From: Curt Girardin (curt.girardin@chicos.com)
Date: Mon Oct 01 2007 - 15:03:03 ART
With one side static and one side dynamic (DHCP) you have the following
options (there may be more):
1) DMVPN
2) Dynamic crypto-map on the static side, with static-crypto-map on the
DHCP side.
3) EZVPN
Are both sides terminated with routers? ASA's? Pix's? Or VPN
Concentrators? That makes a difference in your choices.
1) DMVPN is only do-able on routers. ASA's, pix's and concentrators do
not have a concept of a tunnel interface, or NHRP.
2) This is do-able if you're not using concentrators. I'm not certain
about pix's and asa's.
3) This is do-able if your DHCP side is a router, and some pix/asa
platforms as an EZVPN client. Your EZVPN servers can be routers, vpn
concentrators, and some pix/asa platforms.
Thanks,
Curt Girardin, CCIE2 (R/S, Security) #15972
-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
v.shekhar@yahoo.com
Sent: Monday, October 01, 2007 10:28 AM
To: Chamara Peris; shiran guez
Cc: Joseph Brunner; Cisco certification
Subject: Re: Dynamic VPN Tunnels
if u can manage to get one side on public Static IP, u can go for
EZVPN, but in this case the tunnel HAS to be initiated from the dynamic
IP side ONLY. (but thats the only option anyways) :)
Thanx,
-sHekHar.
CCIE#17589/CISSP/RHCE.
----- Original Message ----
From: Chamara Peris <dimsyboy@gmail.com>
To: shiran guez <shiranp3@gmail.com>
Cc: Joseph Brunner <joe@affirmedsystems.com>; Cisco certification
<ccielab@groupstudy.com>
Sent: Monday, October 1, 2007 4:02:51 AM
Subject: Re: Dynamic VPN Tunnels
Hi Guys,
If I can get one end with a static. what's best solution to get this
scenario working?. Can someone point me to a good example in this
situation.
Cheers,
CP
On 10/1/07, shiran guez <shiranp3@gmail.com> wrote:
>
> with DMVPN you must have at least one Static Public IP address for the
Hub
>
> he is specfying a case where he so not have Static IP in the only 2
> location he have.
> I suggest that he will use DDNS with No-IP Service and create a simple
GRE
> tunnel with no problem
>
>
> On 10/1/07, Joseph Brunner <joe@affirmedsystems.com> wrote:
>
> > There really is only 1 way worth doing - DMVPN
> >
> > You can read all about it here.
> >
> >
> >
http://www.cisco.com/en/US/products/sw/iosswrel/ps1839/products_feature_
guid
> > e09186a0080110ba1.htmlv
> >
> >
> > and in layman's terms...
> >
> >
http://en.wikipedia.org/wiki/Dynamic_Multipoint_Virtual_Private_Network
> >
> > -Joe
> >
> > -----Original Message-----
> > From: nobody@groupstudy.com [mailto: nobody@groupstudy.com] On
Behalf Of
> > Chamara Peris
> > Sent: Sunday, September 30, 2007 5:46 PM
> > To: Cisco certification
> > Subject: Dynamic VPN Tunnels
> >
> > Hi Group,
> >
> > I have a requirment to connect two sites via VPN. My problem is
these
> > two
> > sites come with dynamic IP addreses. Tried few simulations as
mentioned
> > in
> > cisco site without a luck.
> >
> > Anyone can shed some light how to connect two sites with dynamic IP
> > addreses.
> >
> >
> >
> > LAN---172.16.10.0 <--->Router (Dynamic Public IP)
> > ------[Internet]---------(Dynamic Public
IP)Router<---->172.16.11.0--LAN
> >
> >
> > Cheers,
> > CP
> >
> >
This archive was generated by hypermail 2.1.4 : Fri Nov 16 2007 - 13:11:11 ART