Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Site2Site with dynamic IP without dns

    Scheduled Pinned Locked Moved IPsec
    4 Posts 2 Posters 1.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • B
      bborovac
      last edited by

      hi!

      can pfsense terminate a site2site vpn connection from a dynamic client without using some kind of dynamic dns.
      … just to sit and wait for any client and if the psk is ok let the tunnel come up?

      tried with Remote gateway set to 0.0.0.0 but it does not work; using pfsense 2.0rc3

      kind regards,
      branimir

      1 Reply Last reply Reply Quote 0
      • jimpJ
        jimp Rebel Alliance Developer Netgate
        last edited by

        With OpenVPN, yes.

        With IPsec, not so much.

        It can work but with the current version of the IPsec tools daemon (racoon) there is an issue with doing site to site VPNs using the "mobile" IPsec settings, which is what would be needed to let that happen.

        Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

        Need help fast? Netgate Global Support!

        Do not Chat/PM for help!

        1 Reply Last reply Reply Quote 0
        • B
          bborovac
          last edited by

          @jimp:

          With OpenVPN, yes.

          With IPsec, not so much.

          It can work but with the current version of the IPsec tools daemon (racoon) there is an issue with doing site to site VPNs using the "mobile" IPsec settings, which is what would be needed to let that happen.

          so there is no way to set it up without some kind of fqdn and dynamic dns? …

          i have ipsec tunnel with dyndns.org on the dynamic side but after reconnection pfsense does not reconnect this tunnel after ttl expiry??

          please advice did you have similar problem?

          rgds,
          branimir

          1 Reply Last reply Reply Quote 0
          • jimpJ
            jimp Rebel Alliance Developer Netgate
            last edited by

            If you use a dynamic DNS hostname it does work properly - I use this personally and I know people using it with dozens/hundreds of tunnels. It works great.

            However the title of the thread said "without DNS" so that's how I replied.

            Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

            Need help fast? Netgate Global Support!

            Do not Chat/PM for help!

            1 Reply Last reply Reply Quote 0
            • First post
              Last post
            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.