Re: DMVPN

You need to make all hub and spokes learn the tunnel end point via static
route or other routing protocol besides ospf. On your spoke routers, you
need to match the tunnel destination to hub's tunnel source, loopback on
your case.

HTH,

Lei Tian

On Tue, Feb 9, 2010 at 8:04 AM, NeT <netmrt_at_gmail.com> wrote:

> I have problem with MGRE tunnel if use loopback as a source on hun router.
> I can't use any physical IP since having sub-interface for each branch. any
> idea to how to solve this problem?
>
>
>
> interface Tunnel0
> description HUB_Router
> bandwidth 1000000
> ip address 10.8.115.1 255.255.255.0
> no ip redirects
> ip mtu 1400
> ip nhrp authentication VNP_at_123
> ip nhrp map multicast dynamic
> ip nhrp network-id 105600
> ip nhrp holdtime 300
> ip ospf network broadcast
> ip ospf hello-interval 30
> ip ospf priority 200
> tunnel source Loopback0
> tunnel mode gre multipoint
> tunnel key 105600
> tunnel protection ipsec profile vpn-dmvpn
>
>
> crypto isakmp policy 1
> encr 3des
> authentication pre-share
> group 2
> crypto isakmp key dm!VPN@ address 0.0.0.0 0.0.0.0
>
> interface Loopback0
> description Connect_to_Spoke1
> ip address 172.17.0.97 255.255.255.255
>
> interface FastEthernet0/0.14
> encapsulation dot1Q 401
> ip address 10.8.14.1 255.255.255.0
> !
> interface FastEthernet0/0.15
> description Connect_to_Spoke2
> encapsulation dot1Q 501
> ip address 10.8.15.1 255.255.255.0
>
> _______________________________________
>
>
>
> interface Tunnel0
> description SPOKE1
> bandwidth 192
> ip address 10.8.115.4 255.255.255.0
> ip mtu 1400
> ip nhrp authentication VNP_at_123
> ip nhrp map multicast 172.17.0.97
> ip nhrp map 10.8.115.1 172.17.0.97
> ip nhrp network-id 105600
> ip nhrp holdtime 300
> ip nhrp nhs 10.8.115.1
> ip ospf network broadcast
> ip ospf hello-interval 30
> ip ospf priority 0
> tunnel source 10.8.14.4
> tunnel destination 10.8.14.1
> tunnel key 105600
> tunnel protection ipsec profile vpn-dmvpn
>
> crypto isakmp policy 1
> encr 3des
> authentication pre-share
> group 2
> crypto isakmp key dm!VPN@ address 0.0.0.0 0.0.0.0
>
> interface FastEthernet0/0
> ip address 10.8.14.4 255.255.255.0
>
>
> --
> Regards,
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html

Blogs and organic groups at http://www.ccie.net
Received on Tue Feb 09 2010 - 08:20:41 ART