Cisco ASA 5515-X DDNS Debug

[Blackbird2018]

Hi Guys

I am having some issues with getting my asa to update my dynamic ddns provider when my IP changes, can someone help me configure debugging for ddns on the asa.

I have tried "debug ddns" and than I get a message "debug ddns enabled at level 1" and don't get any alerts, I have configured logging to terminal monitor as I am connected to management port but don't get any alerts, ddns update is configured for every 2 minutes for now to see if it works.

Any help would be great.

[balaji.bandi]

You need to verify the config on ASA, here is sample config for the ASA to configure DDNS (Configuring DDNS Services)

https://www.cisco.com/c/en/us/td/docs/security/asa/asa82/configuration/guide/config/dhcp.html

and if you having still issue after any changes required to change, please post the running configuration.

[Blackbird2018]

Hi Balaji

My ddns config is below, my ddns provider is DYNU, I have replaced hostname and password with x's

hostname xxxxxxx
domain-name dynu.net

names
ddns update method https://api.dynu.com/nic/update?hostname=xxxx.dynu.net&password=xxxxxx
 ddns both
 interval maximum 0 0 2 0

!
interface GigabitEthernet0/0
 description Outside
 nameif NBN
 security-level 0
 ddns update hostname xxxxx.dynu.net
 dhcp client update dns server both
 ip address dhcp setroute

Thanks

[balaji.bandi]

since we do not see your full config, hope you have access rules for this ddns contacing outside your interface.

[Blackbird2018]

Hi Balaji

The interface has security level 0 and gets dhcp address from ISP, do I need an acl.

If yes can you give me an example.

Thanks

[balaji.bandi]

One of the test i have done some time back...since i was not having public IP that time

here is from working config : with no-ip or ddns (not tried the one you mentioned provider.

ddns update method method
ddns both
interval maximum 0 0 0 30
!

!
interface GigabitEthernet1/1
nameif outside
security-level 0
ddns update hostname https://xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
ddns update method

Quick check paste the URL on browser and see if that work for testing.

EDIT

====

Looks like your provider configuration different - here is reference.

https://www.dynu.com/en-US/Forum/ViewTopic/Cisco-ASA-DDNS-setup/6854

https://www.dynu.com/en-US/Forum/ViewTopic/Proper-hostname-when-using-Cisco-ASA/3445

[Blackbird2018]

Hi Balaji

Sorry for the delay, I was able to access the dynu api url and got a successful message from a laptop connected to the asa, and it did update the IP address on dynu site, for some reason the asa is not doing that, below is the config I have which should work but does not, also I am not seeing any messages in the logs for connections to dynu to update the IP or errors, how can I get this information.

ddns update method https://api.dynu.com/nic/update?hostname=xxxx.dynu.net&password=xxxx
 ddns both
 interval maximum 0 0 0 30

interface GigabitEthernet0/0
 description Outside
 nameif NBN
 security-level 0
 ddns update hostname xxxxxx.dynu.net
 ddns update https://api.dynu.com/nic/update?hostname=xxxxx.dynu.net&password=xxxxx
 dhcp client update dns server both
 ip address dhcp setroute

Thanks

[balaji.bandi]

Is ASA code you running is this latest one...if this is your requirement, worth upgrade to latest and try. Since i have not tried your provider to confirm working..or wait for some of collegues here to address.

[Blackbird2018]

Hi Balaji

Yes I am running latest asa code, will wait for other members if they have a solution.

Do you know how to look at ddns debugging logs.

Thanks for your help.

[balaji.bandi]

You can do debug ddns, make sure you configured logging to debug to show logs.

[Blackbird2018]

Hi Balaji

I did below command, is that all is required for ddns debug

asa#debug ddns

debug ddns enabled at level 1

asa#logging monitor debugging

asa#terminal monitor

The default level for ddns debug is level 1 will this show errors, as I don't know how to change debug level and what level shows logging information.

Thanks

[balaji.bandi]

logging console and see what logs you see on the console ?

post if you have some logs to understand what is wrong.

[Blackbird2018]

Hi Balaji

I ran ddns debug and got the below messages

DDNS: Adding DNS mapping for xxxx.dynu.net <=> x.x.x.x
DDNS: Sleeping for 1 seconds waiting for interface NBN configuration to settle

DDNS: Adding DNS mapping for xxxx.dynu.net <=> x.x.x.x
DDNS: Adding DNS mapping for xxxx.dynu.net <=> x.x.x.x

I keep on getting the adding DNS mapping message don't know why.

Thanks

[balaji.bandi]

Look you have another thread which was on going, what was the out come of this ?

are you having same issue :

https://community.cisco.com/t5/firewalls/cisco-asa-5515-x-ddns-setup/td-p/3883599

you need to do wireshark and capture information and analyse why this was not working as expected.

[Blackbird2018]

Hi Balaji

Yes same issue, has not been resolved, I created this thread as I was after ddns debug settings.

How can I capture packets on the NBN interface on the asa.

Thanks