DMVPN

DMVPN – Migrating encryption from 3DES to AES 256

Follow steps to migrate from 2DES to AES 256 Create keyring normally Create an ISAKMP policy for AES 256 Create an ISAKMP policy for 3DES (or vise versa) Create ISAKMP profile with matching keyring and identity address Create Transform-set for 3DES Create Transform-set for AES 256(or vise versa) Create IPSec profile with both transform-set listed …

DMVPN – Migrating encryption from 3DES to AES 256 Read More »

DMVPN – Issue with Tunnel database

Cisco, DMVPN / By asib

If you using multiple IPSec profiles, you may run into multiple issues. Changing tunnel protection without rebooting: Follow sequence interface tunnel 20 shut exit ! interface tunnel 20 no tunnel protection ipsec profile DMVPN_IPS shared exit ! interface tunnel 20 no shut ! end Showing ISAKMP SA show crypto isakmp sa Clearing ISAKMP clear crypto …

DMVPN – Issue with Tunnel database Read More »