hub and spoke vpn between ios routers with dynamic ip spokes

Unanswered Question
Feb 21st, 2010
User Badges:


we are looking at a hub-spoke ipsec implementation were the spokes will be issued with dynamic ips. The hub and spokes will be IOS routers. If we use a wildcard pre-shared key can the spoke routers be configured as xauth clients? What other options would be available to enhance the security in this scenario?


  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Lei Tian Sun, 02/21/2010 - 18:16
User Badges:
  • Cisco Employee,

Hi Danke,

Both EZVPN and DMVPN can support dynamic IP on spoke. Check the configuration example

I prefer DMVPN, because it supports routing, spoke to spoke communication, multicast.


Lei Tian


This Discussion