DMVPN:- allows VPN tunnels to be setup and torn down on an as-needed basis
Multipoint GRE (mGRE):- Allows a single router interface to have multiple GRE tunnels.
In HUB and Spoke Topology DMVPN have a ability to allow us to directly connect Spoke
router without using HUB
This means our Spoke routers traffic directly going with each other without disturbing
the HUB router
HQ_INDIA interface Configuration:-
HQ_INDIA(config)#interface fastEthernet 0/0
HQ_INDIA(config-if)#description CONNECTED WITH SW1
HQ_INDIA(config-if)#ip address 192.168.2.1 255.255.255.0
HQ_INDIA(config-if)#no shut
HQ_INDIA(config-if)#exit
HQ_INDIA(config)#interface fastEthernet 0/1
HQ_INDIA(config-if)#description CONNECTED WITH INTERNET
HQ_INDIA(config-if)#ip address 100.100.100.2 255.255.255.252 {static ip needed
on HQ }
HQ_INDIA(config-if)#no shut
HQ_INDIA(config-if)#exit
Internet Router interfaces Configuration:-
internet(config)#interface Ethernet 1/0
internet(config-if)#description CONNECTED WITH HQ_INDIA
internet(config-if)#ip address 100.100.100.1 255.255.255.252
internet(config-if)#no shut
internet(config-if)#exit
internet(config)#interface fastEthernet 0/1
internet(config-if)#description CONNECTED WITH BRANCH2
internet(config-if)#ip address 100.100.100.9 255.255.255.252
internet(config-if)#no shut
internet(config-if)#exit
internet(config)#interface fastEthernet 0/0
internet(config-if)#description CONNECTED WITH BRANCH3
internet(config-if)#ip address 100.100.100.5 255.255.255.252
internet(config-if)#no shut
internet(config-if)#exit
DHCP Server Configuration for Branch1 and Branch2 Routers for Dynamic ip address
We Suppose that these Connection are Cable modem or DSL or any
internet(config)#ip dhcp pool BRANCH2
internet(dhcp-config)#default-router 100.100.100.9
internet(dhcp-config)#network 100.100.100.8 255.255.255.252
internet(dhcp-config)#exit
internet(config)#ip dhcp pool BRANCH3
internet(dhcp-config)#default-router 100.100.100.5
internet(dhcp-config)#network 100.100.100.4 255.255.255.252
internet(dhcp-config)#exit
Branch_2 Router interfaces Configuration:-
Branch_2(config)#interface fastEthernet 0/1
Branch_2(config-if)#description CONNECTED WITH INTERNET
Branch_2(config-if)#ip address dhcp
Branch_2(config-if)#no shut
Branch_2(config-if)#exit
Branch_2(config-if)#interface fastEthernet 0/0
Branch_2(config-if)#description CONNECTED WITH SW2
Branch_2(config-if)#ip address 192.168.4.1 255.255.255.0
Branch_2(config-if)#no shut
Branch_2(config-if)#exit
Branch_3(config)#interface fastEthernet 0/1
Branch_3(config-if)#description CONNECTED WITH INTERNET
Branch_3(config-if)#ip address dhcp
Branch_3(config-if)#no shut
Branch_3(config-if)#exit
Branch_3(config)#interface fastEthernet 0/0
Branch_3(config-if)#description CONNECTED WITH SW3
Branch_3(config-if)#ip address 192.168.3.1 255.255.255.0
Branch_3(config-if)#no shut
Branch_3(config-if)#exit
Terms:-
DEMVPN:- allows VPN tunnels to be setup and torn down on an as-needed basis
Multipoint GRE (mGRE):- Allows a single router interface to have multiple GRE
tunnels.
NHRP {Next Hop Resolution Protocol}:- Allows an interface configured for mGRE to
discover the IP address of the devices at the far end of a tunnel.
