connect to VPN using a DYNAMIC IP?

[hoomza444]

hi, okay here is the problem. currently i have a static IP, and am connecting to work from home using VPN. But now my ISP is saying they don't support static IPs anymore, and i am going to have to switch to a dynamic IP. what exactly do i need to do so that i can still connect to work with a dynamic ip? Thanks in advance...

 

[Poontos]

If you always connect from work to home and not vise versa, having the dynamic IP (just means that it changes, and is therefore not permanent) at home should not effect your VPN, to my knowledge, unless you have rules in place that only allow a certain IP (your old static IP) to connect to the server. If this is the case, you will definitley have to change those rules.

Need a bit more details on the setup/configuration, though.

 

[hoomza444]

thanks for the quick reply. you are right, we have a firewall and there is a hole in it for my IP to connect through VPN. any ideas on how i can still connect using VPN once i switch over to a dynamic ip?

 

[Poontos]

Keeping with the same security model in mind, the best you could do, (with restricing IP access) is have the Administrator allow access only from a certain block or subnet of IP's that your ISP assigns you.

For example:

Lets say your IP was: 63.23.45.100 (sorry if that is someones IP, leave him/her alone!🙂

You would have your administrator allow the block or Class C subnet of 63.23.45.*** into the firewall, depending on how big the ISP is and other stuff.

Whereas currently (or before, if you already lost your static IP), the firewall was only allowing 64.23.45.100 into the VPN.

Make sense? I am tired... night night and good luck!

 

[hoomza444]

yeah it makes sense. i guess that this is going to be more complicated than i thought. hehe, i will do some research and find out if i am always with the same block adn talk to some ppl at work to see if they can open the block. thanks!

 

[wlee]

You could also use a dynamic DNS service like DNS2GO or DYDNS. Then bind your VPN to a name address instead of IP. e.g., "myserveratwork.dns2go.com" I know the Symantec/Nexland VPN Routers have direct support for this built in.

DNS2GO

DYDNS

Symantec/Nexland VPN Routers

 

[lowtech1]

The authentication & communication is session specifics so there isn?t a need for static IP unless you are using things like IPsec to create a 24/7 live tunnel between private networks.
But there are dynamic universal PnP VPN are in the work....a few companies are already implementing this technology.
And their is also Mac address binding technique.....the firewall lookup a Mac address instead of IP for authentication...available in Linux 2.4 kernel.