PfSense IPSec VPN to ZyWALL USG 20 with Dynamic IP Address and DDNS Alias



  • I've been trying to get an IPSec VPN set up between a pfSense box (2.2.4) with a Static IP Address and a ZyWALL USG 20 with a Dynamic IP Address and a DDNS alias, but I just can't get it to work.  Has anyone here any experience of setting up a VPN between these two devices in similar circumstances?



  • Many configs along those lines. What you're configuring in P1 and P2, and logs from both sides, would be helpful.



  • Hi, Thanks for the response.
    I managed to sort it out & it is now working fine.  The clue was in the pfSense IPSec logs where I was getting the error "[IKE]I Dir 'Domain.name' does not match to 'IP address'".  In Phase 1 proposal (Authentication) I had set the Peer identifier to a Distinguished Name with the DDNS name of the peer site.  When I changed it to 'Peer IP address', the VPN came up.  I was fairly certain that I'd tried this before & it didn't work, but I also upgraded the pfSense box from version 2.2 to 2.2.4, so maybe that had something to do with it.