Document toolboxDocument toolbox

DNS View

Field Name

Data Type

Required (Yes/No)Associated GUI FieldAssociated PAPI Method

Usage and Guideline

Header-View

String

Yes

Identifies the first row as a header row for the DNS view objects.
Example: View

name

String

Yes

Example: dns_view1

_new_name

String

No

Add this field to overwrite the name field when you select the Overwrite or Merge option.

comment

String

NoCommentcomment

Example: This is a DNS view.

network_view

String

NoNetwork Viewnetwork_view

 If no network view is specified, the default view is used. Example: Default

disable

Boolean

NoDisabledisable

Enable or disable view. Example: False

recursion

Boolean

No
allow_recursive_query

Flag to respond to recursive queries. Example: False

root_name_server_type

String

No

This is a single inheritance from GridDns. Example: Custom

match_clients

ACL

No

List of address_tsig_ac items. It can be an IP address, a network entry, Any or a TSIG-/permission. If the first value is not Any or TSIG-, it is assumed to be an IP address or a network entry. Example: 10.0.0.10/Allow, 11.0.0.0/16/Deny, TSIG-foo/xyz/Allow. It can also be a named ACL. Example: NACL1.

match_destinations

ACL

No

Indicates the match_destination list. It can be an IP address, a network, Any or a TSIG-/permission. If the first value is not Any or TSIG-, it is assumed to be an IP address or a network entry. Example: 10.0.0.10/Allow, 11.0.0.0/16/Deny, TSIG-foo/xyz/Allow. It can also be a named ACL. Example: NACL1.

custom_root_name_servers

Root nameserver list

No

List of custom root name servers. Example: rnm1.test.com/1.1.1.1/

lame_ttl

Unsigned integer

No

Indicates the lame TTL value in seconds. Example: 600

nxdomain_redirect

Boolean

No

Enable intercept and redirect nxdomain responses Example: False

nxdomain_redirect_addresses

IP address list

No



Example: 1.1.1.1,2.2.2.2
Note that the field nxdomain_redirect_addresses is dependent on the nxdomain_redirect field. Infoblox recommends that you specify values for nxdomain_redirect_addresses and nxdomain_redirect fields and do not leave these fields blank while performing a CSV import operation.

nxdomain_redirect_ttl

Unsigned integer

No



Indicates the NXDOMAIN redirect ttl in seconds. Example: 60

nxdomain_log_query

Boolean

No



When you set this to True, NXDOMAIN redirections will be logged.Example: False

nxdomain_rulesets

List of domain names

No



List of Ruleset objects used for NXDOMAIN redirection. Example: nxd1.com, nxd2.com

enable_blacklist

Boolean

No


enable_blacklist

Enable or disable blacklisting at the Grid level. Example: False

blacklist_redirect_addresses

IP address list

No


blacklist_redirect_ addresses

Set or retrieve the list of IPv4 addresses to which the blacklisted queries are redirected.Example: 1.1.1.1,2.2.2.2

blacklist_action

String

No



Specify the action to be performed when a domain name matches the pattern defined in an assigned rule. Example: Redirect

blacklist_redirect_ttl

Unsigned integer

No



Set or retrieve the TTL value of synthetic DNS responses resulted by blacklisted queries. Example: 60

blacklist_log_query

Boolean

No


blacklist_log_query

Specify if blacklisted queries must be logged. Example: False

blacklist_rulesets

List of domain names

No


blacklist_rulesets

Specify or retrieve ruleset objects that are blacklisted at the Grid level. Example: list1.com, list2.com, ...

enable_dns64

Boolean

No



Enable or disable DNS64 synthesis. Example: False

dns64_groups

DNS64
group list

No



List of SynthesisGroup objects. Example: dns64_grp1, dns64_grp2

forwarders_only

Boolean

No

Use Forwarders Only

forward_only

Enable use of forwarders only. Example: False

forwarders

IP address list

No


forwarders

List of forwarders for zone transfers. Example: "10.10.0.1,20.20.0.1,.."

filter_aaaa

String

No



Indicates the type of AAAA filtering for this Grid DNS object. The default value is No. Example: Yes

filter_aaaa_list

ACL

No

Indicates the list of IPv4 addresses and networks from which queries are received. Note that the AAAA filtering is applied to these addresses.
Example: “12.0.0.12/Deny,13.0.0.0/8/Allow,. .” or “NACL1”

max_cache_ttl

Unsigned integer

No

Indicates the maximum time (in seconds) for which the server will cache positive answers. The default value is 604800.

max_ncache_ttl

Unsigned integer

No

Indicates the maximum time (in seconds) for which the server will cache negative (NXDOMAIN) responses. The default value is 10800. The maximum allowed value is 604800.

