DDNS in Asa

[Psmurali89]

Hi All,

I have asa firewall and I use anyconnect vpn. My ISP IP changes frequently so am looking to configure ddns so that I can simple enter fqdn name instead of IP while using anyconnect. How do I configure this please? 

[balaji.bandi]

What is the model of ASA or version of code running, use the below guide to setup :

https://www.cisco.com/c/en/us/td/docs/security/asa/asa91/configuration/general/asa_91_general_config/basic_ddns.html

Check also the post discussed  :

https://community.cisco.com/t5/network-security/new-ddns-methods-in-asa-9-15-1/m-p/4180971

[Psmurali89]

Am using 9.12(4)40. Below is the config. I cant see http option under update method. Do i need to upgrade the firmware? I created account and domain in noip.com

Home-FW# sh ddns update interface

Dynamic DNS Update on Outside:
Update Method Name Update Destination
myhome not available
Home-FW#
Home-FW(config)# ddns update method myhome
Home-FW(DDNS-update-method)# ?

Dynamic DNS update method configuration commands:
ddns IETF standardized Dynamic DNS update
exit Exit from DNS dynamic update method configuration mode
help Help for Dynamic DNS update method configuration commands
interval Specify interval between DNS updates
no Negate a command or set its defaults
Home-FW(DDNS-update-method)#

!
ddns update method myhome
ddns
interval maximum 2 0 0 0
!

!
interface GigabitEthernet0/0
nameif Outside
security-level 0
ddns update hostname xxxxx.yyyyy.com
ddns update myhome
pppoe client vpdn group zzzzz
ip address pppoe setroute
!

Home-FW# sh ddns update method

Dynamic DNS Update Method: myhome
IETF standardized Dynamic DNS 'A' record update
Maximum update interval: 2 days 0 hours 0 minutes 0 seconds
Home-FW#

!

Home-FW# sh ver

Cisco Adaptive Security Appliance Software Version 9.12(4)40
SSP Operating System Version 2.6(1.254)
Device Manager Version 7.13(1)

[balaji.bandi]

. I cant see http option under update method

can you explain more of this ? 

are you referring web update url  ?

[Psmurali89]

Yes, the below guide says i can use ddns or http as the update method. In ASA i can see the only available method is ddns and not http. I done ddns method but its not working as shown in the output above. 

https://www.noip.com/support/knowledgebase/using-your-cisco-router-with-no-ip-dynamic-dns-services

[balaji.bandi]

I haven't tried the web upgrade method, but ddns normally works for me—I won't have a lab in place to test. (i have moved to Linux hosting and have client that connect to DDNS and update when my ISP ip changes)

But you can turn the debug on and check whether this is initiating the connection and what errors you are getting.