查看:get-DnsServerQueryResolutionPolicy -ZoneName "byssoft.com"
$policy = Get-DnsServerQueryResolutionPolicy -ZoneName "byssoft.com" -name "DefaultPolicy"
$policy.criteria
策略的优先级:
查看:get-DnsServerQueryResolutionPolicy -ZoneName "byssoft.com"
策略通过ProcessingOrder来命名优先级,
更改优先级:
比如我们要讲策略名为:CNPolicy的优先级调成最低Set-DnsServerQueryResolutionPolicy -name "CNPolicy" -ZoneName "byssoft.com" -processingOrder 4
接下来就是禁用策略
策略的级别有基于Zone级别的,也有基于域级别的Disable-DnsServerPolicy -name "CNPolicy" -ZoneName "byssoft.com" -level zone
接下来就是启用策略enable-DnsServerPolicy -name "CNPolicy" -ZoneName "byssoft.com" -level zone
最后我们在说说策略增加:Add-DnsServerQueryResolutionPolicy -Name "PolicyName" -Action ALLOW -ClientSubnet "eq,CNSubnet" -ZoneScope "CNSubnetScope,1" -ZoneName "byssoft.com"
策略的删除:remove-DnsServerQueryResolutionPolicy -Name "PolicyName" -Action ALLOW -ClientSubnet "eq,CNSubnet" -ZoneScope "CNSubnetScope,1" -ZoneName "byssoft.com"
策略的修改:set-DnsServerQueryResolutionPolicy -Name "DefaultPolicy" -ZoneScope "byssoft.com,1" -FQDN “ne,www.byssoft.com,e-cology.byssoft.com” -ZoneName "byssoft.com"
原文地址:http://blog.51cto.com/gaowenlong/2085109