Support for dynamic DNS updates in Data ONTAP

Certain conditions apply when you are using dynamic DNS updates in Data ONTAP.

The following conditions apply to dynamic DNS updates:

• By default, dynamic DNS updates are disabled in Data ONTAP.
• Dynamic DNS updates are supported on UNIX and Windows system.
• On Windows DNS servers, secure dynamic DNS updates can be used to prevent malicious updates on the DNS servers. Kerberos is used to authenticate updates.

  Even if secure dynamic DNS updates are enabled, your storage system initially tries sending updates in clear text. If the DNS server is configured to accept only secure updates, the updates sent in clear text are rejected. Upon rejection, the storage system sends secure DNS updates.

• For secure dynamic DNS updates, your storage system must have CIFS running and must be using Windows Domain authentication.
• Dynamic DNS updates can be sent for the following:
  • Physical interfaces
  • vif and VLAN interfaces
  • vFiler units
• You cannot set TTL values for individual vFiler units. All vFiler units inherit the TTL value that is set for vFiler0, which is the default vFiler unit and is the same as the physical storage system.
• DHCP addresses cannot be dynamically updated.
• In a takeover situation, the hosting storage system is responsible for sending DNS updates for IP addresses for which it is responding.
• For both manual and autoconfigured global IPv6 unicast addresses, the dynamic DNS update is sent after Duplicate Address Detection is performed. For IPv6 addresses of any other type and scope, your storage system does not send any dynamic DNS update.