About ManageEngine DDI
50. Standar DHCPv4 options
Option Code Option Name Description Data Type Supported Is Predefined? Grammar Example 1 subnet-mask Specifies the client's subnet mask. If not provided, the DHCP server defaults to the subnet mask in the subnet declaration, unless overridden by a ...
49. DHCP service options
Option Code Option name Description Data type Supported Is Predefined ? Grammar Example 1 default-lease-time Specify the length of time in seconds to be assigned to a lease if the client requesting the lease doesn't provide a specific expiration ...
48. DNS options
Option Name Option Description Data Type Block Tags Supported Versions Example Grammar allow-new-zones Controls whether zones can be added to the BIND nameserver at runtime using rndc addzone. The default value is no. If set to "yes," the BIND server ...
FAQs for Linux ISC BIND
FAQ for the Linux based ISC-BIND and ISC-DHCP Which Linux distributions are supported? DDI Central supports major distributions such as Ubuntu 16–20.04, CentOS 8, Fedora Linux 31, Red Hat Enterprise Linux 7–9.1, and Debian. Do I need root access to ...
DDI Central system settings
DDI Central System settings DDI Central provides customizable time configurations for both DNS and DHCP services, which lets administrators can set their own time period, based on their system configurations. This helps admins automate network tasks ...
Alerts in DDI Central
Alerts in DDI Central ManageEngine DDI Central facilitates real-time alerts for the administrators over the network issues occurring, within the UI alerts page as well as email notification. They can also view alerts history, audit every alerts came ...
Rsyslogs and Live logs for Linux based DNS and DHCP servers in DDI Central
Rsyslog and Live Logs for Linux-based DNS and DHCP Servers in DDI Central What is Rsyslog? Rsyslog is an advanced and high-performance logging system used primarily in Linux and Unix-based operating systems that enables administrators to collect and ...
Generating reports in DDI Central
Generating Reports In DDI Central Reports in DDI Central The DNS and DHCP reports in DDI Central help network administrators manage and analyze their network efficiently time-to- time with up-to-date information. These reports can be directly ...
Scheduling DNS and DHCP configurations in DDI Central
Scheduling DNS And DHCP Configurations Scheduling DHCP configurations in DDI Central In the DHCP module, only the following DHCP configurations can be scheduled within DDI Central, Subnets, Shared Networks, Hosts, Host Groups and Client Classes. To ...
Managing network IP address inventory
Managing network IP address inventory To visualize and take control of the IP allocations of each subnet managed by the DHCP server: Select DHCP -> Manage IP menu from the left menu bar. The Manage IP tab displays the following three sections: The ...
Managing VLAN IP address inventory
Managing VLAN IP address inventory To visualize and take control of the IP allocations for the VLANs managed by the DHCP server: Select the DHCP -> VLAN menu from the left menu bar. The VLAN page appears displaying the list of all VLANS serviced by ...
Analyzing lease and lease history
Analyzing Lease and Lease History There are two types of leases available in DDI Central: DHCP or dynamic leases and Static leases. DHCP Leases To access these DHCP lease records: Navigate to the DHCP module. Select the Lease menu from the left inner ...
IPAM stats dashboard
The IPAM stats dashboard The IPAM stats dashboard presents an overview of the DHCP scopes or network topological units. To access ManageEngine DDI Central's IPAM: Log into ManageEngine DDI Central with your login credentials. Select the IPAM menu ...
DHCP scope audit logs
DHCP scope audit logs The DHCP scope audit logs page provides you an overview of the actions performed on each scope configured in your network. It help you to continuously evaluate the overall security posture of your scopes using security audit ...
PXE templates in DDI Central
Templates in DDI Central PXE Booting template DDI Central enables you to easily and swiftly configure PXE booting with user-friendly template forms. To access and configure this template: Select DHCP-> Config-> Templates. Click on the Add Template ...
Rogue detection: DHCP servers
Rogue detection: DHCP Server Rogue DHCP server detection is an important aspect of network security and management. In a typical network environment, DHCP (Dynamic Host Configuration Protocol) servers are used to automatically assign IP addresses and ...
Configuring DHCP failover
Configuring DHCP failover Note: DDI Central does not offer DHCP failover for IPv6 address space. Failover is only available for IPv4 address space. To configure the DHCP failover configurations: Go to DHCP ->Config-> DHCP Failover Click on the Add ...
Managing DHCP clients with Client class
DHCP Fingerprinting With Client Classes Client Classes and Sub Classes Client classes and Sub Classes are powerful features used to group clients (DHCP clients) and apply specific DHCP options or behaviors to those groups. These classes and ...
Managing DHCP scopes
Managing DHCP scopes What is a DHCP Scope? A DHCP scope is a fundamental component of the DHCP server, defining a specific range of IP addresses that the server can allocate or lease to devices on a network. in DHCP defined as a pool of IP addresses ...
