Table of Contents
Advertisement
#Ensure that MTU matches one configured on the GRE interface on Orbit.
ip mtu 1346
ip nhrp authentication cisco123
ip nhrp map multicast dynamic
ip nhrp network-id 99
ip nhrp holdtime 300
ip nhrp shortcut
ip nhrp redirect
no ip split-horizon
ip tcp adjust-mss 1300
tunnel source GigabitEthernet0/0
tunnel mode gre multipoint
tunnel key 10000
tunnel protection ipsec profile DMVPN
!
# BGP routing configuration
router bgp 65500
bgp router-id 172.16.0.1
bgp log-neighbor-changes
bgp listen range 172.16.0.0/24 peer-group DMVPN-SPOKE
neighbor DMVPN-SPOKE peer-group
neighbor DMVPN-SPOKE remote-as 65550
neighbor DMVPN-SPOKE next-hop-self
neighbor DMVPN-SPOKE default-originate
!
ip route 0.0.0.0 0.0.0.0 172.18.175.62
!
12.2.2.2
Status
#IKE/IPsec status
DMVPN-HUB#show crypto ikev2 sa
IPv4 Crypto IKEv2 SA
Tunnel-id Local
1
172.18.175.45/4500
Encr: AES-CBC, keysize: 256, Hash: SHA96, DH Grp:5, Auth sign: RSA, Auth verify: RSA
Life/Active Time: 86400/1714 sec
IPv6 Crypto IKEv2 SA
DMVPN-HUB#show crypto ipsec sa
434
Remote
fvrf/ivrf
172.18.175.138/4500 none/none
MDS Orbit MCR/ECR Technical Manual
Status
READY
MDS 05-6632A01, Rev. F
Advertisement
Table of Contents
Troubleshooting
