Adding a DHCP zone declaration - BlueCat Integrity - 26.1.0

Address Manager Administration Guide
ft:locale
en-US
Product name
BlueCat Integrity
Version
26.1.0

A DHCP zone declaration must be created for every forward and reverse zones to be updated. You need to add forward and reverse DHCP zones in Address Manager with at least the zone name and IP address of the Windows DNS server to update the zones in each domain.

To sign DDNS updates for a DHCP forward zone and reverse zone:

  1. Select the IPAM tab in the sidebar, then select DHCP settings.
  2. Select the DHCP zone groups tab.
  3. Select the name of an existing DHCP zone group.
  4. Select the DHCP zones tab.
  5. Add a forward zone and a reverse zone.
    • To add a DHCP forward zone:
      1. Select New > DHCP forward zone.
      2. In the Primary DNS server address field, enter the IP address for the zone’s primary DNS server.
      3. In the Secondary DNS server address field, enter the IP address for the zone’s secondary DNS server.
      4. Under Zone type, select Third party and enter a fully-qualified domain name for a Windows DNS zone in the Zone field.
      5. Under Dynamic update signing key type, select GSS-TSIG to sign DDNS updates using GSS-TSIG for the zone.
        • If you are updating a zone on a DNS server located in a child domain different from the default Kerberos realm, you must specify the correct Kerberos realm for this child domain. To change the DNS Kerberos realm, select a realm for the child domain in the Kerberos realm field.
      6. In the Change control section, add comments if required.
      7. Select Create or Create and add another.
    • To add a DHCP reverse zone:
      1. Select New > DHCP reverse zone.
      2. In the Primary DNS server address field, enter the IP address of the Windows DNS server with reverse zone.
      3. In the Secondary DNS server address field, enter the IP address of a second Windows DNS server.
      4. Under Zone type, select Third party and enter a fully-qualified domain name in the Zone field.
      5. Under Dynamic update signing key type, select GSS-TSIG to sign DDNS updates using GSS-TSIG for the reverse zone.
        • If you are updating a zone on a DNS server located in a child domain different from the default Kerberos realm, you must specify the correct Kerberos realm for this child domain. To change the DNS Kerberos realm, select a realm for the child domain in the Kerberos realm field.
      6. In the Change control section, add comments if required.
      7. Select Create or Create and add another.