Got it

【GSC FAQs】How Do I Configure NAT to Deliver DDNS?

331 0 0 0 0

Before configuring the DDNS, pay attention to the following points:

  • The device functioning as the DDNS client supports the following update modes:

    When using the update mode implemented through the DDNS server, the DDNS client must register on the DDNS server website. Currently, the device can be connected to the following DDNS servers: DDNS servers provided at www.3322.org, www.dyndns.com, and www.oray.cn, Siemens DDNS server, and HTTP-based common DDNS server.

    Authentication steps are implemented in the update process through DDNS servers. All DDNS servers except Siemens DDNS servers do not encrypt user passwords during the authentication. To improve security, you are advised to configure IPSec when using these DDNS servers to implement update. For details, see IPSec Configuration in the Huawei AR Series V200R010 Configuration Guide - VPN.

    • DDNS update mode (defined by the RFC2136): The DDNS client dynamically updates the mapping between domain names and IP addresses on the DNS server.

    • Update mode implemented through the DDNS server: The DDNS client sends the mapping between domain names and IP addresses to the DDNS server with a specified URL. The DDNS server then informs the DNS server to dynamically update the mapping between domain names and IP addresses.

The detailed configuration procedure is as follows:

  1. Run system-view


    The system view is displayed.


  2. Run ddns policy policy-name


    A DDNS policy is created and the DDNS policy view is displayed.

    By default, no DDNS policy is created in the system.

    A maximum of 10 DDNS policies can be configured on the device.


  3. Run method { ddns [ both ] | http | vendor-specific }


    The update mode is configured for the device functioning as the DDNS client.



    By default, the update mode is vendor-specific for the device functioning as the DDNS client.

  • When the device uses HTTP to communicate with the DDNS server provided at www.3322.org, the URL in a DDNS update request is:

    http://<username>:<password>@members.3322.org/dyndns/update?system=dyndns&hostname=<h>&myip=<a>

  • When the device uses HTTP to communicate with the DDNS server provided at www.dyndns.com, the URL in a DDNS update request is:

    http://<username>:<password>@update.dyndns.com/nic/update?hostname=<h>&myip=<a>

  • When the device uses TCP to communicate with the DDNS server provided at www.oray.cn, the URL in a DDNS update request is:

    oray://<username>:<password>@phddnsdev.oray.net

  • When the device uses HTTPS to communicate with the Siemens DDNS server, the URL in a DDNS update request is user-defined, for example,

    https://x.x.x.x/nic/update?group=med&user=<username>&password=<password>&myip=192.168.19.2

    note_3.0-en-us.png

    During the configuration, replace x.x.x.x with the DDNS server IP address of Siemens.

  • When the device uses HTTP to communicate with a common DDNS server, the URL in a DDNS update request is:

    http://<username>:<password>@merri.s.dnaip.fi/reg/h=<h>&a=<a>

  • In the preceding URLs, <username> and <password> are fixed formats, which cannot be modified.

  • The DDNS service is provided by DDNS servers from different vendors. When the DDNS server URL changes or the DDNS server stops providing service, the device used as the DDNS client cannot exchange packets with the DDNS server. The DDNS function may not take effect. If you fail to update the mapping entries between the DDNS domain name and IP address, you are advised to upgrade the router to the latest version.

  • When the device uses HTTP to communicate with the DDNS server provided at www.3322.org, the URL in a DDNS update request is:

    http://username:password@members.3322.org/dyndns/update?system=dyndns&hostname=<h>&myip=<a>

  • When the device uses HTTP to communicate with the DDNS server provided at www.dyndns.com, the URL in a DDNS update request is:

    http://username:password@update.dyndns.com/nic/update?hostname=<h>&myip=<a>

  • When the device uses TCP to communicate with the DDNS server provided at www.oray.cn, the URL in a DDNS update request is:

    oray://username:password@phddnsdev.oray.net

  • When the device uses HTTPS to communicate with the Siemens DDNS server, the URL in a DDNS update request is user-defined, for example,

    https://x.x.x.x/nic/update?group=med&user=huawei_test&password=12345&myip=192.168.19.2

    note_3.0-en-us.png

    During the configuration, replace x.x.x.x with the DDNS server IP address of Siemens.

  • When the device uses HTTP to communicate with a common DDNS server, the URL in a DDNS update request is:

    http://username:password@merri.s.dnaip.fi/reg/h=<h>&a=<a>

    note_3.0-en-us.png

    In the preceding URLs, username and password indicate the user name and password for logging in to the DDNS server. Set these parameters based on the registry information. For example, in http://huawei1:huawei2@merri.s.dnaip.fi/reg/h=<h>&a=<a>, huawei1 and huawei2 indicate the user name and password for logging in to the DDNS server.

  • If username username password password is not specified, the URL contains the user name and password, and their configurations are displayed in plain text.

  • If username username password password is specified, the URL only contains the fixed format <username>:<password>, not the user name and password. The user name and password are specified by username and password, and the password configuration is displayed in cipher text.

  • Configuring the update mode to ddns (DDNS update mode defined by the RFC2136)

  • Configuring the update mode to vendor-specific (communicating with the Siemens DDNS server and DDNS servers provided at www.3322.org, www.dyndns.com, and www.oray.cn) or http (communicating with an HTTP-based common DDNS server)

  1. Run url request-url [ username username password password ]


    The URL in DDNS update requests is specified.

    note_3.0-en-us.png

    To ensure password security, you are advised to run the username username password password command to configure a user name and password. The password information in the configuration file is displayed in cipher text.

    After a DDNS policy is created, enter the URL and specify a DDNS server in the URL. The processes for the device to request DDNS updates from different DDNS servers are different; therefore, the URL configurations of DDNS servers are different.

  2. (Optional) Run ssl-policy policy-name

    The SSL policy is bound to the DDNS policy.

    note_3.0-en-us.png

    When the device functions as the DDNS client and communicates with the Siemens DDNS server, the device needs to encrypt packets using SSL. An SSL policy needs to be bound to the Siemens DDNS policy. To configure an SSL policy, see "SSL Configuration" in the Huawei AR Series V200R010 Configuration Guide - Security.

  3. (Optional) Run interval interval-time

    The interval for sending DDNS update requests is set.

    After the interval for sending DDNS update requests is set in the configured DDNS policy, the device sends DDNS update requests at intervals. By default, the interval for sending DDNS update requests is 3600 seconds.

  4. Run name-server name-server [ vpn-instance vpn-instance-name ]

    The DNS server for receiving update messages from the DDNS client is configured.

    By default, no DNS server for receiving DDNS update messages is configured.

  5. (Optional) Run interval interval-time

    The interval for sending DDNS update requests is set.

    By default, the interval for sending DDNS update requests is 3600 seconds.

    After the interval for sending DDNS update requests is set in the configured DDNS policy, the DDNS client sends DDNS update requests at intervals.


Comment

You need to log in to comment to the post Login | Register
Comment

Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " User Agreement."

My Followers

Login and enjoy all the member benefits

Login

Block
Are you sure to block this user?
Users on your blacklist cannot comment on your post,cannot mention you, cannot send you private messages.
Reminder
Please bind your phone number to obtain invitation bonus.