Link to home
Start Free TrialLog in
Avatar of OAC Technology
OAC TechnologyFlag for United States of America

asked on

Cisco VPN Connections between static and dynamic IP's

We have a Cisco ASA 5505 at a site with a static IP address and would like to be able to establish site-to-site VPN connections from PIX 501 firewalls on dynamic IP addresses.  When you set up a site-to-site connection, you're only allowed to enter an IP address.  If we use a dynamic IP address and it changes, the VPN will be broken.  Is there a way to set the ASA 5505 to accept incoming site-to-site VPN connections without having to explicitly specify the IP it's coming from?
ASKER CERTIFIED SOLUTION
Avatar of cstosgale
cstosgale
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
What you are trying to accomplish is DMVPN, or dynamic multipoint VPN. WE have a couple of these setup and they work great, only downside is they only work on routers, not on the PIX or ASA.

Here is another link that is more specific to your question.

http://www.cisco.com/en/US/partner/products/ps6120/products_configuration_example09186a00805c5ad9.shtml
Avatar of OAC Technology

ASKER

Thank you!