Customer has 2811 at headend and 871 in the 4 branches. Since the headend is the only fixed address to the internet we decided to deploy dmvpn. Was fine until he ordered a high speed service from his carrier
direct from head end to branch using a public nat address
gre no ipsec 1.4
ipsec no gre 1.4
gre/ipsec no dmvpn 1.4
I don't think dmvpn is scalable on the 2811 because I notice when dmvpn is involved and a large tranfer is happening cpu pegs constantly at 99% I am reluctant to tell him to get the vpn module for the 2811.
Thoughts again thx