From: Chamara Peris (dimsyboy@gmail.com)
Date: Mon Oct 01 2007 - 18:38:17 ART
Hi Curt,
Both ends terminated with routers. All these secenarios needs require
Dynamic end to initiate the tunnel?.
Which solution is most feasable and any good examples?
Thanks heaps guys
CP
On 10/2/07, Curt Girardin <curt.girardin@chicos.com> wrote:
>
>
> With one side static and one side dynamic (DHCP) you have the following
> options (there may be more):
>
> 1) DMVPN
> 2) Dynamic crypto-map on the static side, with static-crypto-map on the
> DHCP side.
> 3) EZVPN
>
> Are both sides terminated with routers? ASA's? Pix's? Or VPN
> Concentrators? That makes a difference in your choices.
>
> 1) DMVPN is only do-able on routers. ASA's, pix's and concentrators do
> not have a concept of a tunnel interface, or NHRP.
> 2) This is do-able if you're not using concentrators. I'm not certain
> about pix's and asa's.
> 3) This is do-able if your DHCP side is a router, and some pix/asa
> platforms as an EZVPN client. Your EZVPN servers can be routers, vpn
> concentrators, and some pix/asa platforms.
>
>
> Thanks,
>
> Curt Girardin, CCIE2 (R/S, Security) #15972
>
>
>
> -----Original Message-----
> From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
> v.shekhar@yahoo.com
> Sent: Monday, October 01, 2007 10:28 AM
> To: Chamara Peris; shiran guez
> Cc: Joseph Brunner; Cisco certification
> Subject: Re: Dynamic VPN Tunnels
>
> if u can manage to get one side on public Static IP, u can go for
> EZVPN, but in this case the tunnel HAS to be initiated from the dynamic
> IP side ONLY. (but thats the only option anyways) :)
>
> Thanx,
> -sHekHar.
> CCIE#17589/CISSP/RHCE.
>
> ----- Original Message ----
> From: Chamara Peris <dimsyboy@gmail.com>
> To: shiran guez <shiranp3@gmail.com>
> Cc: Joseph Brunner <joe@affirmedsystems.com>; Cisco certification
> <ccielab@groupstudy.com>
> Sent: Monday, October 1, 2007 4:02:51 AM
> Subject: Re: Dynamic VPN Tunnels
>
> Hi Guys,
>
>
> If I can get one end with a static. what's best solution to get this
> scenario working?. Can someone point me to a good example in this
> situation.
>
> Cheers,
> CP
>
>
> On 10/1/07, shiran guez <shiranp3@gmail.com> wrote:
> >
> > with DMVPN you must have at least one Static Public IP address for the
> Hub
> >
> > he is specfying a case where he so not have Static IP in the only 2
> > location he have.
> > I suggest that he will use DDNS with No-IP Service and create a simple
> GRE
> > tunnel with no problem
> >
> >
> > On 10/1/07, Joseph Brunner <joe@affirmedsystems.com> wrote:
> >
> > > There really is only 1 way worth doing - DMVPN
> > >
> > > You can read all about it here.
> > >
> > >
> > >
> http://www.cisco.com/en/US/products/sw/iosswrel/ps1839/products_feature_
> guid
> > > e09186a0080110ba1.htmlv
> > >
> > >
> > > and in layman's terms...
> > >
> > >
> http://en.wikipedia.org/wiki/Dynamic_Multipoint_Virtual_Private_Network
> > >
> > > -Joe
> > >
> > > -----Original Message-----
> > > From: nobody@groupstudy.com [mailto: nobody@groupstudy.com] On
> Behalf Of
> > > Chamara Peris
> > > Sent: Sunday, September 30, 2007 5:46 PM
> > > To: Cisco certification
> > > Subject: Dynamic VPN Tunnels
> > >
> > > Hi Group,
> > >
> > > I have a requirment to connect two sites via VPN. My problem is
> these
> > > two
> > > sites come with dynamic IP addreses. Tried few simulations as
> mentioned
> > > in
> > > cisco site without a luck.
> > >
> > > Anyone can shed some light how to connect two sites with dynamic IP
> > > addreses.
> > >
> > >
> > >
> > > LAN---172.16.10.0 <--->Router (Dynamic Public IP)
> > > ------[Internet]---------(Dynamic Public
> IP)Router<---->172.16.11.0--LAN
> > >
> > >
> > > Cheers,
> > > CP
> > >
> > >
> _______________________________________________________________________
> > > Subscription information may be found at:
> > > http://www.groupstudy.com/list/CCIELab.html
> > >
> > >
> _______________________________________________________________________
> > > Subscription information may be found at:
> > > http://www.groupstudy.com/list/CCIELab.html
> > >
> >
> >
> >
> > --
> > Shiran Guez
> > MCSE CCNP NCE1
> > http://cciep3.blogspot.com
> > http://www.linkedin.com/in/cciep3
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
>
>
>
>
>
> ________________________________________________________________________
> ____________
> Don't let your dream ride pass you by. Make it a reality with Yahoo!
> Autos.
> http://autos.yahoo.com/index.html
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
This archive was generated by hypermail 2.1.4 : Fri Nov 16 2007 - 13:11:11 ART