IPSec hub and spoke question

[ewei]

Is it possible to have LAN 2 LAN VPN, hub site with dynamic and sopkes with set peer, but, hub site still can initiate a call (without set peer)? I know the DMVPN is a solution but how about traditional VPN ?

thanks

[aghaznavi]

With "dynamic Crypto-map", a peer cannot initiate an IPSec VPN connection, but can only receive incoming connection. All relevant paramaters are negotiated and used during the VPN session.

You can try combining a dynamic crypto-map into a static crypto-map to achieve your goal, but I am not sure if there would be any other issues.