topic VPN to dynamic (ddns) destination in General Topics https://live.paloaltonetworks.com/t5/general-topics/vpn-to-dynamic-ddns-destination/m-p/3400#M2531 <HTML><HEAD></HEAD><BODY><P>I have a VPN setup to a destination that using ddns to keep the hostname across IP changes. This works fine as long as the remote end is initiating the tunnel, but it seems the PA cannot be configured to be able to also *initiate* the tunnel:</P><P>When the remote IKE Gateway is configured to "Peer Type: Static" I could enter an IP address, but since the destination has a dynamic IP this is not an option.</P><P>When the remote IKE Gateway is configured to "Peer Type: Dynamic" I cannot enter anything (like hostname) anymore, so obviously the PA does not have sufficient information to establish the tunnel although it should be technically possible with Agressive Mode.</P><P>(Note that the configurable "Peer Identification FQDN" that can be entered in is only for identification purpose and will of course not be used to connect to the destination)</P><P></P><P>Is this a known limitation? Any Feature Requests pending for this?</P><P></P><P></P><P>Thanks,</P><P>&nbsp;&nbsp; Christian</P></BODY></HTML> Tue, 26 Jun 2012 18:37:55 GMT ctr_ts 2012-06-26T18:37:55Z VPN to dynamic (ddns) destination https://live.paloaltonetworks.com/t5/general-topics/vpn-to-dynamic-ddns-destination/m-p/3400#M2531 <HTML><HEAD></HEAD><BODY><P>I have a VPN setup to a destination that using ddns to keep the hostname across IP changes. This works fine as long as the remote end is initiating the tunnel, but it seems the PA cannot be configured to be able to also *initiate* the tunnel:</P><P>When the remote IKE Gateway is configured to "Peer Type: Static" I could enter an IP address, but since the destination has a dynamic IP this is not an option.</P><P>When the remote IKE Gateway is configured to "Peer Type: Dynamic" I cannot enter anything (like hostname) anymore, so obviously the PA does not have sufficient information to establish the tunnel although it should be technically possible with Agressive Mode.</P><P>(Note that the configurable "Peer Identification FQDN" that can be entered in is only for identification purpose and will of course not be used to connect to the destination)</P><P></P><P>Is this a known limitation? Any Feature Requests pending for this?</P><P></P><P></P><P>Thanks,</P><P>&nbsp;&nbsp; Christian</P></BODY></HTML> Tue, 26 Jun 2012 18:37:55 GMT https://live.paloaltonetworks.com/t5/general-topics/vpn-to-dynamic-ddns-destination/m-p/3400#M2531 ctr_ts 2012-06-26T18:37:55Z Re: VPN to dynamic (ddns) destination https://live.paloaltonetworks.com/t5/general-topics/vpn-to-dynamic-ddns-destination/m-p/3401#M2532 <HTML><HEAD></HEAD><BODY><P>Did you ever determine a solution as I am in the same boat right now.&nbsp; I have a remote CradlePoint router connecting back to my 3020.&nbsp; The CradlePoint has dual-isps and I would love to use just a name on the 3020 end and have the tunnel flip if ISP1 goes down.</P></BODY></HTML> Thu, 03 Oct 2013 15:36:07 GMT https://live.paloaltonetworks.com/t5/general-topics/vpn-to-dynamic-ddns-destination/m-p/3401#M2532 nthen 2013-10-03T15:36:07Z Re: VPN to dynamic (ddns) destination https://live.paloaltonetworks.com/t5/general-topics/vpn-to-dynamic-ddns-destination/m-p/3402#M2533 <HTML><HEAD></HEAD><BODY><P>Unfortunately no</P></BODY></HTML> Tue, 04 Feb 2014 16:15:56 GMT https://live.paloaltonetworks.com/t5/general-topics/vpn-to-dynamic-ddns-destination/m-p/3402#M2533 ctr_ts 2014-02-04T16:15:56Z