!
crypto ipsec transform-set TS esp-aes-256 esp-sha-hmac
crypto ipsec profile GRE
set transform-set TS
interface Tunnel0
ip address [Link] [Link]
ip mtu 1300
ip nhrp authentication wHaTeV3R
ip nhrp map multicast dynamic
ip nhrp network-id 1234
ip nhrp holdtime 300
tunnel source FastEthernet0/0
tunnel mode gre multipoint
tunnel key 1234
tunnel protection ipsec profile GRE
Listing 2
Example: Remote Site for Simple DMVPN
!
crypto ipsec transform-set TS esp-aes-256 esp-sha-hmac
crypto ipsec profile GRE
set transform-set TS
interface Tunnel0
ip address [Link] [Link]
ip mtu 1300
ip nhrp authentication wHaTeV3R
ip nhrp map [Link] [Link]
ip nhrp map multicast [Link]
ip nhrp network-id 1234
ip nhrp holdtime 300
ip nhrp map nhs [Link]
tunnel source FastEthernet0/0
tunnel mode gre multipoint
tunnel key 1234
tunnel protection ipsec profile GRE
!
!
crypto ipsec transform-set TS esp-aes-256 esp-sha-hmac
mode transport
crypto ipsec profile GRE
set transform-set TS
interface Tunnel0
ip address [Link] [Link]
ip nhrp authentication wHaTeV3R
ip nhrp map multicast dynamic
ip nhrp network-id 1234
ip nhrp holdtime 300
tunnel source FastEthernet0/0
tunnel mode gre multipoint
tunnel key 1234
tunnel protection ipsec profile GRE
!
interface Tunnel0
no ip split-horizon
ip address [Link] [Link]
ip nhrp authentication wHaTeV3R
ip nhrp map multicast dynamic
ip nhrp network-id 1234
ip nhrp holdtime 300
tunnel source FastEthernet0/0
tunnel mode gre multipoint
tunnel key 1234
tunnel protection ipsec profile GRE
router rip
version 2
no auto-summary
network [Link]
network [Link]
distribute-list 1 in FastEthernet0/0
distribute-list 1 out FastEthernet0/0
distribute-list 2 in FastEthernet0/1
distribute-list 2 out FastEthernet0/1
access-list 1 permit [Link] [Link]
access-list 2 permit [Link] [Link]
!
!
interface Tunnel0
ip address [Link] [Link]
ip nhrp authentication wHaTeV3R
ip nhrp map multicast dynamic
ip nhrp network-id 1234
ip nhrp holdtime 300
tunnel source FastEthernet0/0
tunnel mode gre multipoint
tunnel key 1234
tunnel protection ipsec profile GRE
route-map SummaryOnly permit 10
match tag 100
ip route [Link] [Link] Null0 250 tag 100
!
router rip
version 2
no auto-summary
redistribute static route-map SummaryOnly
network [Link]
network [Link]
distribute-list 1 in FastEthernet0/0
distribute-list 1 out FastEthernet0/0
distribute-list 2 in FastEthernet0/1
distribute-list 2 out FastEthernet0/1
access-list 1 permit [Link] [Link]
access-list 2 permit [Link] [Link]
!
!
interface Tunnel0
ip ospf network broadcast
ip ospf priority 10
router ospf 1
! WAN domain
network [Link] [Link] area 0
router ospf 2
! VPN domain
network [Link] [Link] area 0
!
!
interface Tunnel0
ip ospf network broadcast
ip ospf priority 0
router ospf 1
! WAN domain
network [Link] [Link] area 0
router ospf 2
! VPN domain
network [Link] [Link] area 0
interface Tunnel0
ip ospf network point-to-multipoint
router ospf 1
! WAN domain
network [Link] [Link] area 0
router ospf 2
! VPN domain
network [Link] [Link] area 0
interface Tunnel0
no ip split-horizon eigrp 2
no ip next-hop-self eigrp 2
router eigrp 1
! WAN domain
no auto-summary
network [Link] [Link]
router eigrp 2
! VPN domain
no auto-summary
network [Link]
!
!
interface Tunnel0
! Recommended solution:
ip summary-address eigrp 2 [Link] [Link]
! or alternatively:
no ip split-horizon eigrp 2
router eigrp 1
! WAN domain
no auto-summary
network [Link] [Link]
router eigrp 2
! VPN domain
no auto-summary
network [Link]
interface Tunnel1
description Primary DMVPN Cloud
! OSPF:
ip ospf cost 5
! EIGRP:
delay 5
interface Tunnel2
description Backup DMVPN Cloud
! OSPF:
ip ospf cost 10
! EIGRP:
delay 10
!
access-list 1 permit any
router rip
offset-list 1 out 3 Tunnel2
!