GET VPN over the public internet

[tomek0001]

Hello,

I've started reading about GET VPN. Most documents talk about how this solution is not recommended over the public internet. But is it possible? Would it be possible to use GET and NHRP somehow? Does any one have any experience with such a configuration?

Thanks

[andrew.prince]

GET is a new technology - to be honest I would wait a while until all the bugs have been fixed.

NHRP is also still in it's infancy in my opionion, on the few times I have implemented this I have had issues - so I tend to stay away from it.

JMPTW.

[auraza]

Yes it will work. Please take a look at the example here:

http://www.cisco.com/en/US/prod/collateral/iosswrel/ps6537/ps6586/ps6660/ps6811/prod_white_paper0900aecd804c363f.html

[tomek0001]

Thank you. That is exactly what I was looking for. One question, the document say:

-GDOI based DMVPN spokes behind Network Address Translation (NAT) are NOT supported for spoke to hub or spoke to spoke tunnel. The support may be available in later GDOI_DMVPN phases.

Would you know if that's already supported?

thank you,

Tom

[auraza]

Tom,

AFAIK, it isn't yet. It would be best to lab it out and see if it works.

If you are unable to lab it, I can try it out.

PS. If you found my posts helpful, please rate them.