VPN Connection between Windows 2003 server and a VPN router

Hi all,

I have succesfully configured the VPN connection between a remote Windows
2003 server and the office LAN (thank Miha Pihler). Now I had another issue
with the VPN setup. We are currently using a dynamic IP address at the
office side. Every time the ISP changes the ip address, I have to
reconfigure IPSec policy in the remote server side to make the tunnel point
correct.

Our connection:
Remote Windows 2003 server (static IP)
+
+
+-----------------------------------------------Netgear FVS318 Router ---
LAN

(dynamic public ip)

When i configured the IPSEc policy, I found there is only one place I need
to put into the policy. That is the Tunnel point from Win2003 server to
NetGear. The VPN type is between a subnet to a static ip address. I have a
DNS which dynamically update the office address much like dynDNS.org does.
Question is, how I can set that DNS name into the VPN configuration so that
I do not need to change it every time the ip address chagnes.

Thanks in advance,
Jack

Try using a Dynamic DNS clien on the site with the dynamic IP. See
www.dyndns.com

hope this helps,
OJ


"Jack Tan" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Hi all,
>
> I have succesfully configured the VPN connection between a remote Windows
> 2003 server and the office LAN (thank Miha Pihler). Now I had another
issue
> with the VPN setup. We are currently using a dynamic IP address at the
> office side. Every time the ISP changes the ip address, I have to
> reconfigure IPSec policy in the remote server side to make the tunnel
point
> correct.
>
> Our connection:
> Remote Windows 2003 server (static IP)
> +
> +
> +-----------------------------------------------Netgear FVS318 Router ---
> LAN
>
> (dynamic public ip)
>
> When i configured the IPSEc policy, I found there is only one place I need
> to put into the policy. That is the Tunnel point from Win2003 server to
> NetGear. The VPN type is between a subnet to a static ip address. I have a
> DNS which dynamically update the office address much like dynDNS.org does.
> Question is, how I can set that DNS name into the VPN configuration so
that
> I do not need to change it every time the ip address chagnes.
>
> Thanks in advance,
> Jack
>
>

I have a DNS server which can configure dynamic ip to a DnS name. The
question was: how to put that in the IPSec policy?


"oj" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Try using a Dynamic DNS clien on the site with the dynamic IP. See
> www.dyndns.com
>
> hope this helps,
> OJ
>
>
> "Jack Tan" <(E-Mail Removed)> wrote in message
> news:(E-Mail Removed)...
> > Hi all,
> >
> > I have succesfully configured the VPN connection between a remote
Windows
> > 2003 server and the office LAN (thank Miha Pihler). Now I had another
> issue
> > with the VPN setup. We are currently using a dynamic IP address at the
> > office side. Every time the ISP changes the ip address, I have to
> > reconfigure IPSec policy in the remote server side to make the tunnel
> point
> > correct.
> >
> > Our connection:
> > Remote Windows 2003 server (static IP)
> > +
> > +
> > +-----------------------------------------------Netgear FVS318
Router ---
> > LAN
> >
> > (dynamic public ip)
> >
> > When i configured the IPSEc policy, I found there is only one place I
need
> > to put into the policy. That is the Tunnel point from Win2003 server to
> > NetGear. The VPN type is between a subnet to a static ip address. I have
a
> > DNS which dynamically update the office address much like dynDNS.org
does.
> > Question is, how I can set that DNS name into the VPN configuration so
> that
> > I do not need to change it every time the ip address chagnes.
> >
> > Thanks in advance,
> > Jack
> >
> >
>
>

You can't. The MS IPsec implementation only supports "static" IP's. IE you
can't store DNS or WINS names in policy and get automatic name resolution.
You'll have to reserve a static IP for your VPN server. You could always
script the IPsec policy application and just rerun every time you get a new
IP, but there probably isn't a way for you to know instantly that your IP
address changed.

--

Mark Swift
Software Test Engineer
IP Security
Windows Networking
Microsoft

This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm

--

"Jack Tan" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
>I have a DNS server which can configure dynamic ip to a DnS name. The
> question was: how to put that in the IPSec policy?
>
>
> "oj" <(E-Mail Removed)> wrote in message
> news:(E-Mail Removed)...
>> Try using a Dynamic DNS clien on the site with the dynamic IP. See
>> www.dyndns.com
>>
>> hope this helps,
>> OJ
>>
>>
>> "Jack Tan" <(E-Mail Removed)> wrote in message
>> news:(E-Mail Removed)...
>> > Hi all,
>> >
>> > I have succesfully configured the VPN connection between a remote
> Windows
>> > 2003 server and the office LAN (thank Miha Pihler). Now I had another
>> issue
>> > with the VPN setup. We are currently using a dynamic IP address at the
>> > office side. Every time the ISP changes the ip address, I have to
>> > reconfigure IPSec policy in the remote server side to make the tunnel
>> point
>> > correct.
>> >
>> > Our connection:
>> > Remote Windows 2003 server (static IP)
>> > +
>> > +
>> > +-----------------------------------------------Netgear FVS318
> Router ---
>> > LAN
>> >
>> > (dynamic public ip)
>> >
>> > When i configured the IPSEc policy, I found there is only one place I
> need
>> > to put into the policy. That is the Tunnel point from Win2003 server to
>> > NetGear. The VPN type is between a subnet to a static ip address. I
>> > have
> a
>> > DNS which dynamically update the office address much like dynDNS.org
> does.
>> > Question is, how I can set that DNS name into the VPN configuration so
>> that
>> > I do not need to change it every time the ip address chagnes.
>> >
>> > Thanks in advance,
>> > Jack
>> >
>> >
>>
>>
>
>