Securing the switch and DDNS

RouterOS General
1

Hello,

I was following this Mikrotik list of recommended configuration changes for securing the device, and at one point it recommends disabling DDNS under Other clients services:

/ip cloud set ddns-enabled=no update-time=no

However, my switch says:

[admin@MikroTik] /ip/cloud> set ddns-enabled="no" 
invalid value of ddns-enabled, must be either yes or auto

At first, I tried just no, without the quotes, and it showed invalid syntax.

I made it to Mikrotik wiki and it also recommends setting this to no.

Is this a bug, or are the guides outdated?

I have a CRS312-4C+8XG that I’m using as a switch.

2

Is this a bug, or are the guides outdated?

Not sure which version of RouterOS you are running,. but that particular Wiki page has gotten latest update in 2022, and that particular update is about CHR requiring paid license. And the previous update before that is in 2019, so the

ddns-enabled

setting instruction is perhaps then, or even older.

(You can see the edit history in View-history tab on wiki pages.)

3

In past few releases there is “auto” and “on” for DDNS settings. The “auto” means off/disabled — unless you enable “BackToHome” features.

The IP Cloud docs, https://help.mikrotik.com/docs/spaces/ROS/pages/97779929/Cloud#Cloud-DDNS say:

Before 7.17, the default value for ddns-enabled was “no”. In versions after 7.17 and including, if you want to disable DDNS, make sure to disable the Back To Home feature first, if it was enabled, then set “ddns-enabled=auto”

I don’t think they updated the securing your router page to reflect =auto.

4

ok, thanks for the info. My switch is running 7.19.1, and I don’t think it has the BTH functionality.
The only entries under /ip/cloud are ddns-enabled, ddns-update-interval, and update-time.
Which is fine by me, just mentioning.

I’ll leave it on auto then.

5

Yup. And I think the settings are same all platforms. i.e. perhaps in future it might support BTH or new features that use DDNS.

But IMO, there should be a =no just for clarity. =auto might be a good default, but IDK why they removed =no…