cisco 双hub双dmvpn配置实例.doc

VPN配置实例系列（一）cisco 双hub双dmvpn配置实例（原创） 2011-08-16 17:51 （HUB-1）AIR1#show runBuilding configuration... upgrade fpd autoversion 12.4hostname AIR1aaa new-model!aaa authentication login login local noneaaa session-id commonip source-routeip cefno ip domain lookupno ipv6 cef!multilink bundle-name authenticatedusername cisco privilege 15 secret 5 $1$2HQI$6HPxKq33L6fHLOq.mNEJ6.archivelog confighidekeys!crypto isakmp policy 10hash md5authentication pre-sharegroup 2crypto isakmp key two.hub.key address 0.0.0.0 0.0.0.0!crypto ipsec transform-set two.hub.set esp-3des esp-md5-hmacmode transport!crypto ipsec profile two.hub.profileset transform-set two.hub.set!interface Loopback0ip address 1.1.4.1 255.255.255.0ip ospf network point-to-point!interface Tunnel0ip address 10.0.10.1 255.255.255.0no ip redirectsip mtu 1400ip nhrp authentication two.authip nhrp map multicast dynamicip nhrp network-id 10ip nhrp holdtime 600ip ospf network broadcastip ospf priority 10delay 1000tunnel source Serial1/1tunnel mode gre multipointtunnel key 2012tunnel protection ipsec profile two.hub.profile!interface FastEthernet0/0ip address 172.17.3.2 255.255.255.0duplex autospeed auto!interface Serial1/1ip address 201.0.1.2 255.255.255.0serial restart-delay 0router ospf 100router-id 1.1.4.1log-adjacency-changesnetwork 10.0.10.0 0.0.0.255 area 1network 172.17.3.0 0.0.0.255 area 0!ip forward-protocol ndip route 0.0.0.0 0.0.0.0 201.0.1.1line con 0exec-timeout 0 0logging synchronouslogin authentication loginstopbits 1line aux 0stopbits 1line vty 0 4!end----------------------------------------------------- (HUB-2)AIR2#show runBuilding configuration... version 12.4hostname AIR2enable password cisco!aaa new-model!aaa authentication login login local none!aaa session-id commonmemory-size iomem 5!ip cefno ip domain lookupip auth-proxy max-nodata-conns 3ip admission max-nodata-conns 3!multilink bundle-name authenticated user