Looking for possible solution.

I have Juniper SRX 1400 (12.1X47-D20.7) with static WAN IP in data-center and multiple sites with dynamic WAN IP addresses. I need to build with them site-to-site VPN's. All what I've found is a multiple ike gateways configured with ike policy using aggressive mode. Most of examples shows single IPSEC connection between static ip gateway and dynamic ip endpoint.

This article shows configuration example for Cisco routers, and I'm wondering if I could do something similar on SRX?

up vote 1 down vote accepted

Here's a 'thumbnail' sketch of how to do it provided you have SRX's on both ends:


The basic idea is that you use a 'hostname' in the IKE gateway setup on both sides. The SRX with the dynamic IP will establish IKE using the hostname.

  • Yes, saw that. Probably the best way to do this. – Andrey Prokhorov Jul 24 at 7:12

Your Answer

By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Not the answer you're looking for? Browse other questions tagged or ask your own question.