On Oct 1, 2013, at 8:27 PM, David Newman <dnew...@networktest.com> wrote:

> On 10/1/13 2:16 PM, David Newman wrote:
>> Is there a recommended order of operations when moving DNSSEC-enabled
>> nameservers to a hidden-master setup?
> 
> Actually, this is really a more general question: Is there a recommended
> order of operations when migrating zones between any two DNSSEC-enabled
> nameservers, assuming the same version of bind on each?

Eh... I'm not sure what the complexity here is.

Set the "new" machine up as a slave, use the standard axfr mechanism to 
replicate the zones, move the keying material and then convert the new system 
form slave to master while taking the existing master off-line.

What am I missing?

AlanC
-- 
Alan Clegg | +1-919-355-8851 | a...@clegg.com

Attachment: signature.asc
Description: Message signed with OpenPGP using GPGMail

_______________________________________________
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Reply via email to