Anti-replay window size

[Ruterford]

Hello,
We would like to increase the anti-replay window size on our ISR routers connected to ASR using DMVPN. On ISR I can use up to 1024, but ASR only limited to 512.
I am wondering if I can configure two different window sizes on ISRs - 1024 and ASR- 512, connected to each other via DMVPN, with no implications/problems. (I believe 512 should be enough for ASR side but ISR would need more).

Thanks!

[Marcin Latosiewicz · Accepted solution]

Yes you can have separate anit-replay windows sizes - the check is local and only done in inbound direction.

Now what you might want to remember is that enabling this feature will not imply existing connections will start using the new windows straight away.

[Ruterford]

Thanks Marcin,

The SA will need to re-establish for anti-replay to kick in.