Hub Gre Tunnel Interface Configuration - Cisco ROUTER-SDM-CD User Manual

Dynamic Multipoint VPN
Digital Certificates
Confirm Pre-Shared Key

Hub GRE Tunnel Interface Configuration

Select the interface that connects to the Internet
IP Address
Subnet Mask
Cisco Router and Security Device Manager 2.5 User's Guide
15-4
Select this button if your router uses digital certificates for authentication. Digital
certificates are configured under VPN Components>Public Key Infrastructure.
Reenter the key for confirmation. If the values in this field and the Pre-Shared Key
field do not match, Cisco SDM prompts you to reenter them.
Multipoint Generic Routing Encapsulation (mGRE) is used in a
to allow a single GRE interface on a
router. This greatly simplifies DMVPN configuration.
updates to be sent over IPSec connections.
Select the router interface that connects to the Internet. The GRE tunnel originates
from this interface.
Selecting an interface that uses a dialup connection may cause the connection to
be always up. You can examine supported interfaces in Interfaces and
Connections to determine if a dialup connection. Typically, interfaces such as
ISDN or Asynchronous Serial will be configured for a dialup connection.
Enter the IP address for the mGRE interface. This must be a private address and
be in the same subnet as the GRE interfaces of the other routers in the network.
For example, the GRE interfaces might share the subnet 10.10.6.0, and be given
IP addresses in the range 10.10.6.1 through 10.10.6.254.
Enter the mask for the subnet that the GRE interfaces are in. For example, the
mask for the subnet 10.10.6.0 could be 255.255.255.0. For more information, see
IP Addresses and Subnet
hub to support an IPSec tunnel to each
Masks.
Chapter 15 DMVPN
DMVPN network
spoke
GRE allows routing
OL-4015-12