VPN - Tunnel Endpoint

[Dominic Longpré]

Hi,

Is it possible to use DNS Name as Tunnel Endpoint instead IP@ ? I want to
create VPN between to Win2k Server over the Internet. But each servers have
dynamic IP@!!! That's why I want to use DNS Name instead IP@ for the Tunnel
Endpoint.

What you suggest ??
Thanks.

 

[Steven L Umbach]

Does it give you an option to enter a dns name?? I know you can't with an
ipsec tunnel policy. If it does then sure you can try it, but it will only
work if the dns server used for name resolution is good at keeping dynamic
ip address to name mappings. There are services that offer such dns ability,
however I do not know the details on how reliable they are. --- Steve

 

[Dominic Longpré]

Hi Steve,

I use the service Dynamic DNS from http://www.dyndns.org.

So, there is any way to use DNS Name instead IP@ as Tunnel Endpoing within
IPsec Tunnel policy? It's BAD!! Very bad!!

 

[Steven L Umbach]

I don't think so with ipsec tunnel policy, however you may be able to do
that using rras creating a demand dial interface for the routers using pptp
or l2tp. Even though it is called demand dial it can be persistent. I used
such at one time way back in the dark ages between two W2K rras/vpn servers
before ipsec enpoint routers became affordable. I now use a Netgear FVS318.
There is also a win2000.ras_routing newsgroup where you may find more
nfo. --- Steve

http://www.microsoft.com/windows2000/server/evaluation/features/deplyr2rvpn.asp
http://support.microsoft.com/default.aspx?scid=kb;en-us;810761