cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
456
Views
0
Helpful
3
Replies

OSPF over IPSec

Leo_Stobbe
Level 1
Level 1

Hello,

I have some branch offices connected to central office.I am using OSPF as dynamic protocol. I am gonna to make branch offices working like stub or totally-stub for OSPF cloud. And also i want to make all this connections over IPsec. Has anybody got any configuration example or technotes from Cisco ?

thanks

3 Replies 3

mheusinger
Level 10
Level 10

Hi Leo,

you might want to look into Dynamic Multipoint VPN (DMVPN) with OSPF dynamic routing. DMVPN will establish the IPSec connectivity and OSPF will be used to send routing updates across the tunnels.

An example is found in "Advanced IPsec Deployments and Concepts of DMVPN Networks"

http://www.cisco.com/application/pdf/en/us/guest/products/ps6658/c1161/cdccont_0900aecd80313ca9.pdf

and more information at www.cisco.com/go/dmvpn

Regards, Martin

Hi Martin,

Thanks for your response.

I checked Cisco VPN (DMVPN) technology.It seems like you have one interface on router acting with several branch routers. In my case i have all branch routers connected through E1(time-slots).So i have different virtual serial interfaces for each branch office.

I thought about GRE over IPsec, normal Static Crypto-maps. What can you suggest?

Friend,

GRE over IPSEC seems to be the best option.

Have a look at this link

http://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a00800a43f6.shtml

HTH, rate if it does

Narayan

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Innovations in Cisco Full Stack Observability - A new webinar from Cisco