Search Again:

Re: DNS and DHCP

From: Len Conrad
Date: Wednesday, February 6, 2002
Time: 4:21:08 pm


>I'd
>like to set up a DNS server for the internal network (BIND on an OS X machine)

ok, the DNS box of course should have a fixed ip, as should all the
servers. DHCP is for managing desktop ip space, not servers.

>so that we can refer to the various hosts by name. This is more for my own
>enlightenment and amusement than as a necessity. With the help of DNS & BIND,
>I'm sure that I can get an internal name server going without too much
>problem

we here could probably help :))

>, but there is one thing I'm not sure about. Since the internal
>addresses assigned via DHCP are, well, dynamic, and since computers
>occasionally leave and re-join the network (a.k.a. the iBook goes for a
>ride...) and/or get rebooted, etc., the internal addresses get shuffled
>around occasionally.

hmm, you can give "infinite" leases that never expire (as someone else
mentioned ip-mapped-to-MAC), which is how an ADSL provider in France gave
us a "fixed" ip on our ADSL line (we needed fixed ip at our remote admin
office so we could apply ip-based ACL's at our tech center)

>The machine at 10.0.1.2 today may or may not be the same machine
>at that address tomorrow. As far as I can find from the meager Airport docs
>there are no configuration options for its DHCP server other than 'on' and
>'off,' so there's not a way to get the Airport always assign the same
>address to a given machine. Is there a workable strategy to deal with this
>so that a
>given host name in the internal DNS always resolves to the same machine, even
>if that machine's IP address may change occasionally? Can it be done with
>BIND

sure, but the DHCP server needs to know how to send updates to the BIND
server. I'm guessing your little router doesn't support DDNS??

(OT: and afaik, only w2k and xp workstation know how to do updates (or futz
around with SRV records).

>, or would I need to find some other name server that can do dynamic DNS?

stop the DHCP of the router, and run the ISC.org DHCP server on *nix. :))

Like with BIND and its RFC's, their DHCP server is meant to the "reference"
implementation of all the DHCP-related RFC's. (you'll be amazed at how
much diverse info a full-blown DHCP server can pass out vs. MS's handful of
info)

On BIND, all you have to do for your private zone is to make is a dynamic
zone with the

allow-update { match_list | acl | key ;};

... substatement in its zone statement. see:

http://www.isc.org/products/BIND/docs/config/zone.html

Since this "enlightenment and amusement" time, don't run ip-based update
ACL but run TSIG. :))

Len


___________________________________________________________________

Men & Mice: QuickDNS - DNS Expert - DNS Training - DNS Consulting
DNS Classes: Maidenhead, 01/21-23/02, Frankfurt 02/13-14/02
http://www.menandmice.com/8000/8100_course_schedule.html




Messages In This Thread:



Return to Digital Point Solutions' Home Page