[c-nsp] Any experience with DMVPN on ASR1K?

[Nasir Shaikh]

Hi,

Finally got the ASR1Ks delivered and configured but somehow DMVPN is not
working! I accepted the EULA for the IPSec license, it shows activated and I
have adjusted and copied the config from the 7206npe-g2 to the ASR1k. The
router accepts all the configuration but does not recognize a "sh dmvpn"or
"sh ip nhrp" command. Isakmp SAs are not being established.

 

Do I need to activate something else?

 

ASR1K#sh hard

 

Cisco IOS Software, IOS-XE Software (X86_64_LINUX_IOSD-UNIVERSALK9-M),
Version 15.2(2)S1, RELEASE SOFTWARE (fc1)

 

IOS XE Version: 03.06.01.S

System image file is "bootflash:asr1001-universalk9.03.06.01.S.152-2.S1.bin"

License Level: advipservices

License Type: EvalRightToUse

Next reload license Level: advipservices

 

cisco ASR1001 (1RU) processor with 1163448K/6147K bytes of memory.

 

Configuration register is 0x2102

 

 

ASR1K##sh license feature 

Feature name             Enforcement  Evaluation  Subscription   Enabled
RightToUse 

adventerprise            yes          yes         no             no
yes        

advipservices            yes          yes         no             yes
yes        

ipsec                    yes          yes         no             yes
yes        

 

ASR1K##sh dmvpn                        ^

 

% Invalid input detected at '^' marker.

 

 

-----Original Message-----
From: cisco-nsp-bounces at puck.nether.net
[mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of Andrew Clark
Sent: vrijdag 14 september 2012 18:26
To: cisco-nsp at puck.nether.net
Subject: Re: [c-nsp] Any experience with DMVPN on ASR1K?

 

Yes.  I have a pair of ASR1001s in a dual-hub dual-cloud setup serving

around 120 (and counting) 881s.  It should scale up to about 1.5k per hub,

hopefully.

So far it works fine, assuming the code is solid.  There is a crashing bug

in 151-3.S2, so my experience so far recommends at least 151-3.S3.

You may need to tweak your IPSEC anti-replay buffer size up from the

default of 64 as well, if you have queuing (due to QoS, etc.) occurring.

 

Andrew Clark

 

 

 

> 

> Message: 3

> Date: Fri, 14 Sep 2012 07:50:12 +0200

> From: "Nasir Shaikh" <nasir at nasirshaikh.com>

> To: <cisco-nsp at puck.nether.net>

> Subject: [c-nsp] Any experience with DMVPN on ASR1K?

> Message-ID: <C0EC838483EB4FAAAC1744BACC11539E at jedi35ba54c7c7>

> Content-Type: text/plain;       charset="us-ascii"

> 

> Hi guys,

> 

> 

> 

> We are planning to replace/upgrade our DMVPN hubs from 7206vxr npe-G2 with

> VAM2+ to ASR1Ks.

> 

> Does anyone have any experience with running DMVPN on the ASRs?

> 

> 

> 

> This is what we plan to order:

> 

> 

> 

> Cisco ASR1001 System,Crypto, 4 built-in GE, Dual P/S

> 

> Cisco ASR 1001 IOS XE UNIVERSAL

> 

> Cisco ASR 1000 Advanced IP Services License

> 

> IPSEC License for ASR1000 Series

> 

> Cisco ASR1001 4GB DRAM

> 

> 

> 

> Thanks

> 

> 

> 

> Nasir

> 

> 

> 

> 

> 

_______________________________________________

cisco-nsp mailing list  cisco-nsp at puck.nether.net

https://puck.nether.net/mailman/listinfo/cisco-nsp

archive at http://puck.nether.net/pipermail/cisco-nsp/