This section provides details on using iManager to manage objects in eDirectory.
Configuring the scope settings for a session significantly improves the session's performance. If you do not configure the scope settings for the session, you receive a warning before every task you attempt to perform. However, you can still proceed with the task.
Setting the scope of the DHCP services requires two specifications for the session: the Novell eDirectory context of the Locator object and the administrative scope of the session. Specifying the eDirectory context of the Locator object at the start of the session significantly improves performance because it eliminates the need to search for the Locator object. Specifying the administrative scope of the session also improves performance significantly because it restricts the retrieval of DHCP objects for viewing to the scope you specify. When you configure the DHCP scope settings for a session, they only last as long as the session lasts. If you start a new session, you must configure the DHCP Scope Settings again.
To configure DHCP scope settings:
In iManager, click > to open the Scope Settings window.
Specify the eDirectory context of the DHCP Locator object or browse to select it.
Specify the eDirectory context of the container object or browse to select it. This provides the administrative scope of the current session.
If you specify only the eDirectory context of the DHCP Locator object and not the administrative scope of the current session, you can proceed with administrative tasks without receiving a warning message. However, performance is further optimized if you also define the administrative scope.
Click
A message indicates that the scope setting request was successful.
Click to complete the process.
Or
Click to configure the scope settings again.
The Service object acts as a container object for subnet, shared network, host, zone, class, TSIG key, and failover.
The Service Management role consists of the following tasks:
In iManager, clickto open the Service Management window in the main panel.
From the drop-down menu, select , then click to open the Create Service window.
Specify the name of the service.
Specify the name of the eDirectory context or browse to select it.
Select a server from the drop-down list.
Click .
A message indicates that the new DHCP service object has been created.
In iManager, click to open the Service Management window in the main panel.
From the drop-down menu, select , then click to open the View/Modify Service window.
Select the DHCP service from the drop-down menu, then click .
Modify the attributes of the service.
|
Attributes |
Function |
|---|---|
|
General |
You can use this task to assign DHCP servers for a service. You can also record comments against a particular service. |
|
Available Options |
Displays the options that the server can use to communicate with the client. These are the predefined options in the system and it is not possible to modify them. In addition to the existing options, you can declare custom options. |
|
Settings |
These settings are used to define configuration settings for a service. |
|
Configured Options |
You can define values for the predefined options that are declared in the list. For example, is a predefined option in the . Use the Configured Options task to set a value for the Toption. |
In iManager, clickto open the Service Management window in the main panel.
From the drop-down menu, select , then click to open the Delete Service window.
To remove all the services in the list, click the top-level check box, then click .
or
To remove one or more services, click the check box next to the service, then click .
DHCP uses the client-server structure to allocate network addresses to a host. The DHCP server reads its configuration information from eDirectory and stores the information in its cache. The Server Management role consists of the following tasks:
In iManager, click to open the Server Management window in the main panel.
From the drop-down menu, select , then click to open the Create Server window.
Specify the name of the server.
Specify the eDirectory context or browse to select it.
Click .
A message indicates that the new server object has been created.
In iManager, click to open the Server Management window in the main panel.
From the drop-down menu, select , then click to open the View/ Modify Server window.
Select the server object from the drop-down menu.
Click .
Modify the attributes of the server.
|
Attribute |
Function |
|---|---|
|
Settings |
Indicates all of the configuration parameters that can be defined for the server |
|
General |
lists the services that are assigned to this server. You can provide comments for every service that is defined. |
In iManager, click to open the Server Management window in the main panel.
From the drop-down menu, select , then click to open the Delete Server window.
To remove all servers in the list, click the top-level check box, then click.
or
To remove one or more DHCP servers, click the check box next to it, then click .
IMPORTANT:To load/unload a server, owcimomd daemon must be running on the remote server. The user on the remote server must be LUM enabled and should have supervisor rights at the entry level to the UNIX workstation object.
