IPsec VPN - FTTH

[Tacet]

Has anyone setup an IPsec VPN between two homes over FTTH lines? I'm playing with the thought of setting up one between my and my parents' houses; it will make tech support a bit easier for me - direct access to i.e. Sonoffs rather than working via a PC with Teamviewer will be nice.

Both houses are on Telkom's Home Lite fibre offerings.

If you've done so, a few questions:
* How did you solve the static IP issue? I can't really configure a DynDNS name into the D-link's remote IPsec Gateway Address.
* How stable is the connection?
* Any comments on the general AUP/FUP and giving them access to my NAS for storing photos etc?
* Any security concerns?

 

[irBosOtter]

Why do you say you can't config a DynDNS for the D-Link? Or did you mean on the Dlink?
In that case just use a App on an internal device to update a DDNS service.

Either way, my IP has never changed, only change when changing ISP's, or when you change router. (Unless you copy the mac address over to the new router if it supports a custom MAC)

Connection should be as stable as the links it's going over, not sure if you would be able to change the MTU on the IPSEC network if there are issues.

Why do you mention AUP/FUP? If your ISP has a AUP/FUP then get away from them.

Security, well, depends on how you setup that ipsec but they are usually secure (Home routers could be less secure depending on the chirpier suits etc they use to create the tunnel)

 

[irBosOtter]

If your router isn't sufficient, just get a Raspberry Pi and run OpenVPN and a dyn dns client on it. Happy to help with OpenVPN setup.
I created a thread here once upon a time but it needs updating now that OpenVPN ships with openssl 3.0

I suspect he would probably have to go that route, depending if the D-Links have IPSEC Servers/Client capabilities

 

[Anthro]

Considered ZeroTier as a test ?