Solved: Re: Dynamic DNS

husseinmuneer · ‎12-25-2010

Dear all,

I have Cisco 837 router in the main office for a company so there are 10 branches should be connected with the main office using VPN so the configuration is opertional and tested by making a connection using Cisco VPN client program but the problem now is changing the ip address so I did the following:

1- create an account in no-ip website the account is :

muneertest.no-ip.info

email:alfaidhi@gmail.com

password:123456

2- do the ddns configuration .

The problem is when I tried to access the main office there is no connection becuase there is no update for the new IP address (muneertest.no-ip.info still has the old one) !

Please help ...

This is the all configuration:

sh run

Building configuration...

Current configuration : 4133 bytes

!

version 12.4

no service pad

service timestamps debug datetime msec

service timestamps log datetime msec

no service password-encryption

!

hostname Router

!

boot-start-marker

boot-end-marker

!

memory-size iomem 5

no logging buffered

enable secret 5 $1$/M.M$JyYjWejFmPXvEpxgP6A5k.

!

aaa new-model

!

aaa authentication login default local

aaa authentication login sdm_vpn_xauth_ml_1 local

--More-- aaa authorization exec default local

aaa authorization network sdm_vpn_group_ml_1 local

!

aaa session-id common

!

resource policy

!

ip subnet-zero

no ip dhcp use vrf connected

!

ip dhcp pool cisco

network 192.168.0.0 255.255.255.0

default-router 192.168.0.254

dns-server 65.162.184.33 65.162.184.34

!

ip cef

ip name-server 82.114.162.33

ip name-server 82.114.162.34

no ip ips deny-action ips-interface

ip ddns update method MYUPDATE

HTTP

add http://alfaidhi%40gmail.com:123456%40dynupdate.no-ip.com/nic/update%3Fhostname=<h>&myip=<a>

--More-- interval maximum 0 0 0 5

!

username test privilege 15 password 0 123456

username admin privilege 15 password 0 123456

!

crypto isakmp policy 1

encr 3des

authentication pre-share

group 2

crypto isakmp xauth timeout 15

!

crypto isakmp client configuration group CISCOGROUP

key cisco123

pool SDM_POOL_1

acl 100

netmask 255.255.255.0

!

--More-- !

crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac

!

crypto dynamic-map SDM_DYNMAP_1 1

set transform-set ESP-3DES-SHA

reverse-route

!

crypto map SDM_CMAP_1 client authentication list sdm_vpn_xauth_ml_1

crypto map SDM_CMAP_1 isakmp authorization list sdm_vpn_group_ml_1

crypto map SDM_CMAP_1 client configuration address respond

crypto map SDM_CMAP_1 65535 ipsec-isakmp dynamic SDM_DYNMAP_1

!

interface Ethernet0

ip address 192.168.0.254 255.255.255.0

ip nat inside

ip virtual-reassembly

ip tcp adjust-mss 1412

hold-queue 100 out

!

interface Ethernet2

--More-- no ip address

shutdown

hold-queue 100 out

!

interface ATM0

no ip address

no atm ilmi-keepalive

dsl operating-mode auto

!

interface ATM0.1 point-to-point

pvc 8/35

pppoe-client dial-pool-number 1

!

interface FastEthernet1

duplex auto

speed auto

!

interface FastEthernet2

duplex auto

speed auto

!

interface FastEthernet3

--More-- duplex auto

speed auto

!

interface FastEthernet4

duplex auto

speed auto

!

interface Dialer0

ip ddns update hostname muneertest.no-ip.info

ip ddns update no-ip

ip ddns update MYUPDATE

ip address negotiated

ip mtu 1452

ip nat outside

ip virtual-reassembly

encapsulation ppp

dialer pool 1

dialer-group 1

ppp authentication chap pap callin

ppp chap hostname munee1

ppp chap password 0 123456

ppp pap sent-username muneer1 password 0 123456

crypto map SDM_CMAP_1

--More-- !

