DMVPN phase 3 with ipsec-

[kasun]

 I understand the first packet traverses the HUB > Destination spoke. But would the response packet still traverse the Hub > source Spoke, or is it gonna come back via the IPsec tunnel which the source -spoke created upon receiving NHRP shortcut ( if that's the case the IPsec tunnel built by source side is sufficient for full spoke - to -spoke communication)? Please clarify

thank you,

Kasun

[Giuseppe Larosa · Accepted solution]

Hello @kasun ,

it takes time to setup the Spoke to Spoke tunnel so likely the first response packet is sent via the HUB but as soon as the direct Spoke to Spoke tunnel is active it will be used.

Hope to help

Giuseppe