Lan to Lan IPSec tunnel to hostname...

[fdetoma]

Hi,

on a ASA firewall we neet to create a Lan to Lan IPSec tunnel to a remote peer.

This peer is a simple third party modem using a DDNS service, having it a dinamic IP address.

ASA, instead, hold a static public IP.

Using ASA's VPN wizard or cli, we can set remote peer using IP and (following cli command help) also hostname...

But in all way,  using hostname ASA shows an error and doesn't accept "DNS Name".

We've also tried on different IOS/ASDM version (from 8.2 to 9.1, etc.).

We've note some bugs related to this behavior...

Any ideas to solve?

Thanks!

[felixmitonga]

Greetings fdetoma,

if I understand well, the challenge you have is the fact that the smaller third-party router has a dynamic IP Address.

As a first step, in the ASA, try and use 0.0.0.0 0.0.0.0 as IP and SBM of the peer router, in the ipsec configuration,

and let me know what you get.

The meaning of the above step is basically to tell the ASA to receive a Dial-in request from ANY ip address.Should that work, you now have to rely on the other security features to make that connection safe, as theoretically speaking any other router can initiate the link should they have the key.

Please let me know what you get!