Is it possible to create site to site VPN where one connection has Dyndns.org IP?

Forum|Forum|6 years ago
February 17, 2020
3 replies
4790 views

Hi,

I have two sites I want to connect via a site to site VPN. Both sites have a FG and only site A has a fixed IP address from the ISP. Site B uses a dynamic IP address. Can I use something like Dyndns,org to get around this?

The main problem is if the coax modem in site B get switched off it will loose its IP address. Then the Fortigate VPN configuration will be null.

Thanks,

Rob

LolleQ

New Member

IPsec tunnel with Dynamic DNS as Remote Gateway + FortiGuard DDNS.

FortiGatecustipsec.png

sw2090

SuperUser

or if you want to do on cli:

e.g. for an exsting ipsec tunnel:

config vpn ipsec phase1-interface

edit <phase1-name>

set type ddns

set remotegw-ddns = <ddns-fqdn>

if you want to go back to static ip:

edit phase1 again and do

unset type

unset remotegwe-ddns

set remote-gw <ip>

end

BTW: in older FortiOSes the option was named "FQDN" or something like that.

Gypsy_DaveAuthor

New Member

ok thanks guys. I'll give it a go..

Sign up

Login with SSO

Login to the community

Login with SSO