VPN dynamic to dynamic

[karlostling]

If I want to set up a VPN tunnel between two sites that both have dynamically assigned public Internet addresses, I instantly run into problems.

Does anyone know if its possible in some way, maybe by using dynDNS, to achieve this ??
Any suggestions of equipment to use ??


Best Regards
jonatan

 

[tjv]

The linksys routers have the option to do this but is very unstable. I use 2

http://www.ipcop.org

firewalls and that seems to work very well. My connection stays up for at least 30 days.

 

[bluegroper]

IpCop easily VPN connects 2 subnets with dynamic ip addresses.
- BG

 

[peterve]

dyndns should work also - I've used a similar setup for quite some time and it works fine
Keep in mind that, if one of the hosts gets another IP, the tunnel will (obviously) be broken

--------------------------------------------------------------------
How can I believe in God when just last week I got my tongue caught in the roller of an electric typewriter?
---------------------------------------------------------------------

 

[ROUTERKID1]

FAQ


The Linksys VPN routers BEFVP41 and BEFSX41 are great devices for setting up LAN to LAN VPNs quickly and easily. The VP41 allows up to 70 VPN links, the SX41, 2

In a static IP environment setting up the VPN links is straightforward. Go to the VPN tab on the router setup and follow the Linksys instructions on creating the VPN

For sites with one or both (or multiple) dynamic IP addresses, it is only slightly more complex.

Firstly go to

http://www.dyndns.org,

register there(FREE) and (preferably from the site that has a dynamic IP address) create an account name for your dynamic IP address location for example: companyname.dyndns.org. If you have multiple dynamic IP sites, register one for each of them.

At the Linksys VPN router at the dynamic IP site click on the Advanced tab and select the DDNS tab. Enter the details of your Dyndns account, click Apply and you are set to go. This gives you a Fully Qualified Domain Name which you can use for your VPN. When the IP address of the dynamic location changes, it updates dyndns and there is no (minimal?) interruption in your VPN link.

This is also useful for anything else, for example if you want to run remote desktop or terminal services or a web server.

Thereafter it is a case of creating the VPN tunnels on both routers (REMEMBER to click Apply when you have entered all the details BEFORE you click on Connect!) - at the dynamic IP site router, connect to the static IP address of the other router, at the static address site, use the Dyndns FQDN to resolve the address of the dynamic site.

A very useful tip - make sure you have strong passwords on both routers and then enable remote management. In this way you then have access to the routers from anywhere and you can work on setting up the tunnel on both routers simultaneously. While you are setting it up, you might have to get someone at the dynamic IP site to look at the router's status page to tell you what the then current IP address is, so you can get in there and set up the DDNS

NOTE: to access the router, use http:\\IP address OR FQDN:8080 this will give you your remote router's logon (Only if remote management is turned on)

 

[rodneyvictor]

You said "you might have to get someone at the dynamic IP site to look at the router's status page to tell you what the current IP address is."

What if you can't do this? If both dynamic IP sites are cut off from each other, can you still set up a VPN between them using two DDNS accounts?