Hi,
My problm :
- I have a HUB configured with a transform-set mode tunnel
- A spoke behind NAT device.
how could i integrate the spoke into the dmvpn ? # without changing the HUB configuration
Hi, I have a problm with my DMVPN architecture : - The HUBs are config with transform-set mode tunnel.- Spokes behinde NAT device.DMVPNHow can I fix this problem without changing the hub configuration? Thanks !
Thanks The connectivity is ok. but the problm is that my HUB registers the private address (and not the Spoke Public IP) on NHRP mapping entries. I think the problm is in the transfert-set mode https://www.cisco.com/en/US/docs/ios-xml/ios/sec_conn...
NHRP could only "see" and use the private IP address of the spoke for its mapping entries. Effective with the NAT-Transparency Aware DMVPN enhancement, NHRP can now learn and use the NAT public address for its mappings as long as IPsec transport mode...
the official doc of cisco says:Prerequisites for Dynamic Multipoint VPN (DMVPN) Before a multipoint GRE (mGRE) and IPsec tunnel can be established, you must define an Internet KeyExchange (IKE) policy by using the crypto isakmp policy command. For ...
the problm is taht my HUBs are configured with transform-set mode tunnel and i have a spoke behid a NAT. spoke config : crypto isakmp policy 1encr aesauthentication pre-sharegroup 5crypto isakmp key xxxxxxxxxxx address 0.0.0.0crypto isakmp invalid-...
