mirror of
https://github.com/vyos/vyos-documentation.git
synced 2025-10-26 08:41:46 +01:00
Initial document creation.
This commit is contained in:
parent
4c9f3adc5f
commit
08dc6a027f
102
docs/configexamples/dual-hub-dmvpn
Normal file
102
docs/configexamples/dual-hub-dmvpn
Normal file
@ -0,0 +1,102 @@
|
|||||||
|
|
||||||
|
########################
|
||||||
|
Dual-Hub DMVPN with VyOS
|
||||||
|
########################
|
||||||
|
|
||||||
|
DMVPN is a Dynamic Multipoint VPN technology that provides the capability
|
||||||
|
for creating a dynamic-mesh VPN network without having to pre-configure
|
||||||
|
(static) all possible tunnel end-point peers those simplifying deployment
|
||||||
|
and management of the newly added remote sites. There are 3 main protocols
|
||||||
|
primarily used to implement DMVPN:
|
||||||
|
|
||||||
|
* NHRP - provides the dynamic tunnel endpoint discovery mechanism (endpoint
|
||||||
|
registration, and endpoint discovery/lookup)
|
||||||
|
* mGRE - provides the tunnel encapsulation itself
|
||||||
|
* IPSec - protocols handle the key exchange, and crypto mechanism
|
||||||
|
|
||||||
|
For his example we are using the following devices:
|
||||||
|
|
||||||
|
* 2 x Hubs
|
||||||
|
* 3 x Spokes
|
||||||
|
* 1 x Client device (VPC)
|
||||||
|
* 1 x ISP router
|
||||||
|
|
||||||
|
The following software was used in the creation of this document:
|
||||||
|
|
||||||
|
* Operating system: VyOS
|
||||||
|
* Version: 1.3-beta-202112090443
|
||||||
|
* Image name: vyos-1.3-beta-202112090443-amd64.iso
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
********
|
||||||
|
Topology
|
||||||
|
********
|
||||||
|
.. image:: /_static/images/VyOS_Dual-Hub_DMVPN.png
|
||||||
|
:width: 80%
|
||||||
|
:align: center
|
||||||
|
:alt: Network Topology Diagram
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
******************************************
|
||||||
|
Network Addressing and Protocol Parameters
|
||||||
|
******************************************
|
||||||
|
|
||||||
|
The following ip addressing schema used for the devices IPv4 connectivity:
|
||||||
|
|
||||||
|
10.X1.0.0/30 - p2p Hubs to ISP networks, where X is Hub site number
|
||||||
|
10.Y1.1.0/24 - p2p Spokes to ISP networks(DHCP), where Y is Spoke site number
|
||||||
|
172.16.253.0/29 - tunnels addressing for Hub-1 connections
|
||||||
|
172.16.254.0/29 - tunnels addressing for Hub-2 connections
|
||||||
|
192.168.0.0/24 - HQ site local network
|
||||||
|
192.168.Z.0/24 - remote sites local network, where Z is Spoke site number
|
||||||
|
|
||||||
|
eBGP parameters for the routers:
|
||||||
|
|
||||||
|
AS65000 - HQ (Hub-1 and Hub-2)
|
||||||
|
AS6500X - Spokes, where X is Spoke site number
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
*************
|
||||||
|
Configuration
|
||||||
|
*************
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
Step-1: Configuring IGP and enabling MPLS LDP
|
||||||
|
=============================================
|
||||||
|
|
||||||
|
At the first step we need to configure the IP/MPLS backbone network using OSPF as
|
||||||
|
IGP protocol and LDP as label-switching protocol for the base connectivity between
|
||||||
|
**P** (rovider), **P** (rovider) **E** (dge) and **R** (oute) **R** (eflector) nodes:
|
||||||
|
|
||||||
|
- VyOS-P1:
|
||||||
|
|
||||||
|
.. code-block:: none
|
||||||
|
|
||||||
|
# interfaces
|
||||||
|
set interfaces dummy dum10 address '10.0.0.3/32'
|
||||||
|
set interfaces ethernet eth0 address '172.16.30.1/24'
|
||||||
|
set interfaces ethernet eth1 address '172.16.40.1/24'
|
||||||
|
set interfaces ethernet eth2 address '172.16.90.1/24'
|
||||||
|
set interfaces ethernet eth3 address '172.16.10.1/24'
|
||||||
|
set interfaces ethernet eth5 address '172.16.100.1/24'
|
||||||
|
|
||||||
|
# protocols ospf+ldp
|
||||||
|
set protocols mpls interface 'eth1'
|
||||||
|
set protocols mpls interface 'eth2'
|
||||||
|
set protocols mpls interface 'eth3'
|
||||||
|
set protocols mpls interface 'eth5'
|
||||||
|
set protocols mpls interface 'eth0'
|
||||||
|
set protocols mpls ldp discovery transport-ipv4-address '10.0.0.3'
|
||||||
|
set protocols mpls ldp interface 'eth0'
|
||||||
|
set protocols mpls ldp interface 'eth1'
|
||||||
|
set protocols mpls ldp interface 'eth2'
|
||||||
|
set protocols mpls ldp interface 'eth3'
|
||||||
|
set protocols mpls ldp interface 'eth5'
|
||||||
|
set protocols mpls ldp router-id '10.0.0.3'
|
||||||
|
set protocols ospf area 0 network '0.0.0.0/0'
|
||||||
|
set protocols ospf parameters abr-type 'cisco'
|
||||||
|
set protocols ospf parameters router-id '10.0.0.3
|
||||||
Loading…
x
Reference in New Issue
Block a user