Configuring DSVPN

Configure DSVPN to dynamically establish VPNs between branches and the HQ and between branches in the hub-spoke network model.

Usage Scenario

The HQ (hub) is connected to multiple branches (spoke) at different locations through the public network. To implement direct communication between branches and between the branches and the HQ, you need to deploy DSVPN on the hub-spoke network, implementing communication between branches and the HQ and between branches.

Pre-configuration Tasks

Before configuring static DSVPN, complete the following tasks:

Assign an IP address to each involved interface.

Configuring mGRE: Set the tunnel interface type to mGRE, so that multiple GRE tunnels can be established on a tunnel interface, simplifying the configuration.

Configuring Routes: Configuring Routes of DSVPN

Configuring NHRP: Configure the Next Hop Resolution Protocol (NHRP) so that spokes can obtain the peer IP address of each other by exchanging NHRP Resolution Request and Reply packets.

(Optional) Configuring an IPsec Profile: Configure an IPsec profile to encrypt transmitted data to improve network security.

Verifying the DSVPN Configuration: After completing the configuration task, verify the DSVPN configuration.