Teltonika Networks Wiki

Changes

DMVPN with IPsec Phase 3 (view source)

Revision as of 13:08, 14 September 2023

569 bytes added ,  13:08, 14 September 2023
no edit summary
Line 1: Line 1: −
  <p style="color:red">The information in this page is updated in accordance with [https://wiki.teltonika-networks.com/view/FW_%26_SDK_Downloads'''00.07.03.2'''] firmware version. .</p>  
+
  <p style="color:red">The information in this page is updated in accordance with [https://wiki.teltonika-networks.com/view/FW_%26_SDK_Downloads'''00.07.05'''] firmware version. .</p>  
    
==Introduction==
 
==Introduction==
Line 313: Line 313:  
----
 
----
 
===Important Note===
 
===Important Note===
 +
For '''HUB''' in Network <b>→</b> Firewall GRE zone change from '''REJECT''' to '''ACCEPT''' on '''FORWARD.'''
    +
Also, disable '''Masquerading''' on '''HUB''' and '''ALL spokes''' for GRE <b>→</b> LAN zone forwardings
   −
 
+
[[File:Firewall new.png|alt=|border]]
−
For '''HUB''' in Network -> Firewall GRE zone change from '''REJECT''' to '''ACCEPT''' on '''FORWARD.'''
  −
 
  −
[[File:Firewall.png|border|class=tlt-border]]
      
===Testing configuration===
 
===Testing configuration===
Line 330: Line 329:  
[[File:Ping2.png|alt=|border]]
 
[[File:Ping2.png|alt=|border]]
   −
- Check routes in the HUB by executing command '''vtysh -c "show ip nhrp"'''
+
- Check routes in the HUB by executing *command '''vtysh -c "show ip nhrp"'''
 +
 
 +
<b>Note</b>: Vtysh check is unavailable with RUT200, RUT230, RUT240, RUT241, RUT260 devices.
    
[[File:Vtysh nhrp2.jpg|alt=|border]]
 
[[File:Vtysh nhrp2.jpg|alt=|border]]
Line 338: Line 339:  
== Summary ==
 
== Summary ==
   −
 
+
At this point, the basic DMVPN configuration is complete and phase 3 will now take effect in order to dynamically establish connectivity between spokes. Using this method, additional spokes may be configured and added to the current topology. DMVPN Phase 3 technology will ensure that any newly introduced devices will be included in the final topology.
 
== References ==
 
== References ==
 
[https://wiki.teltonika-networks.com/view/VPN_Configuration_Examples VPN configuration Examples]
 
[https://wiki.teltonika-networks.com/view/VPN_Configuration_Examples VPN configuration Examples]
Line 349: Line 350:     
[https://docs.strongswan.org/docs/5.9/index.html strongSwan Documentation]
 
[https://docs.strongswan.org/docs/5.9/index.html strongSwan Documentation]
 +
 +
[[Category:VPN]]
Retrieved from "https://wiki.teltonika-networks.com/view/Special:MobileDiff/102418...111635"