Sim 09: DMVPN Phase 3 with IPsec¶
Blueprint 2.3
| Difficulty | Time target | Devices | Faults |
|---|---|---|---|
| Hard | 30 minutes | 4 x IOSv | 3 |
Scenario¶
A single-hub DMVPN connects head office R1 to two branches, R2 and R3, across an Internet provider (R4). The overlay is mGRE protected by IPsec (IKEv1, pre-shared key, transport mode). EIGRP AS 100 runs over the tunnel. The hub advertises only a summary, 10.0.0.0/8, to the spokes. This is phase 3: the hub sends NHRP redirects (ip nhrp redirect), and spokes act on them (ip nhrp shortcut) to build direct spoke-to-spoke tunnels even though they only have the summary route.
Download the lab
CML lab file · EVE-NG lab file
4 nodes. The lab boots already broken (the faults are in the start-up configs, so skip Break it). CML: Import a lab, then start it. EVE-NG: import the .unl from the lab list; if your image folder names differ, edit each node's image.
Free account required for the rest
The rest of this page is for members. You're seeing a free sample. A free account unlocks everything: every question bank, the timed exams, the cram sheets, the simulations and the lab files.
Unlock the full question banks and cram sheets
A free account opens every question bank, the timed practice exams, the printable cram sheets, all the simulations and the lab files. Without one you see a 5-question sample of each.
No card needed. Study tips by email are optional and off unless you tick the box. Your address is never sold or shared. Privacy policy · Terms
Signed in as . Your account
You're on the free account, so lessons after the first module, question banks, exams and cram sheets show a sample. See Track Pass and All-Access
Also from NetManager Systems: NetManager, network monitoring for multi-vendor networks. Try the NetManager, NetDiag, PCAP Analyzer and OpsDash demos: every new account gets a free 7-day read-only login to each.