Cisco VPN with DDNS

Posted on 2014-11-11
Medium Priority
Last Modified: 2014-11-19
Hi Experts,

Hope everyone is well?

We currently have around 4 sites all working independently of each other. When group connectivity is required they use Remote Desktop to our HQ. We are re-hashing the network and would like to provide site to site VPN's via either Cisco ASA's or Cisco Routers. The only Problem is we don’t have any static IP's and currently use NO-IP's DDNS Services. Each site has a hostyname of Site1.domain.com, Site2.comain.com, and so on. This is working fine for management purposes and to date we have had very little issue with it. Each Router on each site is accessible via SSH using the Hostmane.

Before anyone says we are based in the UAE and our Telco charges enormous amounts for a single static IP. Currently we have 100mb PPPoE DSL internet and to get a Static IP we have to move to an 8Meg Leased line at a cost of around 43,000dhs which is 7,000GBP, or 10,000USD. This is not an option financially.

So what i need to know is can Cisco ASA to ASA or Cisco Router to Souter, or even Cisco Router to ASA have VPN Tunnels without the need for Static IP's? I have previously worked on Fortinet stuff and it’s possible on Fortinet.

If it is possible could somebody provide me with any config Snippets, or links as I can’t seem to find anything anywhere?

Many thanks
Question by:TrustGroup-UAE
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2

Assisted Solution

Matt earned 300 total points
ID: 40435385
LVL 57

Expert Comment

by:Pete Long
ID: 40436119
Agreed if you have one site with a static IP, look at EasyVPN
Configure Cisco EasyVPN With Cisco ASA 5500


Author Comment

ID: 40438127
Hi Mate, and PeteLong,

Many Thanks for your response. I know I can have it with one Static IP but as noted above, am unable to get a Static IP. Whilst the cost would be difficult to justify the main issue is currently our DSL is 100mb Down, 50MB Up. I can't move to a 8Meg IP Connect line for speed reasons. Our Core applications all rely on internet.

So - Is it possible if both ends are Dynamic? If not possible with Cisco is there any other way to create Site-To-Site VPN's with only Dynamic IP's using No-IP or Similar

Cheers Again
Supports up to 4K resolution!

The VS192 2-Port 4K DisplayPort Splitter is perfect for anyone who needs to send one source of DisplayPort high definition video to two or four DisplayPort displays. The VS192 can split and also expand DisplayPort audio/video signal on two or four DisplayPort monitors.

LVL 57

Assisted Solution

by:Pete Long
Pete Long earned 300 total points
ID: 40438665
No Cisco solution I know of, even DMVPN needs one static (and is for routers)


Accepted Solution

TrustGroup-UAE earned 0 total points
ID: 40442296

I ended up finding this on Cisco's website:-


Looks like a Static IP would make life a lot easier, the above may also help.


Author Closing Comment

ID: 40451936
Both Experts advised that VPN to VPN with Cisco was not possible. After speaking with TAC they advised it is BUT A FEATURE which has only just been released to the IOS.

I believe that as it was new feature only recently released, the experts may not have actually known about it, and in there best efforts advised accordingly.

Featured Post

The Ideal Solution for Multi-Display Applications

Check out ATEN’s VS1912 12-Port DP Video Wall Media Player at InfoComm 2017. Kerri describes how easy it is to design creative video walls in asymmetric layouts and schedule detailed playlists ahead of time with its advanced scheduling feature.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This past year has been one of great growth and performance for OnPage. We have added many features and integrations to the product, making 2016 an awesome year. We see these steps forward as the basis for future growth.
Let’s face it: one of the reasons your organization chose a SaaS solution (whether Microsoft Dynamics 365, Netsuite or SAP) is that it is subscription-based. The upkeep is done. Or so you think.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…
Suggested Courses

752 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question