GETVPN

[waelshammakh]

Dears

Hi

i have Hub and spoke topology, and GET-VPN will be implemented. each site is having two ASR-1002 routers. now my concerns as following:

- Key servers could be the Hub WAN routers / or key server must be a dedicated routers? i'm confused if we need to increase the number of routers or no at Hub site.

[Marcin Latosiewicz]

Refer to the DIG

http://www.cisco.com/c/dam/en/us/products/collateral/security/group-encrypted-transport-vpn/GETVPN_DIG_version_1_0_External.pdf

KS and GM roles need to be on separate devices.