FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
ymasaki
Staff
Staff
Article Id 191554

Description


This article describes how to configure DDNS update override in FortiGate DHCP server.

Solution


FortiGate can update a record in local DNS server enabling dynamic updates with DDNS update override option in FortiGate DHCP server.

Note:
Dynamic update for PTR records is not supported with this option.

 

# config system dhcp server
    edit 0
        set ddns-update enable
        set ddns-update_override enable
        set ddns-server-ip 10.165.0.84 # ddns_server_ip
        set domain fortitest.com # ddns_zone (only if running FOS 6.4+)
        set ddns-zone fortitest.com # ddns_zone
    next
end

 

In this example, FortiGate has 10.165.0.83 as DHCP server.
Windows 2016 server has 10.165.0.84 as DDNS server.
A test client machine has 10.165.0.57 and will be updated with DDNS update from DHCP server.



 
Here is a record for the client machine (10.165.0.57) in Windows 2016 DNS server before DDNS update received.
 
 
When DDNS update is accepted (in wireshark), a record for the client is updated properly:

 
 
Related document: