DDNS still not working 1

[drichter12]

I have been fighting with setting up DDNS on my router and still cannot get it to work. Can anyone see where my problem may be? I have set the update interval to 10 minutes to force an update while I monitored debug output but never saw it make an attempt. I used the following commands to monitor...

Rtr_2651XM#deb ip ddns update
Dynamic DNS debugging is on
Rtr_2651XM#term mon

My config is below.....

Current configuration : 4803 bytes
!
! Last configuration change at 08:40:09 Dallas Tue Mar 25 2008 by XXXXXXXXXX
! NVRAM config last updated at 23:07:45 Dallas Mon Mar 24 2008 by XXXXXXXXXX
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Rtr_2651XM
!
boot-start-marker
boot-end-marker
!
logging buffered 10000 debugging
enable secret 5 XXXXXXXXXX
!
aaa new-model
!
!
aaa authentication login default local
aaa authorization exec default local
!
aaa session-id common
!
resource policy
!
clock timezone Dallas -6
no network-clock-participate slot 1
no network-clock-participate wic 0
ip cef
!
!
no ip dhcp use vrf connected
ip dhcp excluded-address 10.1.1.1 10.1.1.9
ip dhcp excluded-address 10.1.1.200 10.1.1.254
!
ip dhcp pool LOCALPOOL
import all
network 10.1.1.0 255.255.255.0
default-router 10.1.1.1
dns-server 68.238.96.12 68.238.112.12
!
!
ip ddns update method sdm_ddns1
HTTP
add

http://XXXXXXXXXX:XXXXXXXX@<s>/nic/updatesystem=dyndns&hostname=<h>&myip=<a>

interval maximum 0 0 10 0
!
vpdn enable
!
!
!
!
crypto pki trustpoint TP-self-signed-711603843
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-711603843
revocation-check none
rsakeypair TP-self-signed-711603843
!
!
crypto pki certificate chain TP-self-signed-711603843
certificate self-signed 01
<Output Removed>
quit
username XXXXXXXXXX privilege 15 view root secret 5 XXXXXXXXXX
!
!
!
!
!
!
interface FastEthernet0/0
description Inside interface facing private network
ip address 10.1.1.1 255.255.255.0
ip nat inside
ip virtual-reassembly
duplex auto
speed auto
hold-queue 32 in
hold-queue 100 out
!
interface FastEthernet0/1
description Outside interface talking PPPoE$ETH-WAN$
no ip address
ip nat outside
ip virtual-reassembly
duplex auto
speed auto
pppoe enable group global
pppoe-client dial-pool-number 1
!
interface Dialer1
ip ddns update hostname XXXXXXXXXX.home.dyndns.org
ip ddns update sdm_ddns1 host members.dyndns.org
ip address negotiated
ip mtu 1492
ip nat outside
ip virtual-reassembly
encapsulation ppp
ip tcp adjust-mss 1452
dialer pool 1
dialer-group 1
ppp authentication pap callin
ppp pap sent-username a password 0 a
!
ip route 0.0.0.0 0.0.0.0 Dialer1
!
!
no ip http server
ip http access-class 2
ip http secure-server
ip dns server
ip nat inside source route-map nonat interface Dialer1 overload
!
logging trap debugging
access-list 2 remark Auto generated by SDM Management Access feature
access-list 2 remark SDM_ACL Category=1
access-list 2 permit xxx.xxx.xxx.0 0.0.0.255
access-list 2 permit 10.1.1.0 0.0.0.255
access-list 101 remark SDM_ACL Category=1
access-list 101 permit ip xxx.xxx.xxx.0 0.0.0.255 any
access-list 101 permit ip 10.1.1.0 0.0.0.255 any log
access-list 101 remark SDM_ACL Category=1
access-list 102 permit ip 10.0.0.0 0.255.255.255 any
!
!
route-map nonat permit 10
match ip address 102
!
!
!
control-plane
!
!
!
banner login ^CYou have connected to a private home network. If you do not have a user account on this network, please C
!
line con 0
exec-timeout 120 0
stopbits 1
line aux 0
line vty 0 4
exec-timeout 0 0
password xxxx
transport input telnet ssh
transport output telnet ssh
!
scheduler max-task-time 5000
ntp clock-period 17208215
ntp server 132.163.4.101
ntp server 128.138.188.172 prefer
!
end




Dale

 

[drichter12]

Nevermind, it has inexplicably started working.....



Dale

 

[burtsbees]

Really? I have never gotten mine to work---2620XM, advanced enterprise 12.4(9)

Burt

 

[drichter12]

Well, here is a sh run.... My version is c2600-advsecurityk9-mz.124-12c

Current configuration : 4845 bytes
!
! Last configuration change at 07:45:45 Dallas Thu Mar 27 2008 by XXXXXXXXXX
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Rtr_2651XM
!
boot-start-marker
boot-end-marker
!
logging count
logging userinfo
logging buffered 10000 debugging
enable secret 5 XXXXXXXXXX
!
aaa new-model
!
!
aaa authentication login default local
aaa authorization exec default local
!
aaa session-id common
!
resource policy
!
clock timezone Dallas -5
no network-clock-participate slot 1
no network-clock-participate wic 0
ip cef
!
!
no ip dhcp use vrf connected
ip dhcp excluded-address 10.1.1.1 10.1.1.9
ip dhcp excluded-address 10.1.1.200 10.1.1.254
!
ip dhcp pool LOCALPOOL
import all
network 10.1.1.0 255.255.255.0
default-router 10.1.1.1
dns-server 68.238.96.12 68.238.112.12
!
!
ip domain name richter.com
ip ddns update method sdm_ddns1
HTTP
add

http://XXXXXXXXXX:XXXXXXXX@members....m=dyndns&hostname=XXXXXXXXXX.dyndns.org&myip=

interval maximum 28 0 0 0
!
vpdn enable
!
!
!
!
crypto pki trustpoint TP-self-signed-711603843
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-711603843
revocation-check none
rsakeypair TP-self-signed-711603843
!
!
crypto pki certificate chain TP-self-signed-711603843
certificate self-signed 01
< Data Removed>
quit
username XXXXXXXXXX privilege 15 view root secret 5 XXXXXXXXXX
!
!
!
!
!
!
interface FastEthernet0/0
description Inside interface facing private network$ETH-LAN$
ip address 10.1.1.1 255.255.255.0
ip nat inside
ip virtual-reassembly
duplex auto
speed auto
hold-queue 32 in
hold-queue 100 out
!
interface FastEthernet0/1
description Outside interface talking PPPoE$ETH-WAN$
no ip address
ip nat outside
ip virtual-reassembly
duplex auto
speed auto
pppoe enable group global
pppoe-client dial-pool-number 1
!
interface Dialer1
ip ddns update hostname dalerichter.dyndns.org
ip ddns update sdm_ddns1 host members.dyndns.org
ip address negotiated
ip mtu 1492
ip nat outside
ip virtual-reassembly
encapsulation ppp
ip tcp adjust-mss 1452
dialer pool 1
dialer-group 1
ppp authentication pap callin
ppp pap sent-username a password 0 a
ppp ipcp route default
!
ip route 0.0.0.0 0.0.0.0 Dialer1
!
!
no ip http server
ip http access-class 2
ip http secure-server
ip dns server
ip nat inside source route-map nonat interface Dialer1 overload
!
logging history size 500
logging trap debugging
access-list 2 remark Auto generated by SDM Management Access feature
access-list 2 remark SDM_ACL Category=1
access-list 2 permit xxx.xxx.xxx.0 0.0.0.255
access-list 2 permit 10.1.1.0 0.0.0.255
access-list 101 remark SDM_ACL Category=1
access-list 101 permit ip xxx.xxx.xxx.0 0.0.0.255 any
access-list 101 permit ip 10.1.1.0 0.0.0.255 any log
access-list 101 remark SDM_ACL Category=1
access-list 102 permit ip 10.0.0.0 0.255.255.255 any
!
!
route-map nonat permit 10
match ip address 102
!
!
!
control-plane
!
!
!
banner login ^CYou have connected to a private home network. If you do not have a user account on this network, please C
!
line con 0
exec-timeout 120 0
stopbits 1
line aux 0
line vty 0 4
exec-timeout 0 0
password xxxx
transport input telnet ssh
transport output telnet ssh
!
scheduler max-task-time 5000
ntp clock-period 17208232
ntp server 132.163.4.101
ntp server 128.138.188.172 prefer
!
end



Dale

 

[burtsbees]

Yeah, I saw that in this and another post---that's how mine is config'd...crap...

Burt

 

[drichter12]

What do you get if you debug while you shut/no shut the outside interface?



Dale

 

[burtsbees]

I'll check when I get home. It's my home router for adsl...I know...overkill...lol

Burt

 

[drichter12]

Same here...

The one thing that I modified on my config was that I left the <a> parameter off the end of my DDNS definition after myip=. I read in another forum to just leave it blank for DynDNS and although nothing happened when I made the change, the next day I reloaded the router to see how quick the DynDNS windows app would update and saw the router pupm out an update when it came back up before the windows app had a chance to... I then tried again with shut/no shut and it worked again....



Dale

 

[burtsbees]

Holy crap---mine actually works now! I read some other info online---I always had forgotten the ctrl-v thing before typing the ?, so instead of typing it all over, I always figured why not let sdm do it? I'm not sure if adding the "ip ddns update hostname xxxxxx.gotdns.com" fixed it, or if removing a statement did---sdm put a "remove" statement under ip ddns update method xxxx--->http, after the "add" statement---I took it out and added the ip ddns update hostname to the outgoing interface. I already had the update method to refer to under the interface config...I'll try putting the "remove" statement back in to see if it needs to remove the old info before it can update (???)...

Burt

 

[burtsbees]

Nope---still works...newest config...

Edge#sh run
Building configuration...

Current configuration : 5045 bytes
!
! Last configuration change at 08:36:50 CST Sat Mar 29 2008
! NVRAM config last updated at 08:36:51 CST Sat Mar 29 2008
!
version 12.4
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime localtime
service password-encryption
!
hostname Edge
!
boot-start-marker
boot-end-marker
!
security authentication failure rate 2 log
logging count
logging userinfo
logging buffered 4096 debugging
logging console errors
enable secret 5 $1$6AV8$GbOo/ZqToB9aGBqn8TGOj/
!
aaa new-model
!
!
aaa authentication login my_vpn_xauth local
aaa authorization network my_vpn_group local
!
aaa session-id common
!
resource policy
!
clock timezone cst -6
clock summer-time CST recurring
no network-clock-participate slot 1
no network-clock-participate wic 0
no ip source-route
ip cef
!
!
!
!
no ip bootp server
ip domain name directly_connected.com
ip host Athens 172.16.1.2
ip host Argos 172.16.5.1
ip host Sparta 172.16.3.1
ip host Corinth 172.16.3.1
ip host switch 10.69.69.66
ip ddns update method timmay!
HTTP
add

http://xxxxxx:yyyyyy@members.dyndns.org/nic/update?system=dyndns&hostname=<h>&myip=<a>