ip local pool SDM_POOL_1 192.168.0.150 192.168.0.160

ip classless

ip route 0.0.0.0 0.0.0.0 Dialer0

ip http server

no ip http secure-server

ip dns server

!

ip nat inside source route-map SDM_RMAP_1 interface Dialer0 overload

!

access-list 1 remark SDM_ACL Category=16

access-list 1 permit 192.168.0.0 0.0.0.255

access-list 100 remark SDM_ACL Category=4

access-list 100 permit ip 192.168.0.0 0.0.0.255 any

access-list 101 remark SDM_ACL Category=2

access-list 101 deny ip 192.168.0.0 0.0.0.255 host 192.168.0.150

access-list 101 deny ip 192.168.0.0 0.0.0.255 host 192.168.0.151

access-list 101 deny ip 192.168.0.0 0.0.0.255 host 192.168.0.152

access-list 101 deny ip 192.168.0.0 0.0.0.255 host 192.168.0.153

access-list 101 deny ip 192.168.0.0 0.0.0.255 host 192.168.0.154

access-list 101 deny ip 192.168.0.0 0.0.0.255 host 192.168.0.155

access-list 101 deny ip 192.168.0.0 0.0.0.255 host 192.168.0.156

access-list 101 deny ip 192.168.0.0 0.0.0.255 host 192.168.0.157

--More-- access-list 101 deny ip 192.168.0.0 0.0.0.255 host 192.168.0.158

access-list 101 deny ip 192.168.0.0 0.0.0.255 host 192.168.0.159

access-list 101 deny ip 192.168.0.0 0.0.0.255 host 192.168.0.160

access-list 101 permit ip 192.168.0.0 0.0.0.255 any

dialer-list 1 protocol ip permit

route-map SDM_RMAP_1 permit 1

match ip address 101

!

control-plane

!

line con 0

no modem enable

line aux 0

line vty 0 4

password cisco

!

scheduler max-task-time 5000

end

Router#

Thank you in advance..

regards.

alfaidhi@gmail.com

paolo bevilacqua · ‎12-26-2010

That document is wrong.

Do as I've indicated above, report results here.

View solution in original post

paolo bevilacqua · ‎12-27-2010

I think you have not entered question mark after ctrl-V.

View solution in original post

paolo bevilacqua · ‎12-27-2010

Press and hold Ctrl Key. Press and release V key. Release Ctrl key. Press and release question mark key. Then enter the rest of the command.

View solution in original post

paolo bevilacqua · ‎12-25-2010

Use debup ip ddns update to troubleshoot your problem.

husseinmuneer · ‎12-25-2010

I decreased the interval to 5 second as the following:

interval maximum 0 0 0 5

Then made the debug on, so the output is like this while the problem didn't solve:

*Mar 1 04:26:28.303: DYNDNSUPD: Adding DNS mapping for muneertest.no-ip.info <=

> 109.200.160.50

*Mar 1 04:26:28.303: HTTPDNS: Update add called for muneertest.no-ip.info <=> 1

09.200.160.50

*Mar 1 04:26:28.303: HTTPDNSUPD: Session ID = 0x7

*Mar 1 04:26:28.303: HTTPDNSUPD: URL = 'http://alfaidhi%40gmail.com:123456%40dy

nupdate.no-ip.com/nic/update%3Fhostname=muneertest.no-ip.info&myip=109.200.160.5

0'

*Mar 1 04:31:29.455: HTTPDNSUPD: Sending request... status='Bad parameters', ti

d=0

*Mar 1 04:31:29.455: DYNDNSUPD: Adding DNS mapping for muneertest.no-ip.info <=

> 109.200.160.50

*Mar 1 04:31:29.455: HTTPDNS: Update add called for muneertest.no-ip.info <=> 1

09.200.160.50

*Mar 1 04:31:29.455: HTTPDNSUPD: Session ID = 0x8

*Mar 1 04:31:29.455: HTTPDNSUPD: URL = 'http://alfaidhi%40gmail.com:123456%40dy

nupdate.no-ip.com/nic/update%3Fhostname=muneertest.no-ip.info&myip=109.200.160.5

0'

*Mar 1 04:31:29.455: HTTPDNSUPD: Sending request... status='Bad parameters', ti

d=0

husseinmuneer · ‎12-25-2010

Do you think Mr. p.bevilacqua that the problem because of an ACL ?

paolo bevilacqua · ‎12-25-2010

Replace

%40 with @

and

%3F with ^V?

this means, you have to type ctrl-V, then question mark.

husseinmuneer · ‎12-26-2010

You are right but I should do that because if I did like you say router will not accept so no-ip adviced to write %40 instead of @ and %3F instead of ^V

see the following link:

http://www.no-ip.com/support/guides/routers/using_cisco_routers_with_no-ip.html

But I noted something when I did restart so after the router completed loading the following message appear:

DYNUPD: warning: method no-ip is not configured while I did all the required configuration as the firewall.cx website advice:

http://www.firewall.cx/tk-cisco-routers-ddns.php

Regards.

paolo bevilacqua · ‎12-26-2010

That document is wrong.

Do as I've indicated above, report results here.

husseinmuneer · ‎12-26-2010

Yes, you are right the command accepted so I made debug ip ddns update the output appear like this:

*Mar 1 08:05:20.787: DYNDNSUPD: Adding DNS mapping for muneertest.no-ip.info <=> 109.200.168.101

*Mar 1 08:05:20.787: HTTPDNS: Update add called for muneertest.no-ip.info <=> 109.200.168.101

*Mar 1 08:05:20.787: HTTPDNSUPD: Session ID = 0x1A

*Mar 1 08:05:20.787: HTTPDNSUPD: URL = 'http://alfaidhi%40gmail.com:123456%40dynupdate.no-ip.com/nic/update%3Fhostname=muneertest.no-ip.info&myip=109.200.168.101'

*Mar 1 08:05:20.787: HTTPDNSUPD: Sending request... status='Bad parameters', tid=0

*Mar 1 08:05:26.787: DYNDNSUPD: Adding DNS mapping for muneertest.no-ip.info <=> 109.200.168.101

*Mar 1 08:05:26.787: HTTPDNS: Update add called for muneertest.no-ip.info <=> 109.200.168.101

*Mar 1 08:05:26.787: HTTPDNSUPD: Session ID = 0x1B

*Mar 1 08:05:26.787: HTTPDNSUPD: URL = 'http://alfaidhi%40gmail.com:123456%40dynupdate.no-ip.com/nic/update%3Fhostname=muneertest.no-ip.info&myip=109.200.168.101'

*Mar 1 08:05:26.787: HTTPDNSUPD: Sending request... status='Bad parameters', tid=0

*Mar 1 08:05:32.787: DYNDNSUPD: Adding DNS mapping for muneertest.no-ip.info <=> 109.200.168.101

*Mar 1 08:05:32.787: HTTPDNS: Update add called for muneertest.no-ip.info <=> 109.200.168.101

*Mar 1 08:05:32.787: HTTPDNSUPD: Session ID = 0x1C

*Mar 1 08:05:32.787: HTTPDNSUPD: URL = 'http://alfaidhi%40gmail.com:123456%40dynupdate.no-ip.com/nic/update%3Fhostname=muneertest.no-ip.info&myip=109.200.168.101'

*Mar 1 08:05:32.787: HTTPDNSUPD: Sending request... status='Bad parameters', tid=0

Then I made restart so the same message apprear [ DYNUPD: warning: method no-ip is not configured ] Then I made debug for the ddns update the output became like this:

*Mar 1 08:27:25.255: DYNDNSUPD: Adding DNS mapping for muneertest.no-ip.info <=> 109.200.161.177

*Mar 1 08:27:25.255: HTTPDNS: Update add called for muneertest.no-ip.info <=> 109.200.161.177

