topic VPN Site-to-Site FQDN peer ( Dyndns ) in General Topics

VPN Site-to-Site FQDN peer ( Dyndns )

Metgatz — Thu, 08 Jul 2021 20:53:32 GMT

VPN Site-to-Site FQDN peer ( Dyndns )

Good afternoon, I am trying to set up a site to Site VPN using as PEER FQDN myvpnsite2.dynalias.net ( DynDNS ).

Should I also use the Local and Peer identification parameters and settings or it is not necessary?

Although the IP is dynamic ( IN BOTH SITES ), I am referencing the peer with a DYNDNS FQDN.

Please your support and comments, thank you very much.

Re: VPN Site-to-Site FQDN peer ( Dyndns )

OtakarKlier — Thu, 08 Jul 2021 21:06:37 GMT

Hello,

It is not a requirement to fill in these fields but does add a bit of additional security since those entries will also be used in the IKEv1 phase 1 SA and IKEv2 SA establishment. Set them to None to start with and if you want to add additional security after the tunnel is up, fill in these fields. However the other side should match.

https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-web-interface-help/network/network-network-profiles/network-network-profiles-ike-gateways/ike-gateway-general-tab.html

Regards,

Re: VPN Site-to-Site FQDN peer ( Dyndns )

Metgatz — Thu, 08 Jul 2021 22:16:16 GMT

@OtakarKlier

Good afternoon, thank you very much for the clarification.

Regarding sites with dynamic public IP, if in both sites I have Dynamic Public IP ( DHCP - DynDNS)

In the "Local IP Address" configuration should I select "None"?

Do two sites connected by vpn site-to-site, with DynDNS, operate correctly?

Thank you very much, I remain attentive