cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
984
Views
0
Helpful
6
Replies

No problem,general question

ilyaskhan
Level 1
Level 1

Hi,

Quick question: I have two sites each with a cisco 837 ADSL router connecting them to the internet.Both receive a dynamic IP on their ATM interface facing the internet.Is their ANY possible way to make a VPN connection between the two??From what i know, its not. But i heard that 3COM and some other companies have the technology for it, so i thought maybe cisco may have some backdoor technique, thats why i ask. If there is a way, can you please provide details as to how it would be configured.

1 Accepted Solution

Accepted Solutions

shchaudh
Level 1
Level 1

hi,

Cisco does not support vpn tunnels with both the peers receiving dynamic ip addresses.

You can configure vpn tunnel with atleast one of the sites using a static ip addr with any of the following technologies:

1) create a normal static to dynamic ipsec vpn tunnel

2) create vpn using EZ-VPN .

feel free to reach me at shwetajuneja@hotmail.com

View solution in original post

6 Replies 6

Philip D'Ath
VIP Alumni
VIP Alumni

Basically each end point has to know where the other end point is. You could get away with one end being static and one dynamic usin EasyVPN, but not both ends being dynamic.

Some other companies use a Dyanmic DNS service, but VPNs built on this technology don't tend to be reliable.

shchaudh
Level 1
Level 1

hi,

Cisco does not support vpn tunnels with both the peers receiving dynamic ip addresses.

You can configure vpn tunnel with atleast one of the sites using a static ip addr with any of the following technologies:

1) create a normal static to dynamic ipsec vpn tunnel

2) create vpn using EZ-VPN .

feel free to reach me at shwetajuneja@hotmail.com

What are the problems with dynamic DNS, I was thinking of trying a VPN using this service, maybe I wont bother if its unreliable.

I don't see how you can use this service with a cisco router. They work by installing an agent on a PC and then the agent checks what the external IP of the router is by initiating a connection periodically to a third party site (which logs the requesting IP address). When this changes, the Agent then informs the DynDNS service of the change.

If a Cisco router will accept a domain name as a site name for VPN purposes, you might be able to get this to work (not sure if it can). But, you are still going to need an Agent running on a PC at either end.

An alternative is to try Hamachi - a free VPN tool (for individual PCs) that supports dynamic addresses at both ends...

ilyaskhan
Level 1
Level 1

thanx to all for the feedback. More or less the same info i got from other people i had asked. Can you give me some more details about Hamachi - free VPN tool. where to get it and how would i go about making a setup with it.

Here is the link:

http://www.hamachi.cc/

As far as connecting them up ... I have only had time to give it a cursory glance - I have installed it on a single machine (not much use I know!), but haven't got around to trying it with a second PC yet ... too busy ... my PC jsut died ... :(