Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations derfloh on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Cisco Site to Site VPN one side with dynamic IP 1

Status
Not open for further replies.

r556

Technical User
Feb 23, 2004
2
GB
I have two cisco routers one is setup with Static IP address.

Now two sites connect to this router, one of them has got Static IP address.
While the second site that needs to connect to this VPN router has got dynamic IP.

config
crypto isakmp policy 1
encr 3des
authentication pre-share
group 2
crypto isakmp key removed address 10.10.10.1
crypto isakmp key removed address 0.0.0.0 0.0.0.0
!
!
crypto ipsec transform-set MYSET_2 esp-3des esp-sha-hmac
crypto ipsec transform-set MYSET_3 esp-3des esp-sha-hmac
!
crypto map mymap 2 ipsec-isakmp
set peer ?.?.?.?
set transform-set MYSET_2
match address 102
crypto map mymap 3 ipsec-isakmp
set peer 10.10.10.1
set transform-set MYSET_3
match address 103

Now VPN connection to the site with ip address of 10.10.10.1 works fine because it has got static ip.
My question is it possible to remove set peer command for second connection so that it works.
or is there any other way of configuring it.
because i do not have static ip so do i need to use set peer command for second connection and will it work if i remove set peer command.
please help

thanks

 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top