ELTEX ESR Series - Configuration Example 2

ESR-Series. User manual
161
•
•
•
•
•
•
You can clear NHRP records with the command:
esr# clear ip nhrp
9.2.3 Configuration example 2
Objective:
Organize DMVPN between company offices with corresponding subnets LAN1 and LAN2, using mGRE tunnels,
NHRP (Next Hop Resolution Protocol), Dynamic Routing Protocol (OSPF), IPsec. In our example, we will have a
HUB router and two branches. The HUB is the DMVPN server (NHS), and the branches are DMVPN clients
(NHC).
When using the DMVPN scheme, the hub must be a DR router. Thus, the routes of local subnets spoke 1 and
spoke 2 will be relayed through the hub.
External IP addres of Hub — 150.115.0.5;
External IP address of Spoke-1 — 180.100.0.10;
External IP address of Spoke-2 — 140.114.0.4.
IPsec VPN parameters:
IKE:
Diffie-Hellman group: 2;
encryption algorithm: AES128;
authentication algorithm: MD5.
IPSEC:
Diffie-Hellman group: 2;
encryption algorithm: AES128;
authentication algorithm: MD5.