Edit Dynamic Multipoint Vpn (Dmvpn) - Cisco OL-4015-08 User Manual

Edit Dynamic Multipoint VPN (DMVPN)

Firewall
View Details
Edit Dynamic Multipoint VPN (DMVPN)
Interface
Cisco Router and Security Device Manager Version 2.2 User's Guide
11-12
If a firewall has been applied to the interface that was designated as the tunnel
source, SDM can add access rule entries to the configuration so that GRE, IPSec,
and ISAKMP traffic is allowed through the firewall.
Click this button to view the access control entries that SDM will add to the access
rule if you select Allow GRE, IPSec, and ISAKMP traffic through the firewall.
These entries allow both kinds of
Security Protocol (ESP), and Authentication Header Protocol (AHP).
This window displays the existing
enables you to create a network with a central
routers, referred to as spokes. SDM supports hub-and-spoke network topology, in
which GRE over IPSec traffic is routed through the hub. SDM allows you to
configure your router as a primary or a secondary DMVPN hub, or as a spoke
router in a DMVPN network.
The following link contains more information about DMVPN (requires CCO
login ID). Multipoint IPSec VPNs
SDM supports the configuration of a hub-and-spoke DMVPN that uses IPSec
profiles to define encryption. You can configure a fully-meshed DMVPN, and use
crypto-maps to define encryption in the DMVPN using the CLI. Fully meshed
DMVPNs and DMVPNs using crypto maps are managed and modified using the
CLI.
SDM supports the configuration of a
The hub should be configured first, to establish the hub IP addresses and the
routing parameters that the spokes must be configured with. For other
recommendations on how to configure the routers in a DMVPN, see
Configuration Recommendations.
The physical interface from which this tunnel originates.
ISAKMP traffic, GRE
DMVPN tunnel configurations. DMVPN
hub that connects other remote
single DMVPN on a router.
Chapter 11 DMVPN
traffic, Encapsulating
DMVPN
OL-4015-08