Changes

DMVPN with IPsec Phase 3 (view source)

Revision as of 09:43, 11 January 2023

433 bytes removed , 09:43, 11 January 2023

m

no edit summary

Line 41: Line 41:

- Set Local GRE interface IP address (for example, 10.0.0.254)

−

~~<nowiki>###</nowiki>~~ GRE netmask ~~should be an~~ entire subnet~~, /24~~ or ~~however~~ many spokes we expect to connect to this hub

+

- Set GRE interface netmask to 255.255.255.0 (for entire subnet or according to how many spokes we expect to connect to this hub)

−

~~<nowiki>###</nowiki> We can still use 10.0.0.254, but with~~ a ~~netmask of 255.255.255.0 for example~~

+

- Set GRE MTU value to 1420 (or even slightly lower - 1400 if a mobile interface is used)

−

- ~~Set GRE MTU value to 1476~~

+

- Outbound/inbound keys are optional, for this example we will leave it at default

−

~~<nowiki>###</nowiki> One note~~ - if we ~~use mobile, I recommend using lower MTU value, maybe 1420 or even lower, down to 1400 or so. I think using 1420 in~~ this example ~~would be better~~

+

- Set IPsec Pre-shared key (we used simple 123456 for this example)

−

~~<nowiki>###</nowiki> There have been situations when mobile MTU is not consistent, depending on carrier, which would break connections when packets had to be fragmented~~

+

<br>[[File:Dmvpn phase3 example1.png|alt=|border]]

−

~~<nowiki>###</nowiki> Outbound/inbound keys are optional, but worth to mention why they are here and what they are for~~

−

~~- Set IPsec Pre-shared key (we used simple 123456 for this example)~~

−

<br>[[File:~~DMVP_HUB_phase3_example1~~.png|~~border~~|~~class=tlt-~~border]]

----

<b>Step 2</b>: configure DMVPN Phase 1 parameters:

TomasM

Administrators

154

edits