IPSec VPN with peer dns name

[startx001]

Hi ,

Can anybody help me is there working config for ipsec vpn where is peer dns name instead ip address ? 

i need for  ASA 8.2 version

Config or/and cisco documents ?

Thanks

[Bogdan Nita]

Configuration of the VPN tunnel is basically the same as for IP, you just have to enter the hostname instead of the IP (provided the ASA can resolve the hostname), however, the ASA will resolve that name only once , so if the IP changes on the other end VPN tunnel will not be functional.

Another option you may want to have a look at is dynamic-to-static VPN, here is link for the config steps:

https://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/119007-config-asa9x-ike-ipsec-00.html

[startx001]

Hi , 

But can you give me command for using dns insted of peer ip address ?

It seems there is no in version 8.2 

KR