Looking for possible solution.

I have Juniper SRX 1400 (12.1X47-D20.7) with static WAN IP in data-center and multiple sites with dynamic WAN IP addresses. I need to build with them site-to-site VPN's. All what I've found is a multiple ike gateways configured with ike policy using aggressive mode. Most of examples shows single IPSEC connection between static ip gateway and dynamic ip endpoint.

This article shows configuration example for Cisco routers, and I'm wondering if I could do something similar on SRX?

1 Answer 1


Here's a 'thumbnail' sketch of how to do it provided you have SRX's on both ends:


The basic idea is that you use a 'hostname' in the IKE gateway setup on both sides. The SRX with the dynamic IP will establish IKE using the hostname.

  • Yes, saw that. Probably the best way to do this. Commented Jul 24, 2018 at 7:12

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.