A Dynamic Virtual Private Network (DVPN) includes Virtual Private Network (VPN) Address Management (VAM) clients and a VAM server, and each VAM client includes a private gateway address, public address and subnet of the VAM client that are provided to the VAM server when registering in the VAM server. When a source VAM client receives a packet that is sent by a subnet of the source VAM client to a subnet of a destination VAM client, the source VAM client requests the VAM server to provide a next-hop address of subnet, a private gateway address, a public address and subnet of the destination VAM client to establish a DVPN tunnel between the source VAM client and the destination VAM client.