Site-to-Site VPN with static IP on ONLY one end

[Clarksville]

Is it possible to create a site-to-site VPN when one site has a static IP but the other end is not? If so, which VPN products are known to support this?

 

[lgarner]

Cisco and Linux that I know of, probably most. The tunnel just has to be initiated from the dynamic side.

 

[hudr]

Just did something along these lines. Hooked up 2 Linksys BEFSX41 routers. One has static, one does not. And yes, VPN has to start on dynamic end. Also, I really don't have the security the way I would like it but I plan on tweaking it. I just had to make it WORK first. Also, no idea on stability. The tunnel is only a few hours old. Will keep you posted if you want.

 

[Clarksville]

Thanks for the info. A further thought related your Linksys situation with static/dynamic IP endpoints: Wonder if you could utilize a dynamic dns service like (free)

http://www.dyndns.org

for the dynamic IP endpoint so that even the static IP end could also initiate the vpn tunnel?

(P.S. I read on a different forum that linksys used to natively support dyndns.org updates, but had subsequently quit supporting it in newer firmware. I don't know current status and don't have linksys router myself to check.)

 

[hudr]

I had been wondering about the Dynamic DNS and how it worked. I have not looked into it to any great extent. Gee, it must have worked if support was dropped for it, eh? That seems to be the way things go.
How does one go about setting up with a Dynamic DNS organization? How does it work, via MAc or what?

 

[Clarksville]

First, sign up for a free account with

http://www.dyndns.org.

Then, configure your router to automatically update the dynamic dns service when its IP address changes. It's a quick set up if your router supports it. (I have used both Netgear and Dlink firewall/routers that support it.)