VPN Tunnel ipsec - static IP to Dynamic

[aw75635]

Hello.VPN tunnel,

I am trying to create an ipsec-vpn between 2 cisco routers. 

One router has a wan static IP - provider router

The other is configured with static IP as well, but I am interested in making a VPN useing DHCP mode. So I do not think that that configuring this routes with a static IP should be a problem. - customer z router

I will add the configuration

sh crypto isa sa

shows the connection active

172.100.101.1 172.100.101.4 QM_IDLE 1003 ACTIVE

But PING between internal networks on each site does not work. 

Any tips, much appreciated. 

Thank you!

[aw75635]

Heire is the configuration of the tunnel on both ends

[Richard Burts]

I am not clear what you really mean when you say " I am interested in making a VPN useing DHCP mode". Can you clarify this? 

I am wondering if you mean you want to create a site to site vpn in which the customer router is treated as if its interface used DHCP to get its IP address (even though you tell us that both routers actually have static IP). I am not clear why you want to do this but believe that it should be possible.

Would you post the output of show crypto ipsec sa from both routers?

[pman]

I believe the following guides are what you need:

https://www.cisco.com/c/en/us/support/docs/security-vpn/ipsec-architecture-implementation/118048-technote-ipsec-00.html

https://www.cisco.com/c/en/us/support/docs/security-vpn/ipsec-negotiation-ike-protocols/14131-ios-804.html