DNS View
Field Name | Data Type | Required (Yes/No) | Associated GUI Field | Associated PAPI Method | Usage and Guideline |
---|---|---|---|---|---|
Header-View | String | Yes | Identifies the first row as a header row for the DNS view objects. | ||
name | String | Yes | Example: dns_view1 | ||
_new_name | String | No | Add this field to overwrite the name field when you select the Overwrite or Merge option. | ||
comment | String | No | Comment | comment | Example: This is a DNS view. |
network_view | String | No | Network View | network_view | If no network view is specified, the default view is used. Example: Default |
disable | Boolean | No | Disable | disable | Enable or disable view. Example: False |
recursion | Boolean | No | allow_recursive_query | Flag to respond to recursive queries. Example: False | |
root_name_server_type | String | No | This is a single inheritance from GridDns. Example: Custom | ||
match_clients | ACL | No | List of address_tsig_ac items. It can be an IP address, a network entry, Any or a TSIG-/permission. If the first value is not Any or TSIG-, it is assumed to be an IP address or a network entry. Example: 10.0.0.10/Allow, 11.0.0.0/16/Deny, TSIG-foo/xyz/Allow. It can also be a named ACL. Example: NACL1. | ||
match_destinations | ACL | No | Indicates the match_destination list. It can be an IP address, a network, Any or a TSIG-/permission. If the first value is not Any or TSIG-, it is assumed to be an IP address or a network entry. Example: 10.0.0.10/Allow, 11.0.0.0/16/Deny, TSIG-foo/xyz/Allow. It can also be a named ACL. Example: NACL1. | ||
custom_root_name_servers | Root nameserver list | No | List of custom root name servers. Example: rnm1.test.com/1.1.1.1/ | ||
lame_ttl | Unsigned integer | No | Indicates the lame TTL value in seconds. Example: 600 | ||
nxdomain_redirect | Boolean | No | Enable intercept and redirect nxdomain responses Example: False | ||
nxdomain_redirect_addresses | IP address list | No | Example: 1.1.1.1,2.2.2.2 | ||
nxdomain_redirect_ttl | Unsigned integer | No | Indicates the NXDOMAIN redirect ttl in seconds. Example: 60 | ||
nxdomain_log_query | Boolean | No | When you set this to True, NXDOMAIN redirections will be logged.Example: False | ||
nxdomain_rulesets | List of domain names | No | List of Ruleset objects used for NXDOMAIN redirection. Example: nxd1.com, nxd2.com | ||
enable_blacklist | Boolean | No | enable_blacklist | Enable or disable blacklisting at the Grid level. Example: False | |
blacklist_redirect_addresses | IP address list | No | blacklist_redirect_ addresses | Set or retrieve the list of IPv4 addresses to which the blacklisted queries are redirected.Example: 1.1.1.1,2.2.2.2 | |
blacklist_action | String | No | Specify the action to be performed when a domain name matches the pattern defined in an assigned rule. Example: Redirect | ||
blacklist_redirect_ttl | Unsigned integer | No | Set or retrieve the TTL value of synthetic DNS responses resulted by blacklisted queries. Example: 60 | ||
blacklist_log_query | Boolean | No | blacklist_log_query | Specify if blacklisted queries must be logged. Example: False | |
blacklist_rulesets | List of domain names | No | blacklist_rulesets | Specify or retrieve ruleset objects that are blacklisted at the Grid level. Example: list1.com, list2.com, ... | |
enable_dns64 | Boolean | No | Enable or disable DNS64 synthesis. Example: False | ||
dns64_groups | DNS64 | No | List of SynthesisGroup objects. Example: dns64_grp1, dns64_grp2 | ||
forwarders_only | Boolean | No | Use Forwarders Only | forward_only | Enable use of forwarders only. Example: False |
forwarders | IP address list | No | forwarders | List of forwarders for zone transfers. Example: "10.10.0.1,20.20.0.1,.." | |
filter_aaaa | String | No | Indicates the type of AAAA filtering for this Grid DNS object. The default value is No. Example: Yes | ||
filter_aaaa_list | ACL | No | Indicates the list of IPv4 addresses and networks from which queries are received. Note that the AAAA filtering is applied to these addresses. | ||
max_cache_ttl | Unsigned integer | No | Indicates the maximum time (in seconds) for which the server will cache positive answers. The default value is 604800. | ||
