DMVPN :
Generic Routing Encapsulation GRE
Next-Hop Resolution Protocol NHRP
Dynamic routing protocols
IPsec encryption protocols
R1:
!
ip vrf voice
rd 1:1
route-target export 1:1
route-target import 1:1
crypto isakmp policy 10
hash md5
authentication pre-share
crypto isakmp key cisco123 address 0.0.0.0 0.0.0.0
crypto ipsec transform-set strong esp-3des esp-md5-hmac
crypto ipsec profile cisco
set security-association lifetime seconds 120
set transform-set strong
interface Tunnel0
ip address 172.16.0.1 255.255.255.0 ip mtu 1440
no ip next-hop-self eigrp 90
ip nhrp authentication cisco123
ip nhrp map multicast dynamic
ip nhrp network-id 1
no ip split-horizon eigrp 90
tunnel source FastEthernet0/0
tunnel mode gre multipoint
tunnel key 0
tunnel protection ipsec profile cisco shared
end
interface Tunnel1
ip vrf forwarding voice
ip address 172.16.1.1 255.255.255.0 ip mtu 1440
no ip next-hop-self eigrp 90
ip nhrp authentication cisco123
ip nhrp map multicast dynamic
ip nhrp network-id 2
no ip split-horizon eigrp 90
tunnel source FastEthernet0/0
tunnel mode gre multipoint
tunnel key 1
tunnel protection ipsec profile cisco shared
end
router eigrp 90
network 10.0.1.0 0.0.0.255
network 172.16.0.0 0.0.0.255
no auto-summary
!
address-family ipv4 vrf voice
network 10.1.1.0 0.0.0.255
network 172.16.1.0 0.0.0.255
no auto-summary
autonomous-system 90
exit-address-family
!
verificacion:
R1#sh dmvpn
Legend: Attrb --> S - Static, D - Dynamic, I - Incompletea
N - NATed, L - Local, X - No Socket
# Ent --> Number of NHRP entries with same NBMA peer
Tunnel0, Type:Hub, NHRP Peers:2,
# Ent Peer NBMA Addr Peer Tunnel Add State UpDn Tm Attrb
----- --------------- --------------- ----- -------- -----
1 10.10.10.2 172.16.0.2 UP never D
1 10.10.10.3 172.16.0.3 UP never D
Tunnel1, Type:Hub, NHRP Peers:2,
# Ent Peer NBMA Addr Peer Tunnel Add State UpDn Tm Attrb
----- --------------- --------------- ----- -------- -----
1 10.10.10.2 172.16.1.2 UP never D
1 10.10.10.3 172.16.1.3 UP never D
R1#sh crypto isakmp sa
IPv4 Crypto ISAKMP SA
dst src state conn-id slot status
10.10.10.1 10.10.10.3 QM_IDLE 1002 0 ACTIVE
10.10.10.1 10.10.10.2 QM_IDLE 1001 0 ACTIVE
IPv6 Crypto ISAKMP SA
