![]() ![]() Legend: E=Expecting replies, R=Responding, W=Waiting ![]() # Ent Peer NBMA Addr Peer Tunnel Add State UpDn Tm Attrb UpDn Time -> Up or Down Time for a Tunnel NHS Status: E -> Expecting Replies, R -> Responding, W -> Waiting # Ent -> Number of NHRP entries with same NBMA peer Legend: Attrb -> S - Static, D - Dynamic, I - Incomplete Tunnel protection ipsec profile tunnel-to-dc Interface And Route Configuration On DC Router = "dc-gw1"Ĭrypto isakmp key acme address 0.0.0.0 0.0.0.0Ĭrypto ipsec transform-set AES-256-SHA esp-aes 256 esp-sha-hmac This simulates underlay Internet links for DC and sites. I had configured Interface IP's on DC router and site routers and implemented default route towards Internet router. Router IOS version used for this setup are -ĭc-gw1, dc-gw2, site-a-gw1 = Cisco IOS Software, CSR1000V Software (X86_64_LINUX_IOSD-UNIVERSALK9-M), Version 15.4(2)S, RELEASE SOFTWARE (fc2) Details of IP addre sses, device connections, and OSPF area are as shown in the diagram.ġ) Create two DMVPN network clouds on "dc-gw1", "dc-gw2" and connect router "site-a-gw1" in these clouds.Ģ) Configure dynamic routing between DC and Site routers. And site A connects to DC via IPSEC VPN tunnels with the Internet as an underlay. This is an imaginary setup of a company which has Data Centre (DC) with Application and Storage servers. In this article, I will show how to build a Dual Hub Dual Cloud Phase 3 Dynamic Multipoint VPN (DMVPN). In the previous part, I configured Dual Hub Phase 3 DMVPN Cloud. This is the tenth and last article in series about configuring VPN tunnels in IOS XE. ![]()
0 Comments
Leave a Reply. |