 伺服器”相同，也許 ip 位址配置不正確？

這可能與它作為與互聯網隔離的虛擬機器運行有關嗎？

編輯

事件文本：
407 The DNS server could not bind a User Datagram Protocol (UDP) socket to <server ip>. The event data is the error code. Restart the DNS server or reboot your computer.

第408章

The DNS server could not open socket for address <server ip>. 
Verify that this is a valid IP address for the server computer.  If it is NOT valid use the Interfaces dialog under Server Properties in the DNS Manager to remove it from the list of IP interfaces.  Then stop and restart the DNS server. (If this was the only IP interface on this machine and the DNS server may not have started as a result of this error.  In that case remove the DNS\Parameters\ ListenAddress value in the services section of the registry and restart.) 

If this is a valid IP address for this machine, make sure that no other application (e.g. another DNS server) is running that would attempt to use the DNS port. 

For more information, see "DNS server log reference" in the online Help.

404

The DNS server could not bind a Transmission Control Protocol (TCP) socket to address <server ip>.  The event data is the error code.  An IP address of 0.0.0.0 can indicate a valid "any address" configuration in which all configured IP addresses on the computer are available for use. 
Restart the DNS server or reboot the computer.

答案1

當您執行repadmin /showreps時，應該有一行以「DSA Object Guid」開頭。

在 DNS 管理員中林的 _msdcs 區域中，每個網域控制站的物件 GUID 都應該有一個 cname。我首先檢查 _msdcs 區域是否正在複製到所有 dc，並且您是否擁有新 dc 的 cname 記錄。

如果不存在，您可以嘗試 nltest /dsregdns。

您的網域控制器網路適配器 DNS 應指向其自身和/或另一個網域控制器。 （絕不是像互聯網這樣的外部網域控制站）。

答案2

解決方案是打開DNS 管理器-> 展開正向查找區域-> 右鍵單擊 _msdcs.domain.foo -> 屬性-> 名稱伺服器-> 指向自身，然後它就起作用了...以前它沒有ip 來看看。

相關內容