Scribd Logo
Upload

Welcome to Scribd!

  • 38 views

    Faza 2

    Uploaded by

    MIHAIL ALEXANDRU MOLDOVAN
    This configuration document sets up a DMVPN hub-and-spoke network with one hub router and three spoke routers to connect remote networks over an IPsec VPN tunnel. The hub router and spokes use IKEv1 and pre-shared keys for authentication. OSPF is used to distribute routes between the spokes over the IPsec tunnels through the hub router.

    Copyright:

    © All Rights Reserved
    Download as DOCX, PDF, TXT or read online from Scribd

    Faza 2

    Uploaded by

    MIHAIL ALEXANDRU MOLDOVAN
    38 views6 pages
    This configuration document sets up a DMVPN hub-and-spoke network with one hub router and three spoke routers to connect remote networks over an IPsec VPN tunnel. The hub router and spokes use IKEv1 and pre-shared keys for authentication. OSPF is used to distribute routes between the spokes over the IPsec tunnels through the hub router.

    Original Title

    faza 2

    Copyright

    © © All Rights Reserved

    Available Formats

    DOCX, PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    This configuration document sets up a DMVPN hub-and-spoke network with one hub router and three spoke routers to connect remote networks over an IPsec VPN tunnel. The hub router and spokes use IKEv1 and pre-shared keys for authentication. OSPF is used to distribute routes between the spokes over the IPsec tunnels through the hub router.

    Copyright:

    © All Rights Reserved
    Download as DOCX, PDF, TXT or read online from Scribd
    Download as docx, pdf, or txt
    38 views6 pages

    Faza 2

    Uploaded by

    MIHAIL ALEXANDRU MOLDOVAN
    This configuration document sets up a DMVPN hub-and-spoke network with one hub router and three spoke routers to connect remote networks over an IPsec VPN tunnel. The hub router and spokes use IKEv1 and pre-shared keys for authentication. OSPF is used to distribute routes between the spokes over the IPsec tunnels through the hub router.

    Copyright:

    © All Rights Reserved
    Download as DOCX, PDF, TXT or read online from Scribd
    Download as docx, pdf, or txt
    You are on page 1of 6

    Conf t

    hostname Hub
    crypto isakmp policy 10
    encr aes 256
    authentication pre-share
    group 5
    exit
    crypto isakmp key cisco95 address 0.0.0.0 0.0.0.0
    crypto ipsec transform-set VPN esp-aes 256 esp-sha-hmac
    mode transport
    crypto ipsec profile dmvpn
    set transform-set VPN
    exit

    interface Tunnel1
    ip address 172.16.1.1 255.255.255.0
    no ip redirects
    no ip next-hop-self eigrp 10
    no ip split-horizon eigrp 10
    ip mtu 1400
    ip nhrp authentication test
    ip nhrp map multicast dynamic
    ip nhrp network-id 1
    ip tcp adjust-mss 1360
    tunnel source f0/0
    tunnel mode gre multipoint
    tunnel key 10
    tunnel protection ipsec profile dmvpn
    exit
    interface f0/0
    ip address 200.1.0.1 255.255.255.0
    no shut
    exit
    interface f0/1
    ip address 192.168.1.1 255.255.255.0
    no shut
    exit
    router eigrp 10
    network 172.16.1.0 0.0.0.255
    network 192.168.1.0 0.0.0.255
    no auto-summary
    exit
    router ospf 1
    network 200.1.0.0 0.0.0.255 area 0
    exit
    exit
    Spoke1
    Conf t
    hostname Spoke1
    crypto isakmp policy 10
    encr aes 256
    authentication pre-share
    group 5
    exit
    crypto isakmp key cisco95 address 0.0.0.0 0.0.0.0
    crypto ipsec transform-set VPN esp-aes 256 esp-sha-hmac
    mode transport
    crypto ipsec profile dmvpn
    set transform-set VPN
    exit

    interface Tunnel1
    ip address 172.16.1.2 255.255.255.0
    no ip redirects
    ip mtu 1400
    ip nhrp authentication test
    ip nhrp map multicast dynamic
    ip nhrp map 172.16.1.1 200.1.0.1
    ip nhrp map multicast 200.1.0.1
    ip nhrp network-id 1
    ip nhrp nhs 172.16.1.1
    delay 1000
    ip tcp adjust-mss 1360
    tunnel source f0/0
    tunnel mode gre multipoint
    tunnel key 10
    tunnel protection ipsec profile dmvpn
    exit
    interface f0/0
    ip address 200.2.0.1 255.255.255.0
    no shut
    exit
    interface f0/1
    ip address 192.168.2.1 255.255.255.0
    no shut
    exit

    router eigrp 10
    network 172.16.1.0 0.0.0.255
    network 192.168.2.0 0.0.0.255
    no auto-summary
    exit
    router ospf 1
    network 200.2.0.0 0.0.0.255 area 0
    exit
    exit

