mirror of
				https://github.com/vyos/vyos-documentation.git
				synced 2025-10-26 08:41:46 +01:00 
			
		
		
		
	Initial document creation.
This commit is contained in:
		
							parent
							
								
									4c9f3adc5f
								
							
						
					
					
						commit
						08dc6a027f
					
				
							
								
								
									
										102
									
								
								docs/configexamples/dual-hub-dmvpn
									
									
									
									
									
										Normal file
									
								
							
							
						
						
									
										102
									
								
								docs/configexamples/dual-hub-dmvpn
									
									
									
									
									
										Normal file
									
								
							| @ -0,0 +1,102 @@ | ||||
| 
 | ||||
| ######################## | ||||
| Dual-Hub DMVPN with VyOS | ||||
| ######################## | ||||
| 
 | ||||
| DMVPN is a Dynamic Multipoint VPN technology that provides the capability  | ||||
| for creating a dynamic-mesh VPN network without having to pre-configure  | ||||
| (static) all possible tunnel end-point peers those simplifying deployment  | ||||
| and management of the newly added remote sites. There are 3 main protocols  | ||||
| primarily used to implement DMVPN: | ||||
| 
 | ||||
| * NHRP - provides the dynamic tunnel endpoint discovery mechanism (endpoint  | ||||
| registration, and endpoint discovery/lookup)  | ||||
| * mGRE - provides the tunnel encapsulation itself  | ||||
| * IPSec - protocols handle the key exchange, and crypto mechanism | ||||
| 
 | ||||
| For his example we are using the following devices: | ||||
| 
 | ||||
| * 2 x Hubs | ||||
| * 3 x Spokes | ||||
| * 1 x Client device (VPC) | ||||
| * 1 x ISP router | ||||
| 
 | ||||
| The following software was used in the creation of this document: | ||||
| 
 | ||||
| * Operating system: VyOS | ||||
| * Version: 1.3-beta-202112090443 | ||||
| * Image name: vyos-1.3-beta-202112090443-amd64.iso | ||||
| 
 | ||||
| 
 | ||||
| 
 | ||||
| ******** | ||||
| Topology | ||||
| ******** | ||||
| .. image:: /_static/images/VyOS_Dual-Hub_DMVPN.png | ||||
|    :width: 80% | ||||
|    :align: center | ||||
|    :alt: Network Topology Diagram | ||||
| 
 | ||||
| 
 | ||||
| 
 | ||||
| ****************************************** | ||||
| Network Addressing and Protocol Parameters | ||||
| ****************************************** | ||||
| 
 | ||||
| The following ip addressing schema used for the devices IPv4 connectivity: | ||||
| 
 | ||||
| 10.X1.0.0/30 - p2p Hubs to ISP networks, where X is Hub site number | ||||
| 10.Y1.1.0/24 - p2p Spokes to ISP networks(DHCP), where Y is Spoke site number | ||||
| 172.16.253.0/29 - tunnels addressing for Hub-1 connections | ||||
| 172.16.254.0/29 - tunnels addressing for Hub-2 connections | ||||
| 192.168.0.0/24 - HQ site local network | ||||
| 192.168.Z.0/24 - remote sites local network, where Z is Spoke site number | ||||
| 
 | ||||
| eBGP parameters for the routers: | ||||
| 
 | ||||
| AS65000 - HQ (Hub-1 and Hub-2) | ||||
| AS6500X - Spokes, where X is Spoke site number | ||||
| 
 | ||||
| 
 | ||||
| 
 | ||||
| ************* | ||||
| Configuration | ||||
| ************* | ||||
| 
 | ||||
| 
 | ||||
| 
 | ||||
| Step-1: Configuring IGP and enabling MPLS LDP | ||||
| ============================================= | ||||
| 
 | ||||
| At the first step we need to configure the IP/MPLS backbone network using OSPF as  | ||||
| IGP protocol and LDP as label-switching protocol for the base connectivity between  | ||||
| **P** (rovider), **P** (rovider) **E** (dge) and **R** (oute) **R** (eflector) nodes: | ||||
| 
 | ||||
| - VyOS-P1: | ||||
| 
 | ||||
| .. code-block:: none | ||||
|     | ||||
|    # interfaces  | ||||
|    set interfaces dummy dum10 address '10.0.0.3/32' | ||||
|    set interfaces ethernet eth0 address '172.16.30.1/24' | ||||
|    set interfaces ethernet eth1 address '172.16.40.1/24' | ||||
|    set interfaces ethernet eth2 address '172.16.90.1/24' | ||||
|    set interfaces ethernet eth3 address '172.16.10.1/24' | ||||
|    set interfaces ethernet eth5 address '172.16.100.1/24' | ||||
|     | ||||
|    # protocols ospf+ldp | ||||
|    set protocols mpls interface 'eth1' | ||||
|    set protocols mpls interface 'eth2' | ||||
|    set protocols mpls interface 'eth3' | ||||
|    set protocols mpls interface 'eth5' | ||||
|    set protocols mpls interface 'eth0' | ||||
|    set protocols mpls ldp discovery transport-ipv4-address '10.0.0.3' | ||||
|    set protocols mpls ldp interface 'eth0' | ||||
|    set protocols mpls ldp interface 'eth1' | ||||
|    set protocols mpls ldp interface 'eth2' | ||||
|    set protocols mpls ldp interface 'eth3' | ||||
|    set protocols mpls ldp interface 'eth5' | ||||
|    set protocols mpls ldp router-id '10.0.0.3' | ||||
|    set protocols ospf area 0 network '0.0.0.0/0' | ||||
|    set protocols ospf parameters abr-type 'cisco' | ||||
|    set protocols ospf parameters router-id '10.0.0.3 | ||||
		Loading…
	
	
			
			x
			
			
		
	
		Reference in New Issue
	
	Block a user