Configure the NRPT for an IPv6/IPv4 DNS Gateway

  • Article

Updated: October 7, 2009

Applies To: Windows Server 2008 R2

Important

This topic describes deployment of DirectAccess in Windows Server 2008 R2. For deployment of DirectAccess in Microsoft Forefront Unified Access Gateway (UAG), see the Forefront UAG DirectAccess Deployment Guide (https://go.microsoft.com/fwlink/?LinkId=179989).

An IPv6/IPv4 DNS gateway translates between Internet Protocol version 6 (IPv6) and Internet Protocol version 4 (IPv4) for DNS name queries. You need an IPv6/IPv4 DNS gateway and an IPv6/IPv4 translator for DirectAccess clients to reach an IPv4-only resource on your intranet. For more information about these devices, see Choose Solutions for IPv4-only Intranet Resources. If you are using these devices in your DirectAccess deployment, you must identify the portions of your intranet namespace that contain IPv4-only application servers and add them to the Name Resolution Policy Table (NRPT) of your DirectAccess clients with the IPv6 addresses of your IPv6/IPv4 DNS gateways.

To complete these procedures, you must be a member of the Domain Administrators group, or otherwise be delegated permissions to change Group Policy settings. Review details about using the appropriate accounts and group memberships at Local and Domain Default Groups (https://go.microsoft.com/fwlink/?LinkId=83477).

To configure the NRPT for an IPv6/IPv4 DNS gateway

  1. Identify the intranet namespaces that contain only IPv4-only resources.

  2. Click Start, click Run, type gpmc.msc, and then press ENTER.

  3. In the console tree, open the domain.

  4. In the console tree, right-click the DirectAccess Policy-{3491980e-ef3c-4ed3-b176-a4420a810f12} Group Policy object, and then click Edit.

  5. In the console tree of the Group Policy Management Editor, open Computer Configuration\Policies\Windows Settings, and then click Name Resolution Policy.

  6. In the details pane, click the DNS Settings for Direct Access tab, select Enable DNS setting for DirectAccess in this rule, specify the intranet namespace as a suffix rule, click Add, type the IPv6 address of your IPv6/IPv4 DNS gateway, and then click Create.

  7. Repeat step 6 for additional namespaces as needed.

If you arrived at this page by clicking a link in a checklist, use your browser’s Back button to return to the checklist.