VPN with dynamic IP

[hardiklodhia]

Hello All,

I have 506 e pix at Site.That site is having Adsl router with dynamic IP add provided by ISP for internet access.I want to configure VPN.Pix will be VPN server and remote user will have VPN client software with their laptop/Pc.

Now my question is as site has dynamic IP,is it possible to connect through VPN.

Any workaround ??

Thanks In Advance.

[5220]

Hi,

Yes, it is possible. You will specify the ike to use the dns name (isakmp identity).

Configure the name and domain (e.g. pix.isp-domain.com).

Then you need to advise your ISP to register the DNS dynamically to the IP address. Adsl router might as well be able to provide you Dynamic DNS services.

Nevertheless you should ask ISP to provide you static IP, this will simplify the design.

Please rate if this helped.

Regards,

Daniel

[hardiklodhia]

Hi Daniel,

I have to configure dns name and domain in pix correct?then in case isp refuse to register the dns dynamically then any other solution ?there is no chance for static ip.

thanks,

[5220]

Hi,

The other solution is either a static ip, or for your ADSL to support Dynamic DNS service.

To find more about DynDNS check:

http://www.dyndns.com/services/dns/dyndns/

Once you done that, you need to specify on the ADSL to forward any incoming traffic on PIX IP, making ADSL transparent.

Please rate if this helped.

Regards,

Daniel

[hardiklodhia]

Hi,

Thanks for ur reply.pls guide that if anything should be taken care in pix and client configuration.

rgrds,

[5220]

Hi,

On the Cisco VPN client you need to specify the dns string: pix.domain.com.

Nothing special on the PIX.

On the ASL redirect the incoming traffic to the PIX.

Please rate if this helped.

Regards,

Daniel

[hardiklodhia]

hi,

how to make adsl router trnsparent.and portforwarding for vpn??which ports to be forwarded>??

thanks ,

[5220]

Hi there,

You can specify the PIX as internal server and thus all the requests that hit ADSL will be forwarded to PIX IP (thus ADSL becomes transparent).

If oyu want port forwarding, you need to forward the ports: UDP 500, UDP 10000, UDP 4500.

It is very important in this case to enable nat transparency on the PIX, so that the IPSEC will use the UDP port 4500 or 10000.

Please rate if this helped.

Regards,

Daniel

[hardiklodhia]

Hi,

Thanks again ..

i tried a lot by port forwarding.. but its not working.But i think we also need to specify ESP port 50 to forward that option is not available in adsl router so i am going to change the router.Any other tips...

rgrds,