I configured ezvpn without DVTI a while ago for a number of routers to our 
client when DVTI was not so popular. Still works like a charm. Of course the 
router needs a default static route and normally you'd have one in real life 
situation, i.e. "ip route 0.0.0.0 0.0.0.0 Fa0/1"

Eugene

From: [email protected] 
[mailto:[email protected]] On Behalf Of waleed '
Sent: Sunday, June 10, 2012 12:32 AM
To: [email protected]; CCIE Security
Subject: Re: [OSL | CCIE_Security] DVTI on Ezvpn Client

it is required only if you do not want to add static route to reach the remote 
network , if DVTI was there the route will be added automatically
rehards
________________________________
Date: Sun, 10 Jun 2012 13:58:25 +0800
From: [email protected]<mailto:[email protected]>
To: [email protected]<mailto:[email protected]>
Subject: [OSL | CCIE_Security] DVTI on Ezvpn Client
Hi,

Is a DVTI really required on the ezvpn client , and should it be referenced 
under 'crypto ipsec client'  using virtual-interface 1 ?  I noticed that even 
without it, it works.

This is what i have on my client:

crypto ipsec client ezvpn ez
 connect auto
 group ezvpn key cisco
 local-address FastEthernet0/0
 mode client
 peer 192.168.2.2
 username cisco password cisco
 xauth userid mode local

interface Virtual-Template1 type tunnel
 no ip address


_______________________________________________ For more information regarding 
industry leading CCIE Lab training, please visit 
www.ipexpert.com<http://www.ipexpert.com> Are you a CCNP or CCIE and looking 
for a job? Check out www.PlatinumPlacement.com<http://www.PlatinumPlacement.com>
_______________________________________________
For more information regarding industry leading CCIE Lab training, please visit 
www.ipexpert.com

Are you a CCNP or CCIE and looking for a job? Check out 
www.PlatinumPlacement.com

Reply via email to