Nagendra Kumar ... Sat, 10/11/2008 - 21:27
User Badges:
  • Cisco Employee,

Hi Rockburn,

Normally HSRP relates with LAN interface and DMVPN with WAN interface.

While configuring DMVPN, you need to create a tunnel interface with tunnel source as some address which can be reached from the other sites (loopback in most of the case). So I feel HSRP Virtual IP address may not have a role in DMVPN deployment.



Brent Rockburn Sat, 10/11/2008 - 22:22
User Badges:

Yes but you can have two routers with gig interfaces facing the WAN and have VPN tunnels terminating there. So it must be possible to have some sort of dual hub configuration. I'm just wondering if GRE DM tunnels are different. I can't find a lot of info on it.

Giuseppe Larosa Sat, 10/11/2008 - 22:56
User Badges:
  • Super Silver, 17500 points or more
  • Hall of Fame,

    Founding Member

Hello Brent,

if the two routers are spokes you can think to configure both to take part in DMVPN: they will advertise the same internal IP subnets:

if using iBGP one will be preferred if using an IGP both will be installed in the routing tables of other devices.

If the two routers are hub you can think of providing all the NHRP mapping info to reach each other inside mGRE tunnel configuration.

I had tried in some tests to use a loopback as tunnel source but it wasn't possible to use it: the tunnel source has to be the exit interface towards the WAN cloud.

From the other thread on DMVPN

on hub 1:

int tu0

ip nhrp map

ip nhrp map multicast

you need to link together the NHRP info on both hubs

Hope to help



This Discussion