dynamic IP VPN

[binary_dreamer]

Hi.

i am running a vpn between three remote offices, by making use routers that get dyndns.

i would like to substitute the existing routers with cisco 877/876 to get better management.

my issue is that if anybody has done a tunnel by making use of dynamic IPs

[Marcin Latosiewicz]

Hi there,

Are all of those supposed to have dynamic IP addresses?

I have tried and documented this some time ago, it worked for two.

http://isamology.blogspot.com/2010/09/ios-lan-to-lan-with-two-dynamic-peers.html

If one has static IP I suggest to use a very small DMVPN cloud ;]

Marcin

[binary_dreamer]

Hi. thanks a lot for the quick reply.

could you tell me a bit more about the "If one has static IP I suggest to use a very small DMVPN cloud"?

[Marcin Latosiewicz]

Sure thing.

If one of your sites has a static IP address assigned.

You can create a hub and spoke topology where the sites with dynamic IP (spokes) would register to the site with static IP (hub).

Now by virtue of NHRP dynamic spoke-to-spoke tunnels (between the sites with dynamic IPs) could be created because hub would hold information about their dynamic IP addresses.

It's an elegent design and would work straight out of the box.

However it would not scale well on 800 platforms - thus word "small" ;-)

Marcin