修改Windows DNS server,增加网段策略

#子网名称,如:192-68-0-0X24
$name = "192-68-0-0X24"
#子网网段
$subnet = "192.168.0.0/24"
#A记录名称
$dn = "www"
#A记录对应的的IP
$dnIP = "127.0.0.1"

#不用修改
$subNetName = "Subnet-$name"
$policyName = "pol-$name"
$scopeName ="Scope2025"

#创建子网
Add-DnsServerClientSubnet -Name $subNetName -IPv4Subnet $subnet
#创建A记录
Add-DnsServerResourceRecord -ZoneName "X.com" -a -name $dn -IPv4Address $dnIP -ZoneScope $scopeName
Add-DnsServerQueryResolutionPolicy -Name $policyName -Action ALLOW -ClientSubnet "eq,$subnetName" -ZoneScope "$scopeName,1" -ZoneName "X.com"

#移除A记录
#Remove-DnsServerResourceRecord -ZoneName "X.com" -name "A记录名称" -ZoneScope "scope名称"
#移除策略
#Remove-DnsServerQueryResolutionPolicy -Name "策略名称"  -ZoneScope "$scopeName,1" -ZoneName "X.com"

 

posted @ 2025-02-17 10:11  smileruner  阅读(28)  评论(0)    收藏  举报