    Spoke2
    Conf t
    hostname Spoke2
    crypto isakmp policy 10
    encr aes 256
    authentication pre-share
    group 5
    exit
    crypto isakmp key cisco95 address 0.0.0.0 0.0.0.0
    crypto ipsec transform-set VPN esp-aes 256 esp-sha-hmac
    mode transport
    crypto ipsec profile dmvpn
    set transform-set VPN
    exit

    interface Tunnel1
    ip address 172.16.1.3 255.255.255.0
    no ip redirects
    ip mtu 1400
    ip nhrp authentication test
    ip nhrp map multicast dynamic
    ip nhrp map 172.16.1.1 200.1.0.1
    ip nhrp map multicast 200.1.0.1
    ip nhrp network-id 1
    ip nhrp nhs 172.16.1.1
    delay 1000
    ip tcp adjust-mss 1360
    tunnel source f0/0
    tunnel mode gre multipoint
    tunnel key 10
    tunnel protection ipsec profile dmvpn
    exit
    interface f0/0
    ip address 200.3.0.1 255.255.255.0
    no shut
    exit
    interface f0/1
    ip address 192.168.3.1 255.255.255.0
    no shut
    exit

    router eigrp 10
    network 172.16.1.0 0.0.0.255
    network 192.168.3.0 0.0.0.255
    no auto-summary
    exit
    router ospf 1
    network 200.3.0.0 0.0.0.255 area 0
    exit
    exit

    Spoke3
    Conf t
    hostname Spoke3
    crypto isakmp policy 10
    encr aes 256
    authentication pre-share
    group 5
    exit
    crypto isakmp key cisco95 address 0.0.0.0 0.0.0.0
    crypto ipsec transform-set VPN esp-aes 256 esp-sha-hmac
    mode transport
    crypto ipsec profile dmvpn
    set transform-set VPN
    exit

    interface Tunnel1
    ip address 172.16.1.4 255.255.255.0
    no ip redirects
    ip mtu 1400
    ip nhrp authentication test
    ip nhrp map multicast dynamic
    ip nhrp map 172.16.1.1 200.1.0.1
    ip nhrp map multicast 200.1.0.1
    ip nhrp network-id 1
    ip nhrp nhs 172.16.1.1
    delay 1000
    ip tcp adjust-mss 1360
    tunnel source f0/0
    tunnel mode gre multipoint
    tunnel key 10
    tunnel protection ipsec profile dmvpn
    exit
    interface f0/0
    ip address 200.4.0.1 255.255.255.0
    no shut
    exit
    interface f0/1
    ip address 192.168.4.1 255.255.255.0
    no shut
    exit
    router eigrp 10
    network 172.16.1.0 0.0.0.255
    network 192.168.4.0 0.0.0.255
    no auto-summary
    exit
    router ospf 1
    network 200.4.0.0 0.0.0.255 area 0
    exit
    exit

    ISP
    conf t
    hostname ISP
    interf f0/0
    ip address 200.1.0.2 255.255.255.0
    no shut
    exit
    interf f0/1
    ip address 200.2.0.2 255.255.255.0
    no shut
    exit
    interf f1/0
    ip address 200.3.0.2 255.255.255.0
    no shut
    exit
    interf f2/0
    ip address 200.4.0.2 255.255.255.0
    no shut
    exit
    router ospf 1
    network 200.1.0.0 0.0.0.255 area 0
    network 200.2.0.0 0.0.0.255 area 0
    network 200.3.0.0 0.0.0.255 area 0
    network 200.4.0.0 0.0.0.255 area 0
    exit
    exit
    ip 192.168.1.2 255.255.255.0 192.168.1.1
    ip 192.168.2.2 255.255.255.0 192.168.2.1
    ip 192.168.3.2 255.255.255.0 192.168.3.1
    ip 192.168.4.2 255.255.255.0 192.168.4.1

    You might also like

    pFad - Phonifier reborn

    Pfad - The Proxy pFad of © 2024 Garber Painting. All rights reserved.

    Note: This service is not intended for secure transactions such as banking, social media, email, or purchasing. Use at your own risk. We assume no liability whatsoever for broken pages.


    Alternative Proxies:

    Alternative Proxy

    pFad Proxy

    pFad v3 Proxy

    pFad v4 Proxy