Cisco's IKEv2-based VPN framework. Articles tagged FlexVPN cover hub-and-spoke design, virtual tunnel interfaces, AAA-driven policy and how it differs from classic DMVPN.
Six FlexVPN authorization faults, built in my home lab on Cisco IOL 17.18.2. Missing hub references stopped establishment; other faults kept READY SAs while losing routes. Real outputs separate received prefixes, installed routes and host forwarding.
FlexVPN collapses crypto maps, VTIs, DMVPN, and EzVPN into one IKEv2-based framework. See how a single configuration model covers site-to-site, hub-spoke, and remote access VPNs on Cisco IOS XE.
The design, the config, and exactly how far we got on a real cat8000v. Hub-and-spoke worked. The NHRP shortcut never fired. Here is how you tell the difference.
Build FlexVPN site to site on IOS XE: one authorization policy, one Virtual-Template, and the hub clones a Virtual-Access interface per spoke. Three cat8000v routers on 17.18.02 in a live CML lab, with real output throughout.