[c-nsp] DMVPN -- GRE over IPsec
Matthew Melbourne
matt at melbourne.org.uk
Fri Jul 29 22:11:07 EDT 2011
Can you post your hub and spoke DMVPN configurations? Is this definitely a
crypto issue?
If you remove the 'tunnel protection ipsec profile' configuration, does your
DMVPN work as expected?
Are you running recommended IOSes for DMVPN?
Cheers,
Matt
-----Original Message-----
Message: 5
Date: Fri, 29 Jul 2011 13:49:35 -0700
From: Scott Voll <svoll.voip at gmail.com>
To: cisco-nsp at puck.nether.net
Subject: [c-nsp] DMVPN -- GRE over IPsec
Message-ID:
<CAHgd+38Bnv+5vgQnKHtx0vVyELLciXWXV0aEHzxixuRkDp0Qww at mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1
so I'm lab'ing DMVPN. I have a 3845 and a 2821 running advipservices.
I have setup the two routers just like this:
http://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_examp
le09186a008014bcd7.shtml
I am having issues with the traffic being encrypted.
I show the IPSec tunnel up and the GRE Tunnel interfaces up, but per the
IPSEC SA it shows NO packets encrypted.
Thoughts? ideas?
TIA
Scott
*****
More information about the cisco-nsp
mailing list