Before creating a third-party DNS provider in the Cloud Services Portal, you must deploy a host and associate the MS Microsoft Active Directory (AD) Sync service with it.
For steps to create the procedure for creating a host, see Deploying Hosts for BloxOne DDI.
For more information on about adding the MS Microsoft AD Sync service, see Creating Services. Associate the newly created host with the MS Microsoft AD Sync service. For more information on deploying hosts, see Deploying Hosts.
If the Microsoft Active Directory AD DNS and IPAM objects are more than 5k, it is recommended 100k each, the best practice is to configure sync operation on two hosts, : one for DNS, and one for IPAM. For information about creating hosts, see Creating Hosts.
To create a new third-party provider for Microsoft Active DirectoryAD, complete the following steps:
Go to Manage > DNS > Third-party DNS Providers.
Click Create > Microsoft Active Directory.
Configure the following options on the Create Third-party DNS Provider screen:
Name: Create a name.
Description: Create a description.
Credentials: Choose the credentials. Alternatively, click Create New Credentials to create new credentials and configure the following:
Name: Specify Create a name.
Description: Specify Create a description. Click Next.
Configure the following settings in on the Microsoft Active Directory Credentials screen:
Domain\User Name: Specify the domain name and the user name for the Active Directory AD server.
Password: Specify the password for the Active Directory AD server.
Click Next.
Review the configuration settings, and click Save.
Active Directory Server: Specify the IP address or FQDN. If you are using the FQDN as the value, make sure it can be resolved by the BloxOne host can resolve it.
Service Instance: Choose the MS Microsoft AD Sync service service’s instance you want to associate with the third-party DNS provider.
Sync Interval (min): Specify the sync interval, in minutes. The default value is 180 minutes. If you have a large amount of data, it is recommended you set we recommend setting the sync interval to a value between 180 minutes to and 1440 minutes (inclusive).
Click Next.
Review the configuration, and click Save & Close.
The following We recommend the following settings for the sync interval settings are recommended:
180 minutes if the Microsoft Active Directory data to sync is ~< 25K
360 minutes if the Microsoft Active Directory to sync is between 25k-50k
1440 minutes if the Microsoft Active Directory data to sync is more than 50K+
3 hours if you have less than 100k objects of Microsoft AD to sync.
6 hours if you have less than 500k objects of Microsoft AD to sync.
24 hours if you have more than one million objects of Microsoft AD to sync.
The new destination’s DNS View is created automatically. When a third-party DNS provider is deleted, the view and all objects associated with the view it are unassigned. You must delete the view manually.
Once the third-party DNS provider is created, the sync status will be in a change to Pending state. By default, the sync interval is 180 minutes. Once the sync starts, the status will change to Sync in Progress. The Once the sync is completed, the status will change to Synced once the sync is complete. If there is an error occurs during a sync, an the appropriate error message states will state the reason for the sync error.