COMPUTER TIPS

How to configure Dynamic Multipoint VPN (DMVPN)?

 

 

DMVPN stands for Dynamic Multipoint Virtual Private Network provides a secure, scalable network b y using IPsec  encryption, generic routing encapsulation (GRE) and Next Hop Resolution Protocol (NHRP).

How DMVPN works

• DMVPN building the IPsec and GRE connection is an easy and scalable solution.

• Hub router has a permanent tunnel to all spokes routers but not between spokes to spokes.

• A spoke can send their packet to others spokes using the NHRP server.

Basic steps for DMVPN Configuration: 

First define the ISAKMP Policy.

·         Authentication

·         Hash

·         Encryption

·         Group

 Establish IPsec transform set.

·          Esp-des

·         Esp-md5-hmac

·         Esp-aes

·         Asp-sha-hmac

Configure tunnel group 

• Group name     
• Group policies    
• Configure NHRP server

Configur ipsec profile

Router Protocols 

 

Configuring the Hub for DMVPN 

First defined the IKE polices on hub router

crypto isakmp policy 10

hash md5

authentication pre-share

group 2

encryption des

crypto isakmp key phonenet address 0.0.0.0 0.0.0.0

crypto ipsec transform-set  ts1 esp-des esp-md5-hmac

crypto ipsec profile dvpn

set transform-set  ts1

interface Loopback0

ip address 192.168.1.1 255.255.255.0

interface Tunnel0

 ip address 172.16.0.1 255.255.0.0

 ip mtu 1416

 ip nhrp authentication corvit

 ip nhrp map multicast dynamic

 ip nhrp network-id 99

 tunnel source Ethernet0/0

 tunnel mode gre multipoint

 tunnel key 12345

 tunnel protection ipsec profile dvpn

router eigrp 1

 network 172.16.0.0

 network 192.168.1.0

 auto-summary

end

Configuring the Spoke for DMVPN

 

crypto isakmp policy 1

 hash md5

 authentication pre-share

 group 2

 encryption des

 crypto isakmp key phonenet address 0.0.0.0 0.0.0.0

crypto ipsec transform-set ts1 esp-des esp-md5-hmac

crypto ipsec profile dvpn

set transform-set ts1

interface Loopback0

 ip address 192.168.2.2 255.0.0.0

interface Tunnel0

 ip address 172.16.0.2 255.255.0.0

 ip mtu 1416

 ip nhrp authentication corvit

 ip nhrp map 172.16.0.1 1.1.1.1

 ip nhrp map multicast 1.1.1.1

 ip nhrp network-id 99

 ip nhrp nhs 172.16.0.1

 tunnel source Ethernet0/0

 tunnel mode gre multipoint

 tunnel key 12345

 tunnel protection ipsec profile dvpn

router eigrp 1

 network 172.16.0.0

 network 192.168.2.0

   auto-summary

end       

Suggested Reading

•  Break or recover the router password

•  How to configure the Cisco IOS IDS step by step?

•  Routing Information Protocol (RIP) Configuration

•  Point-To-Point Leased Line Implementation

•  How to configure Stub area in OSPF protocol?

• How to configure site-to-site VPN tunnel using ASA?

•  Router basic Troubleshooting Tips

• How to configure Remote Access VPN using ASA?

• How to perform route summarization using BGP protocol?

• How to install Router image using TFTP server?

• How to protect EIGRP router from receiving unsigned routing updates?

 

• How to configure Role-Based CLI Access using Cisco IOS?

• How to configure BGP with local preference attribute?

• How to configure Dynamic Multipoint VPN (DMVPN)? New

• How to configure Totally Stub Area in OSPF protocol?

• How to perform route summarization in OSPF protocols?

• How to configure BGP between two different autonomous systems?

• How to configure virtual link between different areas in OSPF?

• How to perform unequal-cost load balancing using EIGRP?

•  How to configure Site-to-Site IPsec VPN?

• How configure EIGRP authentication to prevent unauthorized   access?

• How to configure BGP with weight attribute?

•  How to configure OSPF step by step?

• How to perform configuration and convergence between RIP and IGRP protocols?

•  How to configure OSPF with multiple areas?

 

•  Interior Gateway Routing Protocol (IGRP) Configuration

•  Extended IP Access Control List

•  Enhanced Interior Gateway Routing Protocol (EIGRP) Configuration

•  Useful Router commands and configuration

•  Standard IP Access Control List

•  Common Frame Relay Configuration

•  Integrated Services Digital Network (ISDN)