[c-nsp] site2site VPN with a dynamic IP

Arie Vayner (avayner) avayner at cisco.com
Fri Dec 5 06:43:11 EST 2008


Hi,

I guess you have only one side of the VPN using a dynamic IP, while the
hub site is a pre-defined IP address. Right?

For this you can take a look at Easy VPN (EzVPN)
http://www.cisco.com/en/US/prod/collateral/iosswrel/ps6537/ps6586/ps6635
/ps6659/data_sheet_c78-457320.html
http://www.cisco.com/en/US/products/sw/secursw/ps5299/index.html
http://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_e
xample09186a0080808395.shtml

Another option could be DMVPN:
http://www.cisco.com/en/US/products/ps6658/index.html
http://www.cisco.com/en/US/prod/collateral/iosswrel/ps6537/ps6586/ps6635
/ps6658/data_sheet_c78-468520.html
(you can disable branch to branch direct communication by tweaking the
NHRP config)

Arie

-----Original Message-----
From: cisco-nsp-bounces at puck.nether.net
[mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of Zorg 421
Sent: Friday, December 05, 2008 12:56 PM
To: cisco-nsp at puck.nether.net
Subject: [c-nsp] site2site VPN with a dynamic IP

Hello c-nsp,
How can I setup cisco devices (preferably IOS) to establish a site2site
IPSec VPN with one endpoint on a dynamic IP?
I prefer using pre-shared key, but any idea is welcome.

Regards.
_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


More information about the cisco-nsp mailing list