where to configure ddns in firewall

what are the steps to configure ddns in sangfor firewall

HiHi,

Please find the attached file for your reference.

NGAF 8.0.47_ DDNS.pdf (335.75 KB, Downloads: 283)

29 Apr 2024 11:46 Upload

Click file name to download attachment

For further details, pls consult the NGAF 8.0.47 User Manual.

Hi, when dealing with dynamic IP addresses, you can configure a DNAT (Destination Network Address Translation) rule to point to a DDNS (Dynamic Domain Name System) hostname. This ensures that your network services remain accessible even if your public IP address fluctuates.

Here’s how to achieve this:

1) Create a DNS Alias:

Suppose your DDNS hostname is my-ddns-hostname.example.com.

Create a DNS alias (CNAME record) for it, such as my-public-ip.

Contact your DNS provider to set up this alias.

2) Update the DNAT Rule:

Modify your existing DNAT rule to use the DNS alias as the destination.

For example, consider the following DNAT rule:

nat destination {

    from any to any

    rule my-ddns-rule {

        destination-address "my-public-ip"

        destination-port 80

        to-address 192.168.1.100

        to-port 80

        protocol tcp

    }

}

Now, instead of specifying a specific public IP address, use the DNS alias (my-public-ip) in the destination-address field.

3) Automatic Updates:

When your public IP address changes, your DNS provider will automatically update the DNS alias (my-public-ip) to point to the new IP address.

No manual intervention is required for updating the DNAT rule.

Note: Some DNS providers may charge a fee for creating DNS aliases.

Alternatively, you can explore another approach using a reverse proxy server. This server sits in front of your web server and forwards traffic to it. By configuring the reverse proxy server to use your DDNS hostname as its public IP address, you can achieve similar results.

The choice between these workarounds depends on your specific requirements. If you’re hosting a single website, the DNS alias method may be simpler. However, for more complex scenarios or multiple websites, a reverse proxy server could be a better fit.

Unfortunately, Sangfor NGAF firewalls currently don't have a built-in feature for Dynamic DNS (DDNS) configuration.  Several online resources and discussions confirm this limitation  (

https://community.sangfor.com/fo ... wthread&tid=671).

Here are some alternative approaches you can consider:

    Use your Router's DDNS Functionality:  Many routers have built-in DDNS support. You can configure your DDNS service through your router's web interface instead of the Sangfor firewall.

    Third-Party DDNS Client:   You can install a dedicated DDNS client software on a device within your network that can update your DDNS service with your dynamic public IP address. There are various free and paid DDNS client options available.

    Contact Sangfor Support: While there's no current official support, you can reach out to Sangfor support to inquire about potential future updates or alternative solutions for DDNS within their firewalls.

To configure Dynamic DNS (DDNS) in a Sangfor firewall, please follow below steps:

1. Access Firewall Management Interface: Log in to the management interface of your Sangfor firewall using a web browser.

2. Navigate to DDNS Configuration: Locate the section or menu within the firewall interface that deals with network or WAN settings. Look for options related to DDNS configuration.

3. Enable DDNS: Find the option to enable DDNS services on the firewall. This usually involves toggling a switch or checkbox to enable DDNS functionality.

4. Enter DDNS Account Information: Provide the necessary DDNS account information, including the DDNS service provider (e.g., No-IP, DynDNS), your account username, password, and the hostname or domain you want to associate with your dynamic IP address.

5. Configure Update Frequency: Some DDNS services allow you to configure how frequently the firewall should update its IP address with the DDNS provider. Set the update frequency according to your preferences or the requirements of your network.

6. Save and Apply Settings: After entering the DDNS account information and configuring the update frequency, save the settings and apply them to activate DDNS on your Sangfor firewall.

7. Verify Configuration: Once the configuration is saved, the firewall should start updating the DDNS service with its current IP address. Verify that the DDNS hostname or domain resolves to the correct IP address.

8. Testing and Monitoring: Test the DDNS configuration by accessing services or devices behind the firewall using the DDNS hostname or domain. Monitor the DDNS status within the firewall management interface to ensure that updates are being sent successfully to the DDNS provider.

9. Troubleshooting: If you encounter any issues with DDNS updates or connectivity, refer to the firewall documentation or contact Sangfor support for assistance in troubleshooting and resolving the problem.

Hi,
Please check the following document:

https://community.sangfor.com/fo ... 8MzI2MDF8MTAwNjk%3D

Hi,

Please check the follwoing document:

go to network setting and then DNS -> DDNS ->click Add to add a new policy. save the changes.

To configure DDNS (Dynamic DNS) in a Sangfor Firewall:
1. Log in to the Sangfor Firewall's web management interface.
2. Navigate to the "System" menu and select "Dynamic DNS".
3. Click "Add" to create a new DDNS configuration.
4. Fill in the required details, including the DDNS service provider, server address, username, and password.
5. Configure DDNS records for your devices, specifying their IP addresses and domain names.
6. Save the configuration, and the Sangfor Firewall will automatically update the DDNS records as IP addresses change.