Re: cry isa key ccie2k9 address (DomainName) is possible

From: Puneet Kathpalia <ccie4lf_at_gmail.com>
Date: Thu, 9 Apr 2009 22:11:04 +0530

You can use the crypto isakmp key <key> address <hostname> with preshared
key. You would require to specify manual hostname to ip mappings (ip host
<dnsname> <ipadd> ) on the device and set the crypto isakmp hostname.

HTH

Puneet

On 4/9/09, CCIE-STORM <ccie2sale_at_gmail.com> wrote:
>
> Thanks ryan
>
> but my case is bit differnet
>
> i have a pix on one side with 6.3 code and other end have DSL with dynamic
> ip which keeps on changing now and then from ISP
>
> since the ip keeps on chaning i thought having site to site vpn between pix
> and dsl model
> but no fixed ip ................any better way ....please
>
>
> Waiting
>
> On Sat, Apr 4, 2009 at 4:16 PM, Ryan West <rwest_at_zyedge.com> wrote:
>
> > From the command line it seems possible, but in practice it does not
> work.
> > It's not hard to hijack the DNS. You may be better off with an "Easy
> VPN"
> > solution using dynamic peers.
> >
> > -----Original Message-----
> > From: nobody_at_groupstudy.com [mailto:nobody_at_groupstudy.com] On Behalf Of
> > CCIE-STORM
> > Sent: Saturday, April 04, 2009 9:11 AM
> > To: Cisco certification
> > Subject: cry isa key ccie2k9 address (DomainName) is possible
> >
> > Hi Folks
> > Nice Question #
> > Is it possible instead of IP address can we use domain-name , it type
> this
> > command its rejected on 6.3(4) as well 7.2(2) any suggestions
> >
> > cry isa key ccie2k9 address 1.1.1.1 ( instead of ip add , i wana use
> > abc.com )
> >
> > Please share your answers ...........
> >
> > Regards
> >
> >
> > Blogs and organic groups at http://www.ccie.net
> >
> > _______________________________________________________________________
> > Subscription information may be found at:
> > http://www.groupstudy.com/list/CCIELab.html
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
>
>
>
>
>
>
>

-- 
CCIE X 2 (SP, R&S), CCNP, CCDP, Cisco Certified VPN Specialist, CCNA, CCDA,
Security+, MCP, MCSA
Blogs and organic groups at http://www.ccie.net
Received on Thu Apr 09 2009 - 22:11:04 ART

This archive was generated by hypermail 2.2.0 : Mon May 04 2009 - 07:39:11 ART