Click to open the Server Management window in the main panel.
From the drop-down menu, select , then click to open the Load/Unload Server window.
Specify the name or IP address of the server you want to load/unload.
Click .
The server name and server status is displayed. Depending on the server status, you can choose to load or unload the DHCP server.
To load a server, select the option.
or
To unload a server, select the option.
Click to confirm the action.
For the Load or Unload task to work, the owcimomd daemon should be running on the remote server and the remote server must be LUM-enabled.
All subnets that share the same physical network can be grouped under a Shared Network object.
The Shared Network Management role consists of the following tasks:
In iManager, click to open the Shared Network Management window in the main panel.
From the drop-down menu, select , then click to open the Create DHCP Shared Network window.
Specify the name of the shared network.
Select a service from the drop-down list.
Click .
A message indicates that the new Shared Network has been created.
In iManager, click to open the Shared Network Management window in the main panel.
From the drop-down menu, select , then click to open the View/Modify Shared Network window.
Select a service from the list.
All of the shared networks created under the service are listed in the drop-down list. Select the shared network you want to modify, then click .
Modify the attributes of the shared network.
|
Attribute |
Function |
|---|---|
|
General |
Lists the subnets that are serviced by this shared network. You can provide comments for every subnet that is defined. |
|
Settings |
These settings are used to define configuration settings for a shared network |
|
Configured Options |
You can define values for the predefined options that are declared in the Available Option table. For example, Time Offset is a predefined option in the Available Option list. You use the Configured Options task to set a value for the option. |
In iManager, click to open the Shared Network Management window in the main panel.
From the drop-down menu, select , then click to open the Delete Shared Network window.
Select a service from the list. All the Shared Networks created under the service are listed below.
To remove all the Shared Network objects in the list, click the top-level check box, then click .
or
To remove one or more than one Shared Network object, click the check box next to the object, then click.
The Subnet object is the most fundamental DHCP object. It enables you to distribute IP addresses and DHCP options to each network.
The Subnet object contains host definitions for fixed address allocation and pools with address range.A Subnet object's specific DHCP options and configuration parameters apply to the entire subnet and override the options set at the shared network and service levels.
The Subnet Management role consists of the following tasks:
In iManager, click to open the Subnet Management window in the main panel.
From the drop-down menu, select then click to open the Create Subnet window.
Select a service from the drop-down list. It is mandatory to select a service, because a Subnet can only be created under a service or a Shared Network.
If you want the Subnet object to be created under service and shared network hierarchy, select a Shared Network object from the drop-down list.
Specify a subnet address and a subnet mask in the fields provided.
Click .
A message indicates that the new subnet has been created.
In iManager, click to open the Subnet Management window in the main panel.
From the drop-down menu, select , then click to open the View/Modify Subnet window.
Select the Service from the drop-down list.
If you have created Subnets under a Service and Shared Network hierarchy, the associated Shared Networks and Subnets are displayed in the drop-down list.
Modify the attributes of the subnet.
|
Attribute |
Function |
|---|---|
|
General |
Select a zone from the drop-down list. The specified zone is updated when an IP address from this subnet is leased or when the lease expires. You can record comments about the Subnet object you are modifying. |
|
Lease |
|
|
Lease Time |
Specifies the length of time for an address assignment. A lease time can be either permanent or timed. Permanent leases never expire; the client is assigned an IP address for an indefinite period. Timed leases are defined in days, hours, or minutes. Timed leases expire, unless the client renews the lease. |
|
Boot Parameter Options |
Select this option to specify the server address, server name, and boot file name for the BOOTP service. This is the address and name of a server the client can contact for a boot image, as well as a boot file name. |
|
Settings |
These settings are used to define configuration settings for a subnet: |
|
Configured Options: |
You can define values for the predefined options that are declared in the Available Option table. For example, Time Offset is a predefined option in the Available Option list. You use the Configured Options task to set a value for the option. |
In iManager, click to open the Subnet Management window in the main panel.
