VPN connection between two DYNAMIC IP locations

BMS

I have a customer that has two locations, both with dynamic, rather than static, IPs.

I want to install a couple of ATP200s and link them.  I've done many IPSec VPN connections with ZyXel equipment.

What would I need to adjust from the standard configuration to allow for dynamic connections?

PeterUK

Do you mean site to site setup?

One site will need to have incoming traffic for the VPN and the other end nailed up

When setting up IKEv2 in Peer Gateway Address you can use a DDNS Static Address like noip or dynu of the other end IP with Peer Gateway Address Dynamic Address so either end IP changes the DDNS will update (currently the USG mast have the WAN IP to do this) and the other end will pick up the new IP and connect to it.

mMontana

Moreover: i suggest to use the "nailed up" on the "client site" of the customer system.

kukuman

You can refer to this Zyxel tutorial - "How to Configure Site-to-site IPSec VPN Where the Peer has a Dynamic IP Address?".