The "show crypto gdoi ks policy" command shows one KEK and two TEK policy. The TEK policies have different SPI number with same policy details.can any one explain how this works.

can anyone explain the configuration of the cluster in DMVPN, what are all the configuration we have to done in both Hub and Spoke routers, how many clusters can be configured in a single router and can a router be part of the multiple cluster group.

Hi,can anyone please tell me about the TEK and KEK in GETVPN.I know that the TEK is the IPSec policies that used to protect the traffice between the GM.Whether KEK is generated by KS or we need to configure any specific config in the KS, and how can ...