VPN Site to Site dynamic IP

I'm trying to connect 2 sites through Site to Site VPN
both sites will change IP address once I force provision of the new VPN IP
How would I set this up?
I used to work with the previous ISP which didn't constantly change IP
- Copy Link
- Subscribe
- Bookmark
- Report Inappropriate Content
Hi,
Use DynDNS.
You need to set up an account in any paid or free DynDNS service (DuckDNS, FreeDNS Afraid).
Then configure autoupdate of DynDNS record for each site.
Use your FQDN addresses in IPsec configuration instead of IP.
I do use that and it works.
Just keep in mind that IP address you get from ISP has to be a public one (not private).
Best Regards
RR
- Copy Link
- Report Inappropriate Content
Hi,
Maybe it doesn't PING cuz you have blocked PINGs from WAN in Attack Defence settings:
Try to disable that feature and test the PING again then.
If you want your TP-Link router to obtain public IP (if provided by your ISP), then their device (router) should be set up in Bridge Mode (if you have one) - to exclude double NAT.
Otherwise you need to make sure ports are properly forwarded on the ISP's router to let VPN work properly (despite double NAT).
Cheers
RR
- Copy Link
- Report Inappropriate Content
Hi,
Use DynDNS.
You need to set up an account in any paid or free DynDNS service (DuckDNS, FreeDNS Afraid).
Then configure autoupdate of DynDNS record for each site.
Use your FQDN addresses in IPsec configuration instead of IP.
I do use that and it works.
Just keep in mind that IP address you get from ISP has to be a public one (not private).
Best Regards
RR
- Copy Link
- Report Inappropriate Content
If you have adopted both routers into the same Omada controller you can install the new ER605v2 EA firmware 2.3.0 and use SD-WAN, you need a public IP on the HUB device and it can be dynamic, you do not need DDNS to use SD-WAN
- Copy Link
- Report Inappropriate Content
Ooooo, That's good to know! :)
Although, that is still beta firmware as well as not many other TP-Link's routers got that update yet :(
Cheers
- Copy Link
- Report Inappropriate Content
Thanks, I got the DDNS set up with NOIP but pinging the address results in Request timed out
Is it a firewall issue or a NAT port rule that needs to be added?
In the VPN I entered the 2 DDNS addresses but it still won't connect
- Copy Link
- Report Inappropriate Content
Hi,
Maybe it doesn't PING cuz you have blocked PINGs from WAN in Attack Defence settings:
Try to disable that feature and test the PING again then.
If you want your TP-Link router to obtain public IP (if provided by your ISP), then their device (router) should be set up in Bridge Mode (if you have one) - to exclude double NAT.
Otherwise you need to make sure ports are properly forwarded on the ISP's router to let VPN work properly (despite double NAT).
Cheers
RR
- Copy Link
- Report Inappropriate Content
Hi @Fishy8
Thanks for posting in our business forum.
SD-WAN or IPsec would both work. It depends on what you decide to do if you have two public IPs on both sites.
SD-WAN would be ideal for a multiple-site setup. Traditional IPsec would work great for most people.
- Copy Link
- Report Inappropriate Content

Information
Helpful: 0
Views: 352
Replies: 6
Voters 0
No one has voted for it yet.