Wed Dec 04, 2019 10:18 pm
Hello!
I am not sure because I have never used an AD (or whatever) authentication through a VPN, but I think L2TP will work
If you only need to reach the HQ from the branches, I think you won't need to use DDNS because you dont need to set the clients IP anywhere, you just need to configure the L2TP Server on the HQ.
Regards!
Damián