Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I would like to create a site-to-site VPN between my ISA 2006 and a DLink router on the other side.

My ISA got a fixed external IP Address, but the Dlink only has a dynamic one. So it makes use of DynDNS.

Every "cheap router" supports making VPNs to a hostname, but in ISA 2006 I have to enter a IP Address in the VPN settings.

Is there any way to create the VPN connection to a Hostname?

share|improve this question

I found out, that the problem is the TCP/IP stack of Windows Server 2003. According to that, it is not possible to create a VPN to a DYNDNS Host.

Wasn't able yet to try that on Windows Server 2008 and TMG.

Kind regards, Klaus

share|improve this answer

Any reason you cannot enter the dns address where it says ip address?

share|improve this answer
The reason is the textbox of the ISA Server Wizard. I cannot enter a DNS name ;( kind regards – Klaus Aug 18 '09 at 10:27
Using a hostname / dyndns entry is considered insecure, the ISAKMP passphrase is tied to the remote IP in most VPN devices. Also you'd need fully functional PTR records to validate the remote entry when the tunnel comes up, as the remote peer (ISA) can't see the A record on an incoming tunnel connection. – HampusLi Sep 12 '11 at 9:12

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.