Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

ASA 8.x ipsec vpn site-to-site with non-static ip address

Hi,

I need to create a Ipsec VPN site to site between an ASA 8.x and a generic router with a non-static IP address. I saw a document about creating a similar infrasturcture between two PIX (one with static IP and one with Dynamic IP) with 7.x version. Can someone help me?

Thank you

Everyone's tags (4)
2 ACCEPTED SOLUTIONS

Accepted Solutions

Re: ASA 8.x ipsec vpn site-to-site with non-static ip address

Hi Cristiano,

Hope this link helps:

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00807ea936.shtml

Basically the ASA has a static IP and the remote device has a dynamic IP.

You configure a normal site-to-site tunnel on the remote end, but on the ASA side configure a dynamic tunnel to accept the connection from the remote device.

This scenario will work, the only restriction is the tunnel will only be able to initiate from the remote end device (in the example above an IOS router).

Federico.

Re: ASA 8.x ipsec vpn site-to-site with non-static ip address

Hi,

Please rate the threat and mark it as answered (if you find it helpful).

Thank you,

Federico.

4 REPLIES

Re: ASA 8.x ipsec vpn site-to-site with non-static ip address

Hi Cristiano,

Hope this link helps:

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00807ea936.shtml

Basically the ASA has a static IP and the remote device has a dynamic IP.

You configure a normal site-to-site tunnel on the remote end, but on the ASA side configure a dynamic tunnel to accept the connection from the remote device.

This scenario will work, the only restriction is the tunnel will only be able to initiate from the remote end device (in the example above an IOS router).

Federico.

New Member

Re: ASA 8.x ipsec vpn site-to-site with non-static ip address

Thanks for suggestion. I'll try it.

New Member

Re: ASA 8.x ipsec vpn site-to-site with non-static ip address

Now it's working. Thanks

Re: ASA 8.x ipsec vpn site-to-site with non-static ip address

Hi,

Please rate the threat and mark it as answered (if you find it helpful).

Thank you,

Federico.

4701
Views
0
Helpful
4
Replies