Cisco ASA VPN with Dynamic Ip address in one site

Posted on 2009-05-06
Medium Priority
Last Modified: 2012-06-27
Hi every body

I have a Cisco ASA at the Main loacation with a static Ip address but now i'm trying to connect my other site via SITE to SITE vpn but the other site has a dynimic ip address ADSL and static ip address is not possible .  

Can some one please help me to set up or is there anybody that done this before .

Please send me some sample configuration.

Question by:greekstones
  • 2
  • 2
LVL 29

Expert Comment

by:Alan Huseyin Kayahan
ID: 24323597
 Hello greekstones,
       You can setup EasyVPN. Remote sites do not have to have static IP addresses.


Author Comment

ID: 24323900
Ok that looks good but

I have cisco asa in one end and a cisco 877W on the other site.  the link is PIX to ASA.  Do you know how to configure the 877w for the client vpn . I need the router to connect to the asa not the PC client.

LVL 29

Accepted Solution

Alan Huseyin Kayahan earned 1500 total points
ID: 24324615

Author Comment

ID: 24334603
Hi there

i tryed all that but now i can't get connection

my configuration on the router are like this,    do i missing  something from here. i can't get connectong to asa from my 2800 .  but from my laptop i don't have any problems i can connect with no issues with client software..

Virtual-template 1
ip unnumberd fastethernet 0/0.1

crypto ipsec client ezvpn CCM
 connect auto
 group TESTVPN key cisco
 local-address Virtual-Template1
 mode client
 username ntstest password nts
 xauth userid mode local


show crypto ipsec client ezvpn

Tunnel name : CCM
Inside interface list: FastEthernet0/1
Outside interface: FastEthernet0/0.1
Current State: VALID_CFG
Save Password: Allowed
Current EzVPN Peer:

Featured Post

Identify and Prevent Potential Cyber-threats

Become the white hat who helps safeguard our interconnected world. Transform your career future by earning your MS in Cybersecurity. WGU’s MSCSIA degree program was designed in collaboration with national intelligence organizations and IT industry leaders.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

For months I had no idea how to 'discover' the IP address of the other end of a link (without asking someone who knows), and it drove me batty. Think about it. You can't use Cisco Discovery Protocol (CDP) because it's not implemented on the ASAs.…
On Feb. 28, Amazon’s Simple Storage Service (S3) went down after an employee issued the wrong command during a debugging exercise. Among those affected were big names like Netflix, Spotify and Expedia.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
As a trusted technology advisor to your customers you are likely getting the daily question of, ‘should I put this in the cloud?’ As customer demands for cloud services increases, companies will see a shift from traditional buying patterns to new…
Suggested Courses

597 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question