"Prior to Cisco IOS Release 12.3(6) and 12.3(7)T, for such spoke routers to participate in a DMVPN network, they had to use IPSec tunnel mode. " is stated in the following doc:http://cco/en/US/products/sw/iosswrel/ps1839/products_feature_guide09186a0...