Cisco ASR1002 responder-only with dynamic peering partner

[Patrick Koenighaus]

Hello,

i have an Cisco ASR 1002 Router. I would like to connect our dezentral location to the Router.

Unfortunately has this location an standard DSL connection with an dynamic offical IP Address.

I have found an Config witch can handle an dynamic IP Addess (enclosed).

Is it possible to works witch the "set responder-only" command togehter with an dynamic crypto map?

If not please tell me how i can configur it.

crypto isakmp policy 1
encr 3des
hash md5
authentication pre-share
group 2
lifetime 300
crypto isakmp key xxx address 0.0.0.0 0.0.0.0 no-xauth
crypto isakmp identity hostname
crypto isakmp keepalive 10 periodic

!

crypto ipsec transform-set dezentral-location esp-3des esp-md5-hmac

!

crypto dynamic-map fil 1
set transform-set dezentral-location
set pfs group2
match address 150
reverse-route

!

crypto map Filialen 1 ipsec-isakmp dynamic fil

Thanks in advance for your helping.

Best Regards

Patrick

[andamani]

Hi Patrick,

You can configure the following:

crypto map  client configuration address respond.

The following link gives details of the command:
http://tools.cisco.com/Support/CLILookup/cltSearchAction.do?Application_ID=CLT&IndexId=IOS&IndexOptionId=123&SearchPhrase=%22*%22&Paging=25&ActionType=getCommandList&Bookmark=True

Hope this helps.

Regards,

Anisha

P.S.: please mark this thread as answered if you feel your query is resolved. Do rate helpful posts.