DMVPN – Migrating encryption from 3DES to AES 256

On October 15, 2015   /   Cisco, DMVPN  

Follow steps to migrate from 2DES to AES 256 Create keyring normally Create an ISAKMP policy for AES 256 Create an ISAKMP policy for 3DES (or vise versa) Create ISAKMP profile with matching keyring and identity address Create Transform-set for 3DES Create Transform-set for AES 256(or vise

Read more →
Back to Top

DMVPN – Issue with Tunnel database

On October 14, 2015   /   Cisco, DMVPN  

If you using multiple IPSec profiles, you may run into multiple issues. Changing tunnel protection without rebooting: Follow sequence interface tunnel 20 shut exit ! interface tunnel 20 no tunnel protection ipsec profile DMVPN_IPS shared exit ! interface tunnel 20 no shut ! end Showing ISAKMP SA

Read more →
Back to Top