[c-nsp] Any experience with DMVPN on ASR1K?

[Andrew Clark]

Yes.  I have a pair of ASR1001s in a dual-hub dual-cloud setup serving
around 120 (and counting) 881s.  It should scale up to about 1.5k per hub,
hopefully.
So far it works fine, assuming the code is solid.  There is a crashing bug
in 151-3.S2, so my experience so far recommends at least 151-3.S3.
You may need to tweak your IPSEC anti-replay buffer size up from the
default of 64 as well, if you have queuing (due to QoS, etc.) occurring.

Andrew Clark



>
> Message: 3
> Date: Fri, 14 Sep 2012 07:50:12 +0200
> From: "Nasir Shaikh" <nasir at nasirshaikh.com>
> To: <cisco-nsp at puck.nether.net>
> Subject: [c-nsp] Any experience with DMVPN on ASR1K?
> Message-ID: <C0EC838483EB4FAAAC1744BACC11539E at jedi35ba54c7c7>
> Content-Type: text/plain;       charset="us-ascii"
>
> Hi guys,
>
>
>
> We are planning to replace/upgrade our DMVPN hubs from 7206vxr npe-G2 with
> VAM2+ to ASR1Ks.
>
> Does anyone have any experience with running DMVPN on the ASRs?
>
>
>
> This is what we plan to order:
>
>
>
> Cisco ASR1001 System,Crypto, 4 built-in GE, Dual P/S
>
> Cisco ASR 1001 IOS XE UNIVERSAL
>
> Cisco ASR 1000 Advanced IP Services License
>
> IPSEC License for ASR1000 Series
>
> Cisco ASR1001 4GB DRAM
>
>
>
> Thanks
>
>
>
> Nasir
>
>
>
>
>