Cisco 3725 - Manual
Cisco 3725 – Manual, read for free online in PDF format. We hope this helps you resolve any issues you may have. If you have further questions, please contact us through the contact form.
Table of Contents:
- Page 2 – PRECAUTIONS; The DMVPN hub is configured and operational.; COMPONENTS; Figure 1 illustrates the network for the sample configuration.
- Page 3 – CONFIGURATION OF THE CISCO 3725 ROUTER; Following are the configurations on the Hub router:
- Page 5 – N1-OSPF NSSA external type 1, N2-OSPF NSSA external type 2
- Page 7 – CONFIGURATION OF THE CISCO 1751 SPOKE ROUTER; Following are the configurations on the Cisco 1751 spoke router:
- Page 9 – Verifying the Cisco 1751 Spoke Router Results
- Page 11 – CONFIGURATION OF THE OTHER ROUTERS; Current configuration :
- Page 13 – CISCO 831 ROUTER CONFIGURATION
- Page 15 – RELATED INFORMATION
- Page 16 – the Cisco Website at
All contents are Copyright © 1992–2005 Cisco Systems, Inc. All rights reserved. Important Notices and Privacy Statement.
Page 1 of 16
SOLUTION OVERVIEW
CONFIGURING DYNAMIC MULTIPOINT VPN
WITH ON-DEMAND ROUTING
OVERVIEW
This document provides a sample configuration for configuring On-Demand Routing (ODR) with Dynamic Multipoint VPN (DMVPN) in hub to
spoke configuration. The DMVPN feature simplifies the hub router IPsec configuration and supports dynamic IP addresses at the spoke router.
DMVPN combines Generic Routing Encapsulation (GRE) tunnels, IPsec encryption, and Next Hop Resolution Protocol (NHRP). It provides IP
routing for remote sites, while minimizing the overhead on the network devices. This sample configuration also allows load balancing with dual
ODR hub routers, failover to a single hub when a hub router fails, and the recovery from a hub router failure when it is recovered.
Figure 1. Network Diagram
PREREQUISITES
The sample configuration is based on the following assumptions:
•
Public IP addresses for the hub routers (10.0.149.221 and 10.0.149.220)
•
DMVPN network for tunnel interface on both hubs are 192.168.1.0/24 and 192.168.2.0/24
•
Spoke router can use static IP or dynamic IP addresses
•
Example uses Enhanced Interior Gateway Routing Protocol (EIGRP) as its dynamic routing protocol
•
Example uses pre-shared keys for authentication
•
Disabled split tunneling for the spoke router; this allows the Internet traffic to go through the hub only
LIMITATIONS
This guide provides the DMPVN configuration, but does not cover the following configuration:
•
Full router security audit: run a Security Device Manager (SDM) security audit in the wizard mode to lock down and secure the router.
•
Initial router configuration step: full configuration is shown in the following section.
"Loading the manual" means you need to wait until the file loads and becomes available for online reading. Some manuals are very large, and the time they take to appear depends on your internet speed.
Summary
© 2005 Cisco Systems, Inc. All rights reserved. Important notices, privacy statements, and trademarks of Cisco Systems, Inc. can be found on cisco.com. Page 2 of 16 • This configuration guide uses private addresses only. When using private addresses and connecting to the Internet, an appropriate Net...
© 2005 Cisco Systems, Inc. All rights reserved. Important notices, privacy statements, and trademarks of Cisco Systems, Inc. can be found on cisco.com. Page 3 of 16 CONFIGURATION OF THE CISCO 3725 ROUTER Following are the configurations on the Hub router: Current configuration: ! version 12.3 ! host...
© 2005 Cisco Systems, Inc. All rights reserved. Important notices, privacy statements, and trademarks of Cisco Systems, Inc. can be found on cisco.com. Page 5 of 16 VERIFYING THE CISCO 3725 ROUTER RESULTS Normal Operation This section provides information that can be used to confirm that the configu...