Before creating a third-party DNS provider in the Cloud Services Portal, you must deploy a host and associate the Microsoft Active Directory (AD) Sync service with it.
For the procedure for creating a host, see Deploying Hosts for BloxOne DDI.
For information about adding the Microsoft AD Sync service, see Creating Services. Associate the newly created host with the Microsoft AD Sync service. For information on deploying hosts, see Deploying Hosts.
If the Microsoft AD DNS and IPAM objects are more than 100k each, the best practice is to configure sync operation on two hosts: one for DNS, and one for IPAM. For information about creating hosts, see Creating Hosts.
To create a new third-party provider for Microsoft AD, complete the following steps:
Go to Manage > DNS > Third-party DNS Providers.
Click Create > Microsoft Active Directory.
Configure the following options on the Create Third-party DNS Provider screen:
Name: Create a name.
Description: Create a description.
Credentials: Choose the credentials. Alternatively, click Create New Credentials and configure the following:
Name: Create a name.
Description: Create a description. Click Next.
Configure the following settings on the Microsoft Active Directory Credentials screen:
Domain\User Name: Specify the domain name and the user name for the AD server.
Password: Specify the password for the AD server.
Click Next.
Review the configuration settings, and click Save.
Active Directory Server: Specify the IP address or FQDN. If you are using the FQDN as the value, make sure the BloxOne host can resolve it.
Service Instance: Choose the Microsoft AD Sync service’s instance you want to associate with the third-party DNS provider.
Sync Interval (min): Specify the sync interval, in minutes. The default value is 180 minutes. If you have a large amount of data, we recommend setting the sync interval to a value between 180 and 1440 minutes (inclusive).
Click Next.
Review the configuration, and click Save & Close.
We recommend the following settings for the sync interval:
3 hours if you have less than 100k objects of Microsoft AD to sync.
6 hours if you have less than 500k objects of Microsoft AD to sync.
24 hours if you have more than one million objects of Microsoft AD to sync.
The new destination’s DNS View is created automatically. When a third-party DNS provider is deleted, the view and all objects associated with it are unassigned. You must delete the view manually.
Once the third-party DNS provider is created, the sync status will change to Pending. By default, the sync interval is 180 minutes. Once the sync starts, the status will change to Sync in Progress. Once the sync is completed, the status will change to Synced. If an error occurs during a sync, the appropriate error message will state the reason.