HUB配置
第一步:
int tu0
ip add 172.16.1.3 255.255.255.0
ip nhrp authentication cisco
ip nhrp map multicast dynamic
ip nhrp network-id 100
tunnel source s0/0
tunnel mode gre multipoint
tunnel key 12345
no ip next-hop-self eigrp 200
no ip split-horizon eigrp 200
ip mtu 1400
bandwidth 1000
ip tcp adjust-mss 1360
ip nhrp holdtime 450
delay 1000
第二步:
crypto isakmp key dmvpnkey add 0.0.0.0
crypto ipsec profile pro
set transform-set myset
int tu0
tunnel protection ipsec profile pro
SPOKE配置
第一步:
int tu 0
ip add
ip nhrp authe dmvpn
ip nhrp map 172.16.1.3 201.1.36.3(前一个IP地址是Tu0地址,后一个地址是物理接口地址)
ip nhrp map multicast 201.1.36.3
ip nhrp network-id 100
ip nhrp nhs 172.16.1.3
tunnel source s0/0
tunnel mode gre multipoint
tunnel key 12345
ip mtu 1400
bandwidth 1000
ip tcp adjust-mss 1360
ip nhrp holdtime 450
delay 1000
第二步:
crypto isakmp key dmvpnkey add 0.0.0.0
crypto ipsec profile pro
set transform-set myset
int tu0
tunnel protection ipsec profile pro