Off board Delegation does not work for NSLook

[Ajaykums]

Hi Team here i am unable to understand customers ask, please suggest here:

Off board Delegation does not work for NSLook and it respond from the server by instead of the non-authorities response , so can we
check for any NSLOOKUP port for Delegation like 53 or something else we need to validate

[Ajaykums]

Please suggest how to proceed here, than you.

[TMACMD · Accepted solution]

This absolutely requires external configuration to work.

Start Here: 

https://docs.netapp.com/us-en/ontap/networking/balance_network_loads_to_optimize_user_traffic_@cluster_administrators_only@_overview.html

Read through and you will see a link to:

https://kb.netapp.com/onprem/ontap/da/NAS/How_to_set_up_DNS_load_balancing_in_ONTAP

You need to setup a delegation/forwarder on your actual DNS server

If your domain is company.com and your SVM is svm.company.com, you come up with a new name, like cifs.company.com. You setup the NetApp LIFs in the SVM to respond to cifs.company.com. Then you go to your DNS server and setup a forwarder or delegation to point to all your configured LIFs on the SVM with dns enabled.

When you get it finished, you should be able to:

nslookup cifs.company.com 

-> your dns server will forward and the NetApp will ultimately respond.

TO test the NetApp to make sure it is correct:

nslookup - <ip-of_SVM-lif>

Then type cifs.company.com

The NetApp should be the authoritative answer and send back IPs