*Mar 1 08:27:25.255: HTTPDNSUPD: Session ID = 0x9E

*Mar 1 08:27:25.255: HTTPDNSUPD: URL = 'http://alfaidhi@gmail.com:123456@dynupdate.no-ip.com/nic/update //alfaidhi@gmail.com:123456@dynupdate.no-ip.com/nic/update hostname=muneertest.no-ip.info&myip=109.200.161.177'

*Mar 1 08:27:25.259: HTTPDNSUPD: Sending request

*Mar 1 08:27:27.195: HTTPDNSUPD: Call returned Connection time out for update muneertest.no-ip.info <=> 109.200.161.177

*Mar 1 08:27:27.195: DYNDNSUPD: Another update completed (outstanding=28, total=28)

*Mar 1 08:27:27.199: HTTPDNSUPD: Clearing all session 147 info

*Mar 1 08:27:31.247: DYNDNSUPD: Another update completed (outstanding=27, total=27)

*Mar 1 08:27:31.255: DYNDNSUPD: Adding DNS mapping for muneertest.no-ip.info <=> 109.200.161.177

*Mar 1 08:27:31.255: HTTPDNS: Update add called for muneertest.no-ip.info <=> 109.200.161.177

*Mar 1 08:27:31.255: HTTPDNSUPD: Session ID = 0x9F

*Mar 1 08:27:31.255: HTTPDNSUPD: URL = 'http://alfaidhi@gmail.com:123456@dynupdate.no-ip.com/nic/update //alfaidhi@gmail.com:123456@dynupdate.no-ip.com/nic/update hostname=muneertest.no-ip.info&myip=109.200.161.177'

*Mar 1 08:27:31.259: HTTPDNSUPD: Sending request

*Mar 1 08:27:37.259: DYNDNSUPD: Adding DNS mapping for muneertest.no-ip.info <=> 109.200.161.177

*Mar 1 08:27:37.259: HTTPDNS: Update add called for muneertest.no-ip.info <=> 109.200.161.177

*Mar 1 08:27:37.259: HTTPDNSUPD: Session ID = 0xA0

*Mar 1 08:27:37.263: HTTPDNSUPD: URL = 'http://alfaidhi@gmail.com:123456@dynupdate.no-ip.com/nic/update //alfaidhi@gmail.com:123456@dynupdate.no-ip.com/nic/update hostname=muneertest.no-ip.info&myip=109.200.161.177'

*Mar 1 08:27:37.263: HTTPDNSUPD: Sending request

*Mar 1 08:27:41.251: DYNDNSUPD: Another update completed (outstanding=28, total=28)

*Mar 1 08:27:41.399: HTTPDNSUPD: Call returned Connection time out for update muneertest.no-ip.info <=> 109.200.161.177

*Mar 1 08:27:41.399: DYNDNSUPD: Another update completed (outstanding=27, total=27)

*Mar 1 08:27:41.407: HTTPDNSUPD: Clearing all session 148 info

*Mar 1 08:27:43.283: DYNDNSUPD: Adding DNS mapping for muneertest.no-ip.info <=> 109.200.161.177

*Mar 1 08:27:43.283: HTTPDNS: Update add called for muneertest.no-ip.info <=> 109.200.161.177

*Mar 1 08:27:43.283: HTTPDNSUPD: Session ID = 0xA1

*Mar 1 08:27:43.287: HTTPDNSUPD: URL = 'http://alfaidhi@gmail.com:123456@dynupdate.no-ip.com/nic/update //alfaidhi@gmail.com:123456@dynupdate.no-ip.com/nic/update hostname=muneertest.no-ip.info&myip=109.200.161.177'

*Mar 1 08:27:43.287: HTTPDNSUPD: Sending request

Now if you see the updated ip address is 109.200.161.177 that is right because when I make sh int dialer 0 the same ip appear.

But when I make ping from my computer to muneertest.no-ip.info the reply returen from 109.200.168.52 !!!

