said by Manta: I'd prefer not to involve DNS because the ISP in question is the kind that employ mystic diviners to discern the most inopportune time to change the IP address
said by Manta:Part of the problem is that I have no way of telling if or how often it changes.
Then I'm kinda out of ideas on how to help you -- If not by DNS, then by IP is the only other way to do this,
and vice versa. IIRC don't recall any PIX / ASA logging to determine if the IP address changes or not. You COULD store
device syslogs offdevice, and see if you notice a pattern, either how constant the public IP address changes.
A simple
deny any any log
Should do this.
said by Manta:Is there any mileage in using two of the spare PIX interfaces to loopback?
As cramer
said, PIX / ASA doesn't support loopback addresses. Need an ISR to do that. But even if
you get an ISR, you'd be back to the "connect via DNS or IP address" dilemma again.
Regards