154
edits
Changes
DMVPN with IPsec Phase 3 (view source)
Revision as of 12:12, 5 December 2022
, 12:12, 5 December 2022Created page with "==Introduction== This article contains instructions on how to configure DMVPN Phase 3 between a "Hub" and two "Spokes" using Teltonika devices. ==Prerequisites and overview=..."
==Introduction==
This article contains instructions on how to configure DMVPN Phase 3 between a "Hub" and two "Spokes" using Teltonika devices.
==Prerequisites and overview==
You will need:
<ul>
<li>2 Teltonika Routers for "Spokes" and one for "Hub"</li>
<li>A PC to configure the routers</li>
<li>HUB must have a Public IP address</li>
</ul>
==HUB configuration==
This section contains information on how to configure DMVPN <b>HUB</b>. Firstly, we'll configure the DMVPN instance to make the connection possible. Then we'll set the <b>Border Gateway Protocol</b> (<b>BGP</b>) parameters as our dynamic routing solution.
<b>Note</b>: at the moment, BGP is the only stable dynamic routing solution that can work with DMVPNs.
===HUB configuration: DMVPN===
----
Navigate to the <b>Services → VPN → DMVPN</b> page and follow the instructions provided below.
<b>Step 1</b>: create a new DMVPN instance:<br>[[File:DMVP_HUB_phase3_example1.png]]
----
<b>Step 2</b>: configure DMVPN Phase 1 parameters:<br>[[File:DMVP HUB phase3 example2.png]]
----
<b>Step 3</b>: configure DMVPN Phase 2 parameters:<br>[[File:DMVPN HUB Phase3 example3.png]]
----
<b>Step 4</b>: configure DMVPN NHRP parameters:<br>[[File:DMVPN HUB Phase3 example4.png]]
----
<b>Step 5</b>: save changes
===Hub configuration: BGP===
Navigate to the <b>Network → Routing → Dynamic Routes → BGP Protocol</b> page and follow the instructions provided below.
<b>Step 1</b>: enable BGP and configure General section:<br>[[File:DMVPN HUB Phase3 example5.png]]
----
<b>Step 2</b>: Create BGP Peer Group:<br>[[File:DMVPN HUB Phase3 example6.png]]
----
<b>Step 3</b>: Add two BGP peers for each spoke:<br>[[File:DMVPN HUB Phase3 example7.png]]
----
[[File:DMVPN HUB Phase3 example8.png]]
----
===Spoke 1 configuration: DMVPN===
----
Navigate to the <b>Services → VPN → DMVPN</b> page and follow the instructions provided below.
<b>Step 1</b>: create a new DMVPN instance:<br>[[File:DMVPN HUB Phase3 spoke1 example1.png]]
----
<b>Step 2</b>: configure DMVPN Phase 1 parameters:<br>[[File:DMVPN HUB Phase3 spoke example2.png]]
----
<b>Step 3</b>: configure DMVPN Phase 2 parameters:<br>[[File:DMVPN HUB Phase3 spoke example3.png]]
----
<b>Step 4</b>: configure DMVPN NHRP parameters:<br>[[File:DMVPN HUB Phase3 spoke example4.png]]
----
<b>Step 5</b>: save changes
===Spoke 1 configuration: BGP===
Navigate to the <b>Network → Routing → Dynamic Routes → BGP Protocol</b> page and follow the instructions provided below.
<b>Step 1</b>: enable BGP and configure General section:<br>[[File:DMVPN HUB Phase3 spoke example5.png]]
----
<b>Step 2</b>: Create BGP Peer:<br>[[File:DMVPN HUB Phase3 spoke example6.png]]
===Spoke 2 configuration: DMVPN===
Navigate to the <b>Services → VPN → DMVPN</b> page and follow the instructions provided below.
<b>Step 1</b>: create a new DMVPN instance:<br>[[File:DMVPN HUB Phase3 spoke2 example1.png]]
----
<b>Step 2</b>: configure DMVPN Phase 1 parameters:<br>[[File:DMVPN HUB Phase3 spoke2 example2.png]]
----
<b>Step 3</b>: configure DMVPN Phase 2 parameters:<br>[[File:DMVPN HUB Phase3 spoke2 example3.png]]
----
<b>Step 4</b>: configure DMVPN NHRP parameters:<br>[[File:DMVPN HUB Phase3 spoke2 example4.png]]
----
<b>Step 5</b>: save changes
===Spoke 2 configuration: BGP===
Navigate to the <b>Network → Routing → Dynamic Routes → BGP Protocol</b> page and follow the instructions provided below.
<b>Step 1</b>: enable BGP and configure General section:<br>[[File:DMVPN HUB Phase3 spoke2 example5.png]]
----
<b>Step 2</b>: Create BGP Peer:<br>[[File:DMVPN HUB Phase3 spoke2 example6.png]]
===Important Note===
For HUB in Network > Firewall GRE zone change from REJECT to ACCEPT on FORWARD.
----
[[File:DMVPN HUB Phase3 example Firewall.png]]
----
For setups behind NAT specify Local identifier in the <b>Services → VPN → DMVPN → IPsec section </b>
----
[[File:DMVPN HUB Phase3 example Behind NAT.png]]
This article contains instructions on how to configure DMVPN Phase 3 between a "Hub" and two "Spokes" using Teltonika devices.
==Prerequisites and overview==
You will need:
<ul>
<li>2 Teltonika Routers for "Spokes" and one for "Hub"</li>
<li>A PC to configure the routers</li>
<li>HUB must have a Public IP address</li>
</ul>
==HUB configuration==
This section contains information on how to configure DMVPN <b>HUB</b>. Firstly, we'll configure the DMVPN instance to make the connection possible. Then we'll set the <b>Border Gateway Protocol</b> (<b>BGP</b>) parameters as our dynamic routing solution.
<b>Note</b>: at the moment, BGP is the only stable dynamic routing solution that can work with DMVPNs.
===HUB configuration: DMVPN===
----
Navigate to the <b>Services → VPN → DMVPN</b> page and follow the instructions provided below.
<b>Step 1</b>: create a new DMVPN instance:<br>[[File:DMVP_HUB_phase3_example1.png]]
----
<b>Step 2</b>: configure DMVPN Phase 1 parameters:<br>[[File:DMVP HUB phase3 example2.png]]
----
<b>Step 3</b>: configure DMVPN Phase 2 parameters:<br>[[File:DMVPN HUB Phase3 example3.png]]
----
<b>Step 4</b>: configure DMVPN NHRP parameters:<br>[[File:DMVPN HUB Phase3 example4.png]]
----
<b>Step 5</b>: save changes
===Hub configuration: BGP===
Navigate to the <b>Network → Routing → Dynamic Routes → BGP Protocol</b> page and follow the instructions provided below.
<b>Step 1</b>: enable BGP and configure General section:<br>[[File:DMVPN HUB Phase3 example5.png]]
----
<b>Step 2</b>: Create BGP Peer Group:<br>[[File:DMVPN HUB Phase3 example6.png]]
----
<b>Step 3</b>: Add two BGP peers for each spoke:<br>[[File:DMVPN HUB Phase3 example7.png]]
----
[[File:DMVPN HUB Phase3 example8.png]]
----
===Spoke 1 configuration: DMVPN===
----
Navigate to the <b>Services → VPN → DMVPN</b> page and follow the instructions provided below.
<b>Step 1</b>: create a new DMVPN instance:<br>[[File:DMVPN HUB Phase3 spoke1 example1.png]]
----
<b>Step 2</b>: configure DMVPN Phase 1 parameters:<br>[[File:DMVPN HUB Phase3 spoke example2.png]]
----
<b>Step 3</b>: configure DMVPN Phase 2 parameters:<br>[[File:DMVPN HUB Phase3 spoke example3.png]]
----
<b>Step 4</b>: configure DMVPN NHRP parameters:<br>[[File:DMVPN HUB Phase3 spoke example4.png]]
----
<b>Step 5</b>: save changes
===Spoke 1 configuration: BGP===
Navigate to the <b>Network → Routing → Dynamic Routes → BGP Protocol</b> page and follow the instructions provided below.
<b>Step 1</b>: enable BGP and configure General section:<br>[[File:DMVPN HUB Phase3 spoke example5.png]]
----
<b>Step 2</b>: Create BGP Peer:<br>[[File:DMVPN HUB Phase3 spoke example6.png]]
===Spoke 2 configuration: DMVPN===
Navigate to the <b>Services → VPN → DMVPN</b> page and follow the instructions provided below.
<b>Step 1</b>: create a new DMVPN instance:<br>[[File:DMVPN HUB Phase3 spoke2 example1.png]]
----
<b>Step 2</b>: configure DMVPN Phase 1 parameters:<br>[[File:DMVPN HUB Phase3 spoke2 example2.png]]
----
<b>Step 3</b>: configure DMVPN Phase 2 parameters:<br>[[File:DMVPN HUB Phase3 spoke2 example3.png]]
----
<b>Step 4</b>: configure DMVPN NHRP parameters:<br>[[File:DMVPN HUB Phase3 spoke2 example4.png]]
----
<b>Step 5</b>: save changes
===Spoke 2 configuration: BGP===
Navigate to the <b>Network → Routing → Dynamic Routes → BGP Protocol</b> page and follow the instructions provided below.
<b>Step 1</b>: enable BGP and configure General section:<br>[[File:DMVPN HUB Phase3 spoke2 example5.png]]
----
<b>Step 2</b>: Create BGP Peer:<br>[[File:DMVPN HUB Phase3 spoke2 example6.png]]
===Important Note===
For HUB in Network > Firewall GRE zone change from REJECT to ACCEPT on FORWARD.
----
[[File:DMVPN HUB Phase3 example Firewall.png]]
----
For setups behind NAT specify Local identifier in the <b>Services → VPN → DMVPN → IPsec section </b>
----
[[File:DMVPN HUB Phase3 example Behind NAT.png]]