For your information the muneertest.no-ip.info is free account so should I buy another one?

Thank you for help..

Regards.

paolo bevilacqua · ‎12-27-2010

I think you have not entered question mark after ctrl-V.

husseinmuneer · ‎12-27-2010

Yes, you are right . I didn't pay attention that router didn't get it.

But how can I enter it ? if I type it or copy the full command suddenly get out as the following:

Router(DDNS-HTTP)#$alfaidhi@gmail.com:123456@dynupdate.no-ip.com/nic/update^V?

WORD

Router(DDNS-HTTP)#$pdate.no-ip.com/nic/update^Vhostname=&myip=

Regards.

paolo bevilacqua · ‎12-27-2010

Press and hold Ctrl Key. Press and release V key. Release Ctrl key. Press and release question mark key. Then enter the rest of the command.

husseinmuneer · ‎12-28-2010

Yes, it was like a trick !!.

Problem doesn't solve yet, the message DYNUPD: warning: method no-ip is not configured still appear when i make reload .

find the configuration below :

Router#sh run

Building configuration...

Current configuration : 4128 bytes

!

version 12.4

no service pad

service timestamps debug datetime msec

service timestamps log datetime msec

no service password-encryption

!

hostname Router

!

boot-start-marker

boot-end-marker

!

memory-size iomem 5

no logging buffered

enable secret 5 $1$/M.M$JyYjWejFmPXvEpxgP6A5k.

!

aaa new-model

!

aaa authentication login default local

aaa authentication login sdm_vpn_xauth_ml_1 local

--More-- aaa authorization exec default local

aaa authorization network sdm_vpn_group_ml_1 local

!

aaa session-id common

!

resource policy

!

ip subnet-zero

no ip dhcp use vrf connected

!

ip dhcp pool cisco

network 192.168.0.0 255.255.255.0

default-router 192.168.0.254

dns-server 65.162.184.33 65.162.184.34

!

ip cef

ip name-server 82.114.162.33

ip name-server 82.114.162.34

no ip ips deny-action ips-interface

ip ddns update method MYUPDATE

HTTP

add http://alfaidhi@gmail.com:123456@dynupdate.no-ip.com/nic/update^V?hostname=//alfaidhi@gmail.com:123456@dynupdate.no-ip.com/nic/update^V?hostname=&myip=

--More-- interval maximum 0 0 5 0

!

username test privilege 15 password 0 123456

username admin privilege 15 password 0 123456

!

crypto isakmp policy 1

encr 3des

authentication pre-share

group 2

crypto isakmp xauth timeout 15

!

crypto isakmp client configuration group CISCOGROUP

key cisco123

pool SDM_POOL_1

acl 100

netmask 255.255.255.0

!

--More-- !

crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac

!

crypto dynamic-map SDM_DYNMAP_1 1

set transform-set ESP-3DES-SHA

reverse-route

!

crypto map SDM_CMAP_1 client authentication list sdm_vpn_xauth_ml_1

crypto map SDM_CMAP_1 isakmp authorization list sdm_vpn_group_ml_1

crypto map SDM_CMAP_1 client configuration address respond

crypto map SDM_CMAP_1 65535 ipsec-isakmp dynamic SDM_DYNMAP_1

!

interface Ethernet0

ip address 192.168.0.254 255.255.255.0

ip nat inside

ip virtual-reassembly

ip tcp adjust-mss 1412

hold-queue 100 out

!

interface Ethernet2

--More--

Translating "gmail.com"...domain server (82.114.162.33) no ip address

shutdown

hold-queue 100 out

!

interface ATM0

no ip address

no atm ilmi-keepalive

dsl operating-mode auto

!

interface ATM0.1 point-to-point

pvc 8/35

pppoe-client dial-pool-number 1

!

interface FastEthernet1

duplex auto

speed auto

!

interface FastEthernet2

duplex auto

speed auto

!

interface FastEthernet3

--More-- [OK]