mGRE and DMVPN Introduction
Multipoint GRE, NHRP, and IPsec combined to form DMVPN. The three phases, hub and spoke config for Phase 3, verification commands, and design tradeoff
Multipoint GRE, NHRP, and IPsec combined to form DMVPN. The three phases, hub and spoke config for Phase 3, verification commands, and design tradeoff
GRE vs IPsec vs GRE-over-IPsec compared: encryption, multicast, routing protocols, overhead, and a decision framework for site-to-site tunnel design.
GRE tunnel MTU and fragmentation explained: ip mtu 1400, ip tcp adjust-mss 1360, df-bit ping diagnostics, IPv6 considerations, and PMTUD black holes.
Configure GRE over IPsec on Cisco IOS XE with IKEv2 and IPsec profiles. Modern and legacy configs, MTU planning, OSPF over the tunnel, and gotchas.