DMVPN without IPSec Encryption?

Answered Question
Jul 23rd, 2007

Hi

I need point-to-multipoint tunnels for a virtual overlay. Encryption is not necessary as the transport network is a corporate network and no internet. I also don't need the ability of direct spoke to spoke communication. At the moment I'm working with GRE point-to-point links, but the config on the HUB starts to look a bit crowded, so I would prefer a point to multipoint technology.

Any help is welcome, and a will be graded.

Best regards

Simon

I have this problem too.
0 votes
Correct Answer by Paolo Bevilacqua about 9 years 4 months ago

Yes, in fact it's enough to not configure "tunnel protection" under the tunnel interface and voila, crypto-less DMVPN.

Hope this helps, please rate post if it does!

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 4.8 (3 ratings)
Loading.
simonstoll Mon, 07/23/2007 - 04:41

Hi Dharmesh

Thanks, but the question is if that also works without IPSec? I don't want to add this unnecessary processing burden on the HUB router.

Simon

Correct Answer
Paolo Bevilacqua Mon, 07/23/2007 - 04:47

Yes, in fact it's enough to not configure "tunnel protection" under the tunnel interface and voila, crypto-less DMVPN.

Hope this helps, please rate post if it does!

simonstoll Mon, 07/23/2007 - 04:49

Hi

Thank you all for your help, I will now go to my lab and try it out. And thank you for this fast replies, I didn't even hade time to walk to the coffee machine!

I will grade you when it works :-)

Best regards

Simon

Paolo Bevilacqua Mon, 07/23/2007 - 08:34

It will work.

Just don't do like us today spending a lot of time because the router was learning the tunnel destination address via routing inside the tunnel. P-t-p tunnel will warn you about, but a multipoint will not!

thanks for the nice rating and good luck!

simonstoll Mon, 07/23/2007 - 11:42

It worked!!!

Now I have to change all my tunnels to GRE/mGRE with NHRP. Thank you so much, you saved my day. It was crazy how fast I got an answer on this forum today.

Simon

Actions

This Discussion