Add-DnsServerZoneTransferPolicy

업데이트 날짜: 2015년 5월

Add-DnsServerZoneTransferPolicy

Adds a zone transfer policy to a DNS server.

구문

Parameter Set: InputObject
Add-DnsServerZoneTransferPolicy [-CimSession <CimSession[]> ] [-ComputerName <String> ] [-InformationAction <System.Management.Automation.ActionPreference> {SilentlyContinue | Stop | Continue | Inquire | Ignore | Suspend} ] [-InformationVariable <System.String> ] [-PassThru] [-ThrottleLimit <Int32> ] [-ZoneName <String> ] [-Confirm] [-WhatIf] [ <CommonParameters>] [ <WorkflowParameters>]

Parameter Set: Server
Add-DnsServerZoneTransferPolicy [-Name] <String> [[-Action] <String> {DENY | IGNORE} ] [[-Condition] <String> {AND | OR} ] [-CimSession <CimSession[]> ] [-ClientSubnet <String> ] [-ComputerName <String> ] [-Disable] [-InformationAction <System.Management.Automation.ActionPreference> {SilentlyContinue | Stop | Continue | Inquire | Ignore | Suspend} ] [-InformationVariable <System.String> ] [-InternetProtocol <String> ] [-PassThru] [-ProcessingOrder <UInt32> ] [-ServerInterfaceIP <String> ] [-ThrottleLimit <Int32> ] [-TimeOfDay <String> ] [-TransportProtocol <String> ] [-Confirm] [-WhatIf] [ <CommonParameters>] [ <WorkflowParameters>]

Parameter Set: Zone
Add-DnsServerZoneTransferPolicy [-Name] <String> [-ZoneName] <String> [[-Action] <String> {DENY | IGNORE} ] [[-Condition] <String> {AND | OR} ] [-CimSession <CimSession[]> ] [-ClientSubnet <String> ] [-ComputerName <String> ] [-Disable] [-InformationAction <System.Management.Automation.ActionPreference> {SilentlyContinue | Stop | Continue | Inquire | Ignore | Suspend} ] [-InformationVariable <System.String> ] [-InternetProtocol <String> ] [-PassThru] [-ProcessingOrder <UInt32> ] [-ServerInterfaceIP <String> ] [-ThrottleLimit <Int32> ] [-TimeOfDay <String> ] [-TransportProtocol <String> ] [-Confirm] [-WhatIf] [ <CommonParameters>] [ <WorkflowParameters>]

자세한 설명

The Add-DnsServerZoneTransferPolicy cmdlet adds a zone transfer policy to a Domain Name System (DNS) server. A policy determines zone transfers based on criteria that you specify in the policy.

A policy consists of criteria and action.

The criteria are a logical combination of client subnet, server interface IP address, fully qualified domain name (FQDN), Internet Protocol (IPv4/IPv6), transport protocol (UDP/TCP), time of day, and query type.

Specify criteria in the following format:

operator, value01, value02, . . . , operator, value03, value04, . . .

The operator is either EQ or NE. You can specify no more than one of each operator in a criterion.

The policy treats values that follow the EQ operator as multiple assertions which are logically combined (OR'd). The policy treats values that follow the NE operator as multiple assertions which are logically differenced (AND'd).

This cmdlet combines multiple criteria by using the value of the Condition parameter as the logical operator. This parameter takes one of the following values:

-- OR. The policy evaluates criteria as multiple assertions which are logically combined (OR'd).
-- AND. The policy evaluates criteria as multiple assertions which are logically differenced (AND'd).

If a query meets the criteria of a policy, the action is the response that the policy requires. You can specify DENY or IGNORE.

You can create policies for zone transfer at either the server level or the zone level. Server level policies apply on every zone transfer query that occurs on the DNS server. Zone level policies apply only on the queries on a zone hosted on the DNS server. The most common use for zone level policies is to implement blocked or safe lists.

Zone level policies apply to the zone in which you create them. You cannot create a zone level policy without a zone. If you remove a zone, that removal deletes the associated zone level policies.

매개 변수

-Action<String>

Specifies the action to take if a zone transfer matches this policy. 이 매개 변수에 허용되는 값은 다음과 같습니다.

-- DENY. Respond with SERV_FAIL.
-- IGNORE. Do not respond.

별칭	none
필수 여부	false
위치	4
기본값	none
파이프라인 입력 허용 여부	true(ByPropertyName)
와일드카드 문자 허용 여부	false

-CimSession<CimSession[]>

원격 세션이나 원격 컴퓨터에서 cmdlet을 실행합니다. 컴퓨터 이름이나 New-CimSession 또는 Get-CimSession cmdlet의 출력과 같은 세션 개체를 입력하세요. 기본값은 로컬 컴퓨터 상의 현재 세션입니다.

별칭	Session
필수 여부	false
위치	named
기본값	none
파이프라인 입력 허용 여부	false
와일드카드 문자 허용 여부	false

-ClientSubnet<String>

Specifies the client subnet criterion. For more information, see Add-DnsServerClientSubnet. Specify a criterion in the following format:

operator, value01, value02, . . . , operator, value03, value04, . . .

The operator is either EQ or NE. You can specify no more than one of each operator in a criterion.

The policy treats values that follow the EQ operator as multiple assertions which are logically combined (OR'd). The policy treats values that follow the NE operator as multiple assertions which are logically differenced (AND'd). The criterion is satisfied if the subnet of the zone transfer matches one of the EQ values and does not match any of the NE values.

Example criterion: "EQ,NorthAmerica,Asia,NE,Europe"

별칭	none
필수 여부	false
위치	named
기본값	none
파이프라인 입력 허용 여부	true(ByPropertyName)
와일드카드 문자 허용 여부	false

-ComputerName<String>

Specifies a remote DNS server. You can specify an IP address or any value that resolves to an IP address, such as an FQDN, host name, or NETBIOS name.

별칭	Cn
필수 여부	false
위치	named
기본값	none
파이프라인 입력 허용 여부	false
와일드카드 문자 허용 여부	false

-Condition<String>

Specifies how the policy treats multiple criteria. 이 매개 변수에 허용되는 값은 다음과 같습니다.

-- OR. The policy evaluates criteria as multiple assertions which are logically combined (OR'd).
-- AND. The policy evaluates criteria as multiple assertions which are logically differenced (AND'd).

The default value is AND.

별칭	none
필수 여부	false
위치	5
기본값	none
파이프라인 입력 허용 여부	true(ByPropertyName)
와일드카드 문자 허용 여부	false

-Disable

Indicates that this cmdlet disables the policy. If you do not specify this parameter, the cmdlet creates the policy and enables it.

별칭	none
필수 여부	false
위치	named
기본값	none
파이프라인 입력 허용 여부	true(ByPropertyName)
와일드카드 문자 허용 여부	false

-InformationAction<System.Management.Automation.ActionPreference>

별칭	infa
필수 여부	false
위치	named
기본값	none
파이프라인 입력 허용 여부	false
와일드카드 문자 허용 여부	false

-InformationVariable<System.String>

별칭	iv
필수 여부	false
위치	named
기본값	none
파이프라인 입력 허용 여부	false
와일드카드 문자 허용 여부	false

-InternetProtocol<String>

Specifies the Internet Protocol criterion. Valid values are: IPv4 and IPv6. Specify a criterion in the following format:

operator, value01, value02, . . . , operator, value03, value04, . . .

The operator is either EQ or NE. You can specify no more than one of each operator in a criterion.

The policy treats values that follow the EQ operator as multiple assertions which are logically combined (OR'd). The policy treats values that follow the NE operator as multiple assertions which are logically differenced (AND'd). The criterion is satisfied if the IP address of the zone transfer matches one of the EQ values and does not match any of the NE values.

Example criteria: "EQ,IPv4" and "EQ,IPv6"

별칭	none
필수 여부	false
위치	named
기본값	none
파이프라인 입력 허용 여부	true(ByPropertyName)
와일드카드 문자 허용 여부	false

-Name<String>

Specifies a name for the new policy.

별칭	none
필수 여부	true
위치	2
기본값	none
파이프라인 입력 허용 여부	true(ByPropertyName)
와일드카드 문자 허용 여부	false

-PassThru

작업 중인 항목을 나타내는 개체를 반환합니다. 기본적으로 이 cmdlet은 출력을 생성하지 않습니다.

별칭	none
필수 여부	false
위치	named
기본값	none
파이프라인 입력 허용 여부	false
와일드카드 문자 허용 여부	false

-ProcessingOrder<UInt32>

Specifies the precedence of the policy. Higher integer values have lower precedence. By default, this cmdlet adds a new policy as the lowest precedence.

별칭	none
필수 여부	false
위치	named
기본값	none
파이프라인 입력 허용 여부	true(ByPropertyName)
와일드카드 문자 허용 여부	false

-ServerInterfaceIP<String>

Specifies the IP address of the server interface on which the DNS server listens. Specify a criterion in the following format:

operator, value01, value02, . . . , operator, value03, value04, . . .

The operator is either EQ or NE. You can specify no more than one of each operator in the criterion.

The policy treats values the follow the EQ operator as multiple assertions which are logically combined (OR'd). The policy treats values that follow the NE operator as multiple assertions which are logically differenced (AND'd). The criterion is satisfied if the IP address of the interface matches one of the EQ values and does not match any of the NE values.

Example criteria: "EQ,10.0.0.1" and "NE,192.168.1.1"

별칭	none
필수 여부	false
위치	named
기본값	none
파이프라인 입력 허용 여부	true(ByPropertyName)
와일드카드 문자 허용 여부	false

-ThrottleLimit<Int32>

Cmdlet을 실행하도록 설정할 수 있는 동시 작업의 최대 수를 지정합니다. 이 매개 변수를 생략하거나 값으로 0 을 입력하면 Windows PowerShell®은 컴퓨터에서 실행 중인 CIM cmdlet의 수에 따라 cmdlet에 대한 최적의 스로틀 제한을 계산합니다. 스로틀 제한은 현재 cmdlet에만 적용되고, 세션이나 컴퓨터에는 적용되지 않습니다.

별칭	none
필수 여부	false
위치	named
기본값	none
파이프라인 입력 허용 여부	false
와일드카드 문자 허용 여부	false

-TimeOfDay<String>

Specifies the time of day criterion. Specify a criterion in the following format:

operator, value01, value02, . . . , operator, value03, value04, . . .

The operator is either EQ or NE. You can specify no more than one of each operator in the criterion.

The policy treats values the follow the EQ operator as multiple assertions which are logically combined (OR'd). The policy treats values that follow the NE operator as multiple assertions which are logically differenced (AND'd). The criterion is satisfied if the time of day of the zone transfer matches one of the EQ values and does not match any of the NE values.

Example criterion: "EQ,10:00-12:00,22:00-23:00"

별칭	none
필수 여부	false
위치	named
기본값	none
파이프라인 입력 허용 여부	true(ByPropertyName)
와일드카드 문자 허용 여부	false

-TransportProtocol<String>

Specifies the transport protocol criterion. Valid values are: TCP and UDP. Specify a criterion in the following format:

operator, value01, value02, . . . , operator, value03, value04, . . .

The operator is either EQ or NE. You can specify no more than one of each operator in the string.

The policy treats values the follow the EQ operator as multiple assertions which are logically combined (OR'd). The policy treats values that follow the NE operator as multiple assertions which are logically differenced (AND'd). The criterion is satisfied if the transport protocol of the zone transfer matches one of the EQ values and does not match any of the NE values.

Example criterion: "EQ,TCP,NE,UDP"

별칭	none
필수 여부	false
위치	named
기본값	none
파이프라인 입력 허용 여부	true(ByPropertyName)
와일드카드 문자 허용 여부	false

-ZoneName<String>

Specifies the name of a DNS zone on which this cmdlet creates a zone level policy. The zone must exist on the DNS server.

별칭	none
필수 여부	true
위치	3
기본값	none
파이프라인 입력 허용 여부	true(ByPropertyName)
와일드카드 문자 허용 여부	false

-Confirm

cmdlet을 실행하기 전에 확인 메시지를 표시합니다.

필수 여부	false
위치	named
기본값	false
파이프라인 입력 허용 여부	false
와일드카드 문자 허용 여부	false

-WhatIf

cmdlet이 실행되는 경우 발생할 결과를 보여 줍니다. cmdlet은 실행되지 않습니다.

필수 여부	false
위치	named
기본값	false
파이프라인 입력 허용 여부	false
와일드카드 문자 허용 여부	false

<CommonParameters>

이 cmdlet은 -Verbose, -Debug, -ErrorAction, -ErrorVariable, -OutBuffer, -OutVariable 등의 일반 매개 변수를 지원합니다. 자세한 내용은 TechNet의 about_CommonParameters(https://go.microsoft.com/fwlink/p/?LinkID=113216)

<WorkflowParameters>

입력

입력 형식은 cmdlet으로 파이프할 수 있는 개체의 형식입니다.

출력

출력 형식은 cmdlet 실행 시 출력되는 개체의 형식입니다.

• Microsoft.Management.Infrastructure.CimInstance#DnsServerPolicy

예

Example 1: Create a server level zone transfer policy

The first command creates a client subnet named AllowedSubnet by using the Add-DnsServerClientSubnet cmdlet. That subnet includes the specified IP subnet.

The second command creates a zone transfer policy that disallows all customers that do not belong to the AllowedSubnet subnet. This policy is a server level policy, and, so, it applies on all the zones on the server.

PS C:\> Add-DnsServerClientSubnet -Name "AllowedSubnet" -IPv4Subnet 172.21.33.0/24 -PassThru
PS C:\> Add-DnsServerZoneTransferPolicy -Name "NorthAmericaPolicy" -Action IGNORE -ClientSubnet "ne,AllowedSubnet" -PassThru | Format-List *

Example 2: Disallow zone transfers by server interface

This command creates a zone transfer policy that disallows all zone transfer queries that do not arrive on server interface 10.0.0.33.

PS C:\> Add-DnsServerZoneTransferPolicy -Name "InternalTransfers" -Action IGNORE -ServerInterfaceIP "ne,10.0.0.33" -PassThru

Example 3: Create a zone level zone transfer policy

This command creates a zone level zone transfer policy for contoso.com.

PS C:\> Add-DnsServerZoneTransferPolicy -Name "InternalTransfers" -Action IGNORE -ServerInterfaceIP "ne,10.0.0.33" -PassThru -ZoneName "contoso.com" | Format-List *

관련 항목

Get-DnsServerZoneTransferPolicy

Remove-DnsServerZoneTransferPolicy

Set-DnsServerZoneTransferPolicy

Start-DnsServerZoneTransfer

Add-DnsServerClientSubnet

Add-DnsServerQueryResolutionPolicy