Dmvpn; Dynamic Multipoint Vpn - Cisco OL-4015-08 User Manual

11
C H A P T E R

DMVPN

These help topics provide information about Dynamic Multipoint Virtual Private
Network (DMVPN) configuration screens.

Dynamic Multipoint VPN

This wizard will help you to configure your router as a Dynamic Multipoint VPN
(DMVPN) hub or DMVPN spoke. A typical VPN connection is a point-to-point
IPSec tunnel connecting two routers. DMVPN enables you to create a network
with a central hub that connects other remote routers, referred to as spokes using
a GRE over IPSec tunnel. IPSec traffic is routed through the hub to the spokes in
the network. SDM allows you to configure your router as a primary or a secondary
DMVPN hub, or as a spoke router in a DMVPN network.
The following link contains more information about DMVPN (requires CCO
login ID).
Multipoint IPSec VPNs
SDM supports the configuration of a hub-and-spoke DMVPN that uses IPSec
profiles to define encryption. You can configure a fully-meshed DMVPN, and use
crypto-maps to define encryption in the DMVPN using the CLI. Fully meshed
DMVPNs and DMVPNs using crypto maps are managed and modified using the
CLI. SDM supports the configuration of a DMVPN starting from IOS version
12.2(13)T.
SDM supports the configuration of a single DMVPN on a router.
In this screen, identify your router as a hub or as a spoke in the DMVPN network.
Cisco Router and Security Device Manager Version 2.2 User's Guide
11-1
OL-4015-08