max_ncache_ttl | Unsigned integer | No | Indicates the maximum time (in seconds) for which the server will cache negative (NXDOMAIN) responses. The default value is 10800. The maximum allowed value is 604800. | ||
EA-Site | String | No | Extensible attribute | extensible_attributes | EA-Site is an example of a predefined extensible attribute. You can add other predefined attributes to the data file. Example: California. |
EA-Users | String | No | Extensible attribute | extensible_attributes | EA-Users is an example of a user defined attribute. You can add other user defined attributes to the data file. Example: John. |
ADMGRP-XXXX | String | No | Permissions Admin Group/Role | permission | ADMGRP-JimSmith is an example of an admin permission of a specific admin group. Example: RW |
rpz_drop_ip_rule_enabled | Boolean | No | Ignore RPZ-IP triggers with too small prefix lengths | When this is set to True, DNS server ignores RPZ-IP rules with prefix lengths that are less than the specified prefix length limit. | |
rpz_drop_ip_rule_min_prefix_length_ipv4 | Unsigned Integer | No | Minimum IPv4 Prefix Length | Indicates the minimum IPv4 prefix length for RPZ-IP triggers. The default value is 29. | |
rpz_drop_ip_rule_min_prefix_length_ipv6 | Unsigned Integer | No | Maximum IPv4 Prefix Length | Indicates the minimum IPv6 prefix length for RPZ-IP triggers. The default value is 112 |
IPv4 Network Container
Field Name | Data Type | Required (Yes/No) | Associated GUI Field | Associated PAPI Method | Usage and Guideline |
---|---|---|---|---|---|
Header- NetworkContainer | String | Yes | Identifies the first row as a header row for network container objects. Example: NetworkContainer | ||
address | IP address | Yes | IP Address | ipv4addr | Indicates the IP address of the network container. Example: 192.138.1.1 |
netmask | Prefix | Yes | Netmask | network | Indicates the subnet mask of a network container in CIDR format. Example: 24 |
comment | String | No | Comment | comment | Example: This is an IPv4 network container. |
lease_time | integer | No | Lease Time | Example: 1100 | |
routers | IP address list | No | Routers | Example: "10.0.0.1,10.0.0.100," | |
domain_name | FQDN | No | Domain Name | ||
domain_name_servers | IP address list | No | DNS Servers | Example: "10.2.3.4,11.2.3.4" | |
broadcast_address | IP address | No | Broadcast Address | Example: 10.0.0.1 | |
OPTION-1 | String | No | Custom DHCP Options | options | This is an example of a DHCP option. For Options information, see Data Specific Guidelines. |
OPTION-XXXX-200 | Option information | No | Custom DHCP Options | options | This is an example of a DHCP option. For information, see Data Specific Guidelines. Example: 'dfdfdfd' name implies vendor_class='XXXX', option code/number 200 |
enable_ddns | Boolean | No | Enable DDNS Updates | enable_ddns | Example: FALSE |
ddns_domainname | String | No | DDNS Domain Name | ddns_domainname | Example: ddns.corp100.com |
ddns_ttl | Unsigned integer | No | DDNS Update TTL | ddns_ttl | Indicates the DDNS TTL value in seconds. |
ddns_generate_hostname | Boolean | No | Generate Hostname | ddns_generate_hostname | When you set this to True, DHCP server will generate a hostname for DNS updates if not sent by client. Example: TRUE |
update_static_ leases | Boolean | No | Update Fixed Address | ddns_update_fixed_address | Example: FALSE |
enable_option81 | Boolean | No | Option 81 Support | ddns_use_option81 | Example: TRUE |
update_dns_on_ lease_renewal | Boolean | No | Lease Renewal Update | override_ update_dns_ on_lease_ renewal | Example: TRUE |
enable_dhcp_ thresholds | Boolean | No | Enable DHCP Thresholds | enable_dhcp_ thresholds | When you set this field to TRUE, you must enter values in the range_high_water_mark and range_low_water_mark fields. You cannot leave those fields empty. Otherwise, the appliance generates an error. |
enable_email_ warnings | Boolean | No | enable_email_warnings | Enable to send DHCP threshold warnings via email. Example: False | |
enable_snmp_ warnings | Boolean | No | Enable to send DHCP threshold warnings via SNMP. Example: False | ||
threshold_email_ addresses | email address list | No | Email Addresses | Example: "'admin1@infoblox.com','admin2@somewhere.com'" | |
pxe_lease_time | Unsigned integer | No | PXE Lease Time | pxe_lease_time | Example: 1100 |
