[c-nsp] Dynamic remotes connecting to VPN 3005. Is it possible?

[Brian Feeny]

Does anyone know if its possible to have remote sites, who are assigned 
dynamic IP addresses,
connect to the VPN 3005 (The VPN 3005 would have a static IP address)?  
I know you can put
all your remotes, in this case 20, into one Base Group and that would 
work, but then they share
the same IKE password, and so this is not good, because if one 
site/client quits, you must change
the password at 19 other sties.  I want to be able to configure each 
client as its own group/profile
with its own unique password/key.  Lumping all remotes that use dynamic 
addressing/dhcp into
one "Base Group" is not an option for me.  Other vendors, like sonic 
wall, can do this very easily
and so I am sure its probably supported on the cisco vpn concentrator, 
since many remote sites
that need VPN are behind dynamic ip assignment.

Brian

---------------------------------------------
Brian Feeny, CCIE #8036, CISSP
Network Engineer
ShreveNet Inc.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: PGP.sig
Type: application/pgp-signature
Size: 186 bytes
Desc: This is a digitally signed message part
Url : https://puck.nether.net/pipermail/cisco-nsp/attachments/20040926/e1244198/PGP.bin