Guest

Preview Tool

Cisco Bug: CSCua93180 - IKEv2 DMVPN: CFG_SET not sent by Flexclient

Last Modified

Feb 03, 2017

Products (51)

  • Cisco IOS
  • Cisco 888W Integrated Services Router
  • Cisco 881SRSTW Integrated Services Router
  • Cisco 886VA-CUBE Integrated Services Router
  • Cisco 892W Integrated Services Router
  • Cisco 861W Integrated Services Router
  • Cisco 2951 Integrated Services Router
  • Cisco 1905 Serial Integrated Services Router
  • Cisco 881W Integrated Services Router
  • Cisco 861 Integrated Services Router
View all products in Bug Search Tool Login Required

Known Affected Releases

15.2(3)T1

Description (partial)

Symptom:
DMVPN - IKEv2

The problem is with the spokes external interface in a vrf (the HUB:s works fine). The spokes works without the vrf, but when we move the external interface to a separate vrf it stops working. The tunnel is up and even the ipsec sa's. During the problem when we try to ping from Spoke  to HUB, the HUB sees the packets and also replies but due to no route back to the spoke, the ping fails. Hence no decrypt counters on the Spoke.

Because the spoke does not send the conf-set, the route is not installed.....


Conditions:

Running IOS 152-3.T1 - DMVPN Ikev2
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.