Cisco VPN with DDNS

Hi Experts,

Hope everyone is well?

We currently have around 4 sites all working independently of each other. When group connectivity is required they use Remote Desktop to our HQ. We are re-hashing the network and would like to provide site to site VPN's via either Cisco ASA's or Cisco Routers. The only Problem is we don’t have any static IP's and currently use NO-IP's DDNS Services. Each site has a hostyname of,, and so on. This is working fine for management purposes and to date we have had very little issue with it. Each Router on each site is accessible via SSH using the Hostmane.

Before anyone says we are based in the UAE and our Telco charges enormous amounts for a single static IP. Currently we have 100mb PPPoE DSL internet and to get a Static IP we have to move to an 8Meg Leased line at a cost of around 43,000dhs which is 7,000GBP, or 10,000USD. This is not an option financially.

So what i need to know is can Cisco ASA to ASA or Cisco Router to Souter, or even Cisco Router to ASA have VPN Tunnels without the need for Static IP's? I have previously worked on Fortinet stuff and it’s possible on Fortinet.

If it is possible could somebody provide me with any config Snippets, or links as I can’t seem to find anything anywhere?

Many thanks
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Pete LongTechnical ConsultantCommented:
Agreed if you have one site with a static IP, look at EasyVPN
Configure Cisco EasyVPN With Cisco ASA 5500

TrustGroup-UAEAuthor Commented:
Hi Mate, and PeteLong,

Many Thanks for your response. I know I can have it with one Static IP but as noted above, am unable to get a Static IP. Whilst the cost would be difficult to justify the main issue is currently our DSL is 100mb Down, 50MB Up. I can't move to a 8Meg IP Connect line for speed reasons. Our Core applications all rely on internet.

So - Is it possible if both ends are Dynamic? If not possible with Cisco is there any other way to create Site-To-Site VPN's with only Dynamic IP's using No-IP or Similar

Cheers Again
Cyber security certifications or degree?

Cyber security is in demand—big-time. So what do you need to build a career in this lucrative field? Is a degree a must-have, or are industry-leading certifications more sought-after? Is it possible to break into cybersecurity without a bachelor’s or master’s degree in the field?

Pete LongTechnical ConsultantCommented:
No Cisco solution I know of, even DMVPN needs one static (and is for routers)

TrustGroup-UAEAuthor Commented:

I ended up finding this on Cisco's website:-

Looks like a Static IP would make life a lot easier, the above may also help.


Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
TrustGroup-UAEAuthor Commented:
Both Experts advised that VPN to VPN with Cisco was not possible. After speaking with TAC they advised it is BUT A FEATURE which has only just been released to the IOS.

I believe that as it was new feature only recently released, the experts may not have actually known about it, and in there best efforts advised accordingly.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today

From novice to tech pro — start learning today.