topic Re: VPN Ipsec SitetoSite DynDNS in General Topics

VPN Ipsec SitetoSite DynDNS

Metgatz — Fri, 09 Jul 2021 17:58:47 GMT

Good afternoon everyone, a question, is it possible to set up a Site-to-Site VPN between two sites with Dynamica IP, but that have each their FQDN with DynDns services.

Example:

Site 1: FQDN: mysite1.dynalias.net ( DynDNS )
Site 2: FQDN: mysite2.dynalias.net ( DynDNS )

Please can you help me and confirm exactly if this configuration is supported. Both ends would be identified by a FQDN (DYNDNS services).

Please help me to confirm if this configuration is supported by Palo Alto.

Thank a Lot, I remain attentive

Re: VPN Ipsec SitetoSite DynDNS

OtakarKlier — Fri, 09 Jul 2021 18:01:54 GMT

Hello,

Looks similar to your other post.

https://live.paloaltonetworks.com/t5/general-topics/vpn-two-interconnected-sites-public-ip-dhcp-dyndns/td-p/417986

Do you have additional questions that have not been answered?

Regards,

Re: VPN Ipsec SitetoSite DynDNS

Metgatz — Fri, 09 Jul 2021 18:12:24 GMT

@OtakarKlier

Hello good afternoon, the answer to use None in the "Local IP Address section is already answered, that is OK

The overall question is to confirm if it is feasible to set up a VPN between two sites with DynDNS, i.e. using an FQDN provided by DynDNS.
To confirm if there is any doubt that between the two sites with this configuration, i.e. dynamic IPs but each with its FQDN and DynDNS services.

In short, whether or not it is feasible to configure a vpn with two sites with DynDNS (FQDN).

Greetings, thank you very much and very attentive to your comments.

Re: VPN Ipsec SitetoSite DynDNS

OtakarKlier — Fri, 09 Jul 2021 18:39:20 GMT

Hello,

Yes it is possible. Setup your dynamic DNS interfaces first and test with an external service to make sure its resolving correctly:

https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-admin/networking/configure-dynamic-dns-for-firewall-interfaces

https://toolbox.googleapps.com/apps/dig/

Then setup your VPN tunnel.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClGkCAK

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Clh5CAC

Cheers!

Regards,