ccnp_dmvpn and gre

2
Page 1 of 1 DMVPN Cisco DMVPN allows branch locations to communicate directly with each other over the public WAN or Internet, such as when using voice over IP (VOIP) between two branch offices, but doesn't require a permanent VPN connection between sites. It enables zero-touch deployment of IPsec VPNs and improves network performance by reducing latency and jitter, while optimizing head office bandwidth utilization.

Upload: mel-jr-valencia

Post on 03-Dec-2015

2 views

Category:

Documents


1 download

DESCRIPTION

Ccnp_dmvpn and GRE

TRANSCRIPT

Page 1: Ccnp_dmvpn and GRE

Page 1 of 1

DMVPN

Cisco DMVPN allows branch locations to communicate directly with each other over the public WAN or Internet, such as when using voice over IP (VOIP) between two branch offices, but doesn't require a permanent VPN connection between sites. It enables zero-touch deployment of IPsec VPNs and improves network performance by reducing latency and jitter, while optimizing head office bandwidth utilization.

Page 2: Ccnp_dmvpn and GRE

Page 2 of 2

CCNP_DMVPN and GRE

! R1 HUB   conf t  int fa 0/0ip address 10.1.1.1 255.255.255.0no shutdownexit int ethernet 3/1ip address 14.0.0.1 255.255.255.0no shutdownexit ip route 0.0.0.0 0.0.0.0 14.0.0.4 int tunnel 0tunnel source ethernet 3/1tunnel mode gre multipointtunnel key 6783 ip nhrp network-id 1ip nhrp authentication cisco123ip nhrp map multicast dynamic ip address 172.16.0.1 255.255.255.0ip mtu 1400ip tcp adjust-mss 1360no ip next-hop-self eigrp 1no ip split-horizon eigrp 1exit router eigrp 1network 10.0.0.0 network 172.16.0.0 no auto-summaryend

! R4 Internet Cloud Routerconf t int ethernet 3/1description ISP to R1ip address 14.0.0.4 255.255.255.0no shutdownexit int ethernet 3/2description ISP to R2ip address 24.0.0.4 255.255.255.0no shutdownexit int ethernet 3/3description ISP to R3ip address 34.0.0.4 255.255.255.0no shutdownend

! Spoke R2:conf t int fa 0/0ip address 10.2.2.2 255.255.255.0no shutdownexit int ethernet 3/2ip address 24.0.0.2 255.255.255.0no shutdownexit ip route 0.0.0.0 0.0.0.0 24.0.0.4 interface tunnel 0tunnel mode gre multipointtunnel source ethernet 3/2tunnel key 6783 ip nhrp network-id 1ip nhrp authentication cisco123ip nhrp map multicast 14.0.0.1ip nhrp map 172.16.0.1 14.0.0.1ip nhrp nhs 172.16.0.1 ip address 172.16.0.2 255.255.255.0ip mtu 1400ip tcp adjust-mss 1360exit  router eigrp 1network 10.0.0.0 network 172.16.0.0 no auto-summaryend

! R3conf t int fa 0/0ip address 10.3.3.3 255.255.255.0no shutdownexit int ethernet 3/3ip address 34.0.0.3 255.255.255.0no shutdownexit ip route 0.0.0.0 0.0.0.0 34.0.0.4 interface tunnel 0tunnel mode gre multipointtunnel source ethernet 3/3tunnel key 6783 ip nhrp network-id 1ip nhrp authentication cisco123ip nhrp map multicast 14.0.0.1ip nhrp map 172.16.0.1 14.0.0.1ip nhrp nhs 172.16.0.1 ip address 172.16.0.3 255.255.255.0ip mtu 1400ip tcp adjust-mss 1360exit  router eigrp 1network 10.0.0.0 network 172.16.0.0 no auto-summaryend

Why DMVPN1. Multicast traffic can pass through GRE tunnels2. Allows VPN to be treated as a private network