31,703
edits
Changes
Created page with "==Introduction== <b>Dynamic Multipoint VPN</b> (<b>DMVPN</b>) is a dynamic tunneling form of a virtual private network (VPN) supported on Cisco routers. This article contains..."
==Introduction==
<b>Dynamic Multipoint VPN</b> (<b>DMVPN</b>) is a dynamic tunneling form of a virtual private network (VPN) supported on Cisco routers. This article contains step=by=step instructions on how to configure DMVPN between a "Hub" and two "Spokes" using RUT9xx routers.
==Prerequisites and overview==
You will need:
<ul>
<li>At least two RUT9xx routers</li>
<li>A PC to configure the routers</li>
</ul>
----
<b>Configuration scheme:</b>
[[File:Dmvpn_overview.png]]
==Spoke configuration==
This section contains information on how to configure DMVPN <b>Spokes</b>. Particularly,
===Spoke configuration: DMVPN===
----
Navigate to the <b>Services → VPN → DMVPN</b> page and follow the instructions provided below.
<b>Step 1</b>: create a new DMVPN instance:<br>[[File:Dmvpn_1_v1.png]]
----
<b>Step 2</b>: configure DMVPN parameters:<br>[[File:Dmvpn_2_1_v1.png]]
----
<b>Step 3</b>: configure GRE parameters:<br>[[File:Dmvpn_2_2_v1.png]]
----
<b>Step 4</b>: configure IPsec parameters:<br>[[File:Dmvpn_2_3_v1.png]]
----
<b>Step 5</b>: configure NHRP parameters or leave default values:<br>[[File:Dmvpn_2_4_v1.png]]
----
<b>Step 6</b>: save changes
----
Repeat this on different routers as many times as the number of Spokes that you need. Remember that other Spokes will have different LAN, WAN and GRE IP addresses.
===Spoke configuration: BGP===
----
Navigate to the <b>Network → Routing → Dynamic Routes → BGP Protocol</b> page and follow the instructions provided below.
<b>Step 1</b>: enable BGP:<br>[[File:Dmvpn_5_1_v1.png]]
----
<b>Step 2</b>: configure BGP instance:<br>[[File:Dmvpn_2_1_v1.png]]
----
<b>Step 3</b>: configure BGP peer:<br>[[File:Dmvpn_2_2_v1.png]]
----
<b>Step 4</b>: save changes
==Hub configuration==
===Hub configuration: DMVPN===
----
Navigate to the <b>Services → VPN → DMVPN</b> page and follow the instructions provided below.
<b>Step 1</b>: create a new DMVPN instance:<br>[[File:Dmvpn_2_0_v1.png]]
----
<b>Step 2</b>: configure DMVPN parameters:<br>[[File:Dmvpn_3_1_v1.png]]
----
<b>Step 3</b>: configure GRE parameters:<br>[[File:Dmvpn_3_2_v1.png]]
----
<b>Step 4</b>: configure IPsec parameters:<br>[[File:Dmvpn_3_3_v1.png]]
----
<b>Step 5</b>: configure NHRP parameters or leave default values:<br>[[File:Dmvpn_3_4_v1.png]]
----
<b>Step 6</b>: save changes
===Hub configuration: BGP===
----
Navigate to the <b>Network → Routing → Dynamic Routes → BGP Protocol</b> page and follow the instructions provided below.
<b>Step 1</b>: enable BGP:<br>[[File:Dmvpn_4_1_v1.png]]
----
<b>Step 2</b>: configure BGP instance:<br>[[File:Dmvpn_4_2_v1.png]]
----
<b>Step 3</b>: configure BGP peer group:<br>[[File:Dmvpn_4_3_v1.png]]
----
<b>Step 4</b>: save changes
<b>Dynamic Multipoint VPN</b> (<b>DMVPN</b>) is a dynamic tunneling form of a virtual private network (VPN) supported on Cisco routers. This article contains step=by=step instructions on how to configure DMVPN between a "Hub" and two "Spokes" using RUT9xx routers.
==Prerequisites and overview==
You will need:
<ul>
<li>At least two RUT9xx routers</li>
<li>A PC to configure the routers</li>
</ul>
----
<b>Configuration scheme:</b>
[[File:Dmvpn_overview.png]]
==Spoke configuration==
This section contains information on how to configure DMVPN <b>Spokes</b>. Particularly,
===Spoke configuration: DMVPN===
----
Navigate to the <b>Services → VPN → DMVPN</b> page and follow the instructions provided below.
<b>Step 1</b>: create a new DMVPN instance:<br>[[File:Dmvpn_1_v1.png]]
----
<b>Step 2</b>: configure DMVPN parameters:<br>[[File:Dmvpn_2_1_v1.png]]
----
<b>Step 3</b>: configure GRE parameters:<br>[[File:Dmvpn_2_2_v1.png]]
----
<b>Step 4</b>: configure IPsec parameters:<br>[[File:Dmvpn_2_3_v1.png]]
----
<b>Step 5</b>: configure NHRP parameters or leave default values:<br>[[File:Dmvpn_2_4_v1.png]]
----
<b>Step 6</b>: save changes
----
Repeat this on different routers as many times as the number of Spokes that you need. Remember that other Spokes will have different LAN, WAN and GRE IP addresses.
===Spoke configuration: BGP===
----
Navigate to the <b>Network → Routing → Dynamic Routes → BGP Protocol</b> page and follow the instructions provided below.
<b>Step 1</b>: enable BGP:<br>[[File:Dmvpn_5_1_v1.png]]
----
<b>Step 2</b>: configure BGP instance:<br>[[File:Dmvpn_2_1_v1.png]]
----
<b>Step 3</b>: configure BGP peer:<br>[[File:Dmvpn_2_2_v1.png]]
----
<b>Step 4</b>: save changes
==Hub configuration==
===Hub configuration: DMVPN===
----
Navigate to the <b>Services → VPN → DMVPN</b> page and follow the instructions provided below.
<b>Step 1</b>: create a new DMVPN instance:<br>[[File:Dmvpn_2_0_v1.png]]
----
<b>Step 2</b>: configure DMVPN parameters:<br>[[File:Dmvpn_3_1_v1.png]]
----
<b>Step 3</b>: configure GRE parameters:<br>[[File:Dmvpn_3_2_v1.png]]
----
<b>Step 4</b>: configure IPsec parameters:<br>[[File:Dmvpn_3_3_v1.png]]
----
<b>Step 5</b>: configure NHRP parameters or leave default values:<br>[[File:Dmvpn_3_4_v1.png]]
----
<b>Step 6</b>: save changes
===Hub configuration: BGP===
----
Navigate to the <b>Network → Routing → Dynamic Routes → BGP Protocol</b> page and follow the instructions provided below.
<b>Step 1</b>: enable BGP:<br>[[File:Dmvpn_4_1_v1.png]]
----
<b>Step 2</b>: configure BGP instance:<br>[[File:Dmvpn_4_2_v1.png]]
----
<b>Step 3</b>: configure BGP peer group:<br>[[File:Dmvpn_4_3_v1.png]]
----
<b>Step 4</b>: save changes
