dmvpn

[R Manjunatha]

Hi,

I configured the DMVPN phase 3 for HUB and all spokes' routers. Is the data will encryption in DMVPN? or else we need to configure IPsec on top of that?

R74>en
R74#show crypto isa sa
IPv4 Crypto ISAKMP SA
dst src state conn-id status

IPv6 Crypto ISAKMP SA

R74#show crypto ipsec sa
No SAs found
R74#

[balaji.bandi · Accepted solution]

how is your configuration :

check below document for reference :

https://www.cisco.com/c/en/us/support/docs/security/dynamic-multipoint-vpn-dmvpn/211292-Configure-Phase-3-Hierarchical-DMVPN-wit.html

[MHM Cisco World]

this second post about the DMVPN, what issue here?
can I see the config ?

[R Manjunatha]

yes ..posted the configuration 

[MHM Cisco World]

this dmvpn without protection , are this traffic pass through internet, it not secure.

[Jose Suarez · Accepted solution]

Hello,
The link they sent earlier is quite clear and indicates how you should do to add security to your DMVPN tunnel

Summary:

crypto isakmp policy 1
encr aes 256
hash sha256
authentication pre-share
group 2

crypto isakmp key cisco123 address 0.0.0.0

crypto ipsec transform-set transform-dmvpn esp-aes 256 esp-sha-hmac
mode transport

crypto ipsec profile profile-dmvpn
set transform-set transform-dmvpn

interface Tunnelxx
tunnel protection ipsec profile profile-dmvpn

If it continues to fail, it would be convenient if you sent the config.

Regards