DMVPN Tunnels - DMVPN Configuration

10 important questions on DMVPN Tunnels - DMVPN Configuration

What are the required steps to configure DMVPN on a Hub router?

Required:
  1. Create the tunnel interface
    interface tunnel tunnel-number
  2. Identify local source of the tunnel
    tunnel source ip-address | Interface-id
  3. Configure DMVPN as an mGRE tunnel
    tunnel mode gre multipoint
  4. Allocate IP address for DMVPN network (tunnel)
    ip address ip-address subnet-mask
  5. Enable NHRP on the tunnel interface and uniquely identify the DMVPN tunnel for the virtual interface.
    ip nhrp network-id 1-4294967295
  6. For Phase 3 DMVPN: Enable NHRP redirect functions
    ip nhrp redirect

What are the optional steps to configure DMVPN on a Hub Router?

Optional
  1. Define the tunnel key
    tunnel key 0-4294967295
  2. Enable multicast for NHRP
    ip nhrp map multicast dynamic
  3. Define tunnel bandwidth
    bandwidth 1-10000000
  4. Configure mtu for tunnel interface
    ip mtu mtu
  5. Define TCP Maximum Segment Size (MSS)
    ip tcp adjust-mss mss-size

What are the required steps to configure a DMVPN Spoke router?

Required:
  1. Create the tunnel interface
    interface tunnel tunnel-number
  2. Identify local source of the tunnel
    tunnel source ip-address | Interface-id
  3. Identify the tunnel destination (DMVPN Hub NBMA ip address)
    tunnel destination ip-address
  4. Allocate IP address for DMVPN network (tunnel)
    ip address ip-address subnet-mask | DHCP
  5. Enable NHRP on the tunnel interface and uniquely identify the DMVPN tunnel for the virtual interface.
    ip nhrp network-id 1-4294967295
  1. Specify the address of one or more NHRP NHSs (DMVPN Hub Routers)
    ip nhrp nhs nhs-address nbma nbma-address [multicast]
  • Higher grades + faster learning
  • Never study anything twice
  • 100% sure, 100% understanding
Discover Study Smart

What are the optional steps to configure a DMVPN Spoke Router?

Optional:
  1. Define the tunnel key
    tunnel key 0-4294967295
  2. Define tunnel bandwidth
    bandwidth 1-10000000
  3. Configure mtu for tunnel interface
    ip mtu mtu
  4. Define TCP Maximum Segment Size (MSS)
    ip tcp adjust-mss mss-size

What is the command to show the status of the DMVPN tunnels?

Show dmvpn [detail]

What is the command to show the NHRP cache and what does it contain?

The command is:
show ip nhrp [brief]

It contains:
  1. Network entry for host of network and the tunnel ip address to NBMA ip address.
  2. Inteface number, duration of existence and when it will expire.
  3. The NHRP mapping entry type.   

What are the required steps to confgure a DMVPN Spoke Router for Phase 3 DMVPN?

Required:
  1. Create the tunnel interface
    interface tunnel tunnel-number
  2. Identify local source of the tunnel
    tunnel source ip-address | Interface-id
  3. Configure the DMVPN tunnel as a GRE Multipoint tunnel
    tunnel mode gre multipoint
  4. Allocate IP address for DMVPN network (tunnel)
    ip address ip-address subnet-mask | DHCP
  5. Enable NHRP on the tunnel interface and uniquely identify the DMVPN tunnel for the virtual interface.
    ip nhrp network-id 1-4294967295
  6. Enable NHRP Shortcut
    ip nhrp shortcut
  7. Specify the address of one or more NHRP NHSs (DMVPN Hub Routers)
    ip nhrp nhs nhs-address nbma nbma-address [multicast]

What are the main differences in configuration between DMVPN Phase 1 and DMVPN Phase 3?

  1. For Phase 3 the ip nhrp redirect command is added on the Hub
  2. For Phase 3 the ip nhrp shortcut command is added on the Spoke
  3. For Phase 3 the tunnel is configured as mGRE with the command tunnel mode gre multipoint
  4. For Phase 3 the tunnel destination command is not used

How is NHRP authentication configured and what is important to note about it?

It is configured with the command:
ip nhrp authentication password

It is important to note that it is a weak form of authentication because the password is stored in plaintest. Hence it is primarily used to ensure correct tunnel form.

What is a problem that can occur with the NHRP Unique message flag and how can it be prevented?

  • It prevents an NHC to register with a different NBMA ip address than the NHS has stored in it's cache.
  • If NHC has a DHCP address this can cause issues if it receives a different address.
  • the command ip nhrp registration no-unique can be used to prevent the NHC to use the Unique flag in registration request packets to the NHS.

The question on the page originate from the summary of the following study material:

  • A unique study and practice tool
  • Never study anything twice again
  • Get the grades you hope for
  • 100% sure, 100% understanding
Remember faster, study better. Scientifically proven.
Trustpilot Logo