There are two ways to configure address pools for IPSec VPN Clients on an IOS router.
Our imaginary pool of IP addresses will be:
ip local pool myPOOL 20.0.0.1 20.0.0.254
Until today I had always just configured the address pool in the isakmp client configuration group:
crypto isakmp client configuration group EZVPN
key CISCO123
pool EZVPN
If I ever wanted to [...]

Here’s quick lesson for you: When doing DMVPN don’t mix versions of IOS if you can help it.
Joe and I just spent a couple hours messing with a DMVPN setup that had a hub running 12.3 Mainline and two spokes running 12.4T. When I started out, I didn’t think this would matter, but [...]

The other night I was configuring a LAN to LAN vpn tunnel between the ASA and IOS using digital certificates issued from my MS CA server. If I initiated traffic from behind the router the tunnel would come up, but if I initiated traffic from behind the ASA, the tunnel would fail and I [...]