by register with ip dyn-dns we cant create site to site vpn .using hostname we can communicate ?...otherwise tell me possible way.

Yes it should work. Just make sure you use the latest version of the Cisco VPN Client.

Regards

Farrukh

thankyou for ur reply

i am not asking about remote vpn client...

it is possible to create site to site vpn using these dynamic dns hostname..

because i am having both sides dynamic ip.

if it is possible give me some example

thanks..

I already told you that you cannot. From my original response:

"No you cannot make a site-2-site vpn with dynamic IPs on both sides. Dynamic crypto maps don't allow you to initiate connections, if both sides have dynamic crypto maps, who will initiate the connection? "

Please rate if helpful.

Regards

Farrukh

thanks for ur reply..

so there is no solution...so only possibility is remote client

To my knowledge, YES.

Regards

Farrukh

hai

i configured remote client in asa 5505 and everything working fine.remotely connecting but the ip address and gateway is same..

for example i assign a pool 192.168.1.10-192.168.1.20

the ipconfig remotely

ip addrss 192.168.1.10

subnet 255.255.255.0

gateway 192.168.1.10...

so i am not able to access anything.

That default gateway is normal. Don't worry about that.

'acesss anything' what do you mean? Did you check the encr/decr on the ASA and the VPN client?

Regards

Farrukh

not able to access means

i am trying to access that asa but itis not communicating and i tried to ping the asa also...request timed out is coming ..i tried telnet also..nothing is happening..i am attaching my config in this...

What is the point of defining a 'permit any' ACL and then doing a 'tunnelspecified'? Just do a "tunnelall".

Is phase 1 and 2 UP after the client connects? Do you see encap/decap?

show crypto ipsec sa

Regards

Farrukh

thanks

ok i ll do it

setup a DMVPN using NHRP at the hub site, which will keep track of the current global IP address at the two spokes, and they will be able to dynamically form tunnels between them, and even if the address changes, those updates will re-register with the NHRP server. That's assuming this is IOS-IOS VPN.