15-1
Cisco Router and Security Device Manager 2.5 User’s Guide
OL-4015-12
CHAPTER
15
DMVPN
These help topics provide information about Dynamic Multipoint Virtual Private
Network (DMVPN) configuration screens.
Dynamic Multipoint VPN
This wizard will help you to configure your router as a Dynamic Multipoint VPN
(DMVPN) hub or DMVPN spoke. A typical VPN connection is a point-to-point
IPSec tunnel connecting two routers. DMVPN enables you to create a network
with a central hub that connects other remote routers, referred to as spokes using
a GRE over IPSec tunnel. IPSec traffic is routed through the hub to the spokes in
the network. Cisco SDM allows you to configure your router as a primary or a
secondary DMVPN hub, or as a spoke router in a DMVPN network.
The following link contains more information about DMVPN (requires CCO
login ID).
Multipoint IPSec VPNs
Cisco SDM supports the configuration of a hub-and-spoke DMVPN that uses
IPSec profiles to define encryption. You can configure a fully-meshed DMVPN,
and use crypto-maps to define encryption in the DMVPN using the CLI. Fully
meshed DMVPNs and DMVPNs using crypto maps are managed and modified
using the CLI. Cisco SDM supports the configuration of a DMVPN starting from
IOS version 12.2(13)T.
Cisco SDM supports the configuration of a single DMVPN on a router.
In this screen, identify your router as a hub or as a spoke in the DMVPN network.