Page 1 of 1
Site to Site VPN with Dynamic IP
Posted: Mon Apr 17, 2017 11:25 am
by pixelkop
We want do site to site VPN with RB 750 UP with internet USB dongle. USB dongle does not provide fix IP. we have center site which is having Static IP. so can we get help on
VPN with site-1 with static IP and site-2 with usb dongle dynamic IP.
please help me.
thanks in advance
Re: Site to Site VPN with Dynamic IP
Posted: Mon Apr 17, 2017 12:52 pm
by gustavomam
Hi.
MikroTik have already implement a feature to help in this situations
ip cloud set ddns-enabled=yes
You can track your dynamic IP through serial number
ip cloud print
ddns-enabled: yes
update-time: yes
public-address: "your public IP"
dns-name: "your router serial number".sn.mynetname.net
status: updated
This will be updated your public IP, if your router is behind a NAT the solution is not in the routerboard.
Re: Site to Site VPN with Dynamic IP
Posted: Sun Jun 18, 2017 6:52 am
by idlemind
L2TP/IPSec will traverse NAT and one end can have a private IP or a changing WAN IP without requiring a script to reference the DDNS name and keep it updated. Sadly this limits you to only unicast traffic. That said you can layer a GRE tunnel within the L2TP/IPSec session. This will work consistently because the private IPs the GRE tunnel is based on will always stay the same. With that comes the limit of multiple layers of encapsulation and the effects that may have on CPU resources and MTU sizes. Be sure to keep all that in check. This is basically a road-warrior type of VPN setup where the remote site is the road warrior.
Another alternative would be IPv6. If your USB dongle gets a static IPv6 prefix you can you use that along with a static prefix on your head-end to make it work.
Re: Site to Site VPN with Dynamic IP
Posted: Mon Jun 19, 2017 10:16 am
by pixelkop
IT WORKS FINE WITH MIKROTIK CLOUDE SETTING