Is it possible to create site to site VPN where one connection has Dyndns.org IP?

[Gypsy_Dave]

Hi,

I have two sites I want to connect via a site to site VPN. Both sites have a FG and only site A has a fixed IP address from the ISP. Site B uses a dynamic IP address. Can I use something like Dyndns,org to get around this? 

The main problem is if the coax modem in site B get switched off it will loose its IP address. Then the Fortigate VPN configuration will be null. 

Thanks,

Rob

[LolleQ]

IPsec tunnel with Dynamic DNS as Remote Gateway + FortiGuard DDNS.

[sw2090]

or if you want to do on cli:

e.g. for an exsting ipsec tunnel:

config vpn ipsec phase1-interface

  edit <phase1-name>

    set type ddns

    set remotegw-ddns = <ddns-fqdn>

  next

end

if you want to go back to static ip:

edit phase1 again and do

unset type

unset remotegwe-ddns

set remote-gw <ip>

end

BTW: in older FortiOSes the option was named "FQDN" or something like that.

[Gypsy_Dave]

ok thanks guys. I'll give it a go..