DMVPN Lab WorkBook

©2016 RHC Technologies

R H C TECHNOLOGIES

#LIKE #FOLLOW #WATCH

DMVPN LAB WORKBOOK

Prepared By Sai Linn Thu


R H C TECHNOLOGIES


GRE Site-to-Site VPN


R H C TECHNOLOGIES


R5 R6

R1

R3 R4

R2

Fa0/0

Fa0/0

Fa1/0 Fa1/0 Fa1/0 Fa1/0

Fa1/0

Fa2/0 Fa3/0

Fa4/0


Step 1 – IP Address Assignment

R1 R2 R3 R4 configure terminal int F0/0 ip add 10.1.12.1 255.255.255.0 !

configure terminal int F0/0 ip add 10.1.12.2 255.255.255.0 int F1/0 ip add 10.1.23.2 255.255.255.0 int F2/0 ip add 10.1.24.2 255.255.255.0 int F3/0 ip add 10.1.25.2 255.255.255.0 int F4/0 ip add 10.1.26.2 255.255.255.0 !

configure terminal int F1/0 ip add 10.1.23.3 255.255.255.0 !



R H C TECHNOLOGIES

R5 R6 configure terminal int F1/0 ip add 10.1.25.5 255.255.255.0 !



Step 2 – Configure Underlay Network using OSPF

R1 R2 R3 R4 configure terminal router ospf 1 router-id 1.1.1.1 int F0/0 ip ospf 1 area 0 !

configure terminal router ospf 1 router-id 2.2.2.2 int F0/0 ip ospf 1 area 0 int F1/0 ip ospf 1 area 0 int F2/0 ip ospf 1 area 0 int F3/0 ip ospf 1 area 0 int F4/0 ip ospf 1 area 0 !

configure terminal router ospf 1 router-id 3.3.3.3 int F1/0 ip ospf 1 area 0 !



R H C TECHNOLOGIES

R5 R6 configure terminal router ospf 1 router-id 5.5.5.5 int F1/0 ip ospf 1 area 0 !



Step 3 – Create Tunnels as Overlay Network ( IP Address – 172.16.x.x/24 )

R1 R3 configure terminal int tunnel 13 ip add 172.16.13.1 255.255.255.0 tunnel source 10.1.12.1 tunnel destination 10.1.23.3 !

configure terminal int tunnel 13 ip add 172.16.13.3 255.255.255.0 tunnel source 10.1.23.3 tunnel destination 10.1.12.1 !


R H C TECHNOLOGIES

Tunnel Between R1 and R3R1 R4



Tunnel Between R1 and R4



Tunnel Between R1 and R5R1 R6



Tunnel Between R1 and R6


R H C TECHNOLOGIES


R5 R6

R1

R3 R4

R2

Fa0/0

Fa0/0

Fa1/0

Lo 1 – 192.168.30.3/24

Fa1/0 Fa1/0 Fa1/0

Fa1/0

Fa2/0 Fa3/0

Fa4/0

Lo 1 – 192.168.40.4/24 Lo 1 – 192.168.50.5/24 Lo 1 – 192.168.60.6/24

Lo 1 – 192.168.10.1/24


Step 4 – Create Loopback 1 as LAN on R1, R3, R4, R5 & R6

R1 configure terminal int loopback 1 ip add 192.168.10.1 255.255.255.0 !


R H C TECHNOLOGIES

R3 R4 configure terminal int loopback 1 ip add 192.168.30.3 255.255.255.0 !

configure terminal int loopback 1 ip add 192.168.40.4 255.255.255.0 !




Step 5 – Configure Overlay Network using EIGRP AS 100

R1 configure terminal router eigrp 100 network 172.16.13.0 0.0.0.255 network 172.16.14.0 0.0.0.255 network 172.16.15.0 0.0.0.255 network 172.16.16.0 0.0.0.255 network 192.168.10.0 0.0.0.255 no auto-summary !


R H C TECHNOLOGIES

R3 R4 configure terminal router eigrp 100 network 172.16.13.0 0.0.0.255 network 192.168.30.0 0.0.0.255 no auto-summary !

configure terminal router eigrp 100 network 172.16.14.0 0.0.0.255 network 192.168.40.0 0.0.0.255 no auto-summary !




R H C TECHNOLOGIES


DMVPN Phase I


R H C TECHNOLOGIES


The best routing protocol over DMVPN is BGP or EIGRP.


