IGNA Online logo

IGNA Online

Archives
Log in
Subscribe
June 3, 2026

DMVPN Phase 2 on Cisco IOS-XE: Direct Spoke-to-Spoke Tunnels, NHRP, and IKEv2

New on ignaonline.com — Sarah Chen walks through a complete DMVPN Phase 2 setup on Cisco IOS-XE.

This guide covers everything: IKEv2 IPsec with AES-256, mGRE tunnel configuration for hub and spokes, NHRP registration with OSPF next-hop preservation (the step most Phase 2 deployments get wrong), and all four common failure modes with real debug output and fixes.

Also included: NAT traversal tuning for branch spokes behind firewalls, dual-hub redundancy config, and a monitoring command reference.

Read the full guide →

Don't miss what's next. Subscribe to IGNA Online:
Powered by Buttondown, the easiest way to start and grow your newsletter.