Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Quick question: here is the scenario: Site-to-site VPN between 2 routers. Routers separated by public Internet. RFC 1918 addresses on source and destination networks. Question: If in transport mode, IPSec does not encrypt the original IP header, but ...
Quick question:here is the scenario:Site-to-site VPN between 2 routers.Routers separated by public Internet.RFC 1918 addresses on source and destination networks.Question:If in transport mode, IPSec does not encrypt the original IP header, but instea...
As I underatand it, the only qualitative difference between HSRP and GLBP is that GLBP offers load balancing by allowing all routers in a GLBP group to forward traffic, unlike HSRP, where you have an active router and the other is in standy.So, I saw...
A client complained that when their hub router died, all the spokes in their DMVPN hub and spoke topology all lost their tunnels.The spokes are supposed to be leveraging NHRP to build a database of other spokes' public interface addresses so that the...
Boy, I never thought I would be asking a question again about the behavior of an ACL, but here goes...Here is the scenario:There is a L3 core switch with a management vlan interface configured on it. The address of the management subnet is 10.120.255...
OK, Dong:So, if I understand you correctly, what you're saying is that the only way to use IPSec transport mode with private addresses is to NAT them to public addresses --- which makes perfect sense and is something I would have done. I was wonderin...
Thanks, guys.I was wondering if there was some real qualititative difference in terms of operation that would make somebody do something as counter intuitive as configuring GLBP when doing IOS-based SLB, which is a no no. Thanks
MZ:i could totally dig it. Thats what i was thinking.I was just wondering if there was a requirement when deploying a dual hub DMVPN architecture that makes it necessary to have the 2 hubs on the same LAN segment. I guess the answer is simply "no."Bu...
