Recommend:
Knowledge document #3525

Cannot access an HTTPS server in the FRITZ! home network

Devices in the home network cannot access a server in the home network (for example a web server, NAS system) via HTTPS (port 443). When attempting to access the server via the FRITZ!Repeater's MyFRITZ! address or the FRITZ!Repeater's dynamic DNS domain name (for example https://[domain name]), the user interface of the FRITZ!Repeater is displayed.

However, you can use the server's IPv4 address to access it via HTTPS. HTTPS access to the server over the internet is also possible using the MyFRITZ! address or the dynamic DNS domain name if a corresponding port sharing setting was configured for port 443.

Cause

  • Modern devices prefer to use IPv6 instead of IPv4. Therefore, the device receives the IPv6 WAN address of the FRITZ!Repeater in response to its DNS request for the IPv6 address for the MyFRITZ! address or the dynamic DNS domain name. Since there is no Network Address Translation (NAT) with IPv6, the device itself accesses the FRITZ!Repeater itself via HTTPS.

There are several ways to solve this problem, depending on whether you use MyFRITZ! or a different dynamic DNS provider.

1 Setting up a MyFRITZ! sharing

If you are using MyFRITZ! and trying to access the server via the MyFRITZ! address of the FRITZ!Repeater:

  1. Set up a MyFRITZ! sharing for the server that you want to access via HTTPS.

2 Setting up dynamic DNS in the HTTPS server

If you want to access the server via a dynamic DNS domain name, disable dynamic DNS in the FRITZ!Repeater and set up the dynamic DNS account in the server itself instead:

  1. Click "Internet" in the FRITZ!Repeater user interface.
  2. Click "Permit Access" in the "Internet" menu.
  3. Click on the "DynDNS" tab.
  4. Disable the option "Use DynDNS".
  5. Click "Apply" to save the settings.
  6. Set up the dynamic DNS account in the server you want to access via HTTPS.
Language selection