Hot!Is it possible to create site to site VPN where one connection has Dyndns.org IP?

Author
Gypsy Dave
Bronze Member
  • Total Posts : 33
  • Scores: 0
  • Reward points: 0
  • Joined: 2017/03/09 02:07:48
  • Status: offline
2020/02/17 14:06:52 (permalink)
0

Is it possible to create site to site VPN where one connection has Dyndns.org IP?

Hi,
I have two sites I want to connect via a site to site VPN. Both sites have a FG and only site A has a fixed IP address from the ISP. Site B uses a dynamic IP address. Can I use something like Dyndns,org to get around this? 
 
The main problem is if the coax modem in site B get switched off it will loose its IP address. Then the Fortigate VPN configuration will be null. 
 
Thanks,
Rob
post edited by robbo007 - 2020/02/17 14:08:32
#1

3 Replies Related Threads

    LolleQ
    New Member
    • Total Posts : 2
    • Scores: 0
    • Reward points: 0
    • Status: offline
    Re: Is it possible to create site to site VPN where one connection has Dyndns.org IP? 2020/02/17 15:17:43 (permalink)
    0
    IPsec tunnel with Dynamic DNS as Remote Gateway + FortiGuard DDNS.
    post edited by LolleQ - 2020/02/17 15:19:00

    Attached Image(s)

    #2
    sw2090
    Expert Member
    • Total Posts : 783
    • Scores: 58
    • Reward points: 0
    • Joined: 2017/06/14 01:27:25
    • Location: Regensburg
    • Status: offline
    Re: Is it possible to create site to site VPN where one connection has Dyndns.org IP? 2020/02/17 23:44:52 (permalink)
    0
    or if you want to do on cli:
     
    e.g. for an exsting ipsec tunnel:
     
    config vpn ipsec phase1-interface
      edit <phase1-name>
        set type ddns
        set remotegw-ddns = <ddns-fqdn>
      next
    end
     
    if you want to go back to static ip:
    edit phase1 again and do
     
    unset type
    unset remotegwe-ddns
    set remote-gw <ip>
     
    end
     
    BTW: in older FortiOSes the option was named "FQDN" or something like that.
    post edited by sw2090 - 2020/02/17 23:46:43
    #3
    Gypsy Dave
    Bronze Member
    • Total Posts : 33
    • Scores: 0
    • Reward points: 0
    • Joined: 2017/03/09 02:07:48
    • Status: offline
    Re: Is it possible to create site to site VPN where one connection has Dyndns.org IP? 2020/02/18 01:05:57 (permalink)
    0
    ok thanks guys. I'll give it a go..
    #4
    Jump to:
    © 2020 APG vNext Commercial Version 5.5