Tunnel vs Transport mode in DMVPN

[wasim chandel]

Hi,

When using DMVPN,

Transport mode would be preferred as it would not hide the IP header and even if it did it will replace the same at the other end of the tunnel, as  peer IP's will be the same.  Also using the tunnel mode in this case will be like encrypting the IP header ( along with the payload ) and then replacing it with the same IP header at the other end of the tunnel. Tunnel mode will also use more overhead for encryption of the IP header which is not required.

Is that correct ?

[Philip D'Ath]

Yes.

However in practice there is no observable performance difference between transport and tunnel mode.  You wont even be able to measure it with a stop watch.

[wasim chandel]

haha .. however tunnel mode wins the race on paper.

Thanks anyway lol.