EIGRP authentication in named mode breaks vrf aware DMVPN

[rys]

Hi Friends,

I build a vrf aware DMVPN, and advertise the GRE ip in EIGRP named mode. All works well till I enable authentication in af-interface tunnel 0.

Once I enable the authentication "hmac-sha256'', it breaks the crypto and DMVPN.

Any advice on whats the solution to bring the crypto and DMVPN up with EIGRP authentication in named mode ?

Regards

rYs

[Ruben Cocheno]

 HI,

I worked with DMVPN vrf aware using authentication and no issues so far. I was using code IOS 15.x

Can you share your config from both ends?

[rys]

Hi,

I attached the config I did, till I apply the authentication in EIGRP,

once I applied the below config, the dmvpn will break

""router eigrp EIGRP

add ipv4 autonom 45678

af-interface tu0

authentication mode hmac-sha256 KEY""

See any more configs I need to add in the crypto to make the dmvpn  up.

Thanks

[Ruben Cocheno]

Hi,

I don´t see any issue with the config, you need have authentication on both sides (hub/spoke) so apply the config and bounce the tunel0 interface.

router eigrp EIGRP

add ipv4 autonom 45678

af-interface tu0

authentication mode hmac-sha256 KEY