Article

avatar

GNS3-Labs Topology: DMVPN with VRF and EIGRP Over IPSEC Tunnels

Written by LBSources from http://www.gns3-labs.com on September 14th, 2008 | 12 Comments

It’s great to see how many people love the site and what I am trying to do with it. We have another great lab from Dion with some cool learning and configurations. This is a lab for all levels.

You too can share your labs and co-admin this site by shooting me an email at postmy [AT] gns3-labs [DOT] com

Ok onto the lab..

Dion says…

There are 3 routers that are simulating a DMVPN network with GRE IPSEC Tunnels.

Behind each of these Routers are two more networks (in this case I have called one data and one voice).

These have been put in separate VRF’s, to simulate separating Voice & Data on one network, with separate DMVPN IPSEC tunnels.

Routing has been done with EIGRP, and setup on the routers so only voice networks can talk to other voice networks and so on.

Routers Used: 7200

IOS: c7200-jk9o3s-mz.124-17a

Feature of Topology: DMVPN, GRE, IPSec Tunnels, EIGRP, VRF (Virtual Routing and Forwarding)

Reading: Virtual Routing and Forwarding, DMVPN, Next Hop Resolution Protocol (NHRP)

Image:

Download: GNS3-Labs – DMVPN with VRF and EIGRP Over IPSEC Tunnels

BTW I put this into the lab using the GNS3 0.6 Beta which is Awesome and will soon be released!

Enjoy .. LBS

Thanks Dion!

40,633 views

Tags: , , , , , , , ,

12 Responses to “GNS3-Labs Topology: DMVPN with VRF and EIGRP Over IPSEC Tunnels”

  1. avatar dg

    if you look for this link, sure you’ll find the 0.6:

    Please see GNS3-Labs.com UNOFFICIAL GNS3-0.6 BETA Release

  2. avatar David

    Hey im was thinking of using this in production but I dont understand why I would need to use the VRF for the voice network?

  3. avatar Nafy

    Jus tried this lab at home , everything is fine except i am unable to ping voice networks…i also tried extended ping but it is not working….Any help ??

  4. avatar lga

    Hi David,

    It’s interesting to separate the data network from the voice network (on the entire network/backbone) for safety aspects. This avoids the wiretagging, the attacks on the callmanagers, gateway voices, …
    To do this, you need VRF feature. A FW allows only the desired traffic (management traffic for the Voice configuration, voice flows, …).

    Regards,

    Lionel

  5. avatar lga

    Hi Nafy,

    You can’t ping voice network from data network because you don’t have a route allowing inter-vrf access.
    You can test this on R1 for example: ip route vrf voice 0.0.0.0 0.0.0.0 fa1/0 192.168.0.1 global
    This route allows the voice traffic to join any network via the interface in the GRF. The “global” tag means “inter-vrf routing”.

    I didn’t test this lab… I can do it if you want..

    Regards,

    Lionel

  6. avatar Website

    Thank you for every other excellent post. Where else may anybody get that kind of information in such a perfect way of writing? I have a presentation next week, and I’m on the search for such information.

  7. avatar Cisco DMVPN with VRF and EIGRP Over IPSEC Tunnels | x443

    [...] DMVPN with VRF and EIGRP Over IPSEC Tunnels [...]

  8. avatar Tony

    Good day! I've been trying this lab at home but I kept on getting this error  " Error: 203 Bad number of parameters (3 with min/max=2/2). I'm hoping for a quick response on this one. Thank you very much!

  9. avatar Carlee Dezenzo

    Wow, wonderful blog layout! How long have you been blogging for? you made blogging look easy. The overall look of your website is great, as well as the content!. Thanks For Your article about GNS3-Labs Topology: DMVPN with VRF and EIGRP Over IPSEC Tunnels | GNS3 Labs :: Cisco Router Simulator Network Labs & Topologies .

  10. avatar Heike Batiz

    Wow, marvelous blog layout! How long have you been blogging for? you made blogging look easy. The overall look of your web site is magnificent, let alone the content!. Thanks For Your article about GNS3-Labs Topology: DMVPN with VRF and EIGRP Over IPSEC Tunnels | GNS3 Labs :: Cisco Router Simulator Network Labs & Topologies .

  11. avatar Carie Shkreli

    Wow, wonderful blog layout! How long have you been blogging for? you make blogging look easy. The overall look of your site is magnificent, as well as the content!. Thanks For Your article about GNS3-Labs Topology: DMVPN with VRF and EIGRP Over IPSEC Tunnels | GNS3 Labs :: Cisco Router Simulator Network Labs & Topologies .

  12. avatar Neil

    Hey I like your posting. I am also getting into dmvpn and studying. I wanted to simulate but I am having issues with the show dmvpn command on gns3 can you tell me if you had that issue and how you fixed it. I am using 3700 And 7200 series routers.

    Thx

    Neil



Subscribe To GNS3-Labs

Subscribe to GNS3 Labs :: Cisco Router Simulator Network Topologies


Show Love!

If you would like to donate for the time it takes to do all of this, feel free to use the link below. Thank you in advance for any contribution you make :)

Categories