cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
646
Views
0
Helpful
1
Replies

VTI and DVTI Should belong to same Subnet

HARIS_HUSSAIN
VIP Alumni
VIP Alumni

For VIT and DVTI we can put the Tunnel Interface in Same subnet or a different subnet. I can see that for DMVPN It should be in the same subnet but for Site to Site IPSEC or DVIT, It supports to be in a different subnet. 

 

But as I understand Tunnel is just like a point to point link and hence should be in the same subnet, why does it still work even if we put is in a different subnet.

 

 

 

 

 

1 Reply 1

For a point-to-point link you *can* route the packets "out of the interface" instead of "to a next-hop IP". This gives you the flexibility to work with unnumbered IPs on the interface. Keep in mind that putting an IP on an interface activates IP routing on that interface.

For DVTI the situation is again different. Ob the Hub you dynamically build virtual-access interfaces from your template. Here you never know the IP address of the other tunnel-end and you have to use unnumbered IP addresses.