Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 
Community Member

How to Use Cisco Client VPN on a PC with dynamic IP

Suppose I have a remote firewall (pix), to which a web and a database servers are connected. Now I want to connect to this firewall via the internet by using the VPN technology.

In my office (located remotely) my PC, along 15 other PCs, are connected to a Cisco 877 router which dynamically assign the IP addresses to each of the PC on the LAN via DHCP (ADSL connection).

I'll install the Client VPN on my PC. For this (LAN) architecture, can I "build up" a VPN channel from my PC to the firewall to access the web and database servers?

If so, can I only make my PC has the access to the VPN channel, while deny the rest of PCs in my office (I do not want the rest to access the VPN)?

The key thing and the problem here is that I can not assign a static IP address to my PC. Why? Because I am using the ADSL service from a ISP company. The IP I got is a dynamic one. If I want my PC to be static IP, I have to have the whole office's PC to go static (IP). In that case, I'll have to upgrade to a more expensive service.

With the service plan I am now having, it is relatively cheaper because the IP is dynamic. Now I just wonder if the Cisco's client VPN software will resolve this issue, i.e., even if my PC is DHCP assigned IP, I would still be able to build up a channel with the remote servers? If so, how to do it?

Many thanks.



Re: How to Use Cisco Client VPN on a PC with dynamic IP

The VPN client doesnt care if you have a static ip or dynamic ip. All it needs is accessibility to the internet. Once the tunnel is established a separate pool of address is used to assign your PC an ip address. The PIX (once enabled with VPN Client configuration), will force the user to connect via user name and password authentication (along with a group name authentication). Only if a person knows the username and password, will he be able to access the network behind the PIX firewall. Here is a sample config,

CreatePlease to create content