[c-nsp] DMVPN -- GRE over IPsec

Matthew Melbourne matt at melbourne.org.uk
Fri Jul 29 22:11:07 EDT 2011


Can you post your hub and spoke DMVPN configurations? Is this definitely a
crypto issue? 

If you remove the 'tunnel protection ipsec profile' configuration, does your
DMVPN work as expected?

Are you running recommended IOSes for DMVPN?

Cheers,

Matt

-----Original Message-----
Message: 5
Date: Fri, 29 Jul 2011 13:49:35 -0700
From: Scott Voll <svoll.voip at gmail.com>
To: cisco-nsp at puck.nether.net
Subject: [c-nsp] DMVPN -- GRE over IPsec
Message-ID:
	<CAHgd+38Bnv+5vgQnKHtx0vVyELLciXWXV0aEHzxixuRkDp0Qww at mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1

so I'm lab'ing DMVPN.  I have a 3845 and a 2821 running advipservices.

I have setup the two routers just like this:
http://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_examp
le09186a008014bcd7.shtml

I am having issues with the traffic being encrypted.

I show the IPSec tunnel up and the GRE Tunnel interfaces up, but per the
IPSEC SA it shows NO packets encrypted.

Thoughts?  ideas?

TIA

Scott
*****



More information about the cisco-nsp mailing list