[cisco-voip] semi OT: Remote user ASA Lan to LAN options

[Brett Looney]

> The idea was to do a LAN to LAN IPSEC tunnel.  But since this is
> Comcast (cable broadband) and they don't do static IP's I'm trying
> to figure out how to go about this.
 
I've done LAN to LAN IPSEC tunnels in the past where one end is on a dynamic
IP address. Works well... Two small issues - you can't establish the tunnel
from the static end (because it doesn't know the IP address of the remote
end) and you have to set a wildcard IP address for the remote end, so
slightly less secure (but choose a very strong pre-shared key!).
 
HTH!
 
B.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://puck.nether.net/pipermail/cisco-voip/attachments/20070208/485d9518/attachment.html