Hello Guys,   I have a design question. I'm using a Cisco ASR1K as my Internet facing DMVPN Hub router. I know I should place a firewall in front of it. But why not just use built-in ACL to open necessary ports (i.e. UDP 500, 4500 and ESP) on the por...

Can someone tell me what's the best way to block the traffic between spokes? I'm using DMVPN phase 1 + EIGRP with stub design. I send a summary address 0.0.0.0/0 down to all sites. All sites are able to reach other sites via Hub, i want to block thos...