Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is it possible to set up a static site-to-site vpn with two CISCO881-K9? One of the routers has a dynamic IP.

share|improve this question
up vote 1 down vote accepted

Check It explain how it works, just don't take care of the computer that connect with the cisco vpn client.

share|improve this answer includes instructions for setting up a VPN, but I think the dynamic IP is going to cause you problems. It might still be possible but I suspect you may have to resort to IOS rather than doing it through the web interface.

This may not be useful if you're stuck with the Ciscos, but the Draytek routers, like the 2910, can be configured to use a "one way" VPN i.e. the end with the dynamic IP dials into the static IP. This avoids problems with having a dynamic IP, but it means the VPN can only be initiated from one end.

I have configured LAN to LAN VPNs using DynDNS names, and it mostly works though I have to say it leaves me feeling slightly uneasy.


share|improve this answer

Yes, this should be possible.

Here is the data-sheet for the Cisco 880 Series Integrated Services Routers:

As long as one of the sites has a static ip you can use dynamic map to configure the vpn. Details:

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.