Difference between revisions of "DMVPN configuration"
| Line 10: | Line 10: | ||
<li>At least two RUT9xx routers</li> | <li>At least two RUT9xx routers</li> | ||
<li>A PC to configure the routers</li> | <li>A PC to configure the routers</li> | ||
| − | |||
</ul> | </ul> | ||
---- | ---- | ||
| Line 83: | Line 82: | ||
---- | ---- | ||
<b>Step 4</b>: save changes | <b>Step 4</b>: save changes | ||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
Revision as of 14:21, 1 April 2019
Introduction
Dynamic Multipoint VPN (DMVPN) is a dynamic tunneling form of a virtual private network (VPN) supported on Cisco routers. This article contains step-by-step instructions on how to configure DMVPN between a "Hub" and two "Spokes" using RUT9xx routers.
Prerequisites and overview
You will need:
- At least two RUT9xx routers
- A PC to configure the routers
Configuration scheme:
Spoke configuration
This section contains information on how to configure DMVPN Spokes. Firstly, we'll configure the DMVPN instance to make to the connection possible. Then we'll the Border Gateway Protocol (BGP) parameters as our dynamic routing solution.
Note: at the moment, BGP is the only stable dynamic routing solution that can work with DMVPNs.
Spoke configuration: DMVPN
Navigate to the Services → VPN → DMVPN page and follow the instructions provided below.
Step 1: create a new DMVPN instance:
Step 2: configure DMVPN parameters:
Step 3: configure GRE parameters:
Step 4: configure IPsec parameters:
Step 5: configure NHRP parameters or leave default values:
Step 6: save changes
Repeat this on different routers as many times as the number of Spokes that you need. Remember that other Spokes will have different LAN, WAN and GRE IP addresses.
Spoke configuration: BGP
Navigate to the Network → Routing → Dynamic Routes → BGP Protocol page and follow the instructions provided below.
Step 1: enable BGP:
Step 2: configure BGP instance:
Step 3: configure BGP peer:
Step 4: save changes
Hub configuration
Hub configuration: DMVPN
Navigate to the Services → VPN → DMVPN page and follow the instructions provided below.
Step 1: create a new DMVPN instance:
Step 2: configure DMVPN parameters:
Step 3: configure GRE parameters:
Step 4: configure IPsec parameters:
Step 5: configure NHRP parameters or leave default values:
Step 6: save changes
Hub configuration: BGP
Navigate to the Network → Routing → Dynamic Routes → BGP Protocol page and follow the instructions provided below.
Step 1: enable BGP:
Step 2: configure BGP instance:
Step 3: configure BGP peer group:
Step 4: save changes
