Draytek 2860 VPN LT2P with IPSec Policy Must

Our remote users use Macs and can successfully connect, authenticating using username, password and IKE pre-shared key (Shared Secret on the Mac).

In the Specify Remote Node section, I enter the IP address of the remote user.

Whenever the IP address of the remote user changes, the IP needs to be updated.

I contacted Draytek support who told me that Peer ID can be used instead, by entering a hostname instead of the IP address. I tried creating a DDNS and using the hostname provided by no-ip.com but couldn't get it to work.

Any advice welcome, thanks in advance.

I've used this with "Lan to LAN" and the id is just an arbitrary string - not a hostname.

With "LAN to LAN", the string goes in the "IKE advanced settings" section of the Dial-out node, as "Local ID". For a Teleworker/Remote User, you would need to know the equivalent place to enter it, in whatever client software they are using.

hornbyp wrote:
I've used this with "Lan to LAN" and the id is just an arbitrary string - not a hostname.

With "LAN to LAN", the string goes in the "IKE advanced settings" section of the Dial-out node, as "Local ID". For a Teleworker/Remote User, you would need to know the equivalent place to enter it, in whatever client software they are using.

I appreciate the response. The Mac VPN client software is built in to the OS, and doesn't appear to have any other authentication options other than username, password and shared secret.