RE: dmvpn real-live question

From: Luan M Nguyen (luan@t3technology.com)
Date: Thu Aug 28 2008 - 17:01:08 ART


Yeah,

If you use something like Cisco IP Solution Center, all you do is to change
the transform-set, and redeploy the VPN.
You could write a script I suppose.
Best way is to outsource the management aspects.

-Luan

-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of zac
anderson
Sent: Thursday, August 28, 2008 3:27 PM
To: ccielab@groupstudy.com
Subject: dmvpn real-live question

I have a network with more than 150 dmvpn spokes.

Does anyone in the list know a quick/dirty way to change the ipsec
encryption level in the whole network. Let's say from aes128 to aes256?

crypto ipsec transform-set abc esp-aes 128

Blogs and organic groups at http://www.ccie.net



This archive was generated by hypermail 2.1.4 : Mon Sep 01 2008 - 08:15:33 ART