Site-To-Site with Cisco 871 and 877

[julio.silva]

Hello,

I want to create a Site-To-Site VPN and I already have one Cisco 871 and other 877.

Is it possible to change a LAN FEx port on 877 to make a WAN like the FE4 on 871 so I do not use the ADSL modem on 877 and make it work like an 871 with cable modem internet?

Also I do not have fixed IP on both ends, is it possible to use DNS like No-IP.com or something like that for Site-To-Site VPN?

Thanks,

JS

[Philip D'Ath]

You are in for a hiding.  I don't think I would try and proceed to make this work.

With regard tot he 877, you can place an Fex port into a VLAN, and configure a static IP address on it.  You can even configure it as a PPPoE client but it is complicated.

Yes you can use dual dynamic IP addresses if you have new enough IOS software.  The secret is the "dynamic" option on the "set peer" line.

http://www.cisco.com/c/en/us/support/docs/security-vpn/ipsec-architecture-implementation/118048-technote-ipsec-00.html

By yourself a pair of Cisco Meraki MX64's or MX65's which will make life much simpler.

https://meraki.cisco.com/products/appliances#models