Community discussions

MikroTik App
 
rheo
just joined
Topic Author
Posts: 20
Joined: Tue Aug 14, 2012 8:19 am

IpSec VPN - One side static public IP

Mon Nov 02, 2015 7:42 am

Hi

Is it possible to set up a site to site, IPSec VPN between two routerOS devices, if only one side has a static public IP address?

The other site has a dynamic address. If so, is there a guide on how to do this?

If not, what would be the next best option. I don't want to use PPTP or OpenVPN.

Thanks - for your time,

Tim
 
Van9018
Long time Member
Long time Member
Posts: 523
Joined: Mon Jun 16, 2014 6:26 pm
Location: Canada - Abbotsford

Re: IpSec VPN - One side static public IP

Tue Nov 03, 2015 8:06 pm

Yes, it works for me.

On the router with static IP edit your peer, set address to 0.0.0.0/0. This means it'll accept connections from any IP. In the same screen, uncheck "Send Initial Contact". Only the dynamic router will initiate the connection. Also select "Generate Policy" and then define no policies under the policy tab.

My remote router's IP changes about once per 2 weeks, never any issues.

Who is online

Users browsing this forum: CPietro, Google [Bot] and 185 guests