Tunnel Interface Goes Down When Applying Encryption

[AbuAhmed11]

I have a router configured a spoke connected to two Hubs one is HO and the other is DR, connectivity to HO is working fine, but connectivity to DR there is an issue when applying the encryption, GRE without Encryption I have no issue. Attach are the configuration files. Also you will find logging output after enabling the debug.

[Poonam Garg]

Reduce the mtu size on spoke to 1400 .

int tunnel0

ip mtu 1400

As GRE over ipsec added additional 52 byte overhead.

HTH

"Please rate helpful posts"

[syed kazim abbas]

Dear AbuAhmed11,

here is the solution, do these things and plz contact me on inform.kazim@yahoo.com, now i need your help.

 REMEMBER :the spoke is working with HO but the mode of spoke "tunnel mode gre multipoint"  it should be static ip like tunnel 2

Hub

on hub you have two mistakes: 1:key 2:no have route for spoke

crypto isakmp key DMVPN2 address 0.0.0.0 0.0.0.0

ip route 192.168.209.54 255.255.255.255 fa 1/0 

spoke

int tun 2

no keep live 5 3

keeplive only for point-to-point tunnel

HTH

"please rate me for helpful post"