Changes

DMVPN with IPsec Phase 3 (view source)

Revision as of 09:59, 11 January 2023

466 bytes removed ,  09:59, 11 January 2023
m
no edit summary
Line 73: Line 73:  
<b>Step 4</b>: configure DMVPN NHRP parameters:
 
<b>Step 4</b>: configure DMVPN NHRP parameters:
   −
<nowiki>###</nowiki> Highlight the importance of "Redirect option here". This is essentially what makes P3 possible.  
+
In the NHRP parameters section, it is important to enable REDIRECT option, which is essential to our Phase 3 configuration.
    
<br>[[File:DMVPN HUB Phase3 example4.png|border|class=tlt-border]]
 
<br>[[File:DMVPN HUB Phase3 example4.png|border|class=tlt-border]]
Line 88: Line 88:     
- Set AS to 65000
 
- Set AS to 65000
 +
 +
- Set BGP router ID for easier management.
    
- Set announcement network(s). Routes to these networks will be shared over BGP. We used 192.168.1.0/24
 
- Set announcement network(s). Routes to these networks will be shared over BGP. We used 192.168.1.0/24
   −
<nowiki>###</nowiki> Highlight the fact that "NHRP routes" selection should exist under "Redistribution options"
+
- "NHRP routes" selection should be applied under the "Redistribution options" section
−
 
  −
<nowiki>###</nowiki> Probably a good idea to set BGP router ID here using GRE interface IPs to avoid confusion and make troubleshooting easier
      
<br>[[File:DMVPN HUB Phase3 example5.png|border|class=tlt-border]]
 
<br>[[File:DMVPN HUB Phase3 example5.png|border|class=tlt-border]]
Line 101: Line 101:  
<b>Step 2</b>: Create BGP Peer Group:
 
<b>Step 2</b>: Create BGP Peer Group:
   −
- Add Neighbor address (We used 10.0.0.1 and 10.0.0.2)
+
- Add a Neighbor address for SPOKE 1 and SPOKE 2 (We used 10.0.0.1 and 10.0.0.2 which will be in the same subnet as our hub 10.0.0.254)
−
 
  −
<nowiki>###</nowiki> Explanation needed what these IP addresses are - this might not be clear enough for end-users that this is spoke devices GRE IP address
  −
 
  −
<nowiki>###</nowiki> Also need to quickly mention about other settings
     −
<nowiki>###</nowiki> Remote AS is empty here - I don't remember now, but is this intended?
+
- Leave other settings as default.
    
<br>[[File:DMVPN HUB Phase3 example6.png|border|class=tlt-border]]
 
<br>[[File:DMVPN HUB Phase3 example6.png|border|class=tlt-border]]
Line 115: Line 111:  
<b>Step 3</b>: Add two BGP peers for each spoke:
 
<b>Step 3</b>: Add two BGP peers for each spoke:
   −
<nowiki>###</nowiki> Need to mention that "Let's move on to spokes BGP configuration now.", because it looks a bit confusing
+
Now let's create BGP peers for Spokes on the same page. Add two new BGP peers with the following parameters:
    
Peer 1.
 
Peer 1.
Line 129: Line 125:  
- Set Remote address as 10.0.0.2
 
- Set Remote address as 10.0.0.2
   −
<nowiki>###</nowiki> Briefly mention that other fields are not mandatory, but changes can be done if needed (aka "we will keep other settings as their default values for this configuration example" statement)
+
We will keep other settings as their default values for this configuration example.
    
<br>[[File:DMVPN HUB Phase3 example7.png|border|class=tlt-border]]
 
<br>[[File:DMVPN HUB Phase3 example7.png|border|class=tlt-border]]
Retrieved from "https://wiki.teltonika-networks.com/view/Special:MobileDiff/101413"

Navigation menu