Since a few days i’m trying to get DMVPN working in VyOS. Before i did a test lab with VirtualBox and all was working fine…
And then i tried to apply this in the “real” world (public IP and NAT). (https://vyos.readthedocs.io/en/latest/vpn/dmvpn.html)
Here a simple diagram:
But the DMVPN won’t come up!
HUB-01 Error Message:
no matching CHILD_SA config found for 192.168.0.11/32[gre] === 18.104.22.168/32[gre]
SPOKE-01 Error Message:
parsed INFORMATIONAL_V1 request 2545666525 [ HASH N(INVAL_ID) ]
received INVALID_ID_INFORMATION error notify
And then i found a topic for VyOS with the same problem and some others in the forum but with no solution except of this:
If i change /etc/swanctl/swanctl.conf on the HUB side from:
remote_ts = dynamic[gre] to remote_ts = 0.0.0.0/0[gre]
But i think that can not be the solution and any time i reboot the Hub or the configuration is regenerated it well be set back to dynamic[gre]
And my question now is, do you maybe have a solution for this scenario :)?