GETVPN - Two Groups in the same GM

[MachadoGB]

Hello,

I have a question about configuring two GETVPN groups in the same Group Member device.

Scenario: CE router running BGP connected to PE router on MPLS provider. CE router is running GETVPN on group 123. User asking to create a separate VPN environment to encrypt traffic originated from one /32 (loopback) interface on each CE router to a router in the Data Center running GETVPN on group 123.

Idea: I am thiking on creating a second group on each CE (GM) with number 345 using the same ISAKMP SA.

Questions:

Do I Need to change the IPSec Keys (KEK / TEK) for that?

Is it possible? Is there a document or configuration sample that I can use?

Thanks.

[Collin Clark]

I've attached the design guide for GETVPN. It covers what you are looking to do.

Hope it helps.

[MachadoGB]

Hi Collin,

I do have that document but it is really missing information when it comes to multiple groups. I guess Cisco has to review that.

I was able to configure and test the multiple group. It works fine.

So I appreciate your help.

Thanks.