IPSEC from ASA 5510 to dynamic 851w

[Ephemeriis]

We do outsourced IT support for a number of clients. One of them has been slowly connecting all their remote sites to their home office using VPNs. So far all the remote sites have had static IP addresses, so it has been easy going.

The next site has a dynamic IP address. I've configured VPNs with a dynamic endpoint on PIXes before... But I'm having a hard time finding any documentation for what we're currently trying to do.

The home office has an ASA5510 with a static IP address. The remote site has an 851w with a dyanamic IP address.

Is it going to be possible to create a VPN between these two locations? Is there anything I should be cautious of because the ASA already has several VPNs established? Can anyone point me to some documentation on how to accomplish this?

Thanks!

[andrew.prince]

You will only be able to create a valid VPN to the site with the static IP...Unless you have somekind of dynamic DNS for the site with the DHCP.

HTH>

[Ephemeriis]

Not really the answer I wanted, but that's kind of what I figured...

So, if we get working dynamic DNS it is possible then? I'd just use the DNS name instead of the IP address to establish the VPN?

Hmmm... Does an 851 do dynamic DNS updates?

[andrew.prince]

Yep - routers do support it:-

http://www.cisco.com/en/US/docs/ios/12_3/12_3y/12_3ya8/gt_ddns.html

HTH>

[Ephemeriis]

Terrific!

So, once I've got dynamic DNS up and running on the 851... I'd just use that DNS name on the ASA where I'd normally put in the static IP? Or is there more to it than that?

[andrew.prince]

In theory - yep!