deny_bootp | Boolean | No | Deny BOOTP Requests | deny_bootp | Example: FALSE |
boot_file | String | No | Boot File | bootfile | Example: bootfile1 |
boot_server | String | No | Boot Server | bootserver | Example: abc.corp100.com |
next_server | String | No | Next Server | nextserver | Example: blue.domain.com |
option_logic_filters | List of IPv4 logic filter rules | Filter Type/Action | Examples: .com.infoblox.dns.dhcp_mac_filter$mac_filte r_name,.com.infoblox.dns.nac_filter$nac_filter_name, | ||
lease_scavenge_time | Unsigned integer | No | Indicates the Grid level lease_scavenge_time value. If the value is -1, which means this lease scavenge will is disabled. The minimum value would be 7 * 24 * 60 * 60 ( 7 days). | ||
is_authoritative | Boolean | No | Authoritative | authority | Example: FALSE |
recycle_leases | Boolean | No | Lease Deletion | recycle_leases | This field is set to TRUE by default. Ensure that you use the overwrite option if you want to change the value to FALSE. Merging data from an import preserves the default value. |
ignore_client_requested_options | Boolean | No | Ignore Optionlist | ignore_dhcp_option_list_request | Example: TRUE |
network_view | String | No | Network View | network_view | If no network view is specified, the default view is used. Example: Default |
rir_organization | String | No | Organization Name | rir_organization | Identifies the Regional Internet Registry (RIR) organization object. Use this only when the network is associated with an RIR organization. |
rir_registration_status | String | No | Registration Status | rir_registration_status | Identifies the registration status of Regional Internet Registry (RIR). Use this only for an RIR network. When you enable the Enable Updates Of RIR Registrations checkbox at the Grid level and import a CSV file to add either an IPv4 network container or an IPv6 network container with the rir_registration_status set to Registered without values for any other RIR fields, the appliance completes the import operation and adds the IPv4 network container or the IPv6 network container to the Grid. The status of this IPv4 network container or the IPv6 network container is set as Non-registered network. |
last_rir_registration_update_sent | String | No | Identifies the last registration update timestamp of Regional Internet Registry (RIR). This is a read-only attribute. | ||
last_rir_registration_update_status | String | No | Identifies the last registration update status of Regional Internet Registry (RIR). This is a read-only attribute. | ||
enable_discovery | Boolean | Yes | Enable Discovery | network | If this field is set to True, the discovery_member must also be defined. |
discovery_member | String | Yes | Discovery Member | network | Indicates the discovery member name. Required if discovery is enabled for the network. |
discovery_exclusion_range | Prefix | No | List of IP ranges to be excluded from the discovery process. | ||
remove-subnets | Boolean | No | Specify False to keep the subnets or True to remove them. The default value is undefined, which is to remove all subnets. Use this only when you want to delete a network container. When you perform CSV export of a network container, the CSV file does not contain the remove-subnets column. You must add the remove-subnets column to the CSV export file if you want to perform a delete operation. When you delete a network container from the CSV file, you must set remove-subnets to True to delete both the parent and sub networks. When you set this column value to False, the CSV delete operation deletes only the parent network when you delete a network container. | ||
EA-Site | String | No | Extensible attribute | extensible_attributes | EA-Site is an example of a predefined extensible attribute. You can add other predefined attributes to the data file. Example: California. |
EA-Users | String | No | Extensible attribute | extensible_attributes | EA-Users is an example of a user defined attribute. You can add other user defined attributes to the data file. Example: John. |
ADMGRP-XXXX | String | No | Permissions Admin Group/Role | permission | ADMGRP-JimSmith is an example of an admin permission of a specific admin group. Example: RW |