Dynamic Multipoint VPN (DMVPN)

NOTE

Underlay IGP

• tunnel source間の疎通

Tunnel

interface tunnel 0

• ip address
• tunnel source
• tunnel mode
  – gre multipoint
• tunnel key
• ip mtu
• ip tcp adjust-mss
• tunnel vrf

 

NHRP

interface tunnel 0
共通

• ip nhrp network-id
• ip nhrp authentication
• ip nhrp holdtime

HUB

• ip nhrp map multicast dynamic
• ip nhrp redirect

SPOKE

• ip nhrp nhs
• ip nhrp map
• ip nhrp map multicast
• ip nhrp registration
• ip nhrp shortcut

[NOTE] DMVPN NHRP
[NOTE] DMVPN Phase 1, 2 & 3

IPsec

• crypto isakmp policy
  – authentication
  – encr
  – group
  – hash
  – lifetime
• crypto isakmp key
• crypto keyring
• crypto ipsec transform-set
• crypto ipsec profile

[NOTE] Tunnel VRF and Crypto Keyring

適用

• tunnel protection ipsec
  – shared

 

Overlay IGP

• EIGRP split-horizon、OSPF NWタイプの確認忘れずに