<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<font face="monospace">While perhaps not ideal, if you have control
over what the static clients send in their DHCP requests, having
them send an FQDN option with the N-S flags to N=1, S=0 would tell
the server to not do any updates. See this section:<br>
<br>
</font><font face="monospace"><span class="chapter-2"><span
id="en-NIV-18767" class="text Isa-57-1"><a class="moz-txt-link-freetext" href="https://kea.readthedocs.io/en/latest/arm/dhcp4-srv.html#when-does-the-kea-dhcp4-server-generate-a-ddns-request">https://kea.readthedocs.io/en/latest/arm/dhcp4-srv.html#when-does-the-kea-dhcp4-server-generate-a-ddns-request</a><br>
<br>
<br>
<br>
</span></span><span class="indent-1"><span class="text Isa-57-2"></span></span></font>
<div class="moz-cite-prefix">On 3/9/22 09:50, Frey, Rick E wrote:<br>
</div>
<blockquote type="cite"
cite="mid:DM5PR05MB34513F56BA9F0C6CB997CAA3880A9@DM5PR05MB3451.namprd05.prod.outlook.com">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<meta name="Generator" content="Microsoft Word 15 (filtered
medium)">
<style>@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}div.WordSection1
{page:WordSection1;}ol
{margin-bottom:0in;}ul
{margin-bottom:0in;}</style>
<div class="WordSection1">
<p class="MsoNormal">I first wondered if something could be done
in a class but as you mention, docs indicate that
ddns-send-updates directive is limited to subnet as lowest
level so doesn’t look there is much options in current Kea
config.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Other options:<o:p></o:p></p>
<ul style="margin-top:0in" type="disc">
<li class="MsoListParagraph"
style="margin-left:-15.75pt;mso-list:l0 level1 lfo2">
Have clients with host reservation set option 81 bits to
disable DDNS updates.<o:p></o:p></li>
<li class="MsoListParagraph"
style="margin-left:-15.75pt;mso-list:l0 level1 lfo2">
Prevent DDNS updates on DNS server for specified
zones/names. Not sure what nameserver you’re using but
BIND can be configured to prevent DDNS updates at individual
name level if needed.<o:p></o:p></li>
</ul>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div style="border:none;border-top:solid #B5C4DF
1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal" style="margin-bottom:12.0pt"><b><span
style="font-size:12.0pt;color:black">From:
</span></b><span style="font-size:12.0pt;color:black">Kea-users
<a class="moz-txt-link-rfc2396E" href="mailto:kea-users-bounces@lists.isc.org"><kea-users-bounces@lists.isc.org></a> on behalf of
Francis Dupont <a class="moz-txt-link-rfc2396E" href="mailto:fdupont@isc.org"><fdupont@isc.org></a><br>
<b>Date: </b>Wednesday, March 9, 2022 at 5:05 AM<br>
<b>To: </b>Kenneth Porter <a class="moz-txt-link-rfc2396E" href="mailto:shiva@sewingwitch.com"><shiva@sewingwitch.com></a><br>
<b>Cc: </b>Kea users <a class="moz-txt-link-rfc2396E" href="mailto:kea-users@lists.isc.org"><kea-users@lists.isc.org></a><br>
<b>Subject: </b>Re: [Kea-users] Suppress DDNS for
reservations<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal">CAUTION: This email originated from
outside of the organization. Do not click links or open
attachments unless you recognize the sender and know the
content is safe.<br>
<br>
<br>
Kenneth Porter writes:<br>
> I've enabled DDNS for my subnet but I don't want it
used for reservations,<br>
> only for the pool. The DNS entries for reservations are
manually entered in<br>
> my DNS in a higher-level domain. (The pool is entered
in the "dhcp"<br>
> subdomain which allows updates.)<br>
><br>
> My subnet is a /16 and the pool is a specific /24 of
that. Other /24's are<br>
> used for specific functions, including the gateway. So
I can't just put the<br>
> pool in its own subnet or it will get the wrong mask
and won't be able to<br>
> reach the gateway.<br>
><br>
> I can't use ddns-send-updates set to false in a
reservation. It only works<br>
> in a subnet declaration or at global scope.<br>
><br>
> What am I missing?<br>
<br>
=> I suggest to try a shared network with two subnets
covering the same<br>
range but with different textual representations (e.g. put
...1 in the<br>
second).<br>
<br>
Thanks<br>
<br>
Francis Dupont <a class="moz-txt-link-rfc2396E" href="mailto:fdupont@isc.org"><fdupont@isc.org></a><br>
--<br>
ISC funds the development of this software with paid support
subscriptions. Contact us at
<a
href="https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.isc.org%2Fcontact%2F&data=04%7C01%7Crick.frey%40windstream.com%7C504617dd07214ae2597008da01bcae05%7C2567b4c1b0ed40f5aee358d7c5f3e2b2%7C0%7C0%7C637824207142398650%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=%2BCg0BuM1emxs%2FHBQi0oGjWRLHFEl9%2BL67lF4ccvq7gQ%3D&reserved=0"
moz-do-not-send="true">
https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.isc.org%2Fcontact%2F&data=04%7C01%7Crick.frey%40windstream.com%7C504617dd07214ae2597008da01bcae05%7C2567b4c1b0ed40f5aee358d7c5f3e2b2%7C0%7C0%7C637824207142398650%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=%2BCg0BuM1emxs%2FHBQi0oGjWRLHFEl9%2BL67lF4ccvq7gQ%3D&reserved=0</a>
for more information.<br>
<br>
To unsubscribe visit <a
href="https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.isc.org%2Fmailman%2Flistinfo%2Fkea-users&data=04%7C01%7Crick.frey%40windstream.com%7C504617dd07214ae2597008da01bcae05%7C2567b4c1b0ed40f5aee358d7c5f3e2b2%7C0%7C0%7C637824207142398650%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=%2FqaethbUQi6eNw9Fy9Yr7GZjFltPnb94xl4BR%2B%2F%2FcAQ%3D&reserved=0"
moz-do-not-send="true">
https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.isc.org%2Fmailman%2Flistinfo%2Fkea-users&data=04%7C01%7Crick.frey%40windstream.com%7C504617dd07214ae2597008da01bcae05%7C2567b4c1b0ed40f5aee358d7c5f3e2b2%7C0%7C0%7C637824207142398650%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=%2FqaethbUQi6eNw9Fy9Yr7GZjFltPnb94xl4BR%2B%2F%2FcAQ%3D&reserved=0</a>.<br>
<br>
Kea-users mailing list<br>
<a class="moz-txt-link-abbreviated" href="mailto:Kea-users@lists.isc.org">Kea-users@lists.isc.org</a><br>
<a
href="https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.isc.org%2Fmailman%2Flistinfo%2Fkea-users&data=04%7C01%7Crick.frey%40windstream.com%7C504617dd07214ae2597008da01bcae05%7C2567b4c1b0ed40f5aee358d7c5f3e2b2%7C0%7C0%7C637824207142398650%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=%2FqaethbUQi6eNw9Fy9Yr7GZjFltPnb94xl4BR%2B%2F%2FcAQ%3D&reserved=0"
moz-do-not-send="true">https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.isc.org%2Fmailman%2Flistinfo%2Fkea-users&data=04%7C01%7Crick.frey%40windstream.com%7C504617dd07214ae2597008da01bcae05%7C2567b4c1b0ed40f5aee358d7c5f3e2b2%7C0%7C0%7C637824207142398650%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=%2FqaethbUQi6eNw9Fy9Yr7GZjFltPnb94xl4BR%2B%2F%2FcAQ%3D&reserved=0</a><o:p></o:p></p>
</div>
</div>
<br>
<p
style="font-family:Calibri;font-size:8pt;color:#000000;margin:15pt;"
align="Left">
Sensitivity: Internal<br>
</p>
<br>
<fieldset class="moz-mime-attachment-header"></fieldset>
</blockquote>
<br>
</body>
</html>