Fortinet black logo

Administration Guide

DDNS support

DDNS support

When Dynamic DNS (DDNS) is enabled on FortiGates, VPN Manager supports DDNS. First VPN Manager searches for the interface IP for IPsec Phase2. If no IP is found, then VPN Manager searches for DDNS.

You can use FortiManager and the CLI Configurations menu to enable DDNS on each FortiGate device. The CLI Configurations menu is available in the Device Manager pane. See CLI Configurations menu.

With the CLI Configurations menu, you can use the config system ddns command to enable DDNS on a per-device basis. The selected monitoring interface must be the interface that supports your tunnel, for example:

config system ddns

edit 1

set ddns-server FortiGuardDDNS

set ddns-domain "<HOST1>.fortiddns.com"

set monitor-interface "port14"

next

end

You can also use the CLI Configurations menu to configure DDNS on multiple FortiGate interfaces. Once configured, you can use FortiManager to view all the DDNS entries, but you cannot edit the entries.

Following is an example of how to configure DDNS on multiple FortiGates by using the CLI Configurations menu:

config system ddns

edit 1

set ddns-server FortiGuardDDNS

set ddns-domain "<HOST1>.fortiddns.com"

set use-public-ip enable

set monitor-interface "wan"

next

edit 2

set ddns-server FortiGuardDDNS

set ddns-domain "<HOST2>.fortiddns.com"

set use-public-ip disable

set monitor-interface "wwan"

next

end

Multiple DDNS entries are useful when using SDWAN and multiple broadband links.

DDNS support

When Dynamic DNS (DDNS) is enabled on FortiGates, VPN Manager supports DDNS. First VPN Manager searches for the interface IP for IPsec Phase2. If no IP is found, then VPN Manager searches for DDNS.

You can use FortiManager and the CLI Configurations menu to enable DDNS on each FortiGate device. The CLI Configurations menu is available in the Device Manager pane. See CLI Configurations menu.

With the CLI Configurations menu, you can use the config system ddns command to enable DDNS on a per-device basis. The selected monitoring interface must be the interface that supports your tunnel, for example:

config system ddns

edit 1

set ddns-server FortiGuardDDNS

set ddns-domain "<HOST1>.fortiddns.com"

set monitor-interface "port14"

next

end

You can also use the CLI Configurations menu to configure DDNS on multiple FortiGate interfaces. Once configured, you can use FortiManager to view all the DDNS entries, but you cannot edit the entries.

Following is an example of how to configure DDNS on multiple FortiGates by using the CLI Configurations menu:

config system ddns

edit 1

set ddns-server FortiGuardDDNS

set ddns-domain "<HOST1>.fortiddns.com"

set use-public-ip enable

set monitor-interface "wan"

next

edit 2

set ddns-server FortiGuardDDNS

set ddns-domain "<HOST2>.fortiddns.com"

set use-public-ip disable

set monitor-interface "wwan"

next

end

Multiple DDNS entries are useful when using SDWAN and multiple broadband links.