Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

SITE to SITE Tunnel with FQDN


I want LAN to LAN tunnel between ASA and 1800 with FQDN i.e for 1800 and for ASA rather than using peer ip addresses in 'set peer .. ".Is this possible to use FQDN for tunnel peers ratehr than ip addresses ?



Re: SITE to SITE Tunnel with FQDN

Yes it's possible but there are a couple of caveats. The name must be resolvable and the ASA can not use DNS so you will need to use a static name command (kind of defeats the purpose of using a name). Other than set set the peer to the name instead of the IP. You will also have to set the identity to hostname under your isakmp profile.

Hope that helps.

New Member

Re: SITE to SITE Tunnel with FQDN

Hi Collin

i am looking for the name to be resolved over an internet if my peer is your router at your location then I have to put and I have no clue what ip it has and it is possible they may change the ip from time to static name command doesn't really help

Re: SITE to SITE Tunnel with FQDN

I agree, but that's the only way an ASA can resolve names (that I know of).

Re: SITE to SITE Tunnel with FQDN

I just ran across something-

dns domain-lookup inside

dns server-group DefaultDNS



domain-name mylocal.lan

Looks like it can do DNS.

CreatePlease to create content