Securing DMVPN?

[s-pirrello]

Does anyone know any best practices for securing a DMVPN network? Anything beyond using PKI instead of shared keys?

[owillins · Accepted solution]

You can use wildcard PSK instead of PKI.

Use Digital Certificates/Public Key Infrastructure (PKI) for scalable tunnel authentication.