Just giving a feedback, this method worked great, but in my case, didn't have no negate the keys in the ACL (like the example below), I created one key for each ACL in my configuration and used that ACL for the "match-clients" directive in the view.<div>
<br></div><div>So, when the slave tried to sync the zone, the matched the key, not the IP address, that way every zone was sync correctly.</div><div><br></div><div>Thanks for your help!<br><br><div class="gmail_quote">2012/6/15 Niall O'Reilly <span dir="ltr"><<a href="mailto:Niall.oReilly@ucd.ie" target="_blank">Niall.oReilly@ucd.ie</a>></span><br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><br>
On 15 Jun 2012, at 01:14, Rodrigo Renie Braga wrote:<br>
<br>
> I've been trying to find examples on how to use TSIG to replicate several differents views to a slave server, but I could only find with two views, and I just couldn't figure out how to adapt that example to 3 or more views.<br>
><br>
> Could you send me example on how to accomplish that?<br>
<br>
Something like what follows below may be what you need.<br>
This supports 3 views, keyed on TSIG or by default on<br>
client address. For more views, no new ideas are needed.<br>
<br>
include "/etc/select-tsig.keys"; // keep keys in protected file<br>
<br>
acl captive-clients {<br>
// Purpose: triage for "captive" view<br>
key <a href="http://select-captive.ucd.ie" target="_blank">select-captive.ucd.ie</a>.; // select on this key<br>
! key <a href="http://select-internal.ucd.ie" target="_blank">select-internal.ucd.ie</a>.; // by-pass<br>
! key <a href="http://select-general.ucd.ie" target="_blank">select-general.ucd.ie</a>.; // by-pass<br>
<br>
<a href="http://10.137.0.0/16" target="_blank">10.137.0.0/16</a>; // Target networks<br>
<a href="http://10.193.128.0/19" target="_blank">10.193.128.0/19</a>;<br>
<a href="http://10.193.160.0/20" target="_blank">10.193.160.0/20</a>;<br>
};<br>
<br>
acl internal-clients {<br>
// Purpose: triage for "internal" view<br>
key <a href="http://select-internal.ucd.ie" target="_blank">select-internal.ucd.ie</a>.; // select on this key<br>
! key <a href="http://select-captive.ucd.ie" target="_blank">select-captive.ucd.ie</a>.; // by-pass (redundant)<br>
! key <a href="http://select-general.ucd.ie" target="_blank">select-general.ucd.ie</a>.; // by-pass<br>
localhost;<br>
<br>
<a href="http://172.16.0.0/16" target="_blank">172.16.0.0/16</a>; // Special networks<br>
<a href="http://10.224.0.0/16" target="_blank">10.224.0.0/16</a>;<br>
};<br>
<br>
// Clients not otherwise selected are offered "general" view<br>
<br>
// special-purpose view: 'captive'<br>
view "captive" {<br>
<br>
match-clients { captive-clients; };<br>
<br>
// view details go here ...<br>
<br>
}; // End view "captive"<br>
<br>
view "internal" {<br>
<br>
match-clients { internal-clients; };<br>
<br>
// view details go here ...<br>
<br>
};<br>
<br>
// standard view: 'general'<br>
view "general" {<br>
<br>
match-clients { any; };<br>
<br>
// view details go here ...<br>
<br>
};<br>
<br>
I hope this helps.<br>
<span class="HOEnZb"><font color="#888888"><br>
Niall O'Reilly<br>
<br>
</font></span></blockquote></div><br></div>