SRX

Hi All,

 

is there any configuration to conduct the VPN site 2 site with Dynamic IP Peer?

 

 

Please advice

 

Thanks and Regards,

 

Husni

Yes

It is called "dynamic endpoint site-to-site IPSec VPN" and can be found in J-series Design and Implementation Guide

http://www.juniper.net/techpubs/software/junos-security/junos-security95/junos-jseries-design/junos-jseries-design.pdf

page 191

Specific link to a CLI knob 

http://www.juniper.net/techpubs/software/junos-security/junos-security10.1/junos-security-cli-reference/jd0e62164.html#jd0e62164

HTH

Regards

Alex

Thanks for the reply,

In screenos we can use the DDNS feature to setup the ddns client to syncronize Dynamics IP with DynDNS , does SRX can do this too?

Please advice

thanks

Husni

Yes, SRX has DDNS client

http://www.juniper.net/techpubs/software/junos-es/junos-es92/junos-es-admin-guide/-support-for-administration-features-on-different-device-types.html

http://www.juniper.net/techpubs/software/junos-es/junos-es92/junos-es-admin-guide/dynamic-domain-name-system-client.html#dynamic-domain-name-system-client-section

HTH

Regards

Alex

Actually, we also need to register dynamic IP with a FQDN with Service Provider. It's complex, Cisco has NHRP is better. I have deployed Dynamic Multipoint VPN with dynamic IP at branches on Cisco router, and they work well without FQDN when there's a changing IP at branches.

Hi husni1984

 

I have same case of yours, but DDNS not working with site-to-site VPN, can you provide me with sample of configuration.

in addition, i opened new case with JTAC and they told me that not supported yet on currunt Junos versions !!!