Pre-configuration Tasks
Before configuring DSVPN, configure public network addresses to ensure that routes between nodes are reachable.
After DSVPN is configured, a Spoke can dynamically obtain the public network address of its peer device and establish a tunnel with the peer device to exchange data.
Configuration Procedure
Perform the following operations on the Hub and Spokes to configure DSVPN. Configuring an IPSec profile is optional. You are advised to perform this operation to protect packets against attacks because NHRP does not provide the encryption and decryption functions.