Dynamic Virtual Tunnel Interface configuration

[techguy]

Hi,

I want to configure dynamic virtual tunnel interface between 2 routers. Reason for using this ipsec vpn is to use one side with private ip address and other side with public ip address and i would be using virtual tunnel where i can have better control. I am not using DMVPN due to some reason.

Can someone tell me how to configure this. Thanks

[Javier Portuguez]

Hi

Please check this out:

Configuring a Virtual Tunnel Interface with IP Security

HTH.

Portu.

Don't forget to any helpful posts.

[Karsten Iwen]

With private IP you also mean that the public IP that hides the private IP is dynamic? Then you just configure on the side with the dynamic IP a standard VTI and on the "Hub"-site a DVTI which automatically will create a virtual-access interface based on a virtual template. You need to run a dynamic routing protocol over the tunnel as on the hub it is not possible to use the virtual-access interface a a static route-destination.


Sent from Cisco Technical Support iPad App

[techguy]

I mean to say, that like any pc running cisco vpn client (using private ip) can make a secure tunnel with cisco router. In my case i want to use router instead of using pc.

Scenario will be one client router (private ip address via DHCP) will be making ip sec tunnel with another router having dynamic ip address but using VTI

[Karsten Iwen]

yes, that's possible with VTI on on the private side and DVTI on the public side. But the public side needs a *static* public IP for that.


Sent from Cisco Technical Support iPad App

[techguy]

can you please give me any configuration sample for this?