Site-to-site using DNS name

[the-lebowski]

I have some home office setups that have s2s VPNs which terminate on my netscreen SSG5.  I am moving off the SSG and onto an ASA5510 but not sure if or how I can make this work?  The end users do not have static IPs at this point.  I use dyn dns on their home routers to update their DHCP IPs from the providers.  If they can't get static IPs how can I specify the peer ID with a DNS name rather than IP address?

[Thotsaphon Lueangwattanaphong]

Hi,

   ASA cannot do what you want. You can define hostname on a set peer command but hostname is reffered to the name command on ASA. So DNS doesn't get involved in this process. If you've got dynamic ip addresses on both sites,you cannot do this. It's possible if you have a static pubic ip address on one site, you can do site-to-site VPN but you need to generate interesting traffic on the site using dynamic public ip address first to build the tunnel.

  Hope ASA can do this someday soon (grin)

HTH,

Toshi