ADVPN configuration examples
IPv4 full-mesh ADVPN configuration example
Network requirements
As shown in
information for all hubs and spokes. The AAA server performs authentication and accounting for
VAM clients. The two hubs back up each other, and perform data forwarding and route exchange.
•
Establish a permanent ADVPN tunnel between each spoke and each hub.
•
Establish a temporary ADVPN tunnel dynamically between the two spokes in the same ADVPN
domain.
Figure 146 Network diagram
Hub1
Tunnel1
IP network
Tunnel1
Spoke1
Site 1
Table 12 Interface and IP address assignment
Device
Hub 1
Hub 2
AAA server
Primary server
Secondary server
Configuring the primary VAM server
1.
Configure IP addresses for the interfaces. (Details not shown.)
2.
Configure AAA:
# Configure RADIUS scheme abc.
Figure
146, the primary and secondary VAM servers manage and maintain VAM client
GE2/0/1
GE2/0/1
GE2/0/1
GE2/0/1
GE2/0/2
GE2/0/2
Interface
IP address
GE2/0/1
1.0.0.1/24
Tunnel1
192.168.0.1/24
GE2/0/1
1.0.0.2/24
Tunnel1
192.168.0.2/24
1.0.0.10/24
GE2/0/1
1.0.0.11/24
GE2/0/1
1.0.0.12/24
Hub2
Tunnel1
Tunnel1
Spoke2
Hub-to-Hub static tunnel
Hub-to-Spoke static tunnel
Site 2
Spoke-to-Spoke dynamic tunnel
Device
Spoke 1
Spoke 2
349
AAA server
GE2/0/1
Primary server
GE2/0/1
Secondary server
Interface
IP address
GE2/0/1
1.0.0.3/24
GE2/0/2
192.168.1.1/24
Tunnel1
192.168.0.3/24
GE2/0/1
1.0.0.4/24
GE2/0/2
192.168.2.1/24
Tunnel1
192.168.0.4/24