Dinamik xaritalash bilan DMVPN 1-bosqich
Endi biz DMVPN 1-bosqichini dinamik xaritalar bilan sozlaymiz. Ushbu konfiguratsiyadagi farq shundan iboratki, uya spikerlarga statik xaritalar bilan sozlanmaydi. Ushbu konfiguratsiya biz sozlaganimizdan ko'ra kengaytirilishi mumkin. Bu uyaga konfiguratsiyani o'zgartirmasdan keyinroq qo'shimcha spikerlarni qo'shish imkonini beradi. Keling, yana markazdan boshlab marshrutizatorlarni sozlaymiz. Tunnelda NHRP yoqilganligi sababli, biz spikerlarda NHSni sozlaganimizda, xaritalar dinamik ravishda amalga oshiriladi:
HubHeadquarters(config-if)#interface Tunnel 0
Headquarters(config-if)#ip address 10.10.10.1 255.255.255.0 Headquarters(config-if)#tunnel source e0/0
Headquarters(config-if)#no ip redirects
Headquarters(config-if)#ip nhrp authentication DMVPN Headquarters(config-if)#ip nhrp network-id 100
Headquarters(config-if)#tunnel mode gre multipoint
Endi spikerlarda NHS ni sozlaymiz. NHS markazga ishora qiladi:
Branch1Branch1(config)#interface Tunnel 0
Branch1(config-if)#ip address 10.10.10.2 255.255.255.0 Branch1(config-if)#tunnel source e0/0
Branch1(config-if)#tunnel destination 172.1.1.1
Branch1(config-if)#no ip redirects
Branch1(config-if)#ip nhrp nhs 10.10.10.1
Branch1(config-if)#ip nhrp network-id 200
Branch1(config-if)#ip nhrp authentication DMVPN
Branch1(config-if)#ip nhrp map 10.10.10.1 172.1.1.1
Show ip nhrp buyrug'i bilan tasdiqlaymiz. Biz DMVPN tunnelimizni ko'rmoqdamiz va tunnellarimiz dinamik ekanligini ko'ramiz:
Headquarters(config-if)#do sh ip nhrp
10.10.10.2/32 via 10.10.10.2, Tunnel0 created 00:04:52, expire 01:57:06
Type: dynamic, Flags: authoritative unique registered
NBMA address: 172.1.2.1
10.10.10.3/32 via 10.10.10.3, Tunnel0 created 00:00:08, expire 01:59:51
Type: dynamic, Flags: authoritative unique registered
NBMA address: 172.1.3.1
DMVPN 1-bosqichida spikerlar traceroute orqali boshqa spikerlarga o'tish uchun markazdan o'tishini tekshiramiz:
Tracing the route to 10.10.10.3
VRF info: (vrf in name/id, vrf out name/id)
1 10.10.10.1 12 msec 8 msec 4 msec
2 10.10.10.3 4 msec 8 msec 4 msec
Bizning traceroute transport markazdan o'tishini va to'g'ridan-to'g'ri gaplashish mumkinligini tasdiqlaydi. NHRP ro'yxatdan o'tish so'rovining to'plamni ko'rib chiqaylik. NHRP ro'yxatga olish so'roviga nazar tashlasak, biz spikerning manba NBMA manzili 172.1.3.1 va uning tunnel IP manzili 10.10.10.3 ekanligini ko'rishimiz mumkin. Biz 10.10.10.1 IP manzilida markazning maqsadli ekanligini ko'rishimiz mumkin.
24-2-rasm. NHRP ro'yxatga olish paketi captureAU3
Keling, NHRP ro'yxatga olish javob paketini yozib olishni ko'rib chiqaylik.
24-3-rasm. NHRP javob paketini yozib olish
Do'stlaringiz bilan baham: |