Site To Site VPN

[ahmed_habarab]

How i can Connect Two Site through vpn in different countries and one country block ipsec VPN if i am  using
site a and site b two public ip
or site a public  and site b dynamic

[Sheikh]

Hello @ahmed_habarab 

Have a look into this  Technical Tip: IPsec VPN between static and dynamic IP (FQDN) 

regards,

Sheikh

[AEK]

I don't how this country blocks IPsec, but in case it blocks ESP (IP 50) or port 500 or 4500 then you may try change the port number and force NAT-T in IPsec config. You need to do it on both FortiGates.

config system settings
  set ike-port 5000
end

config vpn ipsec phase1-interface
  edit tunnel-name
    set nattraversal forced
  end
end

I didn't try it but I hope it helps.