interval maximum 0 8 0 0
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
username xxxxxxxxxxxxxxxx privilege 15 secret 5 $1$j1lK$2muDeSOGBBX748WPwlsT21
!
!
!
crypto isakmp policy 1
encr 3des
authentication pre-share
group 2
!
crypto isakmp client configuration group xxxxxxxxxx
key xxxxxxxxxxxxxx
pool vpn_pool_1
include-local-lan
max-users 2
netmask 255.255.255.0
!
!
crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac
!
crypto dynamic-map vpn_dynmap_1 1
set transform-set ESP-3DES-SHA
reverse-route
!
!
crypto map vpn_cmap_1 client authentication list my_vpn_xauth
crypto map vpn_cmap_1 isakmp authorization list my_vpn_group
crypto map vpn_cmap_1 client configuration address respond
crypto map vpn_cmap_1 65535 ipsec-isakmp dynamic vpn_dynmap_1
!
!
!
!
!
interface ATM0/0
no ip address
no atm ilmi-keepalive
dsl operating-mode auto
!
interface ATM0/0.1 point-to-point
no snmp trap link-status
pvc 0/35
oam-pvc manage
pppoe-client dial-pool-number 1
!
!
interface FastEthernet0/0
no ip address
no ip redirects
ip accounting output-packets
ip mtu 1492
ip virtual-reassembly
duplex auto
speed auto
!
interface FastEthernet0/0.1
encapsulation dot1Q 1 native
ip address 10.69.69.1 255.255.255.0
!
interface FastEthernet0/0.10
encapsulation dot1Q 10
ip address 10.68.68.1 255.255.255.0
ip nat inside
ip virtual-reassembly
!
interface FastEthernet0/0.20
encapsulation dot1Q 20
ip address 10.67.67.1 255.255.255.0
!
interface Serial0/1
ip address 10.1.1.2 255.255.255.0
no ip redirects
no ip unreachables
no ip proxy-arp
ip accounting output-packets
ip nbar protocol-discovery
ip virtual-reassembly
ip route-cache flow
no fair-queue
!
interface Dialer0
ip ddns update hostname xxxxxxxxxxxxxxx.gotdns.com
ip ddns update timmay! host members.dyndns.org
ip address negotiated
no ip redirects
ip accounting output-packets
ip nat outside
ip virtual-reassembly
encapsulation ppp
ip route-cache flow
ip tcp adjust-mss 1452
dialer pool 1
dialer-group 1
no cdp enable
ppp authentication pap chap callin
ppp chap hostname xxxxxxxxxxxxxxxxxxxxxx
ppp chap password 7 xxxxxxxxxxxxxxxx
ppp pap sent-username xxxxxxxxxxxxxxx password 7 xxxxxxxxxxxxxx
ppp ipcp dns request
ppp ipcp wins request
crypto map vpn_cmap_1
!
ip local pool vpn_pool_1 10.68.68.69 10.68.68.70
ip route 0.0.0.0 0.0.0.0 Dialer0
ip route 172.16.0.0 255.255.0.0 10.1.1.1
!
ip flow-top-talkers
top 100
sort-by bytes
cache-timeout 60000
!
ip http server
ip http authentication local
no ip http secure-server
ip nat inside source route-map vpn_routemap_1 interface Dialer0 overload
!
logging dmvpn
logging history warnings
logging trap debugging
logging source-interface Dialer0
logging server-arp
logging 10.69.69.2
access-list 1 permit 10.0.0.0 0.255.255.255
access-list 101 deny ip any 10.68.68.68 0.0.0.3
access-list 101 permit ip 10.68.68.0 0.0.0.255 any
access-list 102 deny ip 10.0.0.0 0.255.255.255 any
access-list 102 deny ip 172.16.0.0 0.15.255.255 any
access-list 102 deny ip 192.168.0.0 0.0.255.255 any
access-list 102 permit ip any any
access-list 102 remark prevent_RFC1918_as_source
dialer-list 1 protocol ip permit
!
!
!
route-map vpn_routemap_1 permit 1
match ip address 101
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
banner motd ^C ___ _ ____ _ ___
/ \__/ \__/ \__/ \__/ \ Hey Rocky!
| _|@ @ __ | Watch me pull a hacker's IP
\________/ | | \________/ address out of my log files!
__/ _/
/) (o _/
\____/^C
alias configure pc int fa0/0
!
line con 0
password 7 xxxxxxxxxxxxxxxxxxxxx
logging synchronous
line aux 0
line vty 0 4
password 7 xxxxxxxxxxxxxxxxx
transport input ssh
!
ntp clock-period 17180376
ntp server x.x.x.x source Dialer0
!
end

Burt

 

[drichter12]

Well I'm glad you are up and working now.... From what I have read, if you are using DynDNS you do not need to have the "Remove" statement.


Dale

 

[burtsbees]

Have a star.

Burt

 

[ADB100]

Burt

I have just tried replicating what you have with my own DynDNS parameters and I get an error. Firstly it complains about the space after the quote

 =<h" target="_blank

and if I remove the space it tells me its an invalid URL.

My current DDNS settings are:

ip ddns update method test
 HTTP
  add [URL unfurl="true"]http://USERNAME:PASSWORD@members.dyndns.org/nic/update?system=dyndns&hostname=MY-HOSTNAME.homedns.org&myip=<a>[/URL]
  interval maximum 28 0 0 0
  interval minimum 1 0 0 0

This works but quickly goes out of sync when the IP address is renegotiated. I have substituted my username, password & hostname.

Any pointers?

Andy

 

[burtsbees]

Change
MY-HOSTNAME.homedns.org&myip=<a>
to
<h>&myip=<a>
make sure that under the interface you have
ip ddns update hostname xxxxxxxxxxxxxxx.homedns.org
along with
ip ddns update method test host members.dyndns.org

Burt