EA-Site

String

NoExtensible attributeextensible_attributes

EA-Site is an example of a predefined extensible attribute. You can add other predefined attributes to the data file. Example: California.

EA-Users

String

NoExtensible attributeextensible_attributes

EA-Users is an example of a user defined attribute. You can add other user defined attributes to the data file. Example: John.

ADMGRP-XXXX

String

NoPermissions
Admin
Group/Role
permission

ADMGRP-JimSmith is an example of an admin permission of a specific admin group. Example: RW

rpz_drop_ip_rule_enabled

Boolean

NoIgnore RPZ-IP triggers with too small prefix lengths

When this is set to True, DNS server ignores RPZ-IP rules with prefix lengths that are less than the specified prefix length limit.
Example: TRUE

rpz_drop_ip_rule_min_prefix_length_ipv4

Unsigned Integer

NoMinimum
IPv4 Prefix
Length

Indicates the minimum IPv4 prefix length for RPZ-IP triggers. The default value is 29.

rpz_drop_ip_rule_min_prefix_length_ipv6

Unsigned Integer

NoMaximum IPv4 Prefix Length

Indicates the minimum IPv6 prefix length for RPZ-IP triggers. The default value is 112

IPv4 Network Container

Field Name

Data Type

Required (Yes/No)Associated GUI FieldAssociated PAPI Method

Usage and Guideline

Header- NetworkContainerStringYes

Identifies the first row as a header row for network container objects. Example: NetworkContainer
addressIP addressYes IP Addressipv4addrIndicates the IP address of the network container. Example: 192.138.1.1
netmaskPrefixYesNetmasknetworkIndicates the subnet mask of a network container in CIDR format. Example: 24
commentStringNoCommentcommentExample: This is an IPv4 network container.

lease_time

integer

NoLease Time

Example: 1100

routers

IP address list

NoRouters

Example: "10.0.0.1,10.0.0.100,"

domain_name

FQDN 

NoDomain Name


domain_name_servers

IP address list  

NoDNS Servers

Example: "10.2.3.4,11.2.3.4"

broadcast_address

IP address

NoBroadcast Address

Example: 10.0.0.1

OPTION-1

String 

NoCustom DHCP Optionsoptions

This is an example of a DHCP option. For Options information, see Data Specific Guidelines.
 Example: '255.0.0.0' name implies vendor_class='DHCP' (default)

OPTION-XXXX-200

Option information

NoCustom DHCP Optionsoptions

This is an example of a DHCP option. For information, see Data Specific Guidelines.  Example: 'dfdfdfd' name implies vendor_class='XXXX', option code/number 200

enable_ddns

Boolean

NoEnable DDNS Updatesenable_ddns

Example: FALSE

ddns_domainname

String

NoDDNS Domain Nameddns_domainname

Example: ddns.corp100.com

ddns_ttl

Unsigned integer

NoDDNS Update TTLddns_ttl

Indicates the DDNS TTL value in seconds.
Example: 1200

ddns_generate_hostnameBooleanNoGenerate
Hostname
ddns_generate_hostnameWhen you set this to True, DHCP server will generate a hostname for DNS updates if not sent by client. Example: TRUE
update_static_ leasesBooleanNoUpdate Fixed
Address
ddns_update_fixed_address Example: FALSE
enable_option81 BooleanNoOption 81
Support
ddns_use_option81Example: TRUE
update_dns_on_ lease_renewalBooleanNoLease Renewal Updateoverride_ update_dns_ on_lease_ renewalExample: TRUE
enable_dhcp_ thresholdsBooleanNoEnable DHCP Thresholds

enable_dhcp_ thresholds

When you set this field to TRUE, you must enter values in the range_high_water_mark and range_low_water_mark fields. You cannot leave those fields empty. Otherwise, the appliance generates an error.
enable_email_ warningsBooleanNo
enable_email_warningsEnable to send DHCP threshold warnings via email. Example: False
enable_snmp_ warningsBooleanNo

