Security

The first half of the video shows you how to specify an interesting traffic that will cause a DMVPN spoke-to-spoke tunnel to be initiated, and utilized. In the second half, we will look at an ability to configure per-tunnel QoS from hub to spokes using NHRP group.

The video shows you how to build a redundant DMVPN network with dual-hub dual-cloud design. The failover capability is provided by routing protocol. With EIGRP chosen for demonstration in this video, we show how to perform a simple tweak in the routing metric to solve potential asymmetrical routing. The video concludes with failover testing and shows that spoke-to-spoke traffic is not interrupted upon a Hub failure.

The video shows you how to build a redundant DMVPN network with dual-hub dual-cloud design. The failover capability is provided by routing protocol. With EIGRP chosen for demonstration in this video, we show how to perform a simple tweak in the routing metric to solve potential asymmetrical routing. The video concludes with failover testing and shows that spoke-to-spoke traffic is not interrupted upon a Hub failure.

The video demonstrates another benefit of DMVPN Phase 3. We look at how DMVPN operates when a large network is partitioned into hierarchical regions for scalability and still maintain the capability of creating spoke-to-spoke tunnels. The video also points out some configuration pitfalls with the NHRP network id and tunnel key.

The video extends our previous knowledge on NHRP (see videos RS0015, RS0016) by adding IPSec and form DMVPN. We walk through the crypto configuration and point out the specific to support dynamic IPSec tunnel creation for spoke-to-spoke communication. DMVPN is one of the most popular forms of WAN connectivity over internet due to the low configuration requirement and ability to allow additional sites to be brought up with minimal effort, without modifying the Hub configuration.