User`s guide

11-19

Cisco Router and Security Device Manager Version 2.2 User’s Guide

OL-4015-08

Chapter 11 DMVPN

How Do I Configure a DMVPN Manually?

You can configure your router as a DMVPN hub or spoke using the VPN

Components windows and the Edit Dynamic Multipoint VPN (DMVPN) window.

In order to do so you need to complete the following tasks:

• Configure an IPSec profile. You cannot configure a DMVPN connection until

you have configured at least one IPSec profile.

• Configure the DMVPN connection.

• Specify the networks you want to advertise to the DMVPN cloud.

Procedures for these tasks are given below:

To configure an IPSec Profile:

You need to configure an IPSec policy, and then configure a DMVPN tunnel.

Step 1 Click VPN in the left panel, and then click VPN Components.

Step 2 Click the IPSec Profiles branch, and then click Add in the IPSec Profiles window.

Step 3 Name the profile, and select the transform sets it is to contain in the Add an IPSec

profile window. You can enter a short description if you want to.

Step 4 Click OK.

To configure a DMVPN connection:

Step 1 In the VPN tree, click the Dynamic Multipoint VPN branch.

Step 2 Click Edit Dynamic Multipoint VPN (DMVPN).

Step 3 Click Add.

Step 4 In the DMVPN Tunnel Configuration window, complete the General, NHRP, and

Routing tabs to create a DMVPN tunnel.Consult the online help for more

information about a particular field.