R H C TECHNOLOGIES


R5 R6

R1

R3 R4

R2

Fa0/0

Fa0/0

Fa1/0 Fa1/0 Fa1/0 Fa1/0

Fa1/0

Fa2/0 Fa3/0

Fa4/0








R H C TECHNOLOGIES










R H C TECHNOLOGIES




Step 3 – Create Tunnels as Overlay Network ( IP Address – 172.16.10.x/24 )

R1 configure terminal int tunnel 1 ip add 172.16.10.1 255.255.255.0 tunnel source 10.1.12.1 tunnel mode gre multipoint !


R H C TECHNOLOGIES






Step 4 – Configure NHRP

R1 configure terminal int tunnel 1 ip nhrp network-id 100 ip nhrp map multicast dynamic !


R H C TECHNOLOGIES

R3 R4 configure terminal int tunnel 1 ip nhrp network-id 100 ip nhrp nhs 172.16.10.1 ip nhrp map 172.16.10.1 10.1.12.1 !

configure terminal int tunnel 1 ip nhrp network-id 100 ip nhrp nhs 172.16.10.1 ip nhrp map 172.16.10.1 10.1.12.1 !

R5 R6 configure terminal int tunnel 1 ip nhrp network-id 100 ip nhrp nhs 172.16.10.1 ip nhrp map 172.16.10.1 10.1.12.1 !

configure terminal int tunnel 1 ip nhrp network-id 100 ip nhrp nhs 172.16.10.1 ip nhrp map 172.16.10.1 10.1.12.1 !


Step 4 – Verify NHRPR1

R1#sh ip nhrp 172.16.10.3/32 via 172.16.10.3 Tunnel1 created 00:03:34, expire 01:56:25 Type: dynamic, Flags: unique registered used NBMA address: 10.1.23.3 172.16.10.4/32 via 172.16.10.4 Tunnel1 created 00:03:02, expire 01:56:57 Type: dynamic, Flags: unique registered used NBMA address: 10.1.24.4 172.16.10.5/32 via 172.16.10.5 Tunnel1 created 00:02:39, expire 01:57:20 Type: dynamic, Flags: unique registered used NBMA address: 10.1.25.5 172.16.10.6/32 via 172.16.10.6 Tunnel1 created 00:02:22, expire 01:57:37 Type: dynamic, Flags: unique registered used NBMA address: 10.1.26.6


R H C TECHNOLOGIES

R3 R4 R3#sh ip nhrp 172.16.10.1/32 via 172.16.10.1 Tunnel1 created 00:04:22, never expire Type: staJc, Flags: NBMA address: 10.1.12.1

R4#sh ip nhrp 172.16.10.1/32 via 172.16.10.1 Tunnel1 created 00:02:04, never expire Type: staJc, Flags: NBMA address: 10.1.12.1

R5 R6 R5#sh ip nhrp 172.16.10.1/32 via 172.16.10.1 Tunnel1 created 00:04:01, never expire Type: staJc, Flags: NBMA address: 10.1.12.1

R6#show ip nhrp 172.16.10.1/32 via 172.16.10.1 Tunnel1 created 00:03:58, never expire Type: staJc, Flags: NBMA address: 10.1.12.1


R H C TECHNOLOGIES


R5 R6

R1

R3 R4

R2

Fa0/0

Fa0/0

Fa1/0

Lo 1 – 192.168.30.3/24

Fa1/0 Fa1/0 Fa1/0

Fa1/0

Fa2/0 Fa3/0

Fa4/0

Lo 1 – 192.168.40.4/24 Lo 1 – 192.168.50.5/24 Lo 1 – 192.168.60.6/24

Lo 1 – 192.168.10.1/24





R H C TECHNOLOGIES







R1 configure terminal router eigrp 100 network 172.16.10.0 0.0.0.255 network 192.168.10.0 0.0.0.255 no auto-summary !


R H C TECHNOLOGIES






Step 7 – Disable ip split-horizon EIGRP on Hub ( R1 )

R1 configure terminal int tunnel 1 no ip split-horizon eigrp 100 !


