Deploying Suse Linux Enterprise Server
 |
Purchase "Deploying Suse Linux Enterprise Server" at Lulu.com |
Configuring DNS and DHCP
Dynamic DNS
To alleviate the work of manually entering all of the computer names and IP Addresses into your DNS Zones, you can enable what is known as Dynamic DNS. What this will do is allow your DHCP Server to automatically modify your DNS Zones with the IP Addresses it "Leases" out to computers and other devices.
Some people consider this a godsend, while others do not like it much, it really depends upon how much control you want over your network. When deployed correctly (and properly separated out within your network), Dynamic DNS can be a nice addition to your network.
What I usually like to do is have most of the computers that are stationary within an organization automatically get an IP Address that I specify with DHCP (see "Manually Assigning DHCP Addresses"). Then I like to have a separate "Subnet" that is specifically created for automatically assigned IP Addresses which are then dynamically written to the DNS Zones, this way you can quickly scan that subnet and get hostnames back to see if any "unknown" devices are accessing the network.
Creating a TSIG Key and Configuring Zones
To setup Dynamic DNS, you must first create what is called a TSIG Key. This is simply a file that allows the DNS and DHCP Server to "securely" modify the records of the other server. You can create this key from within both the DNS and DHCP Yast Modules, although I will show you how to create it within the DNS module here.
Creating a TSIG Key and Updating the DNS Zones to Use the Key for Dynamic Updates
To create the TSIG key within the DNS Module, click on the "TSIG keys" tab. This will allow you to easily generate the key, what you need to do is simply generate a key using a "Key ID" that can be anything and put the file into a directory that will be accessible by both servers. Normally you simple use the /etc/named.d/ directory.
Once you create the key, you must then enable the key within every zone that you want to have dynamic updates to it's records. Simply open the zone with the Zone Editor (under the DNS Zones tab), then check the "Allow Dynamic Updates" checkbox and select the appropriate key. Make sure that you also do the same for the Reverse Zone as well.
|
Purchase "Deploying Suse Linux Enterprise Server" at Lulu.com |
