VPN Site-2-Site both sides with dynamic IP

[Metgatz]

VPN Site-2-Site both sides with dynamic IP

Good afternoon, first of all, thank you very much for your support and help.

Is it possible to configure the following:

Site 1: Palo Alto with Dynamic output to the Internet.( already have NAT configured on the modem/router/ADSL pointing to the Private WAN IP.

Site 2: Palo Alto with Dynamic output to the Internet (already have NAT configured on the modem/router/ADSL pointing to the Private WAN IP).

Site 2 has DynDNS service configured, so it has a FQDN ( vpnsite2site.dyndns.net ).

Is it feasible to be able to set up a site to site tunnel between these two high stick/sites with dynamic ip and on one end a dyndns FQDN?

Connection scheme:

Site1: Palo Alto Wan 192.168.1.100 ---GW 192.168.1.254 ----Router/ADSL/Modem/NAT:1:1------IPSEC-VPN-----Internet-----IPSEC-VPN-----FQDN ( vpnsite2site. dyndns.net) Router/ADSL/Modem/NAT:1:1Site2:GW192.168.2.254 ---R-----IPWAN--192.168.2.100---GW192.168.2.254

Thank you very much, I remain attentive, thank you.

[jdelio]

In theory, as long as the one site has a Dynamic DNS setup to get to it, then it should work that way. 

But if the source did not, then it wouldn't be possible to establish the tunnel the other way.