Recommend:
To the knowledge base
Knowledge document #3525

Cannot access an HTTPS server in the FRITZ! home network

Devices in the home network cannot access a server in the home network (for example a web server, NAS system) via HTTPS (port 443). When you try to use the MyFRITZ! address or dynamic DNS domain name (for example https://[Domain name]) of the FRITZ!Box, the FRITZ!Box user interface is displayed.

However, you can use the server's IPv4 address to access it via HTTPS. You can also use the MyFRITZ! address or dynamic DNS domain name to access the server over the internet via HTTPS if a corresponding port sharing is configured for port 443.

Cause

  • Modern devices prefer to use IPv6 instead of IPv4. The device therefore receives the FRITZ!Box's IPv6 WAN address in response to its DNS query for the IPv6 address for the MyFRITZ! address or the dynamic DNS domain name. Since there is no network address translation (NAT) in IPv6, the device then accesses the FRITZ!Box itself via HTTPS.

There are several ways to solve this problem, depending on whether you use MyFRITZ! or a different dynamic DNS provider.

1 Setting up a MyFRITZ! sharing

If you are using MyFRITZ! and trying to access the server via the MyFRITZ! address of the FRITZ!Box:

  1. Set up a MyFRITZ! sharing for the server that you want to access via HTTPS.

2 Setting up dynamic DNS in the HTTPS server

If you want to access the server via a dynamic DNS domain name, disable dynamic DNS in the FRITZ!Box and set up the dynamic DNS account in the server itself instead:

  1. Click "Internet" in the FRITZ!Box user interface.
  2. Click "Permit Access" in the "Internet" menu.
  3. Click on the "DynDNS" tab.
  4. Disable the option "Use DynDNS".
  5. Click "Apply" to save the settings.
  6. Set up the dynamic DNS account in the server you want to access via HTTPS.
Language selection