DDNS support
When Dynamic DNS (DDNS) is enabled on FortiGates, VPN Manager supports DDNS. First VPN Manager searches for the interface IP for IPsec Phase2. If no IP is found, then VPN Manager searches for DDNS.
You can use FortiManager and the CLI Configurations menu to enable DDNS on each FortiGate device. The CLI Configurations menu is available in the Device Manager pane. See CLI Configurations menu.
With the CLI Configurations menu, you can use the config system ddns command to enable DDNS on a per-device basis. The selected monitoring interface must be the interface that supports your tunnel, for example:
config system ddns
edit 1
set ddns-server FortiGuardDDNS
set ddns-domain "<HOST1>.fortiddns.com"
set monitor-interface "port14"
next
end
You can also use the CLI Configurations menu to configure DDNS on multiple FortiGate interfaces. Once configured, you can use FortiManager to view all the DDNS entries, but you cannot edit the entries.
Following is an example of how to configure DDNS on multiple FortiGates by using the CLI Configurations menu:
config system ddns
edit 1
set ddns-server FortiGuardDDNS
set ddns-domain "<HOST1>.fortiddns.com"
set use-public-ip enable
set monitor-interface "wan"
next
edit 2
set ddns-server FortiGuardDDNS
set ddns-domain "<HOST2>.fortiddns.com"
set use-public-ip disable
set monitor-interface "wwan"
next
end
Multiple DDNS entries are useful when using SDWAN and multiple broadband links.