Adding a DHCP forward zone - BlueCat Integrity - 26.1.0

Address Manager Administration Guide
ft:locale
en-US
Product name
BlueCat Integrity
Version
26.1.0

Create a DHCP forward zone for forward DHCP zone declarations to configure TSIG or GSS-TSIG signing of Dynamic DNS updates.

To add a DHCP forward zone:

  1. Select the IPAM tab in the sidebar, then select DHCP settings.
  2. Select the DHCP zone groups tab.
  3. Select the name of a DHCP zone group in the DHCP zone groups table.
  4. Select the DHCP zones tab, then select New > DHCP forward zone.
  5. Under General, configure the following parameters:
    • Primary DNS server address—enter the IP address for the zone’s primary DNS server.
    • Secondary DNS server address—enter the IP address for the zone’s secondary DNS server.
      Note: The primary and secondary fields refer to the Windows DNS Server definition of primary/secondary servers (two read/write servers), not the standard primary/secondary architecture of the DNS protocol (where primary is read/write and the secondary is read-only). When adding a forward DHCP zone to non-Windows DNS servers in a standard primary-secondary relationship, fill out only the Primary DNS Server Address field. The Secondary DNS Server Address field is only for Windows DNS Server configurations, where both servers are read/write.
    • Zone type—select a DNS zone from an Address Manager-managed server or provide the fully-qualified domain name for a DNS zone not managed by Address Manager:
      • For a zone located on an Address Manager-managed server, select Under Address Manager Control and select a zone from the drop-down list. To filter the list of zones, click in the Select Zone list and type the first few letters of the zone name. The DNS View to which each zone belongs appears in [square brackets] after the zone name.
      • For a zone located on a server not managed by Address Manager, select Third Party and type a fully qualified domain name in the Zone field.
    • Dynamic update signing key type—select one of the following options to sign DDNS updates:
      • None—to not sign DDNS updates.
      • TSIG—to sign DDNS updates with a TSIG key.
      • GSS-TSIG—to sign DDNS updates with GSS-TSIG.
  6. In the Change control section, add comments if required.
  7. Select Create.