Skip to main content

User Manual

CrazeDNS frequently asked questions

Question: Which Netcraze models support CrazeDNS?

  • Answer: All current models of Netcraze routers support CrazeDNS.

Question: Which firmware versions support CrazeDNS?

  • Answer: CrazeDNS support was added to the NDMS router operating system starting from version 2.08.

Question: If I reset the router to factory default settings, will the previously registered CrazeDNS name remain?

  • Answer: Yes, it will. If you perform a factory reset, the CrazeDNS domain name will not be deleted.

Question: How does CrazeDNS keep my personal information secure and private?

  • Answer: The digital certificate and HTTPS private key are stored directly on the endpoint device (Netcraze router). When accessing through the cloud server via HTTPS, a secure tunnel is built up to the router, which ensures the security and confidentiality of data transmitted over the Internet. The session is established using end-to-end encryption. This means, among other things, that information transferred between the router and the browser via HTTPS is not accessible to the CrazeDNS cloud servers that provide data transfer at the transport layer. With cloud access over HTTP, a secure channel is established between the router and the CrazeDNS server using a CrazeDNS digital certificate, which also guarantees security and protects data from interception.

Question: Is it possible to access home devices via FTP, RDP, RTSP, and Telnet via CrazeDNS when using Cloud access mode?

  • Answer: No. CrazeDNS allows remote access to the Netcraze web interface, as well as to home network devices with web interface (it can be a webcam, network drive, router, server, etc.) via HTTP/HTTPS protocols on the following ports:

    HTTP: 80, 81, 280, 591, 777, 5080, 8080, 8090 and 65080

    HTTPS: 443, 5083, 5443, 8083, 8443 and 65083

Question: If the router is inactive on the Internet for a long time, won't the registered router address be deleted?

  • Answer: No, there is no time restriction on the use of registered CrazeDNS domain names.

Question: How long does the router receive an SSL certificate when registering a CrazeDNS domain name, and how do I renew it?

  • Answer: When registering a domain name, Netcraze router automatically receives an SSL certificate certified by Certificate Authority. The certificate is valid for 90 days. There is no need to renew or reissue the certificate manually. The router does it automatically every three months.

Question: Why does the router not automatically renew/obtain an SSL certificate?

  • Answer: You will find a detailed answer in the article 'In what cases does renewing/obtaining an SSL certificate for a CrazeDNS service not work?'

Question: In case my router malfunctions and I can't get the CrazeDNS name transfer code, is there any way to remove the registered CrazeDNS name and transfer it to a new Netcraze router?

  • Answer: Yes, you can delete the previously assigned CrazeDNS domain name via our technical support team and then transfer it to a new Netcraze router.

    If the router is out of service, please contact technical support with a request to delete the domain name. Specify the reason (returned the device to the shop, the service replaced with a new one, failed, burned out, etc.), the service code (consists of 15 digits and is located on the back of the case on a sticker), and the exact domain name previously registered in the CrazeDNS service, which should be deleted.

    Additionally, in some cases, we may need the following information: a photo of the router, the date of purchase, a copy of the receipt, the order number when the faulty router was sent to the service, and the date of the last Internet connection.

Question: For some reason, I cannot release the CrazeDNS domain name on my router via the web interface, it remains after deletion. How can I completely remove the domain name registration on the device?

  • Answer: Connect to the command-line interface (CLI) of the router and execute the commands sequentially:

    ip http ssl acme revoke <domain_name_keendns>

    system configuration save

    For example:

    ip http ssl acme revoke myname.keenetic.pro

    system configuration save

Question: How do I manually obtain an SSL certificate for a domain?

  • Answer: Connect to the command-line interface (CLI) of the router and execute the commands sequentially:

    ip http ssl acme get <domain_name_keendns>

    system configuration save

    For example:

    ip http ssl acme get myname.keenetic.link

    system configuration save

Question: I have configured remote access to the 4G/3G USB modem interface using a layer 4 domain, but access is performed without authentication, which is insecure. Is it possible to enable password authentication?

  • Answer: Yes, it is possible to enable this feature on a Netcraze router. You can find detailed information in the instruction Password protected remote access to a device with open Web UI via CrazeDNS. After that, when accessing the device interface, you will see an authorisation window with a request to enter login and password.

    Such authentication can be enabled not only for a home network device with an open web interface but also for devices that are protected by their own authentication system. In this case, double authentication per device will be used, which increases security when enabling remote access.

Question: Is it possible to configure the CrazeDNS service in such a way that during the work of the main provider, the domain name functions in the Direct access mode, and when switching to a backup provider, the Cloud access mode is enabled?

Question: What is the purpose of the Operating mode (IPv6) option? When should it be enabled?

  • Answer: Our cloud server has a web proxy on an IPv6 address and can broadcast requests to Netcraze using the CrazeDNS domain name. This option enables the Cloud mode for IPv6 addresses. This feature is designed to allow devices that only have IPv6 addresses to reach Netcraze by its domain name. A DNS type A record with an IPv4 and IPv6 address is reserved behind the *.keenetic.* record. If your PC has only an IPv6 address and has IPv6 Internet access, it will be able to communicate with the cloud, and you will be able to get to Netcraze remotely. The request to the cloud server must come from an IPv6 address only. If you do not have a private IPv6 address, you should not enable this option!

Question: Why is the video stream (image) from the surveillance camera not displayed while access to the camera web interface via the CrazeDNS domain name works?

  • Answer: When using a private IP address and CrazeDNS service in the Cloud access mode, the work is done via web proxy, and remote access to the web interface of network devices is possible only via HTTP/HTTPS protocol.

    If the camera/VCR transmits video via HTTP/HTTPS protocol, in this case, video transmission (picture display) will work via CrazeDNS. But if the camera/recorder uses other protocols for video streaming (for example, RTSP — Real Time Streaming Protocol, or RTP — Real-time Transport Protocol), or the interface requires installation of a special plug-in to support viewing of images from cameras, in this case, video transmission via CrazeDNS will not work. In such a situation, to access the camera/VCR you should use the public IP address on the router and use Direct access mode in CrazeDNS, or use a VPN connection for remote access to the camera/VCR. For more information, see the article Internet access to an IP camera connected to a Netcraze device.

Question: Is it possible to set up remote access to the web interface of a 4G/3G USB modem that is connected directly to the USB port of your Netcraze router?

  • Answer: Yes, instructions and an example of such a setting are shown in the article ???.

    In the same way, you can set up remote access to the web interface of the GPON modem/router, through which you connect to the Internet and behind which the Netcraze router is installed.

In this section: