Mobile to Mobile VPN possible?

If I have a vehicle with a cellular MiFi and a USG and another vehicle with a cellular MiFi and a USG, is it possible to create a VPN between them? Every time the vehicle turns on the MiFi they get a different IP address. I need the two vehicles to ‘talk’ to each other automatically. Any suggestions how I could do that? I’m guessing I may need a third location whose IP doesn’t change and they both VPN to there but I’m not 100% sure. Thanks.

Hello! Thanks for posting on r/Ubiquiti!

This subreddit is here to provide unofficial technical support to people who use or want to dive into the world of Ubiquiti products. If you haven’t already been descriptive in your post, please take the time to edit it and add as many useful details as you can.

Please read and understand the rules in the sidebar, as posts and comments that violate them will be removed. Please put all off topic posts in the weekly off topic thread that is stickied to the top of the subreddit.

If you see people spreading misinformation, trying to mislead others, or other inappropriate behavior, please report it!

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

Dynamic DNS may work for this use case.

I’m going to guess it won’t work without a relay in the middle as nearly all cellular plans are behind CGNAT.

You’re going to need some form of common endpoint either at a physical location or in the cloud. Most cellular operators use CGNAT these days. Your hotspots won’t be able to connect directly to one another because they lack a public IP. However, you can connect to a common endpoint somewhere in the world and they’d be able to have private network-to-network communication.

Also, unless your Hotspots are passing through the WAN IP to your USG, you’re dealing with double-NAT which can become very troublesome to cope with.

I just have hotspots with Wireguard client that connect back to my UXG at my house. AT&T still gives me a real public IP and they don’t like changing it in spite of it being dynamic.

Does site magic require at least one Unifi site have a public IP? Or does it use a Ubiquiti cloud API to make the connections?