Try this, solve me: 1) Shutdown tunnels2) Check ikev2 sa deleted (or clear: clear crypto ikev2 sa remote x.x.x.x )3) Next (spoke and hub):#conf t(config)#crypto ikev2 fragmentation(config)#exit PS Using fragmentation creates 'Denial of service attack...

Sorry, wrong branch. Please delete/ignore this. 

For resolve need enable dhcp service: router(config)#service dhcp