Hello all my company has 3 branches, all branches connect to internet by PPPoE with dynamic ip address l would like to configure DMVPN and IPsec do you have any solution about this ?

Hello all my company has 3 branches, all branches connect to internet by PPPoE with dynamic ip address l would like to configure DMVPN and IPsec do you have any solution about this ?
Khayal AhmadovNetwork EngineerAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Sam Simon NasserIT Support ProfessionalCommented:
my recommendation is to buy 3 real IPs from your internet provider and install each one at each location router.

or you can check the article written by ffleisma
https://www.experts-exchange.com/articles/18218/DMVPN-configuration-with-both-Hub-and-Spokes-having-a-dynamically-assigned-NBMA-public-IP.html
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Fred MarshallPrincipalCommented:
Assuming that you'd need to connect each site to each other site then I don't see why a single IP address with multiple VPNs in a single router at each site wouldn't work.  I don't know how being "dynamic" changes that at all.  Of course, doing this generally requires that the site subnets be different.

But, since you say you're using PPPOE connections, I suspect the data transfer rates may be relatively low.  In that case, there are practical considerations:
The speed of a VPN is only as good as the slowest of UPLOAD speed or DOWNLOAD speed.  So, if you have 10Mbps DOWN and 3Mbps DOWN, the VPN speed will be limited at 3Mbps (less overhead).
With typical networks running at 1,000Mbps, people will be very unhappy with 3Mbps on the VPN.
You can adjust the numbers to fit your actual situation.
0
Khayal AhmadovNetwork EngineerAuthor Commented:
thank all for answering my question. The static IP address is more expensive in our country so we have dynamic IP. If Hub router has static IP, of course, l can configure easily, there is other solution is to configure dynamic DNS so on spokes we need configure DNS name instead of IP address.
0
Sam Simon NasserIT Support ProfessionalCommented:
no feedback
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Cisco

From novice to tech pro — start learning today.