Lab 4.1 - Create DNS Resolver
#############################

.. note:: If you already ran through the Lab 2 - SAML Azure authentication with Kerberos SSO, you can skip this section of the lab. The DNS resolver is already created.


1. Access **BIG-IP Next Central Manager** if you're not already logged in.

.. image:: images/lab2-cmlogin.png
    :width: 600 px

2. Click on the Workspace icon and select Infrastructure

.. image:: images/lab2-infrastructure.png
    :width: 600 px

3. In the My Instances dashboard, click on *big-ip-next-03.example.com* instance.

.. image:: images/lab2-myinstances.png
    :width: 600 px

4. This will open the Instance Settings screen. On the left side, click on **Routing & Forwarding**. Click on **Default** VRF. 

.. image:: images/lab2-routingforwarding.png
    :width: 600 px

5. Enable **DNS Resolver** and add a new entry

* Name : global_f5_internal_net_resolver
* Forward Zone : create a new zone

  * forwardZone : . <- this is a period or single dot
  * nameserver : 10.1.1.6:53

.. image:: images/lab2-dnsresolver.png
    :width: 600 px

9. Click **Save** and **Save**, and then click **Cancel & Exit** to exit out of the Instance Setting screen.

This ends this section of the lab, onto the next.