Tunnel interface Configuration
HQ_INDIA(config)#interface Tunnel 1
HQ_INDIA(config-if)# ip address 10.250.250.1 255.255.255.0 {tunnel ip address}
HQ_INDIA(config-if)# ip mtu 1400
HQ_INDIA(config-if)# ip nhrp authentication cisco {Authentication key}
HQ_INDIA(config-if)# ip nhrp map multicast dynamic {dynamically resolve next hop}
HQ_INDIA(config-if)# ip nhrp network-id 1 {all router have same network id}
HQ_INDIA(config-if)# ip tcp adjust-mss 1360 {mss:- maximum segment size
maximum TCP packets size}
HQ_INDIA(config-if)# no ip split-horizon {Disable the Split-horizon}
HQ_INDIA(config-if)# tunnel source FastEthernet0/1 {source interface}
HQ_INDIA(config-if)# tunnel mode gre multipoint
HQ_INDIA(config-if)#end
HQ_INDIA(config)#ip route 0.0.0.0 0.0.0.0 f0/1
Routing Protocol Configuration to advertise and form neighbor relationship
HQ_INDIA(config)#router rip
HQ_INDIA(config-router)#version 2
HQ_INDIA(config-router)#network 192.168.2.0 {Advertise Lan networks}
HQ_INDIA(config-router)#network 10.250.250.0 {advertise Tunnel networks}
HQ_INDIA(config-router)#no auto-summary
HQ_INDIA(config-router)#exit
Branch_2 Router interfaces Configuration
Branch_2(config)#interface Tunnel 1
Branch_2(config-if)# ip address 10.250.250.2 255.255.255.0
Branch_2(config-if)# ip mtu 1400
Branch_2(config-if)# ip nhrp authentication cisco
Branch_2(config-if)# ip nhrp map multicast dynamic
Branch_2(config-if)# ip nhrp map 10.250.250.1 100.100.100.2 {map the HQ router of
first tunnel interface and second public ip address}
Branch_2(config-if)# ip nhrp map multicast 100.100.100.2 {multicast traffic allowed for
HQ router Public address}
Branch_2(config-if)# ip nhrp network-id 1
Branch_2(config-if)# ip nhrp nhs 10.250.250.1 {nhs:-next-hop-server private
ip address of HQ tunnel interface}
Branch_2(config-if)# ip tcp adjust-mss 1360
Branch_2(config-if)# tunnel source FastEthernet0/1
Branch_2(config-if)# tunnel mode gre multipoint
Branch_2(config-if)#end
Routing Protocol Configuration to advertise and form neighbor relationship
Branch_2(config)#router rip
Branch_2(config-router)#version 2
Branch_2(config-router)#network 192.168.4.0 {Advertise Lan networks}
Branch_2(config-router)#network 10.250.250.0 {advertise Tunnel networks}
Branch_2(config-router)#no auto-summary
Branch_2(config-router)#exit
Branch_2(config)#ip route 0.0.0.0 0.0.0.0 f0/1
Branch_3 Router Tunnel interface Configuration:-
Branch_3(config)#interface Tunnel1
Branch_3(config-if)# ip address 10.250.250.3 255.255.255.0
Branch_3(config-if)# ip mtu 1400
Branch_3(config-if)# ip nhrp authentication cisco
Branch_3(config-if)# ip nhrp map multicast dynamic
Branch_3(config-if)# ip nhrp map 10.250.250.1 100.100.100.2 {map the HQ router of
first tunnel interface and second public ip address}
Branch_3(config-if)# ip nhrp map multicast 100.100.100.2 {multicast traffic allowed
for HQ router Public address}
Branch_3(config-if)# ip nhrp network-id 1
Branch_3(config-if)# ip nhrp nhs 10.250.250.1 {nhs:-next-hop-server
private ip address of HQ tunnel interface}
Branch_3(config-if)# ip tcp adjust-mss 1360
Branch_3(config-if)# tunnel source FastEthernet0/1
Branch_3(config-if)# tunnel mode gre multipoint
Branch_3(config-if)#end
Routing Protocol Configuration to advertise and form neighbor relationship
Branch_3(config)#router rip
Branch_3(config-router)#version 2
Branch_3(config-router)#network 192.168.3.0 {Advertise Lan networks}
Branch_3(config-router)#network 10.250.250.0 {advertise Tunnel networks}
Branch_3(config-router)#no auto-summary
Branch_3(config-router)#exit
Branch_3(config)#ip route 0.0.0.0 0.0.0.0 f0/1
Troubleshooting & Verification Commands
Show ip route
Show ip interface brief
Show ip protocols
Show ip nhrp
Show ip nhrp brief
Now test
“Ping and traceroute” PC2 to PC3
PC3 to PC2
PC1 to PC2
PC1 to PC3
What we will see Traffic from PC2 to PC3 will directly going from Branch2 to Branch3
And PC3 to PC2 will directly going from Branch3 to Branch2
And will bypass the HQ to reach these destination
And if we ping from internet router to our routers for these 10.250.250.0/24 or
192.168.x.x. networks
internet router will fail that’s mean our all traffic is going through multiple tunnels
X
ccnaccnplinux.blogspot.com
www.anysoftwarecrack.blogspot.com
