Latest posts — page 21

Securing DMVPN with IPsec Profiles (IKEv2)

DMVPN sends everything cleartext until you add tunnel protection. This post builds the IKEv2 and IPsec profile stack on two Catalyst 8000v routers running IOS XE 17.18, with every show command captured live.

Source-Specific Multicast (SSM): PIM Without an RP

SSM drops the RP, register tunnel, and shared tree entirely: the receiver names the source and the network builds the (S,G) tree directly. Covers the model, configuration, live IOS XE captures, and an IGMPv3 gotcha that cost the lab twenty minutes.