Can a Client to Site VPN be set up with a Dynamic DNS on a USG40

laltobelli

Hi,

Can a Client to Site VPN be setup on a USG40 if I am using dynamic addressing and tying to a Dynamic DNS service? Does the fact that it is going through another NAT translation before going into the WAN port of the USG40 make this impossible?

LA

Zyxel_Jerry

Hi @laltobelli

Welcome to Zyxel community

If you’re using Dynamic DNS service on your wan port, you can build up VPN tunnel and select WAN as FQDN settings

And if USG40 is behind NAT, it have to setup port forwarding on the router above USG40.

Here is related settings when the device is behind NAT router.

https://businessforum.zyxel.com/discussion/450/how-to-configure-ipsec-site-to-site-vpn-while-one-site-is-behind-a-nat-router#latest

Here is the guideline of How to Configure Site-to-site IPSec VPN Where the Peer has a Dynamic IP Address

https://kb.zyxel.com/KB/searchArticle!gwsViewDetail.action?articleOid=015559&lang=EN