Cisco Support Community
Community Member

VPN3000 to Router IOS using IP negotiated at intf Router

When trying to connect a router which gets its IP address from the provider I dial in to, I want to connect to a VPN3000.

However when configuring LAN-to-LAN the VPN3000 expects me to have a fixed IP address at the router.

It uses this IP address as group name as it seems. With my IP address changing every time I dial in this is not a working solution as the VPN3000 doesn't find the group.

Now the other option could be to configure Remote-access client at the VPN3000 allowing the Router to connect. The router in that case should act as a VPN client but WITH using a Group parameter.

Does anyone know how to overcome the fact that the IOS router is NOT capable of using the Group value?

Community Member

Re: VPN3000 to Router IOS using IP negotiated at intf Router

Use the base group for your remote access LAN-to-LAN, and create groups for all others. I did experience a problem with the latest 3.1 client in the its IKE proposal must be at the top to work properly.

Good luck

Andy Gross

CreatePlease to create content