IPsec VPN using regular cable modem

[mariocabrejo]

Hi,

Is there a way to do a ipsec-vpn from either a router or pix using a cable broadband connection using dynamic ip. If so can you please write the link or some explanation.

Thanks

[mostiguy]

a vpn to what? what device will sit on a cable modem? having one end with a dynamic ip address is not a problem

[mariocabrejo]

A pix to pix vpn(behind the cable modems doing dynamic ip address). How will the pix keep the external ip address if the cable is dynamic. I am thinking the VPN might because once the cable changes ip.

Then does it mean that we have the same capabilities for vpn and remote access using a dynamic IP address than an static if we know how to do it?

[andifur]

Your best et for this is to use the ezvpn on the PIX that has the dynamic IP address. I use this on 831 routers and a bunch of PIX 501's that terminate to a PIX 515 or a 3005 concentrator. There is a trick as well to bypass all authentication or Xauth to authenticate on the pre-shared key only. Off the top of my head I am not sure what it is, but I will forward it on when I get back in the office. Yo will need to use (I beleive Network Extension mode) if you want full two-way traffic. This will act as a IPsec lan-to-lan tunnel for you