Silviu Marin-Caea
Here are the relevant portions of config files: /etc/named.conf
key "dhcp_updater" {
algorithm "hmac-md5";
secret "HSrz0PvF-bla-bla-brgc3/Xw==";
};
[...]
zone "genesys.ro" in {
type master;
file "genesys.ro.localnet";
allow-update { key "dhcp_updater"; };
};
zone "1.168.192.in-addr.arpa" {
type master;
file "192.168.1";
allow-update { key "dhcp_updater"; };
};
/etc/dhcpd.conf
# default lease time 2592000 sec = 30 days
default-lease-time 2592000;
# max lease time 5184000 sec = 60 days
max-lease-time 5184000;
option domain-name "genesys.ro";
option subnet-mask 255.255.255.0;
ddns-update-style interim;
ddns-updates on;
key dhcp_updater {
algorithm hmac-md5;
secret "HSrz bla bla JLHbrgc3/Xw==";
}
subnet 192.168.1.0 netmask 255.255.255.0 {
range 192.168.1.100 192.168.1.254;
option routers 192.168.1.1;
option domain-name-servers 192.168.1.1;
option smtp-server 192.168.1.1;
option pop-server 192.168.1.1;
option netbios-name-servers 192.168.1.1;
option ntp-servers 192.168.1.1;
ignore client-updates;
zone genesys.ro. {
primary 127.0.0.1;
key dhcp_updater;
}
zone 1.168.192.in-addr.arpa. {
primary 127.0.0.1;
key dhcp_updater;
}
}
Use dnssec-keygen -a HMAC-MD5 -b 128 -n USER DHCP_UPDATER
to obtain a string for secret.
|