cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
433
Views
2
Helpful
5
Replies

Benefits of IPsec VTI

Raminkn20
Level 1
Level 1

Hi.

I have a question about IPSec VTI dynamic.

Im studying about that these days, but I don’t know why we must utilize that when we have DMVPN technology? What’s the advantages of that against DMVPN?

1 Accepted Solution

Accepted Solutions

without DMVPN 
you config  ONE tunnel for each site 
with DMVPN (phaseII and phaseIII)
you config ONE tunnel for all site 
How it work? the DMVPN use hub and spoke 
spoke send NHRP to hub and this make hub build tunnel for each now spoke even so we config one tunnel only. 

MHM


View solution in original post

5 Replies 5

without DMVPN 
you config  ONE tunnel for each site 
with DMVPN (phaseII and phaseIII)
you config ONE tunnel for all site 
How it work? the DMVPN use hub and spoke 
spoke send NHRP to hub and this make hub build tunnel for each now spoke even so we config one tunnel only. 

MHM


Thanks @MHM Cisco World 

so we can say when we don't need hub and spoke topology, we must use this technology? and It's almost automatic gre+ipsec tunnels. am I right?

if we have hub and spoke topology we can use DMVPN

and It's almost automatic gre+ipsec tunnels. am I right? Yes when we config ONE tunnel in spoke we specify the Hub and hub build tunnel between Spoke automatic 
MHM

Thank you @MHM Cisco World 

you are so welcome 
MHM