dmvpn实例+dhcp+rtr+route-map实用配置

《dmvpn实例+dhcp+rtr+route-map实用配置》由会员上传分享，免费在线阅读，更多相关内容在教育资源-天天文库。

1、dmvpn实例+dhcp+rtr+route-map实用配置上海和北京2个spoke点（cisco831)我在机房用一台设备做hub.公网ip后来编辑的有点乱大家对照top图看吧dmvpn配置大家都熟悉的，路由策略大家看top图就清楚了，不过路由怎么走，包括做的NAT,花了我很长时间叶请教了资深的CCIE，经过测试ok现在拿出来和大家分享iosver:c831-k9o3sy6-mz.124-4.T4.bin机房hubconfig(相关配置）cryptoisakmppolicy1authenticationpre

2、-sharecryptoisakmpkeyasiavestaddress0.0.0.00.0.0.0nocryptoisakmpccmcryptoipsectransform-setset2esp-desesp-md5-hmacmodetransport!cryptoipsecprofilevpn-profsettransform-setset2!interfaceTunnel1bandwidth512ipaddress10.255.255.1255.255.255.0noipredirectsipnatins

3、ideipnhrpauthenticationasiavestipnhrpmapmulticastdynamicipnhrpnetwork-id66ipnhrpholdtime300ipvirtual-reassemblyippolicyroute-mapbj-xxxdelay100000tunnelsourceFastEthernet0/1tunnelmodegremultipointtunnelkey6tunnelprotectionipsecprofilevpn-prof!interfaceFastEth

4、ernet0/0ipaddress210.243.aa.xx255.255.255.224ipnatoutsideipvirtual-reassemblyduplexautospeed10!interfaceFastEthernet0/1ipaddress210.17.bb.yy255.255.255.224duplexautospeedauto!noipclasslessiproute0.0.0.00.0.0.0210.17.bb.ccciproute192.168.1.0255.255.255.010.25

5、5.255.3iproute192.168.2.0255.255.255.010.255.255.2iproute218.242.dd.ff255.255.255.255210.17.bb.ccciproute222.66.94.zz255.255.255.252210.17.bb.ccc!!iphttpservernoiphttpsecure-serveripnatinsidesourcelistnatuseinterfaceFastEthernet0/0overload!ipaccess-listexten

6、dednatusepermitip192.168.1.00.0.0.255anypermitip192.168.2.00.0.0.255any!access-list115denyip192.168.1.00.0.0.255192.0.0.00.255.255.255access-list115denyip192.168.2.00.0.0.255192.0.0.00.255.255.255access-list115permitip192.168.1.00.0.0.255anyaccess-list115per

7、mitip192.168.2.00.0.0.255any!route-mapbj-xxxpermit10matchipaddress115setipnext-hop210.243.hh.gg!北京831配置北京采用adslconnectinternet!noipdhcpusevrfconnectedipdhcpexcluded-address192.168.2.32192.168.2.254!ipdhcppoolzimportallnetwork192.168.2.0255.255.255.0dns-serve

8、r202.145.138.200202.145.138.1210.82.8.1210.82.5.1default-router192.168.2.254netbios-node-typeh-node!!ipcefipsla1icmp-echo10.255.255.1source-ip10.255.255.2timeout2000frequency30ipslaschedule1star