Thu Apr 07, 2011 7:08 am
IPsec, L2TP, PPTP, or GRE. Choose the appropriate one based on your requirements. GRE and L2TP (to a lesser degree) can encapsulate anything, but offer no authentication or encryption. PPTP offers weak encryption. IPsec offers strong encryption and authentication but cannot pass multicast or broadcast packets. To combine the best of both worlds at the cost of a lower MTU wrap GRE in IPsec. The wiki has manual sections for all those protocols, and configuration examples.
For the protocols that don't offer native support for dynamic endpoints you can use scheduled scripts in the router to rewrite policies to match newly acquired dynamic IPs. The wiki has many examples of that, too.