IP Multicast(PIM) in DMVPN(only HUB-Spoke) environment

[Akhtar Samo]

Is it recommended to run IP Multicast(PIM) in DMVPN(only HUB-Spoke) environment ?

DMVPN HUBs have following specs.

1. WS-C6506-E

2. WS-SUP32-GE-3B

3. IOS 12.2.33(SXI6)

4. 7600-SSC-400 / SPA-IPSEC-2G (crypto connect mode)

If yes can you please suggest some recommended design guide specifying the configurations and pre-requisites.

If its not recommended then what are the other options ?

Regards,

Akhtar

[Marwan ALshawi]

based on cisco's link bellow:

DMVPN Hub or Spoke Supervisor Engine

•Only a Supervisor Engine 720 can be used as a DMVPN hub or spoke. A Supervisor Engine 2 cannot be used.

Encrypted Multicast with GRE

•Encrypted Multicast with GRE is not supported on the Cisco 6500 nor on the Cisco 7600.

http://www.cisco.com/en/US/docs/ios/12_2t/12_2t13/feature/guide/ftgreips.html#wp1069602

which mean syou hardware is not well suited for this solution

i would say if you can have routers to be the front end for DMVPN infront  of the 6500 or 7600 you will be in better situation interms of features and capabilities of DMVPN implimentations

hope this help

if helpful rate

[Akhtar Samo]

I think this might be true for the older IOS, since the doc link is old.

The Design guides has the new stuff for IPmc deployment in DMVPN/IPsec scenarios.

http://www.cisco.com/en/US/docs/solutions/Enterprise/WAN_and_MAN/V3PNIPmc.html#wp336283

http://www.cisco.com/en/US/docs/solutions/Enterprise/WAN_and_MAN/V3PNIPmc.html#wp337708

http://www.cisco.com/en/US/docs/solutions/Enterprise/WAN_and_MAN/V3PNIPmc.html#wp337478

FYI, on the following link it refers that direct IPmc encap into IPsec is not supported that is why GRE is used.

http://www.cisco.com/en/US/docs/solutions/Enterprise/WAN_and_MAN/V3PNIPmc.html#wp349808

Regards,

Akhtar