Which statement is true when implementing a router with a dynamic public IP address in a crypto map based site-to-site VPN?