From: Richard Dumoulin (Richard.Dumoulin@vanco.fr)
Date: Tue Nov 13 2007 - 17:30:55 ART
Hi Tomima,
if I remember well transport is only needed if you are doing dynamic spoke to spoke tunnels; other than that you can do tunnel mode if you wish but for your info transport mode will also work behind NAT. Test all the scenarios you will see
Regards
-- Richard
-----Message d'origine-----
De : nobody@groupstudy.com [mailto:nobody@groupstudy.com] De la part de h-tomikawa
Envoyi : Tuesday, November 13, 2007 9:25 PM
@ : ccielab@groupstudy.com
Objet : DMVPN with or without IPSec Transport mode
Hi all,
First of all, sorry for off-topic.
I would like to know if you configure DMVPN, is it necessary to
configure IPSec as "transport" mode. In my situation, some spoke sites
are behind NAT device.
However, NAT is configure 1:1 statically with FW.
I see some CCO Doc explain that it must use "transport" but I really
don't understand why...
Thanks in advance.
Tomimma
This archive was generated by hypermail 2.1.4 : Sat Dec 01 2007 - 06:37:29 ART