DMVPN Design with all Spokes behind the same PAT IP?

Unanswered Question
Apr 6th, 2010

Hi guys,

recently i set up  a dmvpn installation with a few spokes.

Unfortunately we found out that all spokes are within one ISPs Network and the ISP does PAT with one Outside Global IP Address

for all Spokes. I know that this scenario is unsupported by DMVPN, but does anybody know a workaround for this issue?

We are using 2811 as Hubs and as Spokes with 12.4T(20)

Your Help is very much appreciated.



I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Federico Coto F... Tue, 04/06/2010 - 13:13


I don't see how to get this setup working because the spokes cannot be differentiated from each other, since they will use the same global PAT IP.

Why would you have this setup like this? Can you assign an independent IP to each spoke so that you can configure DMVPN properly?


aroehlich Tue, 04/06/2010 - 23:40

Hi Federico,

the problem is that the provider where all Spokes are located does use a proxy per default.

So all Spokes do have the same external IP Address. I have to talk to the provider if it's

possible to have unique external Addresses per Spoke.

Thanks for your Help.




This Discussion