DMVPN without IPSec Encryption?

[simonstoll]

Hi

I need point-to-multipoint tunnels for a virtual overlay. Encryption is not necessary as the transport network is a corporate network and no internet. I also don't need the ability of direct spoke to spoke communication. At the moment I'm working with GRE point-to-point links, but the config on the HUB starts to look a bit crowded, so I would prefer a point to multipoint technology.

Any help is welcome, and a will be graded.

Best regards

Simon

[purohit_810]

Hi Simon,

Here is the great document to configure DMVPN.

http://www.cisco.com/application/pdf/en/us/guest/products/ps6658/c1161/cdccont_0900aecd80313c97.pdf

Regards,

Dharmesh Purohit

[simonstoll]

Hi Dharmesh

Thanks, but the question is if that also works without IPSec? I don't want to add this unnecessary processing burden on the HUB router.

Simon

[paolo bevilacqua · Accepted solution]

Yes, in fact it's enough to not configure "tunnel protection" under the tunnel interface and voila, crypto-less DMVPN.

Hope this helps, please rate post if it does!

[kerek]

Hi,

I think the DMVPN can be used without encryption. Take a look to this link: http://www.cisco.com/application/pdf/en/us/guest/products/ps6658/c1161/cdccont_0900aecd80313c9d.pdf

Hope it helps,

Krisztian

[simonstoll]

Hi

Thank you all for your help, I will now go to my lab and try it out. And thank you for this fast replies, I didn't even hade time to walk to the coffee machine!

I will grade you when it works :-)

Best regards

Simon

[paolo bevilacqua]

It will work.

Just don't do like us today spending a lot of time because the router was learning the tunnel destination address via routing inside the tunnel. P-t-p tunnel will warn you about, but a multipoint will not!

thanks for the nice rating and good luck!

[simonstoll]

It worked!!!

Now I have to change all my tunnels to GRE/mGRE with NHRP. Thank you so much, you saved my day. It was crazy how fast I got an answer on this forum today.

Simon