| Description | This article describes how to use DDNS entry to connect to IPsec dial-up when the WAN interface Is getting a dynamic IP address. |
| Scope | FortiGate. |
| Solution |
Configure IPsec dial-up by referring to the documentation.
The WAN interface IP address is getting changed because the WAN interface is configured using a DHCP address mode. To connect to IPsec dialup, it is critical to constantly ensure the address has not changed. To resolve this, use DDNS entry as a remote gateway in FortiClient.
Create a DDNS entry on FortiGate:
In the CLI:
config system ddns edit 1 set ddns-server FortiGuardDDNS set ddns-domain "xxxxxx.fortiddns.com" set use-public-ip enable set update-interval 60 set monitor-interface "port1" next end
Use the DDNS entry as a remote gateway in FortiClient. If FortiGate is getting a new IP address on the WAN interface, the DDNS entry is going to update with a new IP address.
FortiClient configuration: DDNS entry as a Remote Gateway.
Connected using DDNS: |
