OSPF over IPSec

Unanswered Question
Jan 31st, 2007

Hello,

I have some branch offices connected to central office.I am using OSPF as dynamic protocol. I am gonna to make branch offices working like stub or totally-stub for OSPF cloud. And also i want to make all this connections over IPsec. Has anybody got any configuration example or technotes from Cisco ?

thanks

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
mheusinger Thu, 02/01/2007 - 00:28

Hi Leo,

you might want to look into Dynamic Multipoint VPN (DMVPN) with OSPF dynamic routing. DMVPN will establish the IPSec connectivity and OSPF will be used to send routing updates across the tunnels.

An example is found in "Advanced IPsec Deployments and Concepts of DMVPN Networks"

http://www.cisco.com/application/pdf/en/us/guest/products/ps6658/c1161/cdccont_0900aecd80313ca9.pdf

and more information at www.cisco.com/go/dmvpn

Regards, Martin

Leo_Stobbe Mon, 02/12/2007 - 20:47

Hi Martin,

Thanks for your response.

I checked Cisco VPN (DMVPN) technology.It seems like you have one interface on router acting with several branch routers. In my case i have all branch routers connected through E1(time-slots).So i have different virtual serial interfaces for each branch office.

I thought about GRE over IPsec, normal Static Crypto-maps. What can you suggest?

Actions

This Discussion