Hello, Native IPSec in IOS cannot pass multicast traffic, and I think is the same withthe 3000. If you need to send mcast encrypted, will either have to use GRE+IPSec tunnels, or the new IOS IPSec Virtual Interfaces - which can pass mcast traffic.-...
The issue here seems to be that the ADSL is doing NAT for the Remote's LAN ip's, so you have problem for hub to spoke initiated traffic (from ur original Q). This will remain an issue no matter what VPN technology you use (DMVPN,pt-pt GRE, Site-Site...
Hello, If you think the config is fine, the tunnel is up, end-end routing is fine; but there is packet loss in one direction for one application - in most cases this could be fragmentation issues. Try a ping with different packet sizes to see if th...
Hi Siong, When using crymap on dot1q subintf, there is no need to apply crymap on the physical intf. You can apply different crymaps on different subintf's.int g0/1no ip addrint g0/1.100encap dot1q 100ip addr 100.1.1.1cry map cmap1int g0/1.200encap...
Hello, I wouldnt think expanding the window size will have any significant impact on resources. The only resource impacted is memory, since it'll have to remember a larger range of sequence numbers; but I dont think this is a large impact. You cn g...
