Log in to ask questions, share your expertise, or stay connected to content you value. Don’t have a login? Learn how to become a member.
Hi All,
is there any configuration to conduct the VPN site 2 site with Dynamic IP Peer?
Please advice
Thanks and Regards,
Husni
Yes
It is called "dynamic endpoint site-to-site IPSec VPN" and can be found in J-series Design and Implementation Guide
http://www.juniper.net/techpubs/software/junos-security/junos-security95/junos-jseries-design/junos-jseries-design.pdf
page 191
Specific link to a CLI knob
http://www.juniper.net/techpubs/software/junos-security/junos-security10.1/junos-security-cli-reference/jd0e62164.html#jd0e62164
HTH
Regards
Alex
Yes, SRX has DDNS client
http://www.juniper.net/techpubs/software/junos-es/junos-es92/junos-es-admin-guide/-support-for-administration-features-on-different-device-types.html
http://www.juniper.net/techpubs/software/junos-es/junos-es92/junos-es-admin-guide/dynamic-domain-name-system-client.html#dynamic-domain-name-system-client-section
Actually, we also need to register dynamic IP with a FQDN with Service Provider. It's complex, Cisco has NHRP is better. I have deployed Dynamic Multipoint VPN with dynamic IP at branches on Cisco router, and they work well without FQDN when there's a changing IP at branches.
Hi husni1984
I have same case of yours, but DDNS not working with site-to-site VPN, can you provide me with sample of configuration.
in addition, i opened new case with JTAC and they told me that not supported yet on currunt Junos versions !!!