Re: [c-nsp] Two DMVPN spokes on a single 8xx

2010-12-06 Thread Benjamin Lovell
Sorry by KW I just meant keyword meaning IOS command but the shared keyword caveat is if you are using standard IPSEC for DMVPN. I can't speak to this part of it if you are using GETVPN as I only have conceptual knowledge of GETVPN. The mGRE part of it will not have any problem terminating two m

Re: [c-nsp] Two DMVPN spokes on a single 8xx

2010-12-06 Thread Tomas Daniska
Ben, > -Original Message- > From: Benjamin Lovell [mailto:belov...@cisco.com] > Sent: Saturday, December 04, 2010 12:53 PM > > Minor correction. Traffic will still be CEF switched but will be > software CEF switched not MLS CEF switched. yup, got the point from Oli as well. > This is

Re: [c-nsp] Two DMVPN spokes on a single 8xx

2010-12-04 Thread Benjamin Lovell
Minor correction. Traffic will still be CEF switched but will be software CEF switched not MLS CEF switched. This is a limitation of the EARL 7 generation of forwarding engines. GRE decap can only be done based on dest IP so you need a unique IP endpoint for each tunnel. This is not a probl

[c-nsp] Two DMVPN spokes on a single 8xx

2010-12-03 Thread Tomas Daniska
Folks, for HW based platforms it's needed to have a dedicated source IP address for each tunnel in order to have the tunnels CEF switched in hardware, due to ASIC limitations, and not process-switched. Does anyone know if this applies to CPU based platforms as well, such as 87x/88x? I need to