We want do site to site VPN with RB 750 UP with internet USB dongle. USB dongle does not provide fix IP. we have center site which is having Static IP. so can we get help on
VPN with site-1 with static IP and site-2 with usb dongle dynamic IP.
please help me.
thanks in advance
-
-
gustavomam
Trainer
- Posts: 287
- Joined:
- Location: Spain
- Contact:
Re: Site to Site VPN with Dynamic IP
Hi.
MikroTik have already implement a feature to help in this situations
You can track your dynamic IP through serial number
This will be updated your public IP, if your router is behind a NAT the solution is not in the routerboard.
MikroTik have already implement a feature to help in this situations
Code: Select all
ip cloud set ddns-enabled=yesCode: Select all
ip cloud print
ddns-enabled: yes
update-time: yes
public-address: "your public IP"
dns-name: "your router serial number".sn.mynetname.net
status: updated
Re: Site to Site VPN with Dynamic IP
L2TP/IPSec will traverse NAT and one end can have a private IP or a changing WAN IP without requiring a script to reference the DDNS name and keep it updated. Sadly this limits you to only unicast traffic. That said you can layer a GRE tunnel within the L2TP/IPSec session. This will work consistently because the private IPs the GRE tunnel is based on will always stay the same. With that comes the limit of multiple layers of encapsulation and the effects that may have on CPU resources and MTU sizes. Be sure to keep all that in check. This is basically a road-warrior type of VPN setup where the remote site is the road warrior.
Another alternative would be IPv6. If your USB dongle gets a static IPv6 prefix you can you use that along with a static prefix on your head-end to make it work.
Another alternative would be IPv6. If your USB dongle gets a static IPv6 prefix you can you use that along with a static prefix on your head-end to make it work.
Re: Site to Site VPN with Dynamic IP
IT WORKS FINE WITH MIKROTIK CLOUDE SETTING