Configuring Dynamic DNS
This chapter describes how to configure DDNS update methods, and includes the following topics:
•Information about DDNS
•Licensing Requirements for DDNS
•Guidelines and Limitations
•Configuring Dynamic DNS
•Feature History for DDNS
Information about DDNS
DDNS update integrates DNS with DHCP. The two protocols are complementary: DHCP centralizes and automates IP address allocation; DDNS update automatically records the association between assigned addresses and hostnames at predefined intervals. DDNS allows frequently changing address-hostname associations to be updated frequently. Mobile hosts, for example, can then move freely on a network without user or administrator intervention. DDNS provides the necessary dynamic update and synchronization of the name-to-address mapping and address-to-name mapping on the DNS server. To configure the DNS server for other uses, see the "Configuring the DNS Server" section. To configure DHCP, see the "Configuring a DHCP Server" section.
EDNS allows DNS requesters to advertise the size of their UDP packets and facilitates the transfer of packets larger than 512 octets. When a DNS server receives a request over UDP, it identifies the size of the UDP packet from the OPT resource record (RR) and scales its response to contain as many resource records as are allowed in the maximum UDP packet size specified by the requester. The size of the DNS packets can be up to 4096 bytes for BIND or 1280 bytes for the Windows 2003 DNS Server. Several additional message-length maximum commands are available:
•The existing global limit: message-length maximum 512
•A client or server specific limit: message-length maximum client 4096
•The dynamic value specified in the OPT RR field: message-length maximum client auto
If the three commands are present at the same time, the adaptive security appliance enforces the minimum of the three specified values.
Licensing Requirements for DDNS
Table 11-1 shows the licensing requirements for DDNS.
Table 11-1 Licensing Requirements
Guidelines and Limitations
Supports Active/Active and Active/Standby failover.
Firewall Mode Guidelines
Supported in routed firewall mode.
Context Mode Guidelines
Supported in single and multiple context modes.
Supported in transparent mode for the DNS Client pane.
Configuring Dynamic DNS
Dynamic DNS provides address and domain name mapping so that hosts can find each other, even though their DHCP-assigned IP addresses change frequently. The DDNS name and address mapping are stored on the DHCP server in two resource records: the A RR includes the name-to-IP address mapping, while the PTR RR maps addresses to names. Of the two methods for performing DDNS updates—the IETF standard defined by RFC 2136 and a generic HTTP method—the adaptive security appliance supports the IETF method in this release.
The Dynamic DNS pane shows the configured DDNS update methods and the interfaces that have been configured for DDNS. By automatically recording the association between assigned addresses and hostnames at pre-defined intervals, DDNS allows frequently changing address-hostname associations to be updated regularly. Mobile hosts, for example, can then move freely on a network without user or administrator intervention.
To configure dynamic DNS client settings for updating the DNS server, perform the following steps:
Step 1 In the ASDM main application window, choose Configuration > Device Management > DNS > Dynamic DNS.
Step 2 Click Add to display the Add Dynamic DNS Update Method dialog box.
Step 3 Enter the name for the DDNS update method.
Step 4 Specify the update interval between DNS update attempts configured for the update method in days, hours, minutes, and seconds.
•Choose the number of days between update attempts from 0 to 364.
•Choose the number of hours (in whole numbers) between update attempts from 0 to 23.
•Choose the number of minutes (in whole numbers) between update attempts from 0 to 59.
•Choose the number of seconds (in whole numbers) between update attempts from 0 to 59.
These units are additive. That is, if you enter 0 days, 0 hours, 5 minutes and 15 seconds, the update method tries an update every 5 minutes and 15 seconds for as long as the method is active.
Step 5 To store server resource record updates that the DNS client updates, choose one of the following options:
•Both the A resource record and the PTR resource record.
•The A resource records only.
Step 6 Click OK to close the Add Dynamic DNS Update Method dialog box.
The new dynamic DNS client settings appear.
Step 7 To change these settings, click Edit to display the Edit Dynamic DDNS Update Method dialog box. When you edit an existing method, the Name field is display-only and shows the name of the selected method for editing
Step 8 Make your desired changes, and then click OK to close the Edit Dynamic DDNS Update Method dialog box.
The revised dynamic DNS client settings appear.
Step 9 To remove configured settings, choose the settings from the list, and then click Delete.
Step 10 To add DDNS settings for each interface configured for DDNS, click Add to display the Add Dynamic DNS Interface Settings dialog box.
Step 11 Choose the interface from the drop-down list.
Step 12 Choose the update method assigned to the interface from the drop-down list.
Step 13 Enter the hostname of the DDNS client.
Step 14 To store resource record updates, choose one of the following options:
•Default (PTR Records) to specify that the client request PTR record updating by the server.
•Both (PTR Records and A Records) to specify that the client request both the A and PTR DNS resource records by the server.
•None to specify that the client request no updates by the server.
Note DHCP must be enabled on the selected interface for this action to take effect.
Step 15 Click OK to close the Add Dynamic DNS Interface Settings dialog box.
The new dynamic DNS interface settings appear.
Step 16 To change these settings, click Edit to display the Edit Dynamic DNS Interface Settings dialog box.
Step 17 Make your desired changes, and then click OK to close the Edit Dynamic DNS Interface Settings dialog box.
The revised dynamic DNS interface settings appear.
Step 18 To remove configured settings, choose the settings from the list, and then click Delete.
Step 19 Click Apply to save your changes, or click Reset to discard them and enter new ones.
To monitor DDNS, perform the following steps:
Tools > Command Line Interface
Type showrunning-config ddns, then click Send.
Shows the current DDNS configuration.
Tools > Command Line Interface
Type show running-config dns server-group, then click Send.
Shows the current DNS server group status.
Feature History for DDNS
Table 11-2 lists the release history for this feature.
ASDM is backwards-compatible with multiple platform releases, so the specific ASDM release in which support was added is not listed.
Table 11-2 Feature History for DDNS
This feature was introduced.
The following screens were introduced:
Configuration > Device Management> DNS > DNS Client
Configuration > Device Management > DNS > Dynamic DNS.