Well, probably you're better off getting a security guy to look into this
especially when it comes to a real world case but generally speaking with
DMVPN you don't have to statically configure your spokes with IPsec crypto-map
and ISAKMP peer statements. There are many different solutions to support
spoke to spoke communications but at the end of the day it comes down to your
design....
Here is one of the old ones yet you can find a lot more on Cisco websites:
http://www.ciscosistemas.org/en/US/prod/collateral/iosswrel/ps6537/ps6586/ps6
635/ps6658/prod_presentation0900aecd80313ca0.pdf
HTH
--------------------------
Kambiz Agahian
CCIE (R&S)
CCSI, WAASSE, RSSSE
Technical Instructor
CCBOOTCAMP - Cisco Learning Solutions Partner (CLSP)
Email: kagahian_at_ccbootcamp.com
Toll Free: 877-654-2243
International: +1-702-968-5100
Skype: skype:ccbootcamp?call
FAX: +1-702-446-8012
YES! We take Cisco Learning Credits!
Training And Remote Racks: http://www.ccbootcamp.com
OEQ Voice Waiver: http://www.ccbootcamp.com/noeqvoice.html
OEQ R&S Waiver: http://www.ccbootcamp.com/noeqrs.html
OEQ Commercial: http://www.ccbootcamp.com/noeq.mpg
-----Original Message-----
From: nobody_at_groupstudy.com on behalf of Jockey
Sent: Mon 4/5/2010 7:29 PM
To: Group study
Subject: Security queries !!!
Hi experts,
1)Why DMVPN is called as dynamic?
2)Can we do site to site VPN if both site has dynamic Ips(by using
ddns)?
Thanks
Blogs and organic groups at http://www.ccie.net
Received on Mon Apr 05 2010 - 22:20:06 ART
This archive was generated by hypermail 2.2.0 : Sat May 01 2010 - 09:49:56 ART