cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
379
Views
0
Helpful
1
Replies
Beginner

Problem, FLEXVPN with dVTI and assign ip address authomatic from hub but i cannt ping the tunnel ip address

Hi,

I configured my hub and spoke router with dVTI and policy base ip address assing to spoke router.

Everything works fine but the IP address of speaking router tunnel don't show in routing table static and i cannot ping the tunnel ip address and then i cannot run bgp routing protocol


i attach the configuration of hub and spoke router.

Please help me.
Thanks.

Everyone's tags (1)
1 REPLY 1
Highlighted
RJI Advisor
Advisor

Re: Problem, FLEXVPN with dVTI and assign ip address authomatic from hub but i cannt ping the tunnel ip address

Hi,

You will need to send the tunnel ip address to the peer using the command route set interface, via the authorization policy. Once configured, the tunnel interface will appear in the route table and will be defined as a Remote Subnet under the "show crypto ikev2 sa detailed" command output.

 

The Hub's authorization policy will need modifying and the Spoke will need a authorization policy created.

Example:-


HUB

crypto ikev2 authorization policy FLEXVPN_CONFIG
 route set interface


SPOKE

aaa new-model

aaa authorization network AUTHOR_LOCAL local

 

crypto ikev2 authorization policy FLEXVPN_CONFIG
 route set interface

 

crypto ikev2 profile FLEXVPN_IKEV2
 aaa authorization group cert list AUTHOR_LOCAL FLEXVPN_CONFIG

 

HTH