Security

The video demonstrates another benefit of DMVPN Phase 3. We look at how DMVPN operates when a large network is partitioned into hierarchical regions for scalability and still maintain the capability of creating spoke-to-spoke tunnels. The video also points out some configuration pitfalls with the NHRP network id and tunnel key.

The video extends our previous knowledge on NHRP (see videos RS0015, RS0016) by adding IPSec and form DMVPN. We walk through the crypto configuration and point out the specific to support dynamic IPSec tunnel creation for spoke-to-spoke communication. DMVPN is one of the most popular forms of WAN connectivity over internet due to the low configuration requirement and ability to allow additional sites to be brought up with minimal effort, without modifying the Hub configuration.