IPSEC VPN Where all routers are DHCP To Internet

[ctimko]

Does anyone know how to implement a VPN where all of the participants have dynamic routable addresses?

[thiland]

I ran into a similar requirement and the solution suggested to me was the "Real-time Resolution for IPSec Tunnel Peer" feature.

Basically, you add the keyword "dynamic" to the end of your "set peer hostname" command, and it will resolve the DNS hostname each time it attempts to contact the peer.

http://www.cisco.com/en/US/products/sw/iosswrel/ps5207/products_feature_guide09186a00801d1cb5.html

Note also that you will need to use a dynamic DNS updater service such as DynDNS.org or DtDNS.com.

-Tanner

[ctimko]

Tanner,

That is superb. I currently use dynu basic at dynu.com to do resolution. all I do is simply load the tiny client software on a pc behind each router and the pc goes to dynu about every 60 seconds and updates the current IP. So, I can always reach the routers with a qualified host name. I have been changing my peers up until now. It's a real headache. I will check your solution out. Thanks!!