IpSec VPN - One side static public IP

RouterOS General
1

Hi

Is it possible to set up a site to site, IPSec VPN between two routerOS devices, if only one side has a static public IP address?

The other site has a dynamic address. If so, is there a guide on how to do this?

If not, what would be the next best option. I don’t want to use PPTP or OpenVPN.

Thanks - for your time,

Tim

2

Yes, it works for me.

On the router with static IP edit your peer, set address to 0.0.0.0/0. This means it’ll accept connections from any IP. In the same screen, uncheck “Send Initial Contact”. Only the dynamic router will initiate the connection. Also select “Generate Policy” and then define no policies under the policy tab.

My remote router’s IP changes about once per 2 weeks, never any issues.