Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Is it possible to set up a static site-to-site vpn with two CISCO881-K9? One of the routers has a dynamic IP.

share|improve this question

3 Answers 3

up vote 1 down vote accepted

Check http://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a00801dddbb.shtml It explain how it works, just don't take care of the computer that connect with the cisco vpn client.

share|improve this answer

http://www.cisco.com/en/US/docs/routers/access/cvo/880-870-cvo.html includes instructions for setting up a VPN, but I think the dynamic IP is going to cause you problems. It might still be possible but I suspect you may have to resort to IOS rather than doing it through the web interface.

This may not be useful if you're stuck with the Ciscos, but the Draytek routers, like the 2910, can be configured to use a "one way" VPN i.e. the end with the dynamic IP dials into the static IP. This avoids problems with having a dynamic IP, but it means the VPN can only be initiated from one end.

I have configured LAN to LAN VPNs using DynDNS names, and it mostly works though I have to say it leaves me feeling slightly uneasy.

JR

share|improve this answer

Yes, this should be possible.

Here is the data-sheet for the Cisco 880 Series Integrated Services Routers:

http://www.cisco.com/en/US/prod/collateral/routers/ps380/data_sheet_c78_459542.html

As long as one of the sites has a static ip you can use dynamic map to configure the vpn. Details: http://www.cisco.com/en/US/docs/ios/12_3/security/command/reference/sec_c2g.html#wp1069489

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.