From the drop-down menu, select , then click to open the Delete Subnet window.
Select a Service from the list. All the Subnets created directly under service are listed below.
The default value for a shared network is None. To list the Subnets created under a Service and Shared Network object hierarchy, select the associated Shared Network object from the drop-down list.
To remove all of the Subnet objects in the list, click the top-level check box, then click
or
To remove one or more Subnet object, click the check boxes next to the object, then click .
The Pool object represents a range of addresses for dynamic address assignment or for exclusion from the address assignment.
The Pool Management role consists of the following tasks:
In iManager, click to open the Pool Management window in the main panel.
From the drop-down menu, select , then click to open the Create Pool window.
Select a service from the drop-down list. All of the subnets created under the service and the service or shared network hierarchy are displayed.
Select a subnet from the drop-down list.
In the field, type the name of the pool.
Specify the lower and upper limits of the address range in the and fields respectively.
Click .
A message indicates that the new pool has been created.
In iManager, click to open the Pool Management window in the main panel.
From the drop-down menu, select , then click to open the View/Modify Pool window.
Select a service from the list.
If there is more than one subnet associated with a service, select the subnet from the list.
All of the pools associated with the selected subnet are displayed. Select the one you want to modify from the drop-down list, then click .
Modify the attributes of the pool.
|
Attribute |
Function |
|---|---|
|
General Tab |
|
|
Range Type drop-down |
|
|
DHCP |
A range of addresses used by the DHCP server to assign addresses to clients making only DHCP requests. You can enable the DNS Update Option parameter by assigning the Dynamic DHCP range type. If is selected, the DHCP server updates DNS as dynamic addresses are assigned and released. |
|
BOOTP and DHCP |
A range of addresses used by the DHCP server to assign addresses to clients that send a DHCP or BOOTP request. You can enable the DNS Update Option parameter by assigning the Dynamic BOOTP and DHCP range type. If is selected, the DHCP server updates DNS as dynamic addresses are assigned and released. |
|
Excluded |
The range of addresses to be excluded by the DHCP server while assigning IP addresses. |
|
Select the Failover Peer drop-down |
Specify the Failover Peer from the drop-down list. |
|
DNS Update drop-down |
If you choose to do a Dynamic update, then select from the DNS Update drop-down. |
|
Comments |
You can type your comments about the Pool in this box. This is optional. |
|
Settings |
These settings are used to define configuration settings for a pool. |
|
Configured Option |
You can define values for the predefined options that are declared in the list. For example, Time Offset is a predefined option in the list. You use the Configured Options task to set a value for the option. |
In iManager, click to open the Pool Management window in the main panel.
From the drop-down menu, select , then click to open the Delete Pool window.
Select the service and subnet that contains the address pool(s) to delete.
To delete all the pools, click the top-level check box, then click .
or
To delete one or more pool objects, click the check box next to the object, then click .
The Host object represents a client in the network with statically assigned IP address and is identified by a hostname.
You can use iManager to configure Host objects that are manually assigned. For dynamically or automatically assigned client addresses, DHCP updates the dhcpd.leases file in the /var/lib/dhcp/db directory.
The Host binds the IP Address to a particular MAC address. The user should isolate this IP from being leased to any other client. Ensure that this IP does not fall into any of the existing dynamic ranges defined in the pools. To achieve this user may split the ranges, keeping the IP of the host outside all ranges specified.
When configuring an individual Host object, you can provide specific options that override global options or those set at the subnet/service level.
The Host Management role consists of the following tasks:
In iManager, click to open the Host Management window in the main panel.
From the drop-down menu, select , then click to open the Create Host window.
Specify the hostname.
Select a Service under which the Host object has to be created. It is mandatory to select a service.
The default value of the Subnet object is None. If you want the Host object to be created under service-subnet network hierarchy, select a Subnet object from the drop-down list.
Specify the name by which you want to identify the host.
Specify the IP address of the host.
Specify the client identifier. This uniquely identifies the client.
Select the MAC type from the drop-down list.
Specify the hardware address of the NIC (Network Interface Card) in the field.
Click .
A message indicates that the new host has been created.
NOTE:While creating a Host object, it is important to specify either the client identifier or the MAC address.
In iManager, click to open the Host Management window in the main panel.
From the drop-down menu, select , then click to open the View/Modify Host window.
Select a service from the list.
If you have created Host objects under a service-subnet network hierarchy, select the associated subnet from the drop-down list. The associated Host object is displayed in the drop-down list.
Click to modify the Host object.
Modify the attributes of the host.
|
Attribute |
Function |
|---|---|
|
General Tab |
|
|
Host IP address |
IP address of the host |
|
Client Identifier: |
Unique identifier of the client |
|
MAC Type |
The MAC address type |
|
MAC Address |
The hardware address of the NIC (Network Interface Card) |
|
Comments |
Specify comments about the Host objects you modify. |
|
Lease |
|
|
Lease Type |
Specifies the length of time for an address assignment. A lease type can be either permanent or timed. Permanent leases never expire; the client is assigned an IP address for an indefinite period. Timed leases are defined in days, hours, or minutes. Timed leases expire, unless the client renews the lease. |
|
Boot Parameter Options: |
Select this option to specify the server address, server name, and boot file name for the BOOTP service. This information is provided at boot time. If the option is selected, you need to specify at least one boot parameter. |
|
Settings |
These settings are used to define configuration settings for a host. |
|
Configured Options |
You can define values for the predefined options that are declared in the list for the service under which you have created this host. For example, is a predefined option in the Available Option list. You use the Configured Options task to set a value for the option. |
In iManager, click to open the Host Management window in the main panel.
From the drop-down menu, select , then click to open the Delete Class window.
Select a service from the list. All the subnets created directly under service are listed below.
The default value of Subnet is None. To list the Host objects created under a service-subnet hierarchy, select the associated Subnet object from the drop-down list.
To remove all the Host objects in the list, click the top-level check box, then click .
or
To remove one or more than one Host object, click the check box next to the object, then click .
The Class object helps in segregating clients into classes. These clients are treated differently depending on the class they are in.
The Class Management role consists of the following tasks:
In iManager, click to open the Class Management window in the main panel.
From the drop-down menu, select , then click to open the Create Class window.
Enter the class name.
Select a service from the drop-down list.
Click .
A message indicates that the new pool has been created.
Click to open the Class Management window in the main panel.
From the drop-down menu, select , then click to open the View/Modify Class window.
Select a service from the list.
All the class objects created under the service is listed in the drop-down list. Select the class you want to modify and click .
Modify the attributes of the class.
|
Attribute |
Function |
|---|---|
|
General Tab |
|
|
Conditional Expression |
Conditional Expression: A conditional expression is defined to segregate clients into different classes. This separation can be achieved with a conditional statement or with a match statement within the class declaration. Specify the conditional expression you want to define in the field. To group clients into different classes based on conditional expression, you can specify a match expression within a class statement in the following manner: match if substring (option dhcp-client-identifier, 1, 3) = "RAS"; |
|
Spawn Statement |
A spawning class is used to automatically create lease-limited subclasses based on the client parameters. Select an option from the drop-down list. The option value sent by the client is checked against the dynamically created subclasses for the specified class. If a match is found, the client is classified under that subclass and treated accordingly. If no match is found, the server creates a new subclass and logs the information in the lease file, and the client is classified in this new subclass. After classification, the class is processed according to the rule set for the class |
|
Comments |
Specify comments in the field. This is optional. |
|
Settings |
These settings are used to define configuration settings for a class. |
|
Configured Options |
You can define values for the predefined options that are declared in the list. For example, is a predefined option in the list. You use the Configured Options task to set a value for the option. |
In iManager, click to open the Class Management window in the main panel.
