RE: DMVPN

I am not seeing a reason that you can't use the loopback as the source or
one of the sub-interfaces. As long as you are not advertising your
originating networks over the DMVPN neither scenario should be a problem for
you. If you are then that is the reason you are having problems.

Regards,
 
Tyson Scott - CCIE #13513 R&S, Security, and SP
Technical Instructor - IPexpert, Inc.
Mailto: tscott_at_ipexpert.com
Telephone: +1.810.326.1444, ext. 208
Live Assistance, Please visit: www.ipexpert.com/chat
eFax: +1.810.454.0130

-----Original Message-----
From: nobody_at_groupstudy.com [mailto:nobody_at_groupstudy.com] On Behalf Of NeT
Sent: Tuesday, February 09, 2010 8:04 AM
To: Cisco certification
Subject: DMVPN

I have problem with MGRE tunnel if use loopback as a source on hun router.
I can't use any physical IP since having sub-interface for each branch. any
idea to how to solve this problem?

interface Tunnel0
 description HUB_Router
 bandwidth 1000000
 ip address 10.8.115.1 255.255.255.0
 no ip redirects
 ip mtu 1400
 ip nhrp authentication VNP_at_123
 ip nhrp map multicast dynamic
 ip nhrp network-id 105600
 ip nhrp holdtime 300
 ip ospf network broadcast
 ip ospf hello-interval 30
 ip ospf priority 200
 tunnel source Loopback0
 tunnel mode gre multipoint
 tunnel key 105600
 tunnel protection ipsec profile vpn-dmvpn

crypto isakmp policy 1
 encr 3des
 authentication pre-share
 group 2
crypto isakmp key dm!VPN@ address 0.0.0.0 0.0.0.0

interface Loopback0
 description Connect_to_Spoke1
 ip address 172.17.0.97 255.255.255.255

interface FastEthernet0/0.14
 encapsulation dot1Q 401
 ip address 10.8.14.1 255.255.255.0
!
interface FastEthernet0/0.15
 description Connect_to_Spoke2
 encapsulation dot1Q 501
 ip address 10.8.15.1 255.255.255.0

_______________________________________

interface Tunnel0
 description SPOKE1
 bandwidth 192
 ip address 10.8.115.4 255.255.255.0
 ip mtu 1400
 ip nhrp authentication VNP_at_123
 ip nhrp map multicast 172.17.0.97
 ip nhrp map 10.8.115.1 172.17.0.97
 ip nhrp network-id 105600
 ip nhrp holdtime 300
 ip nhrp nhs 10.8.115.1
 ip ospf network broadcast
 ip ospf hello-interval 30
 ip ospf priority 0
 tunnel source 10.8.14.4
 tunnel destination 10.8.14.1
 tunnel key 105600
 tunnel protection ipsec profile vpn-dmvpn

crypto isakmp policy 1
 encr 3des
 authentication pre-share
 group 2
crypto isakmp key dm!VPN@ address 0.0.0.0 0.0.0.0

interface FastEthernet0/0
 ip address 10.8.14.4 255.255.255.0

-- 
Regards,
Blogs and organic groups at http://www.ccie.net