Interoperable object question

[the_rock]

Hey guys,

Just wondering, anyone ever set up VPN S2S with interoperable object with dynamic IP option? If so, anything else needed to make that work? 

Just wondering...if its dynamic IP, you still set up VPN domain on it as normal or anything else to be done?

Tx!

[the_rock]

Below are options when you select dynamic IP on interoperable object, so I assume one selected is correct one?

 

[PhoneBoy · Accepted solution]

Everything else should be the same except you cannot authenticate that peer with a pre-shared key (i.e. you must use certificates).
This is because PSK with DAIP is not considered secure and we do not allow the configuration.

[the_rock]

Thanks phoneboy. Yes, I knew that was the case, but wondering if below would work?

 

[PhoneBoy]

As far as I know, it should work.

[the_rock]

Ah, the word should, the most famous IT word, hehe. Thanks mate, we will find out next week : - )