VPN Ipsec SitetoSite DynDNS

[Metgatz]

Good afternoon everyone, a question, is it possible to set up a Site-to-Site VPN between two sites with Dynamica IP, but that have each their FQDN with DynDns services.

Example:

Site 1: FQDN: mysite1.dynalias.net ( DynDNS )
Site 2: FQDN: mysite2.dynalias.net ( DynDNS )

Please can you help me and confirm exactly if this configuration is supported. Both ends would be identified by a FQDN (DYNDNS services).

Please help me to confirm if this configuration is supported by Palo Alto.

Thank a Lot, I remain attentive

[OtakarKlier]

Hello,

Looks similar to your other post.

https://live.paloaltonetworks.com/t5/general-topics/vpn-two-interconnected-sites-public-ip-dhcp-dynd...

Do you have additional questions that have not been answered?

Regards,

[Metgatz]

@OtakarKlier 

Hello good afternoon, the answer to use None in the "Local IP Address section is already answered, that is OK

.

The overall question is to confirm if it is feasible to set up a VPN between two sites with DynDNS, i.e. using an FQDN provided by DynDNS.
To confirm if there is any doubt that between the two sites with this configuration, i.e. dynamic IPs but each with its FQDN and DynDNS services.

In short, whether or not it is feasible to configure a vpn with two sites with DynDNS (FQDN).

Greetings, thank you very much and very attentive to your comments.

[OtakarKlier]

Hello,

Yes it is possible. Setup your dynamic DNS interfaces first and test with an external service to make sure its resolving correctly:

https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-admin/networking/configure-dynamic-dns-for-fire...

https://toolbox.googleapps.com/apps/dig/

Then setup your VPN tunnel.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClGkCAK

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Clh5CAC

Cheers!

Regards,