Cisco CSR100V as a DMVPN hub


Has anyone managed to get this to work ? I have just launched a new CSR and it has a public and private interface. But I just cant get the DMVPN to go past NHRP. Does anyone have an example CSR config they could share. The CSR comes up as a spoke to the current HUB ok and EIGRP advertises the private subnet OK. The issue is if I try and get another spoke site to use the CSR as the hub. The inbound security group on the private CSR interface is currently set to accept all traffic from the spoke site.

1 Answer


You can enable VPC Flow Logs to get more insight on the information about the IP traffic going to and from network interfaces in your VPC.

There are source/destination checks on AWS interfaces. Did you disabled that on the Cisco router inside interface?

profile picture
answered 10 days ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions