VPN Tunnell, one end with a dynamic IP address

[beridor]

I have 2 PIX 501's talking to each other using 3Des. One of the PIX's has an external interface which has a dynamic IP address, the vpn and everything works perfectly until a new address is given to the PIX (Happens about 1 every 2 months or so) when I have to reset the Peer address on the static end to correspond with the newly assigned address.

Is there a way of telling the static PIX to accept any address, or a range of addresses as the peer address?

 

[themut]

You can configure the static PIX as an EZVPN server and the dynamic PIX as an EZVPN client:

http://www.cisco.com/en/US/partner/...s_configuration_example09186a008019e6d7.shtml

Or you can configure a LAN-to-LAN tunnel with a dynamic IP address on one end:

http://www.cisco.com/en/US/partner/...s_configuration_example09186a0080094680.shtml

Hope this helps!