cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
238
Views
0
Helpful
1
Replies

Dynamic IP address for IPsec tunnels ended on VPN3030

jpmanrique
Level 1
Level 1

Hi,

We're trying to establish IPsec tunnels from a c1760 acting as customer router and VPN303 as tunnel-end-point.The issue here is that the customer Internet connection is based on dynamic public IP assigment, so the customer tunnel end-point has different IP address each time.How can we configure the VPN3030 LAN-to-LAN connection to ignore the source IP address during the IPsec tunnel negotiation?I have seen the 'answer-only' option but it seems that peer address element is mandatory.

Thanks in advance!

1 Reply 1

gfullage
Cisco Employee
Cisco Employee

This'll help, you have to define a default pre-shared key under the Base Group:

http://www.cisco.com/en/US/products/hw/vpndevc/ps2284/products_configuration_example09186a00800ae459.shtml