DMVPN:- allows VPN tunnels to be setup and torn down on an as-needed basis
Multipoint GRE (mGRE):- Allows a single router interface to have multiple GRE tunnels.
In HUB and Spoke Topology DMVPN have a ability to allow us to directly connect Spoke
router without using HUB
This means our Spoke routers traffic directly going with each other without disturbing
the HUB router
HQ_INDIA interface Configuration:-
HQ_INDIA(config)#interface fastEthernet 0/0
HQ_INDIA(config-if)#description CONNECTED WITH SW1
HQ_INDIA(config-if)#ip address [Link] [Link]
HQ_INDIA(config-if)#no shut
HQ_INDIA(config-if)#exit
HQ_INDIA(config)#interface fastEthernet 0/1
HQ_INDIA(config-if)#description CONNECTED WITH INTERNET
HQ_INDIA(config-if)#ip address [Link] [Link] {static ip needed
on HQ }
HQ_INDIA(config-if)#no shut
HQ_INDIA(config-if)#exit
Internet Router interfaces Configuration:-
internet(config)#interface Ethernet 1/0
internet(config-if)#description CONNECTED WITH HQ_INDIA
internet(config-if)#ip address [Link] [Link]
internet(config-if)#no shut
internet(config-if)#exit
internet(config)#interface fastEthernet 0/1
internet(config-if)#description CONNECTED WITH BRANCH2
internet(config-if)#ip address [Link] [Link]
internet(config-if)#no shut
internet(config-if)#exit
internet(config)#interface fastEthernet 0/0
internet(config-if)#description CONNECTED WITH BRANCH3
internet(config-if)#ip address [Link] [Link]
internet(config-if)#no shut
internet(config-if)#exit
DHCP Server Configuration for Branch1 and Branch2 Routers for Dynamic ip address
We Suppose that these Connection are Cable modem or DSL or any
internet(config)#ip dhcp pool BRANCH2
internet(dhcp-config)#default-router [Link]
internet(dhcp-config)#network [Link] [Link]
internet(dhcp-config)#exit
internet(config)#ip dhcp pool BRANCH3
internet(dhcp-config)#default-router [Link]
internet(dhcp-config)#network [Link] [Link]
internet(dhcp-config)#exit
Branch_2 Router interfaces Configuration:-
Branch_2(config)#interface fastEthernet 0/1
Branch_2(config-if)#description CONNECTED WITH INTERNET
Branch_2(config-if)#ip address dhcp
Branch_2(config-if)#no shut
Branch_2(config-if)#exit
Branch_2(config-if)#interface fastEthernet 0/0
Branch_2(config-if)#description CONNECTED WITH SW2
Branch_2(config-if)#ip address [Link] [Link]
Branch_2(config-if)#no shut
Branch_2(config-if)#exit
Branch_3(config)#interface fastEthernet 0/1
Branch_3(config-if)#description CONNECTED WITH INTERNET
Branch_3(config-if)#ip address dhcp
Branch_3(config-if)#no shut
Branch_3(config-if)#exit
Branch_3(config)#interface fastEthernet 0/0
Branch_3(config-if)#description CONNECTED WITH SW3
Branch_3(config-if)#ip address [Link] [Link]
Branch_3(config-if)#no shut
Branch_3(config-if)#exit
Terms:-
DEMVPN:- allows VPN tunnels to be setup and torn down on an as-needed basis
Multipoint GRE (mGRE):- Allows a single router interface to have multiple GRE
tunnels.
NHRP {Next Hop Resolution Protocol}:- Allows an interface configured for mGRE to
discover the IP address of the devices at the far end of a tunnel.
Tunnel interface Configuration
HQ_INDIA(config)#interface Tunnel 1
HQ_INDIA(config-if)# ip address [Link] [Link] {tunnel ip address}
HQ_INDIA(config-if)# ip mtu 1400
HQ_INDIA(config-if)# ip nhrp authentication cisco {Authentication key}
HQ_INDIA(config-if)# ip nhrp map multicast dynamic {dynamically resolve next hop}
HQ_INDIA(config-if)# ip nhrp network-id 1 {all router have same network id}
HQ_INDIA(config-if)# ip tcp adjust-mss 1360 {mss:- maximum segment size
maximum TCP packets size}
HQ_INDIA(config-if)# no ip split-horizon {Disable the Split-horizon}
HQ_INDIA(config-if)# tunnel source FastEthernet0/1 {source interface}
HQ_INDIA(config-if)# tunnel mode gre multipoint
HQ_INDIA(config-if)#end
HQ_INDIA(config)#ip route [Link] [Link] f0/1
Routing Protocol Configuration to advertise and form neighbor relationship
HQ_INDIA(config)#router rip
HQ_INDIA(config-router)#version 2
HQ_INDIA(config-router)#network [Link] {Advertise Lan networks}
HQ_INDIA(config-router)#network [Link] {advertise Tunnel networks}
HQ_INDIA(config-router)#no auto-summary
HQ_INDIA(config-router)#exit
Branch_2 Router interfaces Configuration
Branch_2(config)#interface Tunnel 1
Branch_2(config-if)# ip address [Link] [Link]
Branch_2(config-if)# ip mtu 1400
Branch_2(config-if)# ip nhrp authentication cisco
Branch_2(config-if)# ip nhrp map multicast dynamic
Branch_2(config-if)# ip nhrp map [Link] [Link] {map the HQ router of
first tunnel interface and second public ip address}
Branch_2(config-if)# ip nhrp map multicast [Link] {multicast traffic allowed for
HQ router Public address}
Branch_2(config-if)# ip nhrp network-id 1
Branch_2(config-if)# ip nhrp nhs [Link] {nhs:-next-hop-server private
ip address of HQ tunnel interface}
Branch_2(config-if)# ip tcp adjust-mss 1360
Branch_2(config-if)# tunnel source FastEthernet0/1
Branch_2(config-if)# tunnel mode gre multipoint
Branch_2(config-if)#end
Routing Protocol Configuration to advertise and form neighbor relationship
Branch_2(config)#router rip
Branch_2(config-router)#version 2
Branch_2(config-router)#network [Link] {Advertise Lan networks}
Branch_2(config-router)#network [Link] {advertise Tunnel networks}
Branch_2(config-router)#no auto-summary
Branch_2(config-router)#exit
Branch_2(config)#ip route [Link] [Link] f0/1
Branch_3 Router Tunnel interface Configuration:-
Branch_3(config)#interface Tunnel1
Branch_3(config-if)# ip address [Link] [Link]
Branch_3(config-if)# ip mtu 1400
Branch_3(config-if)# ip nhrp authentication cisco
Branch_3(config-if)# ip nhrp map multicast dynamic
Branch_3(config-if)# ip nhrp map [Link] [Link] {map the HQ router of
first tunnel interface and second public ip address}
Branch_3(config-if)# ip nhrp map multicast [Link] {multicast traffic allowed
for HQ router Public address}
Branch_3(config-if)# ip nhrp network-id 1
Branch_3(config-if)# ip nhrp nhs [Link] {nhs:-next-hop-server
private ip address of HQ tunnel interface}
Branch_3(config-if)# ip tcp adjust-mss 1360
Branch_3(config-if)# tunnel source FastEthernet0/1
Branch_3(config-if)# tunnel mode gre multipoint
Branch_3(config-if)#end
Routing Protocol Configuration to advertise and form neighbor relationship
Branch_3(config)#router rip
Branch_3(config-router)#version 2
Branch_3(config-router)#network [Link] {Advertise Lan networks}
Branch_3(config-router)#network [Link] {advertise Tunnel networks}
Branch_3(config-router)#no auto-summary
Branch_3(config-router)#exit
Branch_3(config)#ip route [Link] [Link] f0/1
Troubleshooting & Verification Commands
Show ip route
Show ip interface brief
Show ip protocols
Show ip nhrp
Show ip nhrp brief
Now test
“Ping and traceroute” PC2 to PC3
PC3 to PC2
PC1 to PC2
PC1 to PC3
What we will see Traffic from PC2 to PC3 will directly going from Branch2 to Branch3
And PC3 to PC2 will directly going from Branch3 to Branch2
And will bypass the HQ to reach these destination
And if we ping from internet router to our routers for these [Link]/24 or
192.168.x.x. networks
internet router will fail that’s mean our all traffic is going through multiple tunnels
X
[Link]
[Link]
