Site to site IPSec VPN between dynamic ip and static ip ( fortigate)

Hi Expert ,

Can you share experience for how to configure  dyndns using fortigate .

Site1 static ip and fortigate 110c
site 2 dynamic ip and fortigate 80c

My question is how to configure ipsec tunnel using dyndns ?

Who is Participating?
nociSoftware EngineerCommented:
the most common problem is that phase one needs a fixed name or number.
Using dyndns you can use a name for that part.
The Phase 2 part is tunnel only, and should work anyway.
mgzawmyominAuthor Commented:
Hi noci,

May i have any manual for setup guide ? Thank you for reply

nociSoftware EngineerCommented:
you can register a name with dyndns ( and keep it up to date)  on the dynamic site. Then the tunnel can be built two way ...

The other option is to make a roaming tunnel. Then on the static address site you need to tell the remote = , meaning anybody can try to build a tunnel not just the other party.

I need to lookup some old fortigate manuals for that one.
nociSoftware EngineerCommented:

Page 646 describes how to setup a phase one. It also mentions a dyndns name as remote host spec.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.