Site to Site VPN between PA200 and any third party device.

[abdulvahab]

Hi all

   Please help me to sort out the situation below.

We have one PA 200 is working fine in the main office. The main office have the static WAN IP and it is acting as the SSL VPN gateway. Now, we need to connect a small brach office to main office through site to site VPN. The banch office doesn not have the static WAN IP. what are the cheapest options as the company cannot afford another PA unit and static IP. Please suggest any third party cheap vpn device which will work with the PA 200.

Thanks in advance.

[reaper]

You can set one peer as dynamic and one as static. the static one would need to be in passive mode as it will not be able to create the vpn tunnel

[TranceforLife]

Hi,

Just check for a SOHO router that supports site2site VPN. Use free  DDNS and link your external IP address to have a DNS name. l am using this web site:

https://www.changeip.com/dns.php

Found this with TP-Link routers

http://www.tp-link.com/en/article-380.html

Cheers

[abdulvahab]

---

@reaper wrote:

You can set one peer as dynamic and one as static. the static one would need to be in passive mode as it will not be able to create the vpn tunnel

---

Thank you for the reply

So in this case, i have to use both side PA device. Branch site we would like to use any third party SOHO device with dynamic WAN IP.

[abdulvahab]

---

@TranceforLife wrote:

Hi,

Just check for a SOHO router that supports site2site VPN. Use free  DDNS and link your external IP address to have a DNS name. l am using this web site:

https://www.changeip.com/dns.php

Found this with TP-Link routers

http://www.tp-link.com/en/article-380.html

Cheers

---

Thank you for the suggestion.

But my concern is how to use the TP Link in the branch side only as PA alredy deployed in the head office?

[TranceforLife]

Hi,

The second firewall doesn't have to be a PA. Could be any but must support site-to-site IPsec VPN.

Cheers

[abdulvahab]

---

@TranceforLife wrote:

Hi,

The second firewall doesn't have to be a PA. Could be any but must support site-to-site IPsec VPN.

Cheers

---

thank you..