01-31-2007 11:05 PM - edited 03-03-2019 05:26 AM
Hello,
I have some branch offices connected to central office.I am using OSPF as dynamic protocol. I am gonna to make branch offices working like stub or totally-stub for OSPF cloud. And also i want to make all this connections over IPsec. Has anybody got any configuration example or technotes from Cisco ?
thanks
02-01-2007 12:28 AM
Hi Leo,
you might want to look into Dynamic Multipoint VPN (DMVPN) with OSPF dynamic routing. DMVPN will establish the IPSec connectivity and OSPF will be used to send routing updates across the tunnels.
An example is found in "Advanced IPsec Deployments and Concepts of DMVPN Networks"
http://www.cisco.com/application/pdf/en/us/guest/products/ps6658/c1161/cdccont_0900aecd80313ca9.pdf
and more information at www.cisco.com/go/dmvpn
Regards, Martin
02-12-2007 08:47 PM
Hi Martin,
Thanks for your response.
I checked Cisco VPN (DMVPN) technology.It seems like you have one interface on router acting with several branch routers. In my case i have all branch routers connected through E1(time-slots).So i have different virtual serial interfaces for each branch office.
I thought about GRE over IPsec, normal Static Crypto-maps. What can you suggest?
02-12-2007 10:36 PM
Friend,
GRE over IPSEC seems to be the best option.
Have a look at this link
http://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a00800a43f6.shtml
HTH, rate if it does
Narayan
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: