154
edits
Changes
DMVPN with IPsec Phase 3 (view source)
Revision as of 11:57, 25 January 2023
, 11:57, 25 January 2023no edit summary
===Testing configuration===
===Testing configuration===
'''ipsec statusall''' command can be used in the CLI/SSH for testing the tunnel. It will return detailed status information either on connection or if the argument is lacking, on all connections. If everything was done correctly, it should display that tunnel has been established.
'''- ipsec statusall''' command can be used in the CLI/SSH for testing the tunnel. It will return detailed status information either on connection or if the argument is lacking, on all connections. If everything was done correctly, it should display that tunnel has been established.
'''ping''' command can be used to check if the HUB and SPOKES can reach each other.
'''- ping''' command can be used to check if the HUB and SPOKES can reach each other.
[[File:Ping2.png|border|class=tlt-border]]
[[File:Ping2.png|border|class=tlt-border]]
If you need to reboot tunnel, execute '''/etc/init.d/ipsec retart'''
- Check routes in the HUB by executing command '''vtysh -c "show ip nhrp"'''
[[File:Vtysh nhrp.png|thumb]]
- If you need to reboot tunnel, execute '''/etc/init.d/ipsec retart'''
