PfSense IPSec VPN to ZyWALL USG 20 with Dynamic IP Address and DDNS Alias
-
I've been trying to get an IPSec VPN set up between a pfSense box (2.2.4) with a Static IP Address and a ZyWALL USG 20 with a Dynamic IP Address and a DDNS alias, but I just can't get it to work. Has anyone here any experience of setting up a VPN between these two devices in similar circumstances?
-
Many configs along those lines. What you're configuring in P1 and P2, and logs from both sides, would be helpful.
-
Hi, Thanks for the response.
I managed to sort it out & it is now working fine. The clue was in the pfSense IPSec logs where I was getting the error "[IKE]I Dir 'Domain.name' does not match to 'IP address'". In Phase 1 proposal (Authentication) I had set the Peer identifier to a Distinguished Name with the DDNS name of the peer site. When I changed it to 'Peer IP address', the VPN came up. I was fairly certain that I'd tried this before & it didn't work, but I also upgraded the pfSense box from version 2.2 to 2.2.4, so maybe that had something to do with it.