Is there any way to configure domain name in place of IP address for "Peer VPN device"

Hi,
When I configure site to site vpn on asa it asks for the ip address for the remote vpn device and it works pretty fine if I confgure like this.
The problem is that the remote vpn device does not have static IP address, it changes on every reboot. I have configured Dymamic DNS for the interface but the problem is ASA does not take domain name as the "peer vpn device" address.
Is there any work around for this issue so that I don't need to configure vpn from scratch everytime the ip address of the remote device changes.
P.S. ASA vpn configuaration also does not allow me to change just the ip address of the remote device in the VPN configuration, I have to delete the current vpn and confgure a new one from the sratch everytime the ip address changes.
Thanks

Hello Mahendra,
yes you can set a hostname in the 'crypto map set peer' command insetad of IP address, however, the ASA will resolve that name only once it is applied, hence, it will take the IP that name currently holds, and if it changes, it will not update it.
the easy solution for your case is to use static-to-dynamic L2L configuration. on your ASA, configure a dynamic crypto map, assign it to the static crypto map you have, and then add the pre-shared key to the Default L2L tunnel-group.
an example is given below:
crypto dynamic-map dyn_map set transform-set
crypto map VPN ipsec-isakmp dynamic dyn_map
tunnel-group DefaultL2LGroup ipsec-attributes
pre-shared-key
this way, you must initiate the tunnel from behind the remote device (not your ASA where the dynamic crypto map is configured) and it should work fine.
the document below explains that in details:
http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00807ea936.shtml
hope that help
Othman

Similar Messages

  • Is there any  way to Mask the Name when  a select statement is issued?

    Dear all,
    Is there any way to mask the name .. i mean if User issue a select statement in a customer table the real name should come like ' ABCXXXDEFXXCFXX'... Which is not the actual name?
    e.g if Name: CHIEV SONG MEE
    If user issue a statment select * from customers;
    The Result Should come something Like this:
    Name
    CHXXV SXNG MXX
    Thank You

    user3029023 wrote:
    but it seems there is no option in oracle it self which can be used as there they are saying to get a data masking software which we can't due to some internal issues....I would not say that. How one implements masking depends entirely on the requirements that need to be met.
    For example, schema A owns all the tables. Schema B can be created as a "trusted" schema - in other words, schema A trusts schema B and allows it full access (with grants) to its tables. Schema B implements data masking as views. For each table in A, a view exists in B that implements the required masking. B can now grant select access on these views to user C. User C will see the same data object names in B as it would have if it used A - only, by using the B data objects it uses masked data objects and not the original source data objects.
    Another example - schema Dev is to have all the data objects of schema Prod, but masked where needed. One can use CTAS (Create Table As Select) to create the required tables in Dev with masked values where relevant. This Dev schema can be "refreshed" on weekends by dropping all tables and getting a new fresh copy of production data and masking it - ready for the next week's development cycle.
    If the application use is for example APEX, then instead of coding SQL directly as reporting regions to display, a function is used instead. APEX supports reporting regions where it calls a function and this function provides the APEX run-time with the SQL to execute and contents to render. It is easy to use this approach to implement logic in functions that masked column data depending on who the APEX user is, the security/role attributes of the user, and so on.
    No there is not a single "+mask this column!+" feature in Oracle.. but that does not mean that such a feature is not supported and cannot be implemented. Oracle has a very comprehensive and rich set of tools - more so than most (if not all) other RDBMS products.
    It is up to the architect/designer/developer to use this toolkit in creating a system that meets the specific requirements at hand.

  • Is there any way to configure storage queue message encoding for Web Job's QueueTrigger?

