Simplified Networking
  • Home
  • Technology VoD!
    • Cisco >
      • Route & Switch / Enterprise Infrastructure
  • Technology Breakdowns!
    • Route&Switch/Ent. Infra. >
      • L2 Technologies
      • L3 Technologies
      • VPN Technologies
      • Services >
        • IOS - Dynamic NAT
        • HSRP - IPv4 Setup
        • HSRP - Priority and Preemption
    • Service Provider >
      • IGPs (Interior Gateway Protocols)
      • First Hop Redundancy >
        • HSRP (Hot Standby Router Protocol) >
          • HSRP - IOS/IOS XE Setup
          • HSRP - IOS XR Setup
      • BGP (Border Gateway Protocol)
      • Inter AS Multicast (MSDP)
      • Intra-AS MPLS
      • Inter-AS MPLS
    • Security >
      • IOS Firewall
      • ASA Firewall
      • FirePOWER Threat Defense >
        • FTD - FTD NGFW Device Setup and FMC Integration
      • VPNs >
        • PKI
        • Site to Site VPNs
        • Remote Access VPNs >
          • IOS Remote Access
          • ASA Remote Access
    • Data Center >
      • Nexus 9000v >
        • Nexus 9000v - Enabling Features
        • Nexus 9000v - VLANs and Trunks
        • Nexus 9000v - LACP Port Channels
        • Nexus 9000v - vPC (Virtual Port Channel)
        • Nexus 9000v - OSPFv2
        • Nexus 9000v - VXLAN - Ingress Replication Flood and Learn
        • Nexus 9000v - IP Multicast
        • Nexus 9000v - VxLAN - Multicast Flood and Learn
        • Nexus 9000v - VxLAN - BGP EVPN with Multicast
        • Nexus 9000v - VxLAN - BGP EVPN w/Ingress Replication
        • Nexus 9000v - VxLAN - Inter-VxLAN Routing with BGP EVPN
        • Nexus 9000v - VXLAN - External Routing
      • Nexus 7000v
    • Palo Alto

DMVPN - Phase 1 (Initial Setup)

Picture
Configure a tunnel on IOS22 to connect to IOS24, IOS25 and CSR11.

IOS22#ping 211.0.0.11
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 211.0.0.11, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 9/21/43 ms

IOS22#ping 204.0.0.24
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 204.0.0.24, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 12/20/48 ms

IOS22#ping 25.0.0.25
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 25.0.0.25, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 12/29/49 ms

IOS22
interface Tunnel1
 ip address 10.1.1.22 255.255.255.0
 no ip redirects
 ip nhrp authentication cisco
 ip nhrp map multicast dynamic
 ip nhrp network-id 1
 tunnel source GigabitEthernet0/2
 tunnel mode gre multipoint
!
router eigrp 1
 network 10.1.1.0 0.0.0.255
 network 10.3.22.0 0.0.0.255
 network 10.4.22.0 0.0.0.255
 network 22.22.22.22 0.0.0.0

IOS24
interface Tunnel1
 ip address 10.1.1.24 255.255.255.0
 no ip redirects
 ip nhrp authentication cisco
 ip nhrp map 10.1.1.22 122.0.0.22
 ip nhrp map multicast 122.0.0.22
 ip nhrp network-id 1
 ip nhrp nhs 10.1.1.22
 tunnel source GigabitEthernet0/0
 tunnel mode gre multipoint
!
router eigrp 1
 network 10.1.1.0 0.0.0.255
 network 24.24.24.24 0.0.0.0
 network 172.16.103.0 0.0.0.255

IOS25
interface Tunnel1
 ip address 10.1.1.25 255.255.255.0
 no ip redirects
 ip nhrp authentication cisco
 ip nhrp network-id 1
 ip nhrp nhs 10.1.1.22 nbma 122.0.0.22 multicast
 tunnel source GigabitEthernet0/2
 tunnel mode gre multipoint
!
router eigrp 102
 network 10.102.25.0 0.0.0.255
 redistribute eigrp 1
router eigrp 1
 network 10.1.1.0 0.0.0.255
 redistribute eigrp 102

CSR11
interface Tunnel1
 ip address 10.1.1.11 255.255.255.0
 no ip redirects
 ip nhrp authentication cisco
 ip nhrp network-id 1
 ip nhrp nhs 10.1.1.22 nbma 122.0.0.22 multicast
 tunnel source GigabitEthernet1
 tunnel mode gre multipoint
!
router eigrp 1
 network 10.1.1.0 0.0.0.255
 network 10.11.19.0 0.0.0.255

IOS22#show dmvpn
Legend: Attrb --> S - Static, D - Dynamic, I - Incomplete
        N - NATed, L - Local, X - No Socket
        T1 - Route Installed, T2 - Nexthop-override
        C - CTS Capable
        # Ent --> Number of NHRP entries with same NBMA peer
        NHS Status: E --> Expecting Replies, R --> Responding, W --> Waiting
        UpDn Time --> Up or Down Time for a Tunnel
==========================================================================

Interface: Tunnel1, IPv4 NHRP Details
Type:Hub, NHRP Peers:3,

 # Ent  Peer NBMA Addr Peer Tunnel Add State  UpDn Tm Attrb
 ----- --------------- --------------- ----- -------- -----
     1 211.0.0.11            10.1.1.11    UP 00:11:23     D
     1 204.0.0.24            10.1.1.24    UP 00:14:37     D
     1 25.0.0.25             10.1.1.25    UP 00:12:27     D


​IOS22#show dmvpn detail
Legend: Attrb --> S - Static, D - Dynamic, I - Incomplete
        N - NATed, L - Local, X - No Socket
        T1 - Route Installed, T2 - Nexthop-override
        C - CTS Capable
        # Ent --> Number of NHRP entries with same NBMA peer
        NHS Status: E --> Expecting Replies, R --> Responding, W --> Waiting
        UpDn Time --> Up or Down Time for a Tunnel
==========================================================================

Interface Tunnel1 is up/up, Addr. is 10.1.1.22, VRF ""
   Tunnel Src./Dest. addr: 122.0.0.22/MGRE, Tunnel VRF ""
   Protocol/Transport: "multi-GRE/IP", Protect ""
   Interface State Control: Disabled
   nhrp event-publisher : Disabled
Type:Hub, Total NBMA Peers (v4/v6): 3

# Ent  Peer NBMA Addr Peer Tunnel Add State  UpDn Tm Attrb    Target Network
----- --------------- --------------- ----- -------- ----- -----------------
    1 211.0.0.11            10.1.1.11    UP 00:11:41     D       10.1.1.11/32
    1 204.0.0.24            10.1.1.24    UP 00:14:56     D       10.1.1.24/32
    1 25.0.0.25             10.1.1.25    UP 00:12:45     D       10.1.1.25/32


IOS22#show ip eigrp neighbors 
EIGRP-IPv4 Neighbors for AS(1)
H   Address                 Interface              Hold Uptime   SRTT   RTO  Q  Seq
                                                   (sec)         (ms)       Cnt Num
4   10.4.22.4               Gi0/0                    12 03:19:05   34   204  0  19
3   10.3.22.3               Gi0/1                    12 03:19:24   36   216  0  19
2   10.1.1.11               Tu1                      11 03:21:23   37  1434  0  11
1   10.1.1.25               Tu1                      10 03:21:25   38  1434  0  7
0   10.1.1.24               Tu1                      12 03:21:26   42  1434  0  11


IOS22#sh ip route eigrp
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area 
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2
       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
       ia - IS-IS inter area, * - candidate default, U - per-user static route
       o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
       a - application route
       + - replicated route, % - next hop override, p - overrides from PfR

Gateway of last resort is 122.0.0.1 to network 0.0.0.0

      10.0.0.0/8 is variably subnetted, 10 subnets, 2 masks
D        10.11.19.0/24 [90/26880256] via 10.1.1.11, 03:04:56, Tunnel1
D EX     10.102.12.0/24 [170/26880512] via 10.1.1.25, 03:09:33, Tunnel1
D EX     10.102.15.0/24 [170/26880512] via 10.1.1.25, 03:09:33, Tunnel1
D EX     10.102.25.0/24 [170/26880256] via 10.1.1.25, 03:09:33, Tunnel1
      19.0.0.0/32 is subnetted, 1 subnets
D        19.19.19.19 [90/27008256] via 10.1.1.11, 03:02:49, Tunnel1
      20.0.0.0/32 is subnetted, 1 subnets
D EX     20.20.20.20 [170/27008256] via 10.1.1.25, 03:09:33, Tunnel1
      24.0.0.0/32 is subnetted, 1 subnets
D        24.24.24.24 [90/27008000] via 10.1.1.24, 03:05:35, Tunnel1
      33.0.0.0/32 is subnetted, 1 subnets
D        33.33.33.33 [90/27008256] via 10.1.1.24, 03:05:36, Tunnel1
      172.16.0.0/24 is subnetted, 2 subnets
D        172.16.101.0 [90/3072] via 10.4.22.4, 03:12:16, GigabitEthernet0/0
                      [90/3072] via 10.3.22.3, 03:12:16, GigabitEthernet0/1
D        172.16.103.0 [90/26880256] via 10.1.1.24, 03:05:41, Tunnel1


​SW19#traceroute 172.16.101.34 
Type escape sequence to abort.
Tracing the route to 172.16.101.34
VRF info: (vrf in name/id, vrf out name/id)
  1 10.11.19.11 8 msec 5 msec 4 msec
  2 10.1.1.22 27 msec 16 msec 16 msec
  3 10.4.22.4 28 msec 37 msec 60 msec
  4 172.16.101.34 33 msec *  54 msec
Powered by Create your own unique website with customizable templates.
  • Home
  • Technology VoD!
    • Cisco >
      • Route & Switch / Enterprise Infrastructure
  • Technology Breakdowns!
    • Route&Switch/Ent. Infra. >
      • L2 Technologies
      • L3 Technologies
      • VPN Technologies
      • Services >
        • IOS - Dynamic NAT
        • HSRP - IPv4 Setup
        • HSRP - Priority and Preemption
    • Service Provider >
      • IGPs (Interior Gateway Protocols)
      • First Hop Redundancy >
        • HSRP (Hot Standby Router Protocol) >
          • HSRP - IOS/IOS XE Setup
          • HSRP - IOS XR Setup
      • BGP (Border Gateway Protocol)
      • Inter AS Multicast (MSDP)
      • Intra-AS MPLS
      • Inter-AS MPLS
    • Security >
      • IOS Firewall
      • ASA Firewall
      • FirePOWER Threat Defense >
        • FTD - FTD NGFW Device Setup and FMC Integration
      • VPNs >
        • PKI
        • Site to Site VPNs
        • Remote Access VPNs >
          • IOS Remote Access
          • ASA Remote Access
    • Data Center >
      • Nexus 9000v >
        • Nexus 9000v - Enabling Features
        • Nexus 9000v - VLANs and Trunks
        • Nexus 9000v - LACP Port Channels
        • Nexus 9000v - vPC (Virtual Port Channel)
        • Nexus 9000v - OSPFv2
        • Nexus 9000v - VXLAN - Ingress Replication Flood and Learn
        • Nexus 9000v - IP Multicast
        • Nexus 9000v - VxLAN - Multicast Flood and Learn
        • Nexus 9000v - VxLAN - BGP EVPN with Multicast
        • Nexus 9000v - VxLAN - BGP EVPN w/Ingress Replication
        • Nexus 9000v - VxLAN - Inter-VxLAN Routing with BGP EVPN
        • Nexus 9000v - VXLAN - External Routing
      • Nexus 7000v
    • Palo Alto