From: Chad Marsh (chad@xxxxxx)
Date: Sat May 13 2000 - 21:02:46 GMT-3
You'll have to do what Cisco calls a "mode" configuration, since the host
has a dynamically assigned address, there is no way to program the Router
(assuming it's a router) for what address to peer with on the crypto map.
This way the router assigns a bogus internal address to the client, from a
local pool, then references that address range for the crypto components.
See here: http://www.cisco.com/warp/public/707/25.html
or here for PIX: http://www.cisco.com/warp/public/110/37.html
Chad Marsh
CCIE # 5185
----- Original Message -----
From: "Wayne Hu" <wayneccie@yahoo.com>
To: <ccielab@groupstudy.com>
Sent: Saturday, May 13, 2000 3:38 PM
Subject: IPSec Question
> Hi,
> I have problem to setup pre-share key on VPN host,
> because the Remoute Client using Dial-up ISDN with no
> Static IP address. Can I use wildcard in the command
> line crypto isakmp key Cisco address 0.0.0.0, if not,
> how can I implement this?
>
> Thanks
>
> wayne
>
>
>
This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 08:23:29 GMT-3