VPN between 2 MXs 4g/lte

[DadaConsulting]

Hi team,

we have a project for a customer who would have two MXs in different locations and both connected in 4G/LTE connection.

Is it possible to establish a site-to-site vpn (or Auto-VPN if you prefer) between these two appliances?

Thanks

[Ryan_Miles]

Yes it's possible. But due to carrier NAT that often takes places you may find the tunnel won't come up without getting static IPs from the carrier. I've had mixed results with carriers in the US. For example a generic VZW or TMO SIM usually works without any extra work. With AT&T it seems I always need special provisioning from them before AT&T will work.

[PhilipDAth]

If you want it to work reliably use a carrier that can offer an APN where you get a public IP address directly on the cellular interface with no firewalling (all packets allowed in and out).