VPN connection between two DYNAMIC IP locations

Options
BMS
BMS Posts: 21
Second Anniversary
image  Freshman Member
in Security
I have a customer that has two locations, both with dynamic, rather than static, IPs.

I want to install a couple of ATP200s and link them.  I've done many IPSec VPN connections with ZyXel equipment.

What would I need to adjust from the standard configuration to allow for dynamic connections?

All Replies

  • PeterUK
    PeterUK Posts: 4,741
    250 Answers 2500 Comments Friend Collector Ninth Anniversary
    image  Guru Member
    edited September 2021
    Options

    Do you mean site to site setup?

    One site will need to have incoming traffic for the VPN and the other end nailed up

    When setting up IKEv2 in Peer Gateway Address you can use a DDNS Static Address like noip or dynu of the other end IP with Peer Gateway Address Dynamic Address so either end IP changes the DDNS will update (currently the USG mast have the WAN IP to do this) and the other end will pick up the new IP and connect to it.

  • mMontana
    mMontana Posts: 1,509
    Zyxel Certified Network Administrator - Security Zyxel Certified Network Administrator - Switch 50 Answers 1000 Comments
    image  Guru Member
    Options
    Moreover: i suggest to use the "nailed up" on the "client site" of the customer system.
  • kukuman
    kukuman Posts: 16
    First Comment Friend Collector First Anniversary
    image  Freshman Member
    Options
    You can refer to this Zyxel tutorial - "How to Configure Site-to-site IPSec VPN Where the Peer has a Dynamic IP Address?".

Categories

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）