Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Community Member

Tunnel Interface Goes Down When Applying Encryption

I have a router configured a spoke connected to two Hubs one is HO and the other is DR, connectivity to HO is working fine, but connectivity to DR there is an issue when applying the encryption, GRE without Encryption I have no issue. Attach are the configuration files. Also you will find logging output after enabling the debug.

2 REPLIES
Silver

Reduce the mtu size on spoke

Reduce the mtu size on spoke to 1400 .

int tunnel0

ip mtu 1400

As GRE over ipsec added additional 52 byte overhead.

HTH

 

"Please rate helpful posts"


 

Dear AbuAhmed11,here is the

Dear AbuAhmed11,

here is the solution, do these things and plz contact me on inform.kazim@yahoo.com, now i need your help.

 REMEMBER :the spoke is working with HO but the mode of spoke "tunnel mode gre multipoint"  it should be static ip like tunnel 2

Hub

on hub you have two mistakes: 1:key 2:no have route for spoke

crypto isakmp key DMVPN2 address 0.0.0.0 0.0.0.0

ip route 192.168.209.54 255.255.255.255 fa 1/0 

 

spoke

int tun 2

no keep live 5 3

keeplive only for point-to-point tunnel

 

HTH

 

"please rate me for helpful post"

53
Views
0
Helpful
2
Replies
CreatePlease to create content