From the drop-down menu, select , then click to open the Delete Class window.
Select a service from the list. All the class objects created under the service are listed below.
To remove all the Class objects in the list, click the top-level check box, then click.
or
To remove one or more than one class object, click the check box next to the object, then click.
The DHCP Zone object contains the references the Domain Name System (DNS).
A DHCP server uses this information to perform dynamic updates for the zone objects. A DNS server must be configured to allow updates for the zone that the DHCP server is updating.
The Zone Management role consists of the following tasks:
In iManager, click to open the Zone Management window in the main panel.
From the drop-down menu, select , then click to open the Create Zone window.
Specify the name by which you want to identify the zone.
Specify the IP address of the DNS server that will receive updates from an authorized DHCP server.
Select a service from the drop-down list.
Click .
A message indicates that the new zone has been created.
In iManager, click to open the Zone Management window in the main panel.
From the drop-down menu, select , then click to open the Modify Zone window.
Select a service from the list.
All of the zones associated with the selected service are displayed. Select the one you want to modify from the drop-down list, then click .
Modify the attributes as desired.
|
Attribute |
Function |
|---|---|
|
Addressing |
If you want to modify the primary DNS server address of the zone that receives dynamic updates, specify the new IP address in the IP address field |
Select a TSIG key from the drop-down list for secure DDNS update.
Specify comments in the field.
In iManager, click to open the Zone Management window in the main panel.
From the drop-down menu, select , then click to open the Delete Zone window.
Select the service that contains the zones to delete.
To delete all the zones, click the top-level check box, then click .
or
To delete one or more zone objects, click the check boxes next to them, then click .
A TSIG key is used for authenticating dynamic updates to a DNS server. TSIG uses shared secret keys as a cryptographically secure means of authenticating a DNS update.
The TSIG Key management role consists of the following tasks:
In iManager, click to open the TSIG Key Management window in the main panel.
From the drop-down menu, select , then click to open the Create TSIG Key window.
Specify a name to identify the TSIG key.
Specify the name of the algorithm. This algorithm is used to generate a TSIG key.
Specify a secret key that is used to decrypt the TSIG key.
Select a service from the list. The TSIG key is created under the specified service.
Click .
A message indicates that the new TSIG key has been created.
In iManager, click to open the TSIG Key Management window in the main panel.
From the drop-down menu, select , then click to open the View/Modify TSIG Key window.
Select the service from the drop-down list. All the TSIG keys created under this service are listed.
Select a TSIG key from the list.
Modify the key attributes as desired.
|
Attribute |
Function |
|---|---|
|
General |
|
|
Algorithm Name |
Specify an algorithm name. This algorithm is used to generate TSIG keys instead of the one specified earlier. |
|
Secret Key |
Specify a new secret key |
|
Comments |
Specify comments |
In iManager, click to open the TSIG Key Management window in the main panel.
From the drop-down menu, select , then click to open the Delete TSIG Key window.
Select a service from the list. All the TSIG keys created under the service are listed below.
To remove all the TSIG keys in the list, click the top-level check box, then click .
or
To remove one or more than one TSIG keys, click the check box next to the object, then click .
The Failover Peer protocol allows only two DHCP servers to share a common address pool. This ensures continuous availability of the network. The process defines the role of a primary server and a secondary server.
Each server has about half of the available IP addresses in the Pool at any given time for allocation. During a prolonged failure of the primary server, the secondary server recovers all the addresses that the primary server had available for allocation, and begins to reuse them.
In iManager, click and set the .
Create a Creating a Service. For example, myService1. Assign the service to one of the two DHCP servers in the tree.
Create a second Service. For example, myService2. Assign the service to the second DHCP server in the tree.
Create two identical subnets (one for each Service) Creating a Subnet Object. When you create a subnet, a drop-down menu allows you to select the service to be assigned to the each subnet.
