NOTE
Underlay IGP
- tunnel source間の疎通
Tunnel
interface tunnel 0
- ip address
- tunnel source
- tunnel mode
– gre multipoint - tunnel key
- ip mtu
- ip tcp adjust-mss
- tunnel vrf
NHRP
interface tunnel 0
共通
HUB
SPOKE
[NOTE] DMVPN NHRP
[NOTE] DMVPN Phase 1, 2 & 3
IPsec
- crypto isakmp policy
– authentication
– encr
– group
– hash
– lifetime - crypto isakmp key
- crypto keyring
- crypto ipsec transform-set
- crypto ipsec profile
[NOTE] Tunnel VRF and Crypto Keyring
適用
- tunnel protection ipsec
– shared
Overlay IGP
- EIGRP split-horizon、OSPF NWタイプの確認忘れずに
コメント