topic Re: site2site vpn. calling end is dynamic in General Topics

site2site vpn. calling end is dynamic

JimMcGrady — Mon, 13 Feb 2023 05:32:09 GMT

I have a Palo gateway connecting via ipsec to a Palo gateway, the calling end has a dynamic IP and will need NAT-T. The called end has a static public IP. Whats the recommended method of using an identifier?

Re: site2site vpn. calling end is dynamic

OtakarKlier — Mon, 13 Feb 2023 22:16:47 GMT

Hello,

Not knowing what setting you are attempting to configure, I would say a DNS entry with an object on the device that performs the DNS resolution.

Regards,

Re: site2site vpn. calling end is dynamic

JimMcGrady — Mon, 20 Feb 2023 02:58:27 GMT

Thanks for the reply. Please assume one end has a dynamic IP and no DNS is available. Can i use the username@domainname identifier on the calling end?

Re: site2site vpn. calling end is dynamic

OtakarKlier — Fri, 24 Feb 2023 17:54:17 GMT

Hello,

A dns name that gets registered. I would stick with on a period as a special character, but dont know for sure.

Regards,