DMVPN NHRP

[Robert Plunkett]

Good afternoon,

I have a Cisco 9300 switch running iOS cat9k_iosxe.17.15.01.SPA.bin, does anyone know if it support NHRP configuration?

[balaji.bandi]

I think answer is NO - this only support GRE, may be you need to look for Router which can support these features.

If you looking tunnel look at the latest configuration guide :

https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst9300/software/release/17-15/configuration_guide/sec/b_1715_sec_9300_cg/configuring_ipsec.html?bookSearch=true

[Flavio Miranda]

@Robert Plunkett 

 It does support but with restriction as you can see here.

Restrictions About Next Hop Resolution Protocol

• On Cisco Catalyst 9300 Series Switches, hardware assisted IPsec is not supported. Use VXLAN instead.

• On Cisco Catalyst 9300X Series Switches, Dynamic Multipoint Virtual Private Network (DMVPN) or NHRP with IPsec and FlexVPN are not supported. Use VXLAN or IPsec static virtual tunnel interface (SVTI) instead.

IP Addressing Services Configuration Guide, Cisco IOS XE 17.15.x (Catalyst 9300 Switches) - Configuring NHRP [Cisco Catalyst 9300 Series Switches] - Cisco

[Robert Plunkett]

I have a cisco 9300 with iOS version 17,09,04a the support IP NHRP. I was curious about the other version since it is the latest version.

[Flavio Miranda]

did you want to confirm if the next versions will support NHRP?

[Robert Plunkett]

What is the next version?