R: PIX 501

If the leases expire or the address change ( DHCP or obtained via PPP ) of
course the tunnel must be rebuilt and it happens automatically ( the branch
pix connect to the central office whose address is known ).

I'm using this kind of setup on some pix501 around the globe that obtain ip
address via PPP ( PPPoE ), and no problems till now.

Anyway, the cisco site is full of this kind of scenario ( a typical setup ),
look e.g.


http://www.cisco.com/en/US/products/sw/secursw/ps2308/products_configuration
_example09186a0080094680.shtml





Regards,

.FT









> -----Messaggio originale-----
> Da: Dave Nardoni [mailto:dnardoni@firstresponseconsulting.com] 
> Inviato: venerdì 24 giugno 2005 15.54
> A: firewalls@securityfocus.com
> Oggetto: PIX 501
>
> Is anyone aware of any problems with setting up site to site 
> VPN's with PIX's where the sites have dynamic IP's.  Situation 
> is I have to link a bunch of branch offices to main office and 
> all branch offices are DSL or cable modems that have dynamic 
> and do not have static IP's.  Any problems or gotcha's that 
> anyone is aware of, one thing I am concerned about is when the 
> lease expires will the VPN go down and come back up correctly? 
> How is this handled?
>
> Anyway thanks in advance for any comments,
>
> David Nardoni CISSP, EnCE
> dnardoni@firstresponseconsulting.com
> PGP Signature: 9CE4 C240 BBC7 2945 BDD6  C97A 0E3D 2547 DB0A 104C