    We have a web job that listens to Azure storage queue via QueueTrigger. The queue messages are not encoded when they are added to the queue:
    CloudStorageAccount account = CloudStorageAccount.Parse("...");
    CloudQueueClient client = account.CreateCloudQueueClient();
    CloudQueue queue = client.GetQueueReference("test1");
    queue.EncodeMessage = false;
    queue.AddMessage(new CloudQueueMessage("hello world"));
    And in the web job, we use the below method to listen to the queue.
    public static Task ProcessQueueMessageAsync([QueueTrigger("test1")]string message)
    And the web job crashes when it gets a message, with the below output. Unfortunately we cannot control the encode setting of the coming messages. So, our question is, is there any way to configure queue message encoding for Web Job's QueueTrigger?
    Thank you for any help and/or suggestion.
    Found the following functions:
    WebJobTest1.Functions.ProcessQueueMessageAsync
    Job host started
    Unhandled Exception: System.FormatException: Invalid length for a Base-64 char array or string.
    at System.Convert.FromBase64_Decode(Char* startInputPtr, Int32 inputLength, Byte* startDestPtr, Int32 destLength)
    at System.Convert.FromBase64CharPtr(Char* inputPtr, Int32 inputLength)
    at System.Convert.FromBase64String(String s)
    at Microsoft.WindowsAzure.Storage.Queue.CloudQueueMessage.get_AsString()
    at Microsoft.Azure.WebJobs.Host.Storage.Queue.StorageQueueMessage.get_AsString()
    at Microsoft.Azure.WebJobs.Host.Queues.StorageQueueMessageExtensions.TryGetAsString(IStorageQueueMessage message)
    at Microsoft.Azure.WebJobs.Host.Queues.QueueCausalityManager.GetOwner(IStorageQueueMessage msg)
    at Microsoft.Azure.WebJobs.Host.Queues.Listeners.QueueTriggerExecutor.<ExecuteAsync>d__0.MoveNext()
    --- End of stack trace from previous location where exception was thrown ---
    at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
    at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
    at Microsoft.Azure.WebJobs.Host.Queues.Listeners.QueueListener.<ProcessMessageAsync>d__11.MoveNext()
    --- End of stack trace from previous location where exception was thrown ---
    at Microsoft.Azure.WebJobs.Host.Timers.BackgroundExceptionDispatcher.<>c__DisplayClass1.<Throw>b__0()
    at System.Threading.ThreadHelper.ThreadStart_Context(Object state)
    at System.Threading.ExecutionContext.RunInternal(ExecutionContext executionContext, ContextCallback callback, Object state, Boolean preserveSyncCtx)
    at System.Threading.ExecutionContext.Run(ExecutionContext executionContext, ContextCallback callback, Object state, Boolean preserveSyncCtx)
    at System.Threading.ExecutionContext.Run(ExecutionContext executionContext, ContextCallback callback, Object state)
    at System.Threading.ThreadHelper.ThreadStart()
    Press any key to continue . . .

    Hi,
    Thanks for posting here.
    I am not too sure if the storage queue messages can be encoded before the webjob listens to it.
    I am currently researching to gather more information with regards to your request.
    I shall revert back to you with an update at the earliest.
    Sincerely appreciate your patience.
    Regards,
    Shirisha Paderu

  • Is there any way to remove profile names on the itunes wifisync for iphone4?

    is there any way to remove profile names on the itunes wifisync for iphone4?

    selenafrommelbourne wrote:
    a little dumb at times so please forgive me
    do u mean the better halfs phone ... restore his phone on itunes and then set up a new account for him 
    since that (plus one other minor incident) has happened he will not let me touch his phone, so if i can be detailed from experienced people, then he may feel confident and let me do this 
    sounds like a nice guy! if he won't let you touch his phone this may work out better for you...tell him to handle the problem himself.

  • Is there any way to get rid of this stupid feature in iTunes for Windows? You've subscribed to a podcast but have more than five unplayed episodes. iTunes will stop automatically downloading newer episodes.

    s there any way to get rid of this stupid feature in iTunes for Windows?
    You've subscribed to a podcast but have more than five unplayed episodes. iTunes will stop automatically downloading newer episodes. You may get the following message: 
    iTunes has stopped updating this podcast because you have not listened to any episodes recently. Would you like to resume updating this podcast?
    You can click Yes to continue downloading additional episodes. Or you can just listen to any part of any episode and a new episode will download at the next update.

    I believe that feature was added in order to reduce wasted costs to the Podcaster.
    Podcasts incur costs - that have to be paid for, by someone. That cost will be the cost of hosting the Podcast on a server somewhere and more crucially (with regard to your point), the cost of the Podcast being downloaded to your computer. Every download costs the Podcaster money (typically, charged by bytes downloaded).
    If that Podcaster pays for the whole thing personally, obviously they want to keep down any unnecessary cost to themselves. If the Podcaster is earning money for his or her Podcast (typically from advertising within the programme) then obviously, the advertiser only wants to pay for advertisements heard by listeners. So a download, not heard by the downloader, is waste of the Podcaster's money or no payment from the advertiser.
    My own experience is that I only have to resume downloading once per programme. I'm usually several episodes behind on two different Podcasts that I follow, but I do not recall having to repeat the resume Podcast after that first time.

  • My Old macbook pro that i bought in 2009. I have broke my screen and havent used it for a while, and now i have found out that i can use a monitor , but i have forgot my password is there any way i can make a new password? Thank you for reading this.

    My Old macbook pro that i bought in 2009. I have broke my screen and havent used it for a while, and now i have found out that i can use a monitor , but i have forgot my password is there any way i can make a new password? Thank you for reading this.

