Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 
Community Member

DMVPN Issues

I have some past experience with point to point GRE tunnels (100+ locations with a single hub). This is my first time with DMVPN and Im having some odd issues.


2 Hub locations (3825's)

6-12mbps (can be scaled up if needed)

114 Remote locations (2801's)

768kbps SDSL or full T1 per site

All sites on the AT&T backbone.

Tunnels are up and running from the remote sites to the main hubs in a lab environment. The problems are as follows:

1. While each remote router will connect to both hubs, it will only keep a security association with 1 router. The tunnels continue to work and the dynamic tunnels come up and down as needed for site to site communications, but its very odd for not to see SA's. Is this normal? If so, thats fine but I would like to make sure I'm not missing something.

2. What would be the best way to connect the 2 disparate hubs? I can drop in a 2801 and bring up a point to point GRE tunnel but I would prefer to have that for failover and run the main connection off the 3825's.

I have attached (scrubbed) configs. The remote1 config would be for an SDSL site.


Re: DMVPN Issues

I would not bother as long as the tunnels are dynamically built and removed.

Here is an excellent Cisco documentation on DMVPN concepts and also explains the dual-Hub scenario.

Community Member

Re: DMVPN Issues


CreatePlease to create content