ipsec-to-dns.md

Create DNS records for IPSec peers

⬅️ Go back to main README

ℹ️ Info: This script can not be used on its own but requires the base installation. See main README for details.

Description

This script adds (and removes) dns records based on IPSec peers and their dynamic addresses from mode-config.

Requirements and installation

Just install the script:

$ScriptInstallUpdate ipsec-to-dns;

This script is run from scheduler:

/system/scheduler/add interval=1m name=ipsec-to-dns on-event="/system/script/run ipsec-to-dns;" start-time=startup;

Configuration

On first run a disabled static dns record acting as marker (with comment "--- ipsec-to-dns above ---") is added. Move this entry to define where new entries are to be added.

The configuration goes to global-config-overlay, these are the parameters:

• Domain: the domain used for dns records
• HostNameInZone: whether or not to add the ipsec/dns server's hostname
• PrefixInZone: whether or not to add prefix ipsec

ℹ️ Info: Copy relevant configuration from global-config (the one without -overlay) to your local global-config-overlay and modify it to your specific needs.

See also

• Create DNS records for DHCP leases

---

⬅️ Go back to main README
⬆️ Go back to top