Brocade Communications Systems 12.4.00 Displaying Dnssec configuration, Syntax show gslb dns zone

1 DNSSEC

Configuring load balancing of plain DNS request across all servers

If zones and real servers are configured for DNSSEC, then non-dnssec servers are used for requests on non-dnssec zones. To load-balance non-dnssec (plain DNS) requests across all servers, use one of the following commands.-

ServerIron(config)# server virtual dns_vip 209.157.23.46 ServerIron(config-vs-dns_vip)# port dns ServerIron(config-vs-dns_vip)# port dns use-dnssec-servers-for-dns-queries

Syntax: [no] port dns use-dnssec-servers-for-dns-queries

ServerIron(config)# server use-dnssec-servers-for-dns-queries

Syntax: [no] server use-dnssec-servers-for-dns-queries

Displaying DNSSEC configuration

You can use the show glsb zone command to determine if a GSLB zone has be configured as dnssec-capable or dnssec-only. In the following example, the GSLB zone “secure.mydnssec.com” is configured as “DNSSEC-ONLY”

ServerIronADX(config)#		show gslb dns zone
ZONE: secure.mydnssec.com
HOST: null-host:
(Global GSLB policy)
GSLB affinity group: global
DNSSEC-ONLY					Flashback		DNS resp.
					delay		selection
					(x100us)		counters
*	192.168.1.101: dns	real-ip DOWN		N-AM	TCP	APP	Count (%)
					--	--	---
*	192.168.1.102: dns	real-ip DOWN		N-AM	--	--	---
*	192.168.13.100: dns	v-ip	ACTIVE	N-AM	0	0	---
*	192.168.1.100: dns	real-ip DOWN		N-AM	--	--	---

Syntax: show gslb dns zone

Displaying DNSSEC statistics

When DNSSEC is enabled (by either real server or zone), DNSSEC statistics are displayed as shown in the following:

116	ServerIron ADX Global Server Load Balancing Guide
	53-1002437-01