DMVPN Phase 1 Hub & Spoke IPSec example
Technology: WAN
Area: DMVPN
Vendor: Cisco
Software: 12.X , 15.X ISR
Platform: ISR 1800, 2800, 3800, 1900, 2900, 3900, Platforms: 4300, 4400
Hub router example:
crypto isakmp policy 10
encryption 3des
authentication pre-share
hash md5
group 2
!
crypto isakmp key 0 AV1U@OLU address 0.0.0.0 0.0.0.0
!
crypto ipsec transform-set 3DES_MD5 esp-3des esp-md5-hmac
mode transport
!
crypto ipsec profile DMVPN_PROFILE
set transform-set 3DES_MD5
!
interface Tunnel 0
tunnel protection ipsec profile DMVPN_PROFILE
Spoke A & B routers example:
crypto isakmp policy 10
encryption 3des
authentication pre-share
hash md5
group 2
!
crypto isakmp key 0 AV1U@OLU address 0.0.0.0 0.0.0.0
!
crypto ipsec transform-set 3DES_MD5 esp-3des esp-md5-hmac
mode transport
!
crypto ipsec profile DMVPN_PROFILE
set transform-set 3DES_MD5
!
interface Tunnel 0
tunnel protection ipsec profile DMVPN_PROFILE