cisco dynamic multipoint ×××
注:
由于路由update会从同一个gre tunnel interface进出,因此要关闭一些路由的split-horizon 对于EIGRP
interface tunnel # no ip split-horizon eigrp AS_# no ip next-hop-self eigrp AS_#
对于RIP
interface tunnel # no ip split-horizon
对于OSPF
interface tunnel# ip ospf network broadcast ip ospf priority 10 //hub端配置 ip ospf priority 0 //spoke端配置
hub配置核心部分:
ip cef
!
crypto isakmp policy 10
encr aes
authentication pre-share
group 2
crypto isakmp key dm*** address 0.0.0.0 0.0.0.0
!
crypto ipsec transform-set dm*** ah-sha-hmac esp-aes
mode transport
!
crypto ipsec profile dm***
set transform-set dm***
!
interface Loopback0
ip address 1.1.1.1 255.255.255.255
!
interface Tunnel0
ip address 172.16.0.4 255.255.255.0
no ip redirects
ip mtu 1436
ip nhrp authentication dm***
ip nhrp map multicast dynamic
ip nhrp network-id 100
ip nhrp cache non-authoritative
ip ospf network broadcast
ip ospf priority 10
tunnel source Ethernet1/3
tunnel mode gre multipoint
tunnel key 100
tunnel protection ipsec profile dm***
!
interface Ethernet1/3
ip address 192.168.1.1 255.255.255.0
duplex full
!
router ospf 100
router-id 1.1.1.1
log-adjacency-changes
network 1.1.1.1 0.0.0.0 area 0
network 172.16.0.0 0.0.0.255 area 0
!
ip route 0.0.0.0 0.0.0.0 192.168.1.2
转载于:https://blog.51cto.com/ciscoskys/854934