DynDNS on Zyxel USG FLEX / ATP: step-by-step setup
Zyxel firewalls (USG FLEX, ATP, USG) offer a freely configurable client for any DynDNS2 provider via the "User customize" DDNS provider. With DNS Beacon your firewall stays reachable under a permanent hostname even when your WAN IP changes. Here's how to set it up.
Step by step
- Open the admin interface of your Zyxel USG FLEX / ATP and go to Configuration → System → DDNS.
- Enter the values below. Your username is your account email, your password is an API key from the dashboard.
- Save the settings. Your hostname now updates automatically whenever your IP changes — usually within a minute.
Settings to enter
Configuration → System → DDNS
- DDNS Provider:
- User customize
- Server / Host:
- api.dnsbeacon.com
- URL:
- /nic/update?hostname=<domain>&myip=<ipaddr>
- Domain Name:
- myhouse.dnsfollowme.uk
- Username:
- your email address
- Password:
- your API key
- IPv6:
- IPv4 only – the ZLD DDNS feature only reports the IPv4 of the WAN interface. For IPv6, run the DNS Beacon client directly on the target device.
Pick "User customize" as the DDNS Provider. Zyxel substitutes <domain> with the Domain Name and <ipaddr> with the WAN IP; Username and Password are sent as authentication to /nic/update. The trailing "?" in the URL is required.
IPv4 or IPv6?
The values above update the IPv4 address (A record) — the normal case on connections with their own public IPv4. For IPv6 (AAAA record) the device sends the parameter &myipv6=<IPv6> in addition or instead. How to do that on this device is in the "IPv6" row of the table.
DS-Lite or CGNAT (many cable and fibre connections): the router then has no public IPv4, and the service rejects a private WAN address with "abuse". In that case send only myipv6 — or use the DNS Beacon client directly on the target device, which detects both address families itself.
Need a free hostname first?
Create a free DNS Beacon account, add a hostname and generate an API key — then come back and finish the setup above.
Create free account