Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

DMVPN --- Can a SpokeRouter be behind another Spoke?

Can I configure a router of satellite site of a remote site that has a point-to-point connection with it, to join to the main DMVPN domain?

1 REPLY
Silver

Re: DMVPN --- Can a SpokeRouter be behind another Spoke?

Each spoke has a permanent IPSec tunnel to the hub. Each spoke registers as a client of the NHRP server (the hub). IPSec performance is aggregated at the hub; the traffic destined from hosts behind Spoke 1 to hosts behind Spoke 2 will always berouted via the hub router. When a spoke needs to send a packet to a destination (private) subnet on another spoke, it queries the NHRP server for the real(outside) address of the destination (target) spoke. All spoke-to-spoke packets are decrypted and reencrypted at the hub. The IPSec encryption tunnel must be initiated by the spoke routers.

104
Views
0
Helpful
1
Replies