[ previous ] [ next ] [ threads ]
 
 From:  "Barry Mather" <barry dot mather at dorecentres dot com dot au>
 To:  <m0n0wall dash dev at lists dot m0n0 dot ch>
 Subject:  RE: [m0n0wall-dev] FQDN Support for IPsec VPN
 Date:  Fri, 21 Jan 2005 16:56:36 +1100
The uk is also a hit and miss affair - sometime you can keep your IP for
months, othertimes your conn goes out of sync for whatever reason, you
restart the router and get a different ip ... not something to rely on
for a vpn ... roll on being able to use fqdn for ipsec ....

-----Original Message-----
From: vincent at bikost dot com [mailto:vincent at bikost dot com] 
Sent: Thursday, 20 January 2005 8:49 AM
To: sylikc
Cc: M.Cattaneo; m0n0wall dash dev at lists dot m0n0 dot ch
Subject: Re: [m0n0wall-dev] FQDN Support for IPsec VPN

(...)

>
> But, as a solution, for the most part, if you are on a DSL/Cable
> connection and you have your endpoints up 24/7, the IPs never change
> IP anyway.  So, just set up your IPSec tunnels with the current IPs
> and you should be fine (I've had my site-2-site running for over 6
> months, no issues)
>

I don't agree 100%: in France for example, most ISP reset the PPPoE
sesion after 7 days to ensure your IP will change at least every week.
They claim it's for security reason, but I believe they lack IP
addresses instead...

Yes, some of them let you always use the same IP address, but it's not
the majority. And in most cases, you have to pay extra fees for this
nice feature.

But you're right: if you can get a DSL connection with a fixed IP, IPSec
will work!

Sorry ;-)

-- Vincent


---------------------------------------------------------------------
To unsubscribe, e-mail: m0n0wall dash dev dash unsubscribe at lists dot m0n0 dot ch
For additional commands, e-mail: m0n0wall dash dev dash help at lists dot m0n0 dot ch




Dore Achievement Centres (Pty) Ltd - Hotline: 1300 55 77 11

www.dorecentres.com.au

This e-mail message may contain confidential or privileged information 
and is intended solely for the individual to whom it is addressed. If you 
are not the named addressee you should not disseminate, distribute or 
copy this e-mail. If you have received it in error please notify us 
immediately by telephoning 1300 55 77 11 and destroy this e-mail and 
any attachments. E-mail transmission cannot be guaranteed to be 
secure or error-free as information could be intercepted, corrupted, lost, 
destroyed, arrive late or incomplete, or contain viruses. The sender 
therefore does not accept liability for any errors or omissions in the 
contents of this message, which arise as a result of e-mail transmission. 
The content of this email is not necessarily that of the Dore Acievement 
Centres unless otherwise specified.  This email was scanned for possible 
viruses and was sent on 21/1/2005 by barry dot mather at dorecentres dot com dot au to m0n0wall dash dev at lists dot m0n0 dot ch