    Have you read for possible solutions over in the "More Like This" thread over here?-----------------------> 
     

  • Is there any way I can have a box sent to my house for my broken iPhone...with out calling?

    Is there any way I can have a box sent to my house for my broken iPhone...with out calling? Preferably online.

    You could try your nearest Genius Bar; in order to decide whether or not a repair/replacement is necessary, a human being would have to troubleshoot and assess the situation by talking to you.

  • HT1665 Hello. Is there any way of finding a list of accessories which hold "made for iPhone" certification?

    Hello. There are a lot of new accessories available for iPhone 5 and iPhone 4 / 4S. Is there any way of finding a list of accessories which hold "made for iPhone" certification? I do not want to buy any accesories which may be harmful for my iPhone.

    Here is the start of the setup:
    Click on the Wi-Fi Options button and provide the needed info:
    Click on the OK button. Now check the Internet Sharing box to turn it all on. If the port box you checked is no longer checked, then uncheck Internet Sharing, check the port box again, then check the Internet Sharing box again.

  • Is there any way to disable face recognition in the latest Yosemite update for Photos?

    Is there any way to disable face recognition in the latest Yosemite update for Photos?

    Ingenico has a 1D Bluetooth barcode scanner certified MFi by Apple.
    http://baracoda.ingenico.com/Baracoda-i-fly.aspx
    Baracoda i-Fly is compatible with Apple iPod touch, iPhone and iPad.
    Baracoda i-Fly supports IAP Bluetooth profile and is MFi certified, which means it is 100% compatible with Apple development standards and performances.
    Its Bluetooth connection is bidirectional, which enables the i-Fly to transmit data both ways in mode « No Data Loss »).
    Furthermore, Firmware update is also possible, which is not the case for non-MFi certified devices.

  • When using two iPhones (iOS 5) on the same computer/iTunes Is there any way to choose which songs, contact info., etc. are sync'd to each device?

    When using two iPhones (iOS 5) on the same computer/iTunes Is there any way to choose which songs, contact info., etc. are sync'd to each device?

    For each iPhone...
    From the Summary tab select:  Sync only checked songs and videos.
    Under Options in the Summary tab select:  Sync with this iPhone over Wi-Fi
    If you want you can select: Manually manage music and videos.
    Select the music you want synced from your iTunes library, same with Contacts.

  • Is there any way to remove my name from the profil...

    Is there any way to remove or prevent my profile from appearing in the profile search directory? I'm so tired of ALL the unwanted contact requests. Yeah I know I don't have to add them but this shouldnt even be a problem in the first place. If I want to add someone to add me I'll give them my skype name.

    Hi, Phnxbane, and welcome to the Community,
    You may certainly remove all profile data by leaving those settings as "blank" or "not specified."  I find the easiest way to do this is to open the profile settings from within the Skype "client" software.
    Removing/deleting an account name from the Skype search directory closes the account.  More details about this can be found here: 'Can I delete my Skype account?' 
    Regards,
    Elaine
    Was your question answered? Please click on the Accept as a Solution link so everyone can quickly find what works! Like a post or want to say, "Thank You" - ?? Click on the Kudos button!
    Trustworthy information: Brian Krebs: 3 Basic Rules for Online Safety and Consumer Reports: Guide to Internet Security Online Safety Tip: Change your passwords often!

  • Is there any way to add a credit card number from the iPhone for the app store

    Is there any way to add a credit card to my account from my phone my computer has crashed and I can't update any of my apps

    I don't believe so. I will have a closer look though and report back

  • Is there any way of creating typing shortcuts on iPad Air iOS8?  For example typing "wcybl" results in "will call you back later".

    IIs there any way of creating typing shortcuts on iPad. For example, "wcybl" when typed could result in "will call you back later"

    Follow Japib's directions then enter the shortcut like in the screenshot. Be sure to tap save.

  • Is there any way to affect the progress of availability (iTunes cloud services) for my country?

    I am a Norwegian iTunes user, and have purchased various songs on various devices (MabBook, iPhone, iMac).
    I'm getting sick and tired of not being able to sync my purchases to all devices.
    - Is there any way to provoke the progress of getting services like Match in my country too?

    Primarely i was thinking about http://support.apple.com/kb/HT5085.
    But i think the lack of automatic downloads is an automatic result of not being able to use the cloud for music/video.
    You might not be aware of this, but there's currently no way for me (and many others) to have the same files on more than one device (unless paying for another copy).

  • Is there any way to hide region names?

    I recently switched from garageband to Logic, and my only complaint is that there isn't a way to hide region names, which would give the same words-free editing experience as garageband.  If anyone knows of a way to do it, please post, thanks!

    Hi
    You could use the Text tool or the Region Parameters to clear the default names:
    CCT

Maybe you are looking for