Just checking, I can use DHCP for _both_ sides of a site-to-site VPN on Purple?

Follow

William Smith

• February 01, 2022 21:40
• Edited

My Adtran and UniFi VPNs both require at least one side of the site-to-site VPN to be a static IP, so I'm paying (long story) $200/month for a static IP, which I'd like to eliminate.  I just want to confirm, can I:

Set the server side up to be <something>.d.firewalla.org

Set the client up to 'reach out' to the above and make the connection?

Please note:  The client side is behind Carrier Grade NAT and 3 additional layers of NAT, so there's no port forwarding that's going to work for the client.

Thanks!

0

• 

  James Willhoite

  • February 08, 2022 17:15

  Take a look at my post https://help.firewalla.com/hc/en-us/community/posts/4413978686611-Wireguard-Split-Tunnel-Between-Raspberry-Pi-and-Firewalla-Gold 

  I have the same situation at my parents house, uses a Cellular connection for internet so there is no static ip or port forwarding. I have a Pi at their house initiate the connection and can do site to site vpn. You could also put in two Firewalla's to do the same thing I believe. Just have the client make the connection first.

  0

  Comment actions Permalink
• 

  Firewalla

  • February 08, 2022 19:14

  as long as the server-side has a public IP address, site-to-site VPN should work. There is no need for a static IP, the DDNS part will take care of IP changing. 

  0

  Comment actions Permalink

Please sign in to leave a comment.