From: atif raees (atifraees@hotmail.com)
Date: Sun Dec 16 2007 - 15:35:13 ART
Dear All
I am testing DMVPN with Hub & spoke connectivity.
hub connects to the SP using redundant link for fail over so as the Spoke
redundant link to SP.
I have used Loopbacks on both sites.
Problem is i need to add two static route pointing remote loop back with each
next hop physical interface so that my tunnels can go up & failover.
i there any way to eliminate the static routes b/c at HUB site then i will
need to use static route for each spoke sites.
Below is the config (R1 Hub connects to R2 spoke)
R1:
crypto isakmp policy 10
hash md5
authentication pre-share
crypto isakmp key cisco123 address 0.0.0.0 0.0.0.0
!
!
crypto ipsec transform-set strong esp-3des esp-md5-hmac
!
crypto ipsec profile cisco
set security-association lifetime seconds 120
set transform-set strong
!
!
!
!
!
!
interface Tunnel0
ip address 10.10.1.1 255.255.255.0
no ip redirects
ip mtu 1440
ip nhrp authentication cisco123
ip nhrp map multicast dynamic
ip nhrp network-id 1
ip ospf network broadcast
tunnel source Loopback1
tunnel mode gre multipoint
tunnel key 0
tunnel protection ipsec profile cisco
!
interface Loopback0
ip address 10.1.1.1 255.255.255.255
!
interface Loopback1
ip address 1.1.1.1 255.255.255.0
!
interface FastEthernet0/0
ip address 192.168.1.1 255.255.255.252
duplex auto
speed auto
!
interface FastEthernet0/1
ip address 192.168.2.1 255.255.255.252
duplex auto
speed auto
!
interface Serial1/0
ip address 172.16.10.1 255.255.255.252
encapsulation ppp
serial restart-delay 0
no dce-terminal-timing-enable
!
interface Serial1/1
ip address 172.16.11.1 255.255.255.252
encapsulation ppp
serial restart-delay 0
no dce-terminal-timing-enable
!
interface Serial1/2
no ip address
shutdown
serial restart-delay 0
no dce-terminal-timing-enable
!
interface Serial1/3
no ip address
shutdown
serial restart-delay 0
no dce-terminal-timing-enable
!
router ospf 1
log-adjacency-changes
network 10.1.1.0 0.0.0.255 area 0
network 10.10.1.0 0.0.0.255 area 0
!
ip http server
no ip http secure-server
!
ip route 2.2.2.2 255.255.255.255 192.168.1.2
ip route 2.2.2.2 255.255.255.255 172.16.10.2 254
This archive was generated by hypermail 2.1.4 : Tue Jan 01 2008 - 12:04:30 ARST