DMVPN高级.pdf
《DMVPN高级.pdf》由会员分享,可在线阅读,更多相关《DMVPN高级.pdf(97页珍藏版)》请在冰豆网上搜索。
22006CiscoSystems,Inc.Allrightsreserved.CiscoPublicSEC-401012469_04_2006_c2AdvancedConceptsofDynamicMultipointVPNs(DMVPN)SEC-4010成都互联神州思科专业技术培训学校培训网站:
www.ciscohuawei.netQQ:
505836736互联神州思科专业技术培训技术论坛:
www.ciscohuawei.com一品阳光32006CiscoSystems,Inc.Allrightsreserved.CiscoPublicSEC-401012469_04_2006_c2OtherVPNSessionsNetworkers2006SEC-2010:
DeployingRemoteAccessIPSecurityandSSLVPNsSEC-2011:
DeployingSite-to-SiteIPSecVPNsSEC-2012:
DeployingDynamicMultipointVPNsSEC-3010:
TroubleshootingCiscoIOSFirewall-BasedandCiscoSecurePIXFirewall-BasedIPSecVPNsSEC-3011:
TroubleshootingIPSecandSSLImplementationsonCiscoVPN3000SeriesConcentratorsSEC-4010:
AdvancedConceptsofDynamicMultipointVPNsSEC-4011:
AdvancedTopicsinEncryptionStandardsandProtocolsRST-2366:
Large-scaleIPsecAggregationNetworks成都互联神州思科专业技术培训学校培训网站:
www.ciscohuawei.netQQ:
505836736互联神州思科专业技术培训技术论坛:
www.ciscohuawei.com一品阳光42006CiscoSystems,Inc.Allrightsreserved.CiscoPublicSEC-401012469_04_2006_c2AgendaDMVPNOverviewDMVPNDetailsHubandSpokeDynamicMesh(spoke-to-spoke)Phase2Phase3InteractionwithotherFeaturesNAT,VRF,QoS成都互联神州思科专业技术培训学校培训网站:
www.ciscohuawei.netQQ:
505836736互联神州思科专业技术培训技术论坛:
www.ciscohuawei.com一品阳光52006CiscoSystems,Inc.Allrightsreserved.CiscoPublicSEC-401012469_04_2006_c2DMVPNOverview成都互联神州思科专业技术培训学校培训网站:
www.ciscohuawei.netQQ:
505836736互联神州思科专业技术培训技术论坛:
www.ciscohuawei.com一品阳光62006CiscoSystems,Inc.Allrightsreserved.CiscoPublicSEC-401012469_04_2006_c2ALittleHistoryofDMVPNInitialConceptSummer2000PureIPsec?
IPsec+GRE?
InitialreleaseinIOS12.2(13)TBasichub-and-spokeandspoke-spokecapabilitiesDMVPNPhase112.3(6),12.3(7)TMakeHub-and-spokeproductionreadyDMVPNPhase212.3(9a),12.3(8)T1MakeSpoke-spokeproductionreadyDMVPNPhase312.4(6)TChangesinspoke-spoketoscalebetterandremovesomerestrictionsinPhase2成都互联神州思科专业技术培训学校培训网站:
www.ciscohuawei.netQQ:
505836736互联神州思科专业技术培训技术论坛:
www.ciscohuawei.com一品阳光72006CiscoSystems,Inc.Allrightsreserved.CiscoPublicSEC-401012469_04_2006_c2DynamicMultipointVPN(DMVPN)MajorFeaturesConfigurationreductionandno-touchdeploymentSupportsIPunicast,IPmulticastanddynamicRoutingProtocols.Supportsremotepeerswithdynamicallyassignedaddresses.SupportsspokeroutersbehinddynamicNATandhubroutersbehindstaticNAT.Dynamicspoke-spoketunnelsforscalingpartial/fullmeshVPNs.CanbeusedwithoutIPsecEncryptionWorkswithMPLS;GREtunnelsand/ordatapacketsinVRFsandtagswitchingthroughthetunnels.Widevarietyofnetworkdesignsandoptions.成都互联神州思科专业技术培训学校培训网站:
www.ciscohuawei.netQQ:
505836736互联神州思科专业技术培训技术论坛:
www.ciscohuawei.com一品阳光82006CiscoSystems,Inc.Allrightsreserved.CiscoPublicSEC-401012469_04_2006_c2Point-to-PointGRE(p-pGRE)withIPsecEncapsulateinGREandthenencryptwithIPsecIPseccanthensupportIPunicastandIPmulticastDynamicRoutingprotocolsMulti-Protocol(CDP,IPX,DECnet.)EasiertoconfigureTrivialEncryptionACLs(permitgrehosthost)ReducesthenumberofSAsButCantsupportdynamicallyaddressedpeersLargeScaleDesigns?
Largeconfiguration成都互联神州思科专业技术培训学校培训网站:
www.ciscohuawei.netQQ:
505836736互联神州思科专业技术培训技术论坛:
www.ciscohuawei.com一品阳光92006CiscoSystems,Inc.Allrightsreserved.CiscoPublicSEC-401012469_04_2006_c2MultipointGRE(mGRE)TunnelsSameasp-pGREtunnelsIPunicast,multicastanddynamicroutingprotocolsEncryptioncontrolledbyIProutingnotACLSingletunnelinterface(multipoint)Non-BroadcastMulti-Access(NBMA)NetworkSmallerhubconfiguration(tunnelprotection)Dynamicspoke-hubandspoke-spoketunnelsNextHopResolutionProtocol(NHRP)VPNIPtoNBMAIPaddressmappingShort-cutforwardingDirectsupportfordynamicaddressesandNAT成都互联神州思科专业技术培训学校培训网站:
www.ciscohuawei.netQQ:
505836736互联神州思科专业技术培训技术论坛:
www.ciscohuawei.com一品阳光102006CiscoSystems,Inc.Allrightsreserved.CiscoPublicSEC-401012469_04_2006_c2DynamicRoutingNewIPRouting/ForwardingModelRegularIPnetworksIProutingupdatesanddatapacketstraversesamephysical/logicallinksRoutingProtocolmonitorsstateofalllinksthatdatapacketscanuse.DMVPNIPnetworksIProutingupdatesandIPmulticastdatapacketsonlytraversehub-and-spoketunnelsUnicastIPdatapacketstraversebothhub-and-spokeanddirectdynamicspoke-spoketunnelsRoutingprotocoldoesntmonitorstateofspoke-spoketunnels成都互联神州思科专业技术培训学校培训网站:
www.ciscohuawei.netQQ:
505836736互联神州思科专业技术培训技术论坛:
www.ciscohuawei.com一品阳光112006CiscoSystems,Inc.Allrightsreserved.CiscoPublicSEC-401012469_04_2006_c2DynamicRoutingProtocolsEIGRPGoodforhub-and-spokeandspoke-spokeMorecontrol,mediumoverhead,fasterconvergenceOSPFOkayforhub-and-spoke,maximumof2hubs