Setup VPN Global Protect DynDNS

[Metgatz]

Setup VPN Global Protect DynDNS

Dear community:

Good afternoon, is it feasible to be able to configure VPN access with Global Protect, on a Palo Alto with the following scenario:

Palo Alto with:
-Public IP Dynamically ( DHCP )
-Firewall configured with the DynDNS service.
-FQDN provided by DynDNS ( vpnaccessgprotect.dynalias.net )

Please confirm if the Global Protect configuration with DynDNS services is feasible and supported.

Thank you very much to all, best regards

[OtakarKlier]

Hello,

While I havent done it, it should be possible, yes.

Regards,

[Metgatz]

@OtakarKlier 

Hello, thank you very much for your reply.

One doubt, in the configuration of the GP Portal, in the Ipv4 Address parameter, where you normally put the Public IP, in my case I have a dynamic IP with DHCP (with DynDNS services) I will have to put "NONE".

I remain attentive, thank you very much, best regards

[Remo]

Yes, this is possible. I use it exactly like you are asking. In addition to that, I use my own dns domain where I have created a CN recort that points to the dyndns domain.

[LAYER_8]

Yes, this is possible, and is how I use my Palo NGFW. The IPv4 GP Portal tab will show "NONE" if interface address is DHCP, this is expected behavior.

Here's an example configuration.