Setup of DMVPN on Alpine linux - Revision history

Sertonix: update cgit link to gitlab

2023-08-25T21:05:07Z

update cgit link to gitlab

← Older revision		Revision as of 21:05, 25 August 2023
Line 23:		Line 23:
	To encrypt this tunnel, and the traffic in it, we will use strongswan ipsec with its vici plugin.		To encrypt this tunnel, and the traffic in it, we will use strongswan ipsec with its vici plugin.
	The vici plugin provides VICI, the Versatile IKE Configuration Interface. As its name indicates, it provides an interface for external applications to not only configure, but also to control and monitor the IKE daemon charon.		The vici plugin provides VICI, the Versatile IKE Configuration Interface. As its name indicates, it provides an interface for external applications to not only configure, but also to control and monitor the IKE daemon charon.
	for this we also need a modified version of [~~http~~://~~git~~.alpinelinux.org/~~cgit~~/~~user~~/~~tteras~~/strongswan/ Strongswan] which is the default Strongswan in Alpine Linux.		for this we also need a modified version of [https://gitlab.alpinelinux.org/alpine/aports/-/tree/master/main/strongswan Strongswan] which is the default Strongswan in Alpine Linux.

	{{cmd\|apk add strongswan}}		{{cmd\|apk add strongswan}}

2019-10-25T12:20:50Z

← Older revision		Revision as of 12:20, 25 October 2019
Line 12:		Line 12:
	post-down ip tunnel del $IFACE \|\| true</nowiki>		post-down ip tunnel del $IFACE \|\| true</nowiki>
	}}		}}

			{{TOC right}}

	{{note\| In conjunction with IPsec VPNs this allows passing of routing information between connected networks.}}		{{note\| In conjunction with IPsec VPNs this allows passing of routing information between connected networks.}}
Line 258:		Line 260:
	* [[Dynamic Multipoint VPN (DMVPN) Phase 3 with Quagga NHRPd]]		* [[Dynamic Multipoint VPN (DMVPN) Phase 3 with Quagga NHRPd]]

	[[~~Category~~:~~Networking~~]]		[[category: VPN]]

2017-09-16T05:06:48Z

Added See also: Dynamic Multipoint VPN (DMVPN), Dynamic Multipoint VPN (DMVPN) Phase 3 with Quagga NHRPd; added category: Networking

← Older revision		Revision as of 05:06, 16 September 2017
Line 253:		Line 253:

	{{tip\|Most of the commands used in the vty shell are similar like in Cisco devices. This means you can also gather information from the Cisco docs}}		{{tip\|Most of the commands used in the vty shell are similar like in Cisco devices. This means you can also gather information from the Cisco docs}}

			= See also =
			* [[Dynamic Multipoint VPN (DMVPN)]]
			* [[Dynamic Multipoint VPN (DMVPN) Phase 3 with Quagga NHRPd]]

			[[Category:Networking]]

2015-11-05T14:12:50Z

BGP config

← Older revision		Revision as of 14:12, 5 November 2015
Line 220:		Line 220:
	neighbor spokes-ibgp advertisement-interval 1		neighbor spokes-ibgp advertisement-interval 1
	neighbor spokes-ibgp soft-reconfiguration inbound		neighbor spokes-ibgp soft-reconfiguration inbound
	~~neighbor 172.16.1.1 peer-group spokes-ibgp~~
	exit		exit

	~~{{note\| The neighbor 172.16.1.1 peer-group spokes-ibgp command adds a spoke to the hub, see below.}}~~

	==== NHRP config ====		==== NHRP config ====

2015-11-05T09:31:04Z

Adding spokes to hub

← Older revision		Revision as of 09:31, 5 November 2015
Line 245:		Line 245:
	==== Adding spokes to hub ====		==== Adding spokes to hub ====

	{{note\|For each spoke you are adding, you need to add the gre ip address to the bgp configuration}}		{{note\|For each spoke you are adding, you need to add the gre ip address to the bgp configuration, simillar like above in the config}}

	{{cmd\|vtysh}}		{{cmd\|vtysh}}

2015-11-05T09:30:11Z

Adding spokes to hub

← Older revision		Revision as of 09:30, 5 November 2015
Line 244:		Line 244:

	==== Adding spokes to hub ====		==== Adding spokes to hub ====

			{{note\|For each spoke you are adding, you need to add the gre ip address to the bgp configuration}}

	{{cmd\|vtysh}}		{{cmd\|vtysh}}
Line 254:		Line 256:

	{{tip\|Most of the commands used in the vty shell are similar like in Cisco devices. This means you can also gather information from the Cisco docs}}		{{tip\|Most of the commands used in the vty shell are similar like in Cisco devices. This means you can also gather information from the Cisco docs}}

	~~test3~~

2015-11-05T09:24:17Z

Adding spokes to hub

← Older revision		Revision as of 09:24, 5 November 2015
Line 254:		Line 254:

	{{tip\|Most of the commands used in the vty shell are similar like in Cisco devices. This means you can also gather information from the Cisco docs}}		{{tip\|Most of the commands used in the vty shell are similar like in Cisco devices. This means you can also gather information from the Cisco docs}}

			test3

2015-11-05T09:20:19Z

Adding spokes to hub

← Older revision		Revision as of 09:20, 5 November 2015
Line 254:		Line 254:

	{{tip\|Most of the commands used in the vty shell are similar like in Cisco devices. This means you can also gather information from the Cisco docs}}		{{tip\|Most of the commands used in the vty shell are similar like in Cisco devices. This means you can also gather information from the Cisco docs}}

	~~test~~
	~~test2~~

2015-11-05T09:19:58Z

Adding spokes to hub

2015-11-05T09:19:40Z

Adding spokes to hub

← Older revision		Revision as of 09:19, 5 November 2015
Line 254:		Line 254:

	{{tip\|Most of the commands used in the vty shell are similar like in Cisco devices. This means you can also gather information from the Cisco docs}}		{{tip\|Most of the commands used in the vty shell are similar like in Cisco devices. This means you can also gather information from the Cisco docs}}

			test