topic Re: ASA 9.16.2 DDNS web update-url behind NAT in Network Security

ASA 9.16.2 DDNS web update-url behind NAT

TMUR — Tue, 29 Nov 2022 05:14:34 GMT

I am using the web update-url for DDNS updates but my ASA is behind a NAT and only my NAT'd IP is updated on domains.google.com. I would like to leave out the myip=<a> section so google domains will simply use the IP the packet was recieved from for the IP address variable.

web update-url https://user:pasword@domains.google.com/nic/update?hostname=<h>&myip=<a>

Why won't this work on ASA 5505x 9.16.2?

[ERROR] web update-url https://user:pasword@domains.google.com/nic/update?hostname=<h> Invalid/Unsupported URL passed

Re: ASA 9.16.2 DDNS web update-url behind NAT

balaji.bandi — Tue, 29 Nov 2022 08:01:08 GMT

check the below thread may be helpful:

https://community.cisco.com/t5/network-security/new-ddns-methods-in-asa-9-15-1/td-p/4180971

Re: ASA 9.16.2 DDNS web update-url behind NAT

TMUR — Wed, 30 Nov 2022 13:34:40 GMT

Hey Balaji,

I did read that post but have the same problem as erik.dalera was experiencing.

@erik.dalera wrote:
I am using the web update It seems that it can only grab the "outside" ip interface and not the public ip of the interface. We have a couple of sites that have private ipadress on outside and public nated.. But i cant get it to update the public ip.. This would be easy to just remove the &myip=<a> but the FMC gui i cant do this.

Re: ASA 9.16.2 DDNS web update-url behind NAT

TMUR — Wed, 30 Nov 2022 13:35:29 GMT

I have the ddns update working at the moment but it is update the incorrect NAT'd private IP instead my externally facing public IP.

Re: ASA 9.16.2 DDNS web update-url behind NAT

balaji.bandi — Thu, 01 Dec 2022 21:20:58 GMT

Time for TAC case.