DMVPN Attribute DN

[YORKIE23]

Hello,

  I developed a DMVPN solution in my company's lab and all worked well.  I am now rolling it out to the production network and I am seeing an attribute I never encountered in the lab.  The Hub shows the connection as up with an attribute of DN.  I now the D= Dynamic and the N= NATed, but I don't understand it.  I checked and there is no NAT going on.  What may be the issue?  I have googled the attributes and have not found anything yet. 

[Rob Ingram]

Hi,
Perhaps in production the spokes on the internet are behind a NAT device? It would only use NAT if it detected. If you enter the command "show dmvpn detail" check the SA local and remote and see if the port is 4500 < NAT or 500 < no nat.

Are you using IKEv2? If you run "show crypto ikev2 sa detailed" - check to see if see if NAT-T is detected or not.

HTH