So this is a lab setup I practiced DMVPN with EIGRP below I have the configuration if you want to follow what I have done.
Static routes were used for the basic connectivity then EIGRP was used to build the DMVPN. I highly recommend that if you have very little experience with this kind of configuration to first do some reading or viewing some videos on YouTube.
Below is some of the configuration used:
crypto isakmp policy 1
authentication pre-share
encryption aes
hash sha
group 5
lifetime 1800
exit
crypto isakmp key 0 cisco address 102.1.1.100
crypto isakmp key 0 cisco address 103.1.1.100
crypto isakmp key 0 cisco address 104.1.1.100
crypto ipsec transform-set t-set esp-aes esp-sha-hmac
mode transport
exit
crypto ipsec profile cisco
set transform-set t-set
exit
**************************************************************
spoke
crypto isakmp policy 1
authentication pre-share
encryption aes
hash sha
group 5
lifetime 1800
exit
crypto isakmp key 0 cisco address 101.1.1.100
crypto isakmp key 0 cisco address 103.1.1.100
crypto isakmp key 0 cisco address 104.1.1.100
crypto ipsec transform-set t-set esp-aes esp-sha-hmac
mode transport
exit
crypto ipsec profile cisco
set transform-set t-set
exit
************************************************************
soke
crypto isakmp policy 1
authentication pre-share
encryption aes
hash sha
group 5
lifetime 1800
exit
crypto isakmp key 0 cisco address 101.1.1.100
crypto isakmp key 0 cisco address 102.1.1.100
crypto isakmp key 0 cisco address 104.1.1.100
crypto ipsec transform-set t-set esp-aes esp-sha-hmac
mode transport
exit
crypto ipsec profile cisco
set transform-set t-set
exit
***************************************************************
crypto isakmp policy 1
authentication pre-share
encryption aes
hash sha
group 5
lifetime 1800
exit
crypto isakmp key 0 cisco address 101.1.1.100
crypto isakmp key 0 cisco address 102.1.1.100
crypto isakmp key 0 cisco address 103.1.1.100
crypto ipsec transform-set t-set esp-aes esp-sha-hmac
mode transport
exit
crypto ipsec profile cisco
set transform-set t-set
exit
****************************************************************
router eigrp 100
no auto-summary
network 192.168.1.0
network 192.168.101.0
exit
****************************************************************
router eigrp 100
no auto-summary
network 192.168.1.0
network 192.168.102.0
exit
*******************************************************************
router eigrp 100
no auto-summary
network 192.168.1.0
network 192.168.103.0
exit
******************************************************************
router eigrp 100
no auto-summary
network 192.168.1.0
network 192.168.104.0
exit
******************************************************************
interface tunnel configuration
int t0
ip address 192.168.1.2 255.255.255.0
tunnel source serial 0/0
tunnel mode gre multipoint
tunnel key 1
ip nhrp map 192.168.1.1 101.1.1.100
ip nhrp map multicast 101.1.1.100
ip nhrp authentication cisco
ip nhrp network-id 1
ip nhrp holdtime 300
tunnel protection ipsec profile cisco
ip nhrp nhs 192.168.1.1
*********************************************************************
interface tunnel configuration
int t0
ip address 192.168.1.3 255.255.255.0
tunnel source serial 0/0
tunnel mode gre multipoint
tunnel key 1
ip nhrp map 192.168.1.1 101.1.1.100
ip nhrp map multicast 101.1.1.100
ip nhrp authentication cisco
ip nhrp network-id 1
ip nhrp holdtime 300
tunnel protection ipsec profile cisco
ip nhrp nhs 192.168.1.1
**************************************************************************
interface tunnel configuration
int t0
ip address 192.168.1.4 255.255.255.0
tunnel source serial 0/0
tunnel mode gre multipoint
tunnel key 1
ip nhrp map 192.168.1.1 101.1.1.100
ip nhrp map multicast 101.1.1.100
ip nhrp authentication cisco
ip nhrp network-id 1
ip nhrp holdtime 300
tunnel protection ipsec profile cisco
ip nhrp nhs 192.168.1.1
exit
**************************************************************************
R1#show ip eigrp neighbors
IP-EIGRP neighbors for process 100
H Address Interface Hold Uptime SRTT RTO Q Seq
(sec) (ms) Cnt Num
2 192.168.1.4 Tu0 14 00:01:09 152 5000 0 3
1 192.168.1.3 Tu0 10 00:01:43 96 5000 0 3
0 192.168.1.2 Tu0 12 00:04:46 41 5000 0 3
*****************************************************************************
R1#show ip route eigrp
D 192.168.104.0/24 [90/297270016] via 192.168.1.4, 00:02:05, Tunnel0
D 192.168.102.0/24 [90/297270016] via 192.168.1.2, 00:05:14, Tunnel0
D 192.168.103.0/24 [90/297270016] via 192.168.1.3, 00:02:40, Tunnel0
R1#
*****************************************************************************
interface: Tunnel0
Crypto map tag: Tunnel0-head-0, local addr 104.1.1.100
protected vrf: (none)
local ident (addr/mask/prot/port): (104.1.1.100/255.255.255.255/47/0)
remote ident (addr/mask/prot/port): (101.1.1.100/255.255.255.255/47/0)
current_peer 101.1.1.100 port 500
PERMIT, flags={origin_is_acl,}
#pkts encaps: 59, #pkts encrypt: 59, #pkts digest: 59
#pkts decaps: 60, #pkts decrypt: 60, #pkts verify: 60
#pkts compressed: 0, #pkts decompressed: 0
#pkts not compressed: 0, #pkts compr. failed: 0
#pkts not decompressed: 0, #pkts decompress failed: 0
#send errors 1, #recv errors 0
local crypