Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
After upgrading our DMVPN hub from Cisco 2921 to Cisco 4431, spoke that are Cisco IR1101 stopped establishing tunnel back to the Cisco 4431 hub. Spoke that are Cisco 1921, Cisco 2911, Cisco 2921, and IR829 are all able to establish tunnel back to the...
Hi MHM,Thank you for your help! Ever since we implemented our cellular backup, since maybe around 2015, our vendor requires us to source NAT using the static IP of our cellular interface. If it was not NAT'ed connection would bounce up and down. Afte...
I tried to change the lifetime to 86400 but still appear 120 from the hub. I did 120 both hub and spoke and got it to 120 both, but still would not establish connection. Spoke appear to not recognize Encr, DH that is configured but they are the same ...
Hi MHM,Thank you for helping with this. Please find below the results of the debug crypto ikev2 packet and error.Aug 27 2024 07:35:45.054 PDT: IKEv2-ERROR:: Packet is a retransmissionAug 27 2024 07:35:46.773 PDT: IKEv2-ERROR:: Packet is a retransmiss...
Here is what I captured from the hub using debug crypto ikev2. I do not use isakmp. It looks like it failed to receive the auth, hence timer expired, but did not get anything from the spoke using the same debug. From spoke "show ip nhrp nhs detail" I...
