Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Attention: The Cisco Support Community site will be in read only mode on Dec14, 2017 from 12:01am PST to 11:30am for standard maintenance. Sorry for the inconvenience.

New Member

Creating Site to Site Dynamic VPN

Is there another secure way of creating dynamic vpn (site to site vpn with static IP on one end and dynamic IP on the other end). I do not feel comfortable allowing any peer to connect.

2 REPLIES

Re: Creating Site to Site Dynamic VPN

Is not that the dynamic is completely wide opened for any one to connect, it still needs to authenticate the tunnel through wild-card pre-shared keys, I don't see any other way other than have a static IP instead of dynamic at the tunnel termination point on the dynamic side.

Jorge

New Member

Re: Creating Site to Site Dynamic VPN

I totally agree too. I am throwing this question out for inputs. Creating a vpn topology with static IP at one end and the other end dynamic IP, disregarding all the vpn phases and how it negotiates, would it be fair to say this setup is more vulnerable than creating a site to site vpn with static IP on both end?

164
Views
0
Helpful
2
Replies
CreatePlease to create content