03-09-2009 07:17 AM - edited 03-04-2019 03:51 AM
Can anyone comment on this configuration? We usually run all of our VOIP sites over our MPLS links. We are now considering running VOIP with a DMVPN solution. Comments? Has anyone deployed this? If so, what was your experience?
03-09-2009 09:58 AM
I've done VoIP across VPN, although not using DMVPN (don't see DMVPN as an issue itself).
Unlike MPLS which often supports some level of QoS, with VPNs you're often only able to control QoS into the tunnel(s) or physical interface egress. This leaves as an open issue QoS further along the path, especially the last WAN link.
If you run DMVPN as a pure hub topology, insure bandwidth between hub and spoke isn't oversubscribed, shape hub to spoke bandwidth to match spoke's bandwidth, don't share WAN links with other non-VPN traffic, and prioritize VoIP then resulting performance is often, although not guaranteed, as effective as MPLS.
BTW: Besides VoIP, I've seen VPN often work as well, if not better, for other traffic too. On the plus side, you can often implement better QoS than provided by MPLS vendor. On the negative side, no bandwidth or QoS guarantees across the WAN.
03-15-2009 12:05 PM
We use DMVPN over the Internet and run VoIP through it.
Upload bandwidth on your ADSL/cable links is critical, as is calculating the call overhead of crypto, gre, etc to find the actual bandwidth of a VoIP call.
We do DMVPN to build a tunnel and use GETVPN for the actual encryption over the Internet. GETVPN helps with voice issues because there is no tunnel negotiation/setup time for IKE and IPSec when negotiating spoke-to-spoke tunnels
take a look at the per-tunnel QoS features... NHRP groups in 12.4(22)T. This helps with your shaping ber spoke from the headend. We do traffic shaping on the physical interface to the upload speed, and we don't really have that many calls and traffic spoke-toi-spoke where QoS on dynamic spoke-to-spoke tunnels is an issue.
05-12-2009 08:48 AM
hmm.. dmvpn with getvpn
is it possible you can email me a sample config?
that would be great thank you
05-12-2009 09:12 AM
Yes can you post a config please?
05-12-2009 09:20 AM
05-12-2009 10:05 AM
wow interesting. hmm, any documents you may have or links to explain this in more detail. I have a request from the client that uses DMVPN about securing it using get vpn technology. I have not done setup like this before, and you example config is pretty good.
thank you
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide