virtual access GW1000M Series - Page 287

30: Dynamic Multipoint Virtual Private Network (DMVPN)
_______________________________________________________________________________________________________
_____________________________________________________________________________________________________
© Virtual Access 2017
GW1000 Series User Manual
Issue: 1.9 Page 287 of 350
Flags: used up
Expires-In: 0:18
Interface: gre-GRE
Type: static
Protocol-Address: 11.11.11.1/29
NBMA-Address: 89.101.154.151
Flags: up
Interface
Description
Type
incomplete
Resolution request sent.
negative
Negative cached.
cached
Received/relayed resolution reply.
shortcut_route
Received/relayed resolution for route.
dynamic
NHC resolution.
dynamic_nhs
Dynamic NHS from dns-map.
static
Static mapping from config file.
dynamic_map
Static dns-map from config file.
local_route
Non-local destination, with local route.
local_addr
Local destination (IP or off-NBMA subnet).
Protocol Address
Tunnel IP address
NBMA-Address
Pre-NAT IP address if NBMA-NAT-OA-Address is present or real address if NAT
is not present.
NBMA-NAT-OA-Address
Post NAT IP address. This field is present when Address is translated in the
network.
Flags
up
Can send all packets (registration ok).
unique
Peer is unique.
used
Peer is kernel ARP table.
lower-up
openhrp script executed successfully.
Expires-In
Expiration time.
Table 100: Information table for DMVPN status
You can check IPSec status using UCI commands.
root@VA-router:~# ipsec status
Security Associations (1 up, 0 connecting):
dmvpn_89_101_154_151[1]: ESTABLISHED 2 hours ago,
10.68.234.133[10.68.234.133]...89.101.154.151[89.101.154.151]
dmvpn_89_101_154_151{1}: REKEYING, TRANSPORT, expires in 55 seconds
dmvpn_89_101_154_151{1}: 10.68.234.133/32[gre] === 192.168./32[gre]
dmvpn_89_101_154_151{1}: INSTALLED, TRANSPORT, ESP in UDP SPIs: cca7b970_i
d874dc90_o
dmvpn_89_101_154_151{1}: 10.68.234.133/32[gre] === 89.101.154.151/32[gre]