DMVPN高级.pdf

DMVPN高级.pdf

《DMVPN高级.pdf》由会员分享，可在线阅读，更多相关《DMVPN高级.pdf（97页珍藏版）》请在冰豆网上搜索。

22006CiscoSystems,Inc.Allrightsreserved.CiscoPublicSEC-401012469_04_2006_c2AdvancedConceptsofDynamicMultipointVPNs（DMVPN）SEC-4010成都互联神州思科专业技术培训学校培训网站：

www.ciscohuawei.netQQ:

505836736互联神州思科专业技术培训技术论坛：

www.ciscohuawei.com一品阳光32006CiscoSystems,Inc.Allrightsreserved.CiscoPublicSEC-401012469_04_2006_c2OtherVPNSessionsNetworkers2006SEC-2010:

DeployingRemoteAccessIPSecurityandSSLVPNsSEC-2011:

DeployingSite-to-SiteIPSecVPNsSEC-2012:

DeployingDynamicMultipointVPNsSEC-3010:

TroubleshootingCiscoIOSFirewall-BasedandCiscoSecurePIXFirewall-BasedIPSecVPNsSEC-3011:

TroubleshootingIPSecandSSLImplementationsonCiscoVPN3000SeriesConcentratorsSEC-4010:

AdvancedConceptsofDynamicMultipointVPNsSEC-4011:

AdvancedTopicsinEncryptionStandardsandProtocolsRST-2366:

Large-scaleIPsecAggregationNetworks成都互联神州思科专业技术培训学校培训网站：

www.ciscohuawei.netQQ:

505836736互联神州思科专业技术培训技术论坛：

www.ciscohuawei.com一品阳光42006CiscoSystems,Inc.Allrightsreserved.CiscoPublicSEC-401012469_04_2006_c2AgendaDMVPNOverviewDMVPNDetailsHubandSpokeDynamicMesh（spoke-to-spoke）Phase2Phase3InteractionwithotherFeaturesNAT,VRF,QoS成都互联神州思科专业技术培训学校培训网站：

www.ciscohuawei.netQQ:

505836736互联神州思科专业技术培训技术论坛：

www.ciscohuawei.com一品阳光52006CiscoSystems,Inc.Allrightsreserved.CiscoPublicSEC-401012469_04_2006_c2DMVPNOverview成都互联神州思科专业技术培训学校培训网站：

www.ciscohuawei.netQQ:

505836736互联神州思科专业技术培训技术论坛：

www.ciscohuawei.com一品阳光62006CiscoSystems,Inc.Allrightsreserved.CiscoPublicSEC-401012469_04_2006_c2ALittleHistoryofDMVPNInitialConceptSummer2000PureIPsec?

IPsec+GRE?

InitialreleaseinIOS12.2（13）TBasichub-and-spokeandspoke-spokecapabilitiesDMVPNPhase112.3（6）,12.3（7）TMakeHub-and-spokeproductionreadyDMVPNPhase212.3（9a）,12.3（8）T1MakeSpoke-spokeproductionreadyDMVPNPhase312.4（6）TChangesinspoke-spoketoscalebetterandremovesomerestrictionsinPhase2成都互联神州思科专业技术培训学校培训网站：

www.ciscohuawei.netQQ:

505836736互联神州思科专业技术培训技术论坛：

www.ciscohuawei.com一品阳光72006CiscoSystems,Inc.Allrightsreserved.CiscoPublicSEC-401012469_04_2006_c2DynamicMultipointVPN（DMVPN）MajorFeaturesConfigurationreductionandno-touchdeploymentSupportsIPunicast,IPmulticastanddynamicRoutingProtocols.Supportsremotepeerswithdynamicallyassignedaddresses.SupportsspokeroutersbehinddynamicNATandhubroutersbehindstaticNAT.Dynamicspoke-spoketunnelsforscalingpartial/fullmeshVPNs.CanbeusedwithoutIPsecEncryptionWorkswithMPLS;GREtunnelsand/ordatapacketsinVRFsandtagswitchingthroughthetunnels.Widevarietyofnetworkdesignsandoptions.成都互联神州思科专业技术培训学校培训网站：

www.ciscohuawei.netQQ:

505836736互联神州思科专业技术培训技术论坛：

www.ciscohuawei.com一品阳光82006CiscoSystems,Inc.Allrightsreserved.CiscoPublicSEC-401012469_04_2006_c2Point-to-PointGRE（p-pGRE）withIPsecEncapsulateinGREandthenencryptwithIPsecIPseccanthensupportIPunicastandIPmulticastDynamicRoutingprotocolsMulti-Protocol（CDP,IPX,DECnet.）EasiertoconfigureTrivialEncryptionACLs（permitgrehosthost）ReducesthenumberofSAsButCantsupportdynamicallyaddressedpeersLargeScaleDesigns?

Largeconfiguration成都互联神州思科专业技术培训学校培训网站：

www.ciscohuawei.netQQ:

505836736互联神州思科专业技术培训技术论坛：

www.ciscohuawei.com一品阳光92006CiscoSystems,Inc.Allrightsreserved.CiscoPublicSEC-401012469_04_2006_c2MultipointGRE（mGRE）TunnelsSameasp-pGREtunnelsIPunicast,multicastanddynamicroutingprotocolsEncryptioncontrolledbyIProutingnotACLSingletunnelinterface（multipoint）Non-BroadcastMulti-Access（NBMA）NetworkSmallerhubconfiguration（tunnelprotection）Dynamicspoke-hubandspoke-spoketunnelsNextHopResolutionProtocol（NHRP）VPNIPtoNBMAIPaddressmappingShort-cutforwardingDirectsupportfordynamicaddressesandNAT成都互联神州思科专业技术培训学校培训网站：

www.ciscohuawei.netQQ:

505836736互联神州思科专业技术培训技术论坛：

www.ciscohuawei.com一品阳光102006CiscoSystems,Inc.Allrightsreserved.CiscoPublicSEC-401012469_04_2006_c2DynamicRoutingNewIPRouting/ForwardingModelRegularIPnetworksIProutingupdatesanddatapacketstraversesamephysical/logicallinksRoutingProtocolmonitorsstateofalllinksthatdatapacketscanuse.DMVPNIPnetworksIProutingupdatesandIPmulticastdatapacketsonlytraversehub-and-spoketunnelsUnicastIPdatapacketstraversebothhub-and-spokeanddirectdynamicspoke-spoketunnelsRoutingprotocoldoesntmonitorstateofspoke-spoketunnels成都互联神州思科专业技术培训学校培训网站：

www.ciscohuawei.netQQ:

505836736互联神州思科专业技术培训技术论坛：

www.ciscohuawei.com一品阳光112006CiscoSystems,Inc.Allrightsreserved.CiscoPublicSEC-401012469_04_2006_c2DynamicRoutingProtocolsEIGRPGoodforhub-and-spokeandspoke-spokeMorecontrol,mediumoverhead,fasterconvergenceOSPFOkayforhub-and-spoke,maximumof2hubs