CNR not able to filter Microsoft Global Catalog (GC) servers.

[zhichao]

The Cisco DNS has been configured to allow dynamic updates from a list of servers, including our Microsoft Global Catalog (GC) servers.

This morning, an ALIEN Microsoft GC was able to dynamically update our Cisco DNS servers.

We want to prevent such ALIENT GC from being able to dynamically update our Cisco DNS servers. We have a small list of servers allowed to perform dynamic update, and this server is NOT one of them.

Got any suggestion? Thanks in advance

[mvoight]

In the CNR configuration, you can restrict this dynamic update by ip address. In 6.1, you can use an ACL. Refer to http://www.cisco.com/en/US/products/sw/netmgtsw/ps1982/products_user_guide_chapter09186a00801ef249.html#wp1122194