DVPN Configuration Example 1587[Spoke2] vam client name dvpn1spoke2[Spoke2-Vam-client-name-dvpn1spoke2] vpn 1# Specify the IP addresses of the VAM servers and set the pre-shared key.[Spoke2-Vam-client-name-dvpn1spoke2] server primary ip-address 192.168.1.22[Spoke2-Vam-client-name-dvpn1spoke2] server secondary ip-address 192.168.1.33[Spoke2-Vam-client-name-dvpn1spoke2] pre-shared-key simple 123# Create a local user named dvpn1spoke2, setting the password as dvpn1spoke2.[Spoke2-Vam-client-name-dvpn1spoke2] user dvpn1spoke2 password simple dvpn1spoke2[Spoke2-Vam-client-name-dvpn1spoke2] client enable[Spoke2-Vam-client-name-dvpn1spoke2] quit■ Configure the IPSec profile# Configure the IPSec proposal.[Spoke2] ipsec proposal vam[Spoke2-ipsec-proposal-vam] encapsulation-mode tunnel[Spoke2-ipsec-proposal-vam] transform esp[Spoke2-ipsec-proposal-vam] esp encryption-algorithm des[Spoke2-ipsec-proposal-vam] esp authentication-algorithm sha1[Spoke2-ipsec-proposal-vam] quit# Configure the IKE peer.[Spoke2] ike peer vam[Spoke2-ike-peer-vam] pre-shared-key abcde[Spoke2-ike-peer-vam] quit# Configure the IPSec profile.[Spoke2] ipsec profile vamp[Spoke2-ipsec-profile-vamp] proposal vam[Spoke2-ipsec-profile-vamp] ike-peer vam[Spoke2-ipsec-profile-vamp] sa duration time-based 600[Spoke2-ipsec-profile-vamp] pfs dh-group2■ Configure the DVPN tunnel# Configure tunnel interface Tunnel 1 for VPN 1.[Spoke2] interface tunnel 1[Spoke2-Tunnel1] tunnel-protocol dvpn udp[Spoke2-Tunnel1] vam client dvpn1spoke2[Spoke2-Tunnel1] ip address 10.0.1.4 255.255.255.0[Spoke2-Tunnel1] source ethernet 1/0[Spoke2-Tunnel1] ospf network-type p2mp[Spoke2-Tunnel1] ipsec profile vamp[Spoke2-Tunnel1] quit■ Configure OSPF# Configure OSPF for the public network.[Spoke2] ospf 100[Spoke2-ospf-100] area 0[Spoke2-ospf-100-area-0.0.0.0] network 192.168.1.4 0.0.0.255[Spoke2-ospf-100-area-0.0.0.0] quit# Configure OSPF for the private network.[Spoke2] ospf 200[Spoke2-ospf-200] area 0[Spoke2-ospf-200-area-0.0.0.0] network 10.0.1.4 0.0.0.255[Spoke2-ospf-200-area-0.0.0.0] quit
