VPN Site-2-Site both sides with dynamic IP

Metgatz — Thu, 05 Aug 2021 03:12:35 GMT

Good afternoon, first of all, thank you very much for your support and help.

Is it possible to configure the following:

Site 1: Palo Alto with Dynamic output to the Internet.( already have NAT configured on the modem/router/ADSL pointing to the Private WAN IP.

Site 2: Palo Alto with Dynamic output to the Internet (already have NAT configured on the modem/router/ADSL pointing to the Private WAN IP).

Site 2 has DynDNS service configured, so it has a FQDN ( vpnsite2site.dyndns.net ).

Is it feasible to be able to set up a site to site tunnel between these two high stick/sites with dynamic ip and on one end a dyndns FQDN?

Connection scheme:

Site1: Palo Alto Wan 192.168.1.100 ---GW 192.168.1.254 ----Router/ADSL/Modem/NAT:1:1------IPSEC-VPN-----Internet-----IPSEC-VPN-----FQDN ( vpnsite2site. dyndns.net) Router/ADSL/Modem/NAT:1:1Site2:GW192.168.2.254 ---R-----IPWAN--192.168.2.100---GW192.168.2.254

Thank you very much, I remain attentive, thank you.

Re: VPN Site-2-Site both sides with dynamic IP

jdelio — Thu, 05 Aug 2021 17:02:33 GMT

In theory, as long as the one site has a Dynamic DNS setup to get to it, then it should work that way.

But if the source did not, then it wouldn't be possible to establish the tunnel the other way.

topic Re: VPN Site-2-Site both sides with dynamic IP in General Topics

VPN Site-2-Site both sides with dynamic IP

Re: VPN Site-2-Site both sides with dynamic IP