topic Re: VPN TWO Interconnected Sites Public IP DHCP ( DynDNS ) in General Topics

VPN TWO Interconnected Sites Public IP DHCP ( DynDNS )

Metgatz — Thu, 08 Jul 2021 22:53:51 GMT

Good afternoon, I have some doubts regarding a configuration:

Scenario: I have two sites that I have to configure with Site-to-Site VPN. Both sites have dynamic public IPs. In both of them DynDNS services are configured and operating.

The sites with dynamic public IP, if in both sites I have Dynamic Public IP ( DHCP - DynDNS )

In the "Local IP Address" configuration should I select "None"?

Peer FQDN: myvpnsite2.dynalias.net

Do two sites connected by vpn site-to-site, with DynDNS, operate correctly?

Thank you very much, I remain attentive

Re: VPN TWO Interconnected Sites Public IP DHCP ( DynDNS )

kuznetsovartem — Fri, 09 Jul 2021 10:20:29 GMT

A Site-to-Site VPN connection between your VPC and your network. Instances in the public subnet with Elastic IP addresses (example: 198.51.100.1), which are public AWS provides two features that you can use to increase security in your VPC: security groups and network ACLs.

Official Site

Re: VPN TWO Interconnected Sites Public IP DHCP ( DynDNS )

BPry — Fri, 09 Jul 2021 13:58:28 GMT

@Metgatz

Yes, you would just leave this as None. Everything you have configured so far in your screenshot are correct and will function perfectly fine, however I would suggest IKEv2 preferred instead of setting this up using IKEv1, but that's personal preference.

The setup that you are looking to do is a non-issue when configured properly. As long as the initiator has been configured with the FQDN peer address so it's able to initiate the connection to the other end that's all that's really "special" about these type of deployments.

Re: VPN TWO Interconnected Sites Public IP DHCP ( DynDNS )

Metgatz — Fri, 09 Jul 2021 14:34:38 GMT

@BPry

Excellent, thank you very much for your answer.

Does this mean that I can have two sites connected with DynDNS (Dynamic Public IP) without any problem?

I remain attentive, best regards