Information The steps in this post shows how to configure the DHCP server to automatically update the DNS records when giving out a new lease to a client computer. Before continuing These steps assumes that you already have a working copy of isc-dhcp-server and bind9 installed.
With the default settings, a duplicate A record gets registered by DHCP with the client’s new IP.
3.1 Edit /etc/bind/local: # # Make sure to change the ddns update style to interim: ddns-update-style interim; ignore client-updates; # Overwrite client configured FQHNs ddns-domainname ""; ddns-rev-domainname ""; # option definitions common to all supported networks... subnet 192.168.0.0 netmask 255.255.255.0 The configuration files now contains our secret key. We also have to give the DHCP-server the permission to read and write it’s own file.
option domain-name "home.lan"; option domain-name-servers lan; default-lease-time 600; max-lease-time 7200; # If this DHCP server is the official DHCP server for the local # network, the authoritative directive should be uncommented. 5.1 Remove the general read rights from the configuration files: The dns database files are now being rewritten by the bind service.
This is because DHCP doesn’t own the record, the client does, even though DHCP registered it. If you have Windows 2008 R2, in addition to configuring the DNS tab to force registration, you still must configure credentials and add the server to the Dns Update Proxy group.
The way to get around this is you can configure DHCP’s Option 081 to update the record for all client, no matter if the client asks or not. If DHCP is on a Windows 2008 R2 DC, to protect the DC when using the Dns Update Proxy group, you must secure the group by running: dnscmd /config /Open Acl On Proxy Updates 0 Using “DHCP Name Protection.” will register A and PTR record on behalf of a client, and will prevent a workstation (non-Windows) Name Squatting, meaning using a name that another machine (non-Windows or Windows) client that DHCP already registered , from registering it’s name.