Site to Site VPN with Dynamic IP

RouterOS Forwarding Protocols
1

We want do site to site VPN with RB 750 UP with internet USB dongle. USB dongle does not provide fix IP. we have center site which is having Static IP. so can we get help on
VPN with site-1 with static IP and site-2 with usb dongle dynamic IP.

please help me.
thanks in advance

2

Hi.

MikroTik have already implement a feature to help in this situations

ip cloud set ddns-enabled=yes

You can track your dynamic IP through serial number

 ip cloud print  
    ddns-enabled: yes
     update-time: yes
  public-address: "your public IP"
        dns-name: "your router serial number".sn.mynetname.net
          status: updated

This will be updated your public IP, if your router is behind a NAT the solution is not in the routerboard.

3

L2TP/IPSec will traverse NAT and one end can have a private IP or a changing WAN IP without requiring a script to reference the DDNS name and keep it updated. Sadly this limits you to only unicast traffic. That said you can layer a GRE tunnel within the L2TP/IPSec session. This will work consistently because the private IPs the GRE tunnel is based on will always stay the same. With that comes the limit of multiple layers of encapsulation and the effects that may have on CPU resources and MTU sizes. Be sure to keep all that in check. This is basically a road-warrior type of VPN setup where the remote site is the road warrior.

Another alternative would be IPv6. If your USB dongle gets a static IPv6 prefix you can you use that along with a static prefix on your head-end to make it work.

4

IT WORKS FINE WITH MIKROTIK CLOUDE SETTING