About akorolyov2

akorolyov2 · 03-13-2014

Greetings everyone, I have 2911-SEC/K9 router with IOS 151-4.M7. I'm using IPSec + DMVPN. settings are the following:crypto isakmp policy 20 encr aes 256 group 24crypto isakmp invalid-spi-recoverycrypto isakmp keepalive 10crypto ipsec transform-set *...

akorolyov2 · 03-13-2014

Some more information on this topic:IOS 151-4.M7. ISR G2 routerscrypto ipsec transform-set *set-name* esp-aes 256 esp-sha256-hmac still uses Software encryptioncrypto ipsec transform-set *set-name* esp-aes 256 esp-sha-hmac uses Onboard VPN module

akorolyov2 · 03-13-2014

Thanks Marcin, seems you are right:3945E (using different profiles)conn id: 5235, flow_id: Onboard VPN:3235, sibling_flags 80000046, crypto map: map-name-1conn id: 629, flow_id: SW:629, sibling_flags 80000046, crypto map: crypto map: map-name-2 2911,...

Member Since	‎03-13-2014 12:38 AM
Date Last Visited	‎08-18-2017 04:01 AM
Posts	3
Total Helpful Votes Received	5

User Statistics

User Activity

ISR G2 IPSec strange behavior

Thank you for your help, I'll

Thanks Marcin, seems you are