site2site vpn. calling end is dynamic

[JimMcGrady]

I have a Palo gateway connecting via ipsec to a Palo gateway, the calling end has a dynamic IP and will need NAT-T.  The called end has a static public IP.  Whats the recommended method of using an identifier?

[OtakarKlier]

Hello,

Not knowing what setting you are attempting to configure, I would say a DNS entry with an object on the device that performs the DNS resolution.

Regards,

[JimMcGrady]

Thanks for the reply. Please assume one end has a dynamic IP and no DNS is available. Can i use the username@domainname  identifier on the calling end?

[OtakarKlier]

Hello,

A dns name that gets registered. I would stick with on a period as a special character, but dont know for sure.

Regards,