CSR1000V as GETVPN key Server

[Tim J]

Hi,

I found a Cisco recommendation  dated March 2015 that suggests not to run a GETVPN GM or KS on a CSR1000V. The GM I can understand, the KS less so. Does anyone know if this is still the current position ?  Many thanks.

[Rahul Govindan · Accepted solution]

I do not think there is an updated Design guide for getvpn since the March 2015 one. Any CVD that involves getvpn has used only ASR's and ISR's routers.
https://www.cisco.com/c/dam/en/us/solutions/design-zone/cisco-validated-profiles/CVP-Routing-Private-WAN-GETVPN-Apr2016.pdf

I would recommend reaching out to your Cisco Account Manager or Partner to get that question floated out to Cisco directly. A quick search with GETVPN and CSR does show that there were issues with the platform from a while back:
https://supportforums.cisco.com/t5/wan-routing-and-switching/csr1000v-with-getvpn-traffic-drops/td-p/2968035