cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2738
Views
0
Helpful
4
Replies

DMVPN and Static IPsec Tunnels on same Hub Router with Same ISP Interface

pkehoe
Level 1
Level 1

Is it possible to configure both DMVPN and Static IPsec tunnels (crypto map/acl) on same router?  On the same internet interface (same ip address)?

4 Replies 4

Eugene Khabarov
Level 7
Level 7

Yes, it is possible. But you need to specify "shared" keyword for tunnel protection on tunnel interface.

___

HTH. Please rate this post if it was helpful. If this solves your problem, please mark this post as "Correct Answer"

Hello,

Shared is not the right keyword to use. It's used when you terminate [ for example] 2 dmvpn networks sharing the same source IP address

http://www.cisco.com/en/US/partner/docs/ios/sec_secure_connectivity/configuration/guide/share_ipsec_w_tun_protect.html#wp1081269

In your case, having static tunnels + DMVPN should not be a problem. The only thing to check is to make sure your static MAP does not protect GRE.

Cheers,

Olivier

Could you please share me the sample configuration file.

pkehoe
Level 1
Level 1

this can be done and works fine.