asked on

cisco asa public IP address change breaks vpn

I have a remote teleworker that has a vpn tunnel between their ASA and my ASA. Every time the teleworker's IP address changes on her home network, we have to re-establish the VPN. Is there any way I can automate this? I do not want to configure the VPN everytime she gets a new public IP address.

Thanks!
B.

kyleb84

Ask her to call her ISP and request a static IP. It'll either be free or about $5 extra a month.

bbanis2k

ASKER

Is there not a way to make it a "dynamic" vpn? She does not have a commercial ISP, therefore I do not think they will give here a business class address.

kyleb84

You don't need to be a business to get a static IP, my ISP at home is consumer-level and I've got a static.

And yes you can make the VPN dynamic, do you know your way around the ASA's command line interface?
Can you post both the ASA's configs?
(Remember to take out username+passwords.)

Slawomir Malinowski

As far I understand you have site to site vpn at this moment and you need to have simply remote vpn access. Could you please send your Cisco device details (model, IOS, config). Additionaly please find below tutorial for IPSec configuration http://www.petenetlive.com/Tech/Firewalls/Cisco/c2svpnRADIUS.htm

ASKER CERTIFIED SOLUTION

Les Moore

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

Les Moore

Reference config document
ezvpn-asa5505-515e.pdf

bbanis2k

ASKER

Excellent!