Create two identical pools (one under each Subnet) Creating a Pool Object. When creating the pool, select the appropriate service.
Create a Failover object under each service. Maintain the same naming convention for ease. When creating the Failover objects, configure both the Failover objects to be identical (especially when specifying the primary and secondary servers).
The same port can be used for the primary and secondary servers. As the RFC does not currently specify a reserved port for DHCP Failover Peer setups, specify a port(s) of your choice that is unused
In iManager, click > to open the Failover Management window in the main panel.
From the drop-down menu, select , then click to open the Create Failover window.
Specify the name of the Failover in the text box.
Specify the IP address of the .
Specify the port number (any integer) of the primary server in the text box.
Specify the IP address of the .
Specify the port number (any integer) of the Secondary Server in the text box.
Specify the . This specifies the split between the Primary and Secondary for the purpose of load balancing. Specify on the Primary, may not be specified on the Secondary.
Specify the . This is the length of time for which a lease can be renewed by either server without contacting the other. Specify it on the Primary; it cannot be specified on the Secondary.
Select a from the drop-down list.
Click .
A message indicates that the new has been created.
Edit each pool involved in the failover and choose the Failover Peer from the drop down list.
Restart DHCP and monitor /var/log/message for any errors.
In iManager, click > to open the Failover Management window in the main pane.
From the drop-down menu, select , then click to open the View/Modify Failover window.
Select a Service from the drop-down list.
Select the appropriate Failover from the drop-down list.
Click to modify the Failover.
Modify the attributes of the Failover.
The attributes, such as Primary Server, Primary Port, Secondary Server, Secondary Port, Failover Split, and Max Client Lead Time, which were defined during creating the Failover, can be modified. Additionally, the following attributes can also be modified:
|
Attribute |
Function |
|---|---|
|
Load Balance Time |
The time (seconds) set so that if one of the failover peers is in a state where it responds to the failover messages but does not respond to some client requests, the other failover peer takes over its client load automatically as the clients retry. |
|
Response Delay |
This amount of information that needs to be processed. |
|
Unacked Updates |
Notifies the Primary Server of the number of messages it can send before it receives from the Failover Secondary Server. |
|
Comments |
Specify any comments about the Failover. |
In iManager, click > to open the Failover Management window in the main pane.
From the drop-down menu, select , then click to open the Delete Failover window.
Select a Service from the drop-down list. All the Failover instances created under the service are listed below.
To remove all the Failover instances in the list, click the top-level check box, then click .
or
To remove one or more than one Failover instance, click the check box next to the instance, then click .
The import or export operation is used to transfer the DHCP service configuration from files into eDirectory or from eDirectory to a text file in a dhcpd.conf format.
NOTE:Only Linux DHCP configuration files should be used to import or export the DHCP configuration.
The Export DHCP database operation transfers the DHCP configuration from eDirectory to a text file in a dhcpd.conf format. This file can be imported anywhere. You can also import the file back into eDirectory using the DHCP plug-in.
In iManager, click > to open the Service Management window in the main pane.
From the drop-down menu, select , then click to open the Export Service window.
Select the service from the drop-down list that you want to export, then click .
Click the option to start the export. The File Download dialog box opens to save the file. Click to save the file locally.
Click to continue. A confirmation message displays to confirm the export.
Click to complete the export.
The Import DHCP database operation is used to transfer the DHCP service configuration from files into eDirectory database. The configuration files should be in dhcpd.conf format.
NOTE:Importing the Linux DHCP configuration file will overwrite the associated DNS server's settings.
Click > to open the Service Management window in the main pane.
From the drop-down menu, select , then click to open the Import Service window.
Specify the name of the service in the text box.
Specify the name of the eDirectory context or browse to select it.
(Optional) Select the DHCP server associated with the service.
Specify the or browse to select it.
Click . An information message displays the status of the import.
Click to continue. A confirmation message displays to allow you to confirm the import.
Click to complete the import.