Dynamic WAN IP With IPSec Site to Site

Question

The client has a Sophos XGS107 in the branch office and an XGS2100 in the head office. We have site-to-site IPSec with PSK with HO to 2 BO. 
 Due to the PPPoE WAN IP provided by the ISP, the firewall&rsquo;s WAN interface IP changes frequently. We face a challenge each time the WAN IP changes, as we need to edit the IPSec VPN setup on the firewall to restore the site-to-site connection. 
 In the above scenario, what would be the best solution to resolve the issue permanently? Could Dynamic DNS be a solution? Have you implemented it with Sophos?

Vivek Jagad · Accepted Answer

Hi Mohammed Minhaz , Thank you for reaching out to the community, yes using DDNS will definitely help.

MayurMakvana · Answer

Hello Mohammed Minhaz , 
 Thank you for reaching out to Sophos Community. Yes, you need to use the DDNS as remote gateway in IPSec configuration. 
 Kindly refer to the KBA about configuring the DDNS: 
 https://docs.sophos.com/nsg/sophos-firewall/19.0/Help/en-us/webhelp/onlinehelp/AdministratorHelp/Network/DynamicDNS/NetworkDynamicDNSProviderAdd/index.html 
 Later, you may refer to the below KBA for the IPSec VPN: 
 https://docs.sophos.com/nsg/sophos-firewall/19.0/Help/en-us/webhelp/onlinehelp/AdministratorHelp/SiteToSiteVPN/index.html 
 Hope above KBA will help resolve your query. 
 Thank you for choosing Sophos!