Community discussions

MikroTik App
 
ProfessionalN00b
just joined
Topic Author
Posts: 7
Joined: Fri May 30, 2025 9:29 am
Location: Estonia

Securing the switch and DDNS

Sat Jun 07, 2025 8:04 pm

Hello,

I was following this Mikrotik list of recommended configuration changes for securing the device, and at one point it recommends disabling DDNS under Other clients services:
/ip cloud set ddns-enabled=no update-time=no

However, my switch says:
[admin@MikroTik] /ip/cloud> set ddns-enabled="no" 
invalid value of ddns-enabled, must be either yes or auto
At first, I tried just no, without the quotes, and it showed invalid syntax.

I made it to Mikrotik wiki and it also recommends setting this to no.

Is this a bug, or are the guides outdated?

I have a CRS312-4C+8XG that I'm using as a switch.
 
RoyalBluez
just joined
Posts: 9
Joined: Tue Jan 02, 2024 9:15 pm

Re: Securing the switch and DDNS

Sat Jun 07, 2025 8:50 pm

Is this a bug, or are the guides outdated?
Not sure which version of RouterOS you are running,. but that particular Wiki page has gotten latest update in 2022, and that particular update is about CHR requiring paid license. And the previous update before that is in 2019, so the
ddns-enabled
setting instruction is perhaps then, or even older.

(You can see the edit history in View-history tab on wiki pages.)
 
User avatar
Amm0
Forum Guru
Forum Guru
Posts: 4963
Joined: Sun May 01, 2016 7:12 pm
Location: California
Contact:

Re: Securing the switch and DDNS  [SOLVED]

Sat Jun 07, 2025 9:23 pm

In past few releases there is "auto" and "on" for DDNS settings. The "auto" means off/disabled  — unless you enable "BackToHome" features.

The IP Cloud docs, https://help.mikrotik.com/docs/spaces/R ... Cloud-DDNS say:
Before 7.17, the default value for ddns-enabled was "no". In versions after 7.17 and including, if you want to disable DDNS, make sure to disable the Back To Home feature first, if it was enabled, then set "ddns-enabled=auto"

I don't think they updated the securing your router page to reflect =auto.
 
ProfessionalN00b
just joined
Topic Author
Posts: 7
Joined: Fri May 30, 2025 9:29 am
Location: Estonia

Re: Securing the switch and DDNS

Sat Jun 07, 2025 10:17 pm

ok, thanks for the info. My switch is running 7.19.1, and I don't think it has the BTH functionality.
The only entries under /ip/cloud are ddns-enabled, ddns-update-interval, and update-time.
Which is fine by me, just mentioning.

I'll leave it on auto then.
 
User avatar
Amm0
Forum Guru
Forum Guru
Posts: 4963
Joined: Sun May 01, 2016 7:12 pm
Location: California
Contact:

Re: Securing the switch and DDNS

Sun Jun 08, 2025 12:08 am

I'll leave it on auto then.
Yup. And I think the settings are same all platforms. i.e. perhaps in future it might support BTH or new features that use DDNS.

But IMO, there should be a =no just for clarity. =auto might be a good default, but IDK why they removed =no...