R H C TECHNOLOGIES


R H C TECHNOLOGIES


DMVPN Phase II ( EIGRP )


R H C TECHNOLOGIES


R5 R6

R1

R3 R4

R2

Fa0/0

Fa0/0

Fa1/0 Fa1/0 Fa1/0 Fa1/0

Fa1/0

Fa2/0 Fa3/0

Fa4/0








R H C TECHNOLOGIES










R H C TECHNOLOGIES







R H C TECHNOLOGIES

R3 R4 configure terminal int tunnel 1 ip add 172.16.10.3 255.255.255.0 tunnel source 10.1.23.3 tunnel mode gre multipoint !

configure terminal int tunnel 1 ip add 172.16.10.4 255.255.255.0 tunnel source 10.1.24.4 tunnel mode gre multipoint !







R H C TECHNOLOGIES

R3 R4 configure terminal int tunnel 1 ip nhrp network-id 100 ip nhrp nhs 172.16.10.1 ip nhrp map 172.16.10.1 10.1.12.1 ip nhrp map multicast 10.1.12.1 !

configure terminal int tunnel 1 ip nhrp network-id 100 ip nhrp nhs 172.16.10.1 ip nhrp map 172.16.10.1 10.1.12.1 ip nhrp map multicast 10.1.12.1 !

R5 R6 configure terminal int tunnel 1 ip nhrp network-id 100 ip nhrp nhs 172.16.10.1 ip nhrp map 172.16.10.1 10.1.12.1 ip nhrp map multicast 10.1.12.1 !

configure terminal int tunnel 1 ip nhrp network-id 100 ip nhrp nhs 172.16.10.1 ip nhrp map 172.16.10.1 10.1.12.1 ip nhrp map multicast 10.1.12.1 !


R H C TECHNOLOGIES


R5 R6

R1

R3 R4

R2

Fa0/0

Fa0/0

Fa1/0

Lo 1 – 192.168.30.3/24

Fa1/0 Fa1/0 Fa1/0

Fa1/0

Fa2/0 Fa3/0

Fa4/0

Lo 1 – 192.168.40.4/24 Lo 1 – 192.168.50.5/24 Lo 1 – 192.168.60.6/24

Lo 1 – 192.168.10.1/24





R H C TECHNOLOGIES









R H C TECHNOLOGIES






Step 7 – Disable ip split-horizon & ip next-hop-self EIGRP on Hub ( R1 )

R1 configure terminal int tunnel 1 no ip split-horizon eigrp 100 no ip next-hop-self eigrp 100 !


R H C TECHNOLOGIES


R H C TECHNOLOGIES


DMVPN Phase III ( EIGRP )


R H C TECHNOLOGIES #2016


R5 R6

R1

R3 R4

R2

Fa0/0

Fa0/0

Fa1/0 Fa1/0 Fa1/0 Fa1/0

Fa1/0

Fa2/0 Fa3/0

Fa4/0








R H C TECHNOLOGIES










R H C TECHNOLOGIES







R H C TECHNOLOGIES







R1 configure terminal int tunnel 1 ip nhrp network-id 100 ip nhrp map multicast dynamic ip nhrp redirect !


R H C TECHNOLOGIES

R3 R4 configure terminal int tunnel 1 ip nhrp network-id 100 ip nhrp nhs 172.16.10.1 ip nhrp map 172.16.10.1 10.1.12.1 ip nhrp map multicast 10.1.12.1 ip nhrp shortcut !

configure terminal int tunnel 1 ip nhrp network-id 100 ip nhrp nhs 172.16.10.1 ip nhrp map 172.16.10.1 10.1.12.1 ip nhrp map multicast 10.1.12.1 ip nhrp shortcut !

R5 R6 configure terminal int tunnel 1 ip nhrp network-id 100 ip nhrp nhs 172.16.10.1 ip nhrp map 172.16.10.1 10.1.12.1 ip nhrp map multicast 10.1.12.1 ip nhrp shortcut !

configure terminal int tunnel 1 ip nhrp network-id 100 ip nhrp nhs 172.16.10.1 ip nhrp map 172.16.10.1 10.1.12.1 ip nhrp map multicast 10.1.12.1 ip nhrp shortcut !




R5 R6

R1

R3 R4

R2

Fa0/0

Fa0/0

Fa1/0

Lo 1 – 192.168.30.3/24

Fa1/0 Fa1/0 Fa1/0

Fa1/0

Fa2/0 Fa3/0

Fa4/0

Lo 1 – 192.168.40.4/24 Lo 1 – 192.168.50.5/24 Lo 1 – 192.168.60.6/24

Lo 1 – 192.168.10.1/24





R H C TECHNOLOGIES









R H C TECHNOLOGIES






Step 7 – Disable ip split-horizon ( R1 )

R1 configure terminal int tunnel 1 no ip split-horizon eigrp 100 !


R H C TECHNOLOGIES




DMVPN Phase II ( Dual Hub/Single Cloud )

( EIGRP )




R5 R6

R1

R3 R4

R2

Fa0/0

Fa0/0

Fa1/0 Fa1/0 Fa1/0 Fa1/0

Fa1/0

Fa2/0 Fa3/0

Fa4/0

R11

Fa0/1

Fa0/0

Fa1/0 Fa1/0



R1 R2 R11 configure terminal int F0/0 ip add 10.1.12.1 255.255.255.0 !

configure terminal int F0/0 ip add 10.1.12.2 255.255.255.0 int F0/1 ip add 10.1.112.2 255.255.255.0 int F1/0 ip add 10.1.23.2 255.255.255.0 int F2/0 ip add 10.1.24.2 255.255.255.0 int F3/0 ip add 10.1.25.2 255.255.255.0 int F4/0 ip add 10.1.26.2 255.255.255.0 !



R H C TECHNOLOGIES







R1 R2 R11 configure terminal router ospf 1 router-id 1.1.1.1 int F0/0 ip ospf 1 area 0 !

configure terminal router ospf 1 router-id 2.2.2.2 int F0/0 ip ospf 1 area 0 int F0/1 ip ospf 1 area 0 int F1/0 ip ospf 1 area 0 int F2/0 ip ospf 1 area 0 int F3/0 ip ospf 1 area 0 int F4/0 ip ospf 1 area 0 !



R H C TECHNOLOGIES









R H C TECHNOLOGIES










R H C TECHNOLOGIES

R3 R4 configure terminal int tunnel 1 ip nhrp network-id 100 ip nhrp nhs 172.16.10.1 ip nhrp nhs 172.16.10.11 ip nhrp map 172.16.10.1 10.1.12.1 ip nhrp map 172.16.10.11 10.1.112.11 ip nhrp map multicast 10.1.12.1 ip nhrp map multicast 10.1.112.11 !

configure terminal int tunnel 1 ip nhrp network-id 100 ip nhrp nhs 172.16.10.1 ip nhrp nhs 172.16.10.11 ip nhrp map 172.16.10.1 10.1.12.1 ip nhrp map 172.16.10.11 10.1.112.11 ip nhrp map multicast 10.1.12.1 ip nhrp map multicast 10.1.112.11 !

R5 R6 configure terminal int tunnel 1 ip nhrp network-id 100 ip nhrp nhs 172.16.10.1 ip nhrp nhs 172.16.10.11 ip nhrp map 172.16.10.1 10.1.12.1 ip nhrp map 172.16.10.11 10.1.112.11 ip nhrp map multicast 10.1.12.1 ip nhrp map multicast 10.1.112.11 !

configure terminal int tunnel 1 ip nhrp network-id 100 ip nhrp nhs 172.16.10.1 ip nhrp nhs 172.16.10.11 ip nhrp map 172.16.10.1 10.1.12.1 ip nhrp map 172.16.10.11 10.1.112.11 ip nhrp map multicast 10.1.12.1 ip nhrp map multicast 10.1.112.11 !





R5 R6

R1

R3 R4

R2

Fa0/0

Fa0/0

Fa1/0 Fa1/0 Fa1/0 Fa1/0

Fa1/0

Fa2/0 Fa3/0

Fa4/0

R11

Fa0/1

Fa0/0

Fa1/0 Fa1/0

Lo 1 – 192.168.30.3/24 Lo 1 – 192.168.40.4/24 Lo 1 – 192.168.50.5/24 Lo 1 – 192.168.60.6/24

192.168.111.x/24


Step 5 – Create LAN on R1, R11, R3, R4, R5 & R6

R1 configure terminal int Fa1/0 ip add 192.168.111.1 255.255.255.0 !


R H C TECHNOLOGIES





R11 configure terminal int Fa1/0 ip add 192.168.111.11 255.255.255.0 !





R H C TECHNOLOGIES







Step 7 – Disable ip split-horizon & ip next-hop-self EIGRP on Hub ( R1 , R11 )



R H C TECHNOLOGIES


© www.rhctechnologies.com

R H C TECHNOLOGIES

RHC Technologies


Technology

DMVPN Lab WorkBook