Enable to send DHCP threshold warnings via SNMP. Example: False
threshold_email_ addressesemail address listNoEmail Addresses
Example:
"'admin1@infoblox.com','admin2@somewhere.com'"
pxe_lease_timeUnsigned integerNoPXE Lease Timepxe_lease_timeExample: 1100

deny_bootp

Boolean

NoDeny BOOTP Requestsdeny_bootp

Example: FALSE

boot_file

String 

NoBoot Filebootfile

Example: bootfile1

boot_server

String

NoBoot Serverbootserver

Example: abc.corp100.com

next_server

String

NoNext Servernextserver

Example: blue.domain.com

option_logic_filters

List of IPv4 logic filter rules 


Filter Type/Action

Examples: .com.infoblox.dns.dhcp_mac_filter$mac_filte r_name,.com.infoblox.dns.nac_filter$nac_filter_name,
.com.infoblox.dns.dhcp_option_filters$opt_filter_name

lease_scavenge_time

Unsigned integer

No

Indicates the Grid level lease_scavenge_time value. If the value is -1, which means this lease scavenge will is disabled. The minimum value would be 7 * 24 * 60 * 60 ( 7 days).

is_authoritative

Boolean 

NoAuthoritativeauthority

Example: FALSE

recycle_leases

Boolean 

NoLease Deletionrecycle_leases

This field is set to TRUE by default. Ensure that you use the overwrite option if you want to change the value to FALSE. Merging data from an import preserves the default value.

ignore_client_requested_options

Boolean

NoIgnore Optionlistignore_dhcp_option_list_request

Example: TRUE

network_view

String

NoNetwork Viewnetwork_view

If no network view is specified, the default view is used. Example: Default

rir_organization

String 

NoOrganization Namerir_organization

Identifies the Regional Internet Registry (RIR) organization object. Use this only when the network is associated with an RIR organization.
Example: corp100

rir_registration_status

String

NoRegistration Statusrir_registration_status

Identifies the registration status of Regional Internet Registry (RIR). Use this only for an RIR network. When you enable the Enable Updates Of RIR Registrations checkbox at the Grid level and import a CSV file to add either an IPv4 network container or an IPv6 network container with the rir_registration_status set to Registered without values for any other RIR fields, the appliance completes the import operation and adds the IPv4 network container or the IPv6 network container to the Grid. The status of this IPv4 network container or the IPv6 network container is set as Non-registered network.
Example: Non-registered

last_rir_registration_update_sent

String

No

Identifies the last registration update timestamp of Regional Internet Registry (RIR). This is a read-only attribute.

last_rir_registration_update_status

String

No

Identifies the last registration update status of Regional Internet Registry (RIR). This is a read-only attribute.

enable_discovery

Boolean

YesEnable Discoverynetwork

If this field is set to True, the discovery_member must also be defined.

discovery_memberStringYesDiscovery
Member
networkIndicates the discovery member name. Required if discovery is enabled for the network.
discovery_exclusion_rangePrefixNo

List of IP ranges to be excluded from the discovery process.
remove-subnetsBooleanNo

Specify False to keep the subnets or True to remove them. The default value is undefined, which is to remove all subnets. Use this only when you want to delete a network container. When you perform CSV export of a network container, the CSV file does not contain the remove-subnets column. You must add the remove-subnets column to the CSV export file if you want to perform a delete operation. When you delete a network container from the CSV file, you must set remove-subnets to True to delete both the parent and sub networks. When you set this column value to False, the CSV delete operation deletes only the parent network when you delete a network container.
EA-SiteStringNoExtensible attributeextensible_attributesEA-Site is an example of a predefined extensible attribute. You can add other predefined attributes to the data file. Example: California.
EA-UsersStringNoExtensible attributeextensible_attributesEA-Users is an example of a user defined attribute. You can add other user defined attributes to the data file. Example: John.
ADMGRP-XXXXStringNoPermissions
Admin
Group/Role
permissionADMGRP-JimSmith is an example of an admin permission of a specific admin group. Example: RW