RE: DMVPN

Two tunnel should be configure on HUB one for spoke 1 and other for spoke 2

HUB---> tunnel1
fro spoke 1
use
tunnel source 10.8.14.1

similary

HUB ---> tunnel 2

for spoke 2

tunnels source 10.8.15.1

> Date: Tue, 9 Feb 2010 16:04:10 +0300
> Subject: DMVPN
> From: netmrt_at_gmail.com
> To: ccielab_at_groupstudy.com
>
> I have problem with MGRE tunnel if use loopback as a source on hun router.
> I can't use any physical IP since having sub-interface for each branch. any
> idea to how to solve this problem?
>
>
>
> interface Tunnel0
> description HUB_Router
> bandwidth 1000000
> ip address 10.8.115.1 255.255.255.0
> no ip redirects
> ip mtu 1400
> ip nhrp authentication VNP_at_123
> ip nhrp map multicast dynamic
> ip nhrp network-id 105600
> ip nhrp holdtime 300
> ip ospf network broadcast
> ip ospf hello-interval 30
> ip ospf priority 200
> tunnel source Loopback0
> tunnel mode gre multipoint
> tunnel key 105600
> tunnel protection ipsec profile vpn-dmvpn
>
>
> crypto isakmp policy 1
> encr 3des
> authentication pre-share
> group 2
> crypto isakmp key dm!VPN@ address 0.0.0.0 0.0.0.0
>
> interface Loopback0
> description Connect_to_Spoke1
> ip address 172.17.0.97 255.255.255.255
>
> interface FastEthernet0/0.14
> encapsulation dot1Q 401
> ip address 10.8.14.1 255.255.255.0
> !
> interface FastEthernet0/0.15
> description Connect_to_Spoke2
> encapsulation dot1Q 501
> ip address 10.8.15.1 255.255.255.0
>
> _______________________________________
>
>
>
> interface Tunnel0
> description SPOKE1
> bandwidth 192
> ip address 10.8.115.4 255.255.255.0
> ip mtu 1400
> ip nhrp authentication VNP_at_123
> ip nhrp map multicast 172.17.0.97
> ip nhrp map 10.8.115.1 172.17.0.97
> ip nhrp network-id 105600
> ip nhrp holdtime 300
> ip nhrp nhs 10.8.115.1
> ip ospf network broadcast
> ip ospf hello-interval 30
> ip ospf priority 0
> tunnel source 10.8.14.4
> tunnel destination 10.8.14.1
> tunnel key 105600
> tunnel protection ipsec profile vpn-dmvpn
>
> crypto isakmp policy 1
> encr 3des
> authentication pre-share
> group 2
> crypto isakmp key dm!VPN@ address 0.0.0.0 0.0.0.0
>
> interface FastEthernet0/0
> ip address 10.8.14.4 255.255.255.0
>
>
> --
> Regards,
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
>
>
>
>
>
>
Received on Tue Feb 09 2010 - 18:16:07 ART