Is it possible to make a VPN when IP is dynamic?

[Guest]

Hello,

I have Windows Server 2003. It connects to internet using a dynamic IP
address and I want to configure the server to accept incoming VPN connections
in order to connect to networks.

When the IP changes, does the NAT refresh automatically it tables to reflect
the changes? is it possible to configure the VPN in this scenario?

Thanks
Jaime

 

[Doug Sherman [MVP]]

Yes, RRAS/NAT operates on the selected adapter regardless of its IP address.
There is no real issue with configuring the server. The issue is with the
clients - they need to know the new IP address.

Doug Sherman
MCSE, MCSA, MCP+I, MVP

 

[Phillip Windell]

When the IP changes, does the NAT refresh automatically it tables to reflect
the changes?

No. You NAT has no control over that and is primarilty an outbound function.
VPN does not use NAT, is not related to NAT in any way, and is primarily an
inbound function.

is it possible to configure the VPN in this scenario?

Get a business account with the ISP instead of a "home user" account and get
a static IP#. Every ISP can do that. If they won't, then they aren't worth
doing business with.

 

[Guest]

Hi Phillip...

Of course my ISP can provide a static IP, but that has a more expensive
price. I'm planning to do that using my actual contract which is cheaper and
provides only a dynamic IP address.

From clients point of view, there's no problem because when IP changes, I
update the record in the DNS server which maintains my zone, so clients
connect using the name.

Jaime

 

[Guest]

There is a lot of free services like dyndns.org which can watch the dynamic
IP changes and correctly resolve the appropriate domain name such as
*jaime.dyndns.org*. It can be a dynamic IP/DNS-capable router/firewall or
small client who sends the updates to the dynamic DNS service provider.

 

[Phillip Windell]

There might be a bit of a delay, but they are pretty dependable.

 

[Jetro]

Everything is configurable either first check delay or checking interval but
I believe the DNS changes propagation would take much more time than the
update itself. It's worth a mention that DHCP-obtained IP address shouldn't
be changed during a lease time. But as it has been said already, only a
static IP address gives you reliable point of presence.