I have figure out a way to use IPsec for dynamic IP:
- Setup DynDNS in Untangle UI
- Write a simple program (I use Java) to detect if any dynamic IP changes, if change detected, it will update /etc/ipsec.conf and restart ipsec service
- Schedule the program to run every min using a cron job
And it work!! What do you think?