Hi, Finally got the ASR1Ks delivered and configured but somehow DMVPN is not working! I accepted the EULA for the IPSec license, it shows activated and I have adjusted and copied the config from the 7206npe-g2 to the ASR1k. The router accepts all the configuration but does not recognize a "sh dmvpn"or "sh ip nhrp" command. Isakmp SAs are not being established.
Do I need to activate something else? ASR1K#sh hard Cisco IOS Software, IOS-XE Software (X86_64_LINUX_IOSD-UNIVERSALK9-M), Version 15.2(2)S1, RELEASE SOFTWARE (fc1) IOS XE Version: 03.06.01.S System image file is "bootflash:asr1001-universalk9.03.06.01.S.152-2.S1.bin" License Level: advipservices License Type: EvalRightToUse Next reload license Level: advipservices cisco ASR1001 (1RU) processor with 1163448K/6147K bytes of memory. Configuration register is 0x2102 ASR1K##sh license feature Feature name Enforcement Evaluation Subscription Enabled RightToUse adventerprise yes yes no no yes advipservices yes yes no yes yes ipsec yes yes no yes yes ASR1K##sh dmvpn ^ % Invalid input detected at '^' marker. -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of Andrew Clark Sent: vrijdag 14 september 2012 18:26 To: [email protected] Subject: Re: [c-nsp] Any experience with DMVPN on ASR1K? Yes. I have a pair of ASR1001s in a dual-hub dual-cloud setup serving around 120 (and counting) 881s. It should scale up to about 1.5k per hub, hopefully. So far it works fine, assuming the code is solid. There is a crashing bug in 151-3.S2, so my experience so far recommends at least 151-3.S3. You may need to tweak your IPSEC anti-replay buffer size up from the default of 64 as well, if you have queuing (due to QoS, etc.) occurring. Andrew Clark > > Message: 3 > Date: Fri, 14 Sep 2012 07:50:12 +0200 > From: "Nasir Shaikh" <[email protected]> > To: <[email protected]> > Subject: [c-nsp] Any experience with DMVPN on ASR1K? > Message-ID: <C0EC838483EB4FAAAC1744BACC11539E@jedi35ba54c7c7> > Content-Type: text/plain; charset="us-ascii" > > Hi guys, > > > > We are planning to replace/upgrade our DMVPN hubs from 7206vxr npe-G2 with > VAM2+ to ASR1Ks. > > Does anyone have any experience with running DMVPN on the ASRs? > > > > This is what we plan to order: > > > > Cisco ASR1001 System,Crypto, 4 built-in GE, Dual P/S > > Cisco ASR 1001 IOS XE UNIVERSAL > > Cisco ASR 1000 Advanced IP Services License > > IPSEC License for ASR1000 Series > > Cisco ASR1001 4GB DRAM > > > > Thanks > > > > Nasir > > > > > _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/ _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
