• SonicOS and SonicOSX 7
• Configuring DNS Settings
  • Configuring DNS for IPv4
    • Specifying which DNS Servers are Used
    • Enabling Proxy of Split DNS Servers
    • DNS Rebinding Attack Prevention
    • DNS Rebinding and Cache Lookup
    • Enabling DNS Host Name Lookup over TCP for FQDN
    • DNS Cache Lookup
  • Configuring DNS for IPv6
  • Configuring Domain-Specific DNS Servers for Split DNS
    • About Split DNS
      • About Per-Partition DNS Servers and Split DNS
    • Adding a Split DNS Server
    • Editing Split DNS Entries
    • Deleting Split DNS Entries
• Configuring Dynamic DNS
  • About Dynamic DNS
    • Supported DDNS Providers
  • Dynamic DNS Profiles
    • Configuring Dynamic DNS Profiles
    • Editing Dynamic DNS Profiles
    • Deleting Dynamic DNS Profiles
• Configuring DNS Proxy Settings
  • About DNS Proxy
    • Supported Interfaces
    • DNS Server Liveness Detection and Failover
    • DNS Cache
    • High Availability Stateful Synchronization of DNS Cache
    • DHCP Server
  • Enabling Log Settings
  • Monitoring Packets
  • Configuring DNS Proxy Settings
    • Enabling DNS Proxy
    • Configuring DNS Proxy Settings
    • Deleting Static DNS Cache Entries
    • Viewing DNS Proxy Cache Objects
    • Flushing Dynamic DNS Cache Entries
• Configuring DNS Security
  • About DNS Sinkholes
  • Configuring DNS Security Settings
  • Deleting Entries in the Lists
  • Configuring DNS Tunnel Detection
    • Configuring DNS Tunneling Detection
    • Viewing Detected Suspicious Clients
    • Creating DNS Tunnel Detection White Lists
    • Deleting DNS Tunnel Detection White List Entries
• SonicWall Support
  • About This Document

Configuring Dynamic DNS Profiles

For general information on setting up DDNS Profiles, refer to Configuring Dynamic DNS.

Using any Dynamic DNS service begins with settings up an account with the DDNS service provider (or providers) of your choice. It is possible to use multiple providers simultaneously. Refer to the various providers listed in Dynamic DNS providers. The registration process normally involves a confirmation email from the provider, with a final acknowledgment performed by visiting a unique URL embedded in the confirmation email. After logging in to the selected provider's page, you should visit the administrative link (typically add or manage) and create your host entries. This must be performed prior to attempting to use the dynamic DNS client on SonicOS/X. The Network | DNS > Dynamic DNS page provides the settings for configuring your SonicWall network security appliance to use your DDNS service.

To configure Dynamic DNS on the SonicWall Security Appliance

1. Navigate to Network | DNS > Dynamic DNS.
2. Click +Add. The Add DDNS Profile dialog displays.
3. If Enable this DDNS Profile is checked, the profile is administratively enabled, and the network security appliance takes the actions defined in the Online Settings section on the Advanced page. This option is selected by default.
4. If Use Online Settings is checked, the profile is administratively online. This option is selected by default.
5. Enter a name to assign to the DDNS entry in the Profile Name field. This can be any value used to identify the entry in the Dynamic DNS Settings table. The minimum length is one character, and the maximum length is 63 characters.

6. From Provider, select the dynamic DNS provider; these providers are described in Supported DDNS Providers. The default is dyn.com.

   You must have created a dynamic service record with the DNS provider you select.

   Not all options are available for all DNS providers. Also, the Note at the bottom of the page displays whether the DNS provider uses HTTP or HTTPS protocol along with a link to the provider’s website.

7. In the User Name field, enter the username for your DNS-provider account. The minimum length is 1 character, and the maximum length is 63 characters.
8. In the Password field, enter your DNS password. The minimum length is one character, and the maximum length is 31 characters.
9. In the Domain Name field, enter the fully qualified domain name (FQDN) of the host name you registered with the DNS provider. Make sure you provide the same host name and domain as you configured. The minimum length is one character, and the maximum length is 63 characters.
10. Optionally, to assign this DDNS profile to a specific WAN interface, select that WAN interface from Bound to. If you are configuring multiple-WAN load balancing, this option allows you to advertise a predictable IP address to the DDNS service. By default, this is set to ANY, which means the profile is free to use any of the WAN interfaces on the network security appliance.
11. If you selected dyn.com for Provider, go to Step 13.

12. When using dyn.org, select the service type that corresponds to your type of service from Service Type:

    Dynamic	Free Dynamic DNS service. This is the default.
    Custom	Managed primary DNS solution that provides a unified primary/secondary DNS service and a Web-based interface. Supports both dynamic and static IP addresses.
    Static	Free DNS service for static IP addresses.

13. Click Advanced.

    You can usually leave the default settings on this page.

14. The Online Settings section provides control over what address is registered with the dynamic DNS provider. Choose:

    Let the DDNS provider detect the IP Address	The Security Appliance allows the DNS provider to specify the IP address IPv4 only. This option is selected by default.
    Automatically set IP Address to the Primary WAN Interface IP Address	Causes the Security Appliance to assert its WAN IP address as the registered IP address, overriding auto-detection by the dynamic DNS server. Useful if detection is not working correctly. This option is selected by default. In IPv6: This option is selected by default.
    Specify IP Address manually	Allows for the IP address to be registered to be manually specified and asserted.

15. The Offline Settings section controls what IP address is registered with the dynamic DNS service provider if the dynamic DNS entry is taken off-line locally (disabled) on the network security appliance. Choose:

    Do nothing	Allows the previously registered address to remain current with the dynamic DNS provider. This option is selected by default.
    Use the Off-line IP address previously configured at Provider's site	If your provider supports manual configuration of Off-Line Settings, you can select this option to use those settings when this profile is taken administratively offline.
    Make Host Unknown	Hides the name of the DDNS service.
    Specify IP Address manually	Allows for the IP address to be registered to be manually specified and asserted.

16. Click Add.