Configuring ACL
Configuring ACL (Access Control List) An ACL in the context of network administration is a set of rules that control network traffic and limit access to networks and network resources based on predefined criteria. In DNS servers like ISC BIND, ACLs ...
Configuring TSIG keys
Configuring TSIG keys TSIG (Transaction Signature) TSIG is a security protocol used in the Domain Name System (DNS) to provide authenticated and secure communications between DNS servers and between DNS servers and clients. TSIG uses shared secret ...
Domain block using DNS firewall
Domain blocking using DNS Firewall Domain blocking using a DNS Firewall is a security measure that prevents users from accessing specific websites or domains by intercepting DNS queries and filtering out requests to undesired or malicious domains. ...
Response rate limiting
Response Rate Limiting (RRL) RRL, or Response Rate Limiting, is a security feature implemented in DNS servers to mitigate the impact of Distributed Denial of Service (DDoS) attacks, particularly DNS amplification attacks. It works by limiting the ...
DNSSEC
DNSSEC DNSSEC, short for Domain Name System Security Extensions, is a suite of specifications for securing certain kinds of information provided by the Domain Name System (DNS). It is designed to protect against a range of DNS attacks such as cache ...
DNS audit logs
DNS Audit Logs DDI Central enables you to view the audit logs of specific domains Select the DNS menu from the menu bar along the left side of the screen.From the submenus that appear, choose Audit. The Audit page helps you to continuously evaluate ...
DNS64
DNS64 DNS64 is a mechanism used in IPv6 networks to facilitate communication between IPv6-only clients and IPv4-only servers. This is especially important in the context of the ongoing transition from IPv4 to IPv6. Since these are two different ...
Configuring domain scavenging
Domain scavenging Domain scavenging, more commonly known as DNS scavenging, refers to the process of cleaning up stale DNS records that dynamically register themselves over time in the DNS database. This mechanism is typically used in conjunction ...
DNS Query analytics
DNS Query Analytics DNS analytics dashboard provides a network administrator with quick insights into the DNS and leased IP activity related to a particular domain or network segment. It helps in monitoring network usage, identifying potential ...
Managing dynamic domains
Managing Dynamic Domains Dynamic DNS (DDNS) In DNS, a zone is a portion of the domain namespace, and the ability to create new zones dynamically is very essential, especially in environments where zones need to be added or removed without manual ...
Managing DNS views
Managing DNS Views What are DNS views? DNS views or Domain views serve different responses to DNS queries based on various criteria, most commonly the source of the query or the host accessing it. This indicates that the DNS server can present one ...
Managing DNS Resource Records
Managing DNS Resource Records(RR) What are domain Resource Records (RR)? Resource Records (RRs) are the fundamental information elements of the Domain Name System (DNS). Each RR defines a specific piece of information about the domain. Here are the ...
Creating RPZ
DNS Firewall(FRW) Response Policy Zones (RPZ) RPZ (Response Policy Zone) allows a nameserver to modify DNS responses based on policies. It's often used for implementing security measures, such as blocking known malicious domains, redirecting domains, ...
Creating forward zones
Creating DNS Forwarders DNS Zone Forwarding or Forwarder Zones in DDI Central refers to the process of redirecting queries for a specific DNS zone to another DNS server. This is typically used when a DNS server is not authoritative for a particular ...
Creating reverse zones
Creating reverse authoritative zones Reverse DNS is the process of resolving an IP address back to a domain name. It is commonly used for services such as email servers to verify that an IP address maps to a domain name. Reverse DNS for an IP address ...
Creating Authoritative zones
Creating Authoritative Zones You can create a new domain using the Add Domain button or import domains in bulk using the Import button in the top right corner. Add Domain On clicking the Add Domain button, the Create Domain page appears as shown ...
DNS Domain migrations
DNS domain migrations When you opt for the No Discovery mode, ME DDI Central enables you to add new empty DNS servers, DDI Central prompts youto fill in a special field called DNS Domain Migrations. When using this special field, it is necessary to ...
Discovering Root Jail in ISC BIND servers
Discovering Root Jail In ISC BIND Servers What is root jail? A root jail in ISC BIND refers to a security mechanism used to limit the access of the BIND process to a specific portion of the file system. This is done by just changing the root ...
Configuring LDAP in DDI Central
Configuring LDAP in DDI Central What is LDAP authentication? Lightweight Directory Access Protocol (LDAP) is a core authentication protocol designed for directory services. Traditionally, LDAP has served as a database for storing information ...
Configuring SAML in DDI Central
Configuring SAML in DDI Central What is SAML? SAML (Security Assertion Markup Language) is an open standard for exchanging authentication and authorization data between parties, specifically between an identity provider (IDP) and a service provider ...
Monitoring servers
Monitoring servers To monitor the load and performance of your DNS and DHCP servers: Select Settings-> Servers. The Servers page appears listing the servers added. First it displays the status of the DNS, DHCP4, and DHCP6 services of the cluster. DDI ...
Next page