Site to Site VPN with Dynamic IP

Unanswered Question
Jun 11th, 2008
User Badges:

Currently we have ASA 5510 in place and would like to establish a VPN tunnel to Cisco 877 router. Being that is the case, the 877 router has dynamic IP. Is there a secure and recommended way to configure and establish a hard VPN tunnel between 5510 and 877 Router Branch Office Router?


  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
dgroscost Wed, 06/11/2008 - 15:41
User Badges:

You can do this, but only the Cisco 877 router (being dynamic) can bring up the tunnel, as the ASA has no way of knowing the IP of the other endpoint. I have a few of these set up in my environment.

You'll need to set configuration lines to the DefaultL2LGroup tunnel-group.

Direct link:

PIX-to-PIX Dynamic-to-Static IPSec.


This Discussion