DMVPN Faza 1 – Single Hub – IPSec

Technologia: WAN
Obszar: DMVPN
Dostawca: Cisco
Oprogramowanie: 12.X, 15.X ISR
Platforma: ISR 1800, 2800, 3800, 1900, 2900, 3900, Platformy: 4300, 4400

Jak przebiega konfiguracja IPSec  w sieci rozległej?

Przykład routera koncentrującego (Hub)

crypto isakmp policy 10
encryption 3des
authentication pre-share
hash md5
group 2
!
crypto isakmp key 0 GML@BS address 0.0.0.0 0.0.0.0
!
crypto ipsec transform-set 3DES_MD5 esp-3des esp-md5-hmac
mode transport
!
crypto ipsec profile DMVPN_PROFILE
set transform-set 3DES_MD5
!
interface Tunnel 0
tunnel protection ipsec profile DMVPN_PROFILE

Przykład routera Spoke


crypto isakmp policy 10
encryption 3des
authentication pre-share
hash md5
group 2
!
crypto isakmp key 0 GML@BS address 0.0.0.0 0.0.0.0
!
crypto ipsec transform-set 3DES_MD5 esp-3des esp-md5-hmac
mode transport
!
crypto ipsec profile DMVPN_PROFILE
set transform-set 3DES_MD5
!
interface Tunnel 0
tunnel protection ipsec profile DMVPN_PROFILE