> On 03 Feb 2014, at 16:02, "Michael Richardson" <[email protected]> wrote: > > > Harms, Patrick <[email protected]> wrote: >> - is allowing to add 'spokes' without configuration changes on the 'hub' >> devices (8.1 dmvpn draft) > >> For me, this is an important point. Changing the configuration on the hub >> routers, everytime a spoke is added to the network, would make the rollout >> process to complex and is a possible source of failures. > > I don't see how you can add a spoke in any system without requiring some > changes to at least one hub and/or the database/LDAP/etc. which keeps track > of all the spokes.
Not sure you have read the requirements but it is one of them. The difficulty if the exercise is to be able to support both static and dynamic policies with a single protocol. >> Based on the theories (advpn draft and dmvpn) and real world experience >> (dmvpn), I would favor dmvpn, because the handling and operating sounds less >> complex. (eg. lower amount of steps in tunnel initiation, single logical >> interface for tunnel termination etc.) > > Do you care about mobile (handheld) devices? Somehow you must be mistaken in believing it can't be done. > > -- > Michael Richardson <[email protected]>, Sandelman Software Works > > > > _______________________________________________ > IPsec mailing list > [email protected] > https://www.ietf.org/mailman/listinfo/ipsec _______________________________________________ IPsec mailing list [email protected] https://www.ietf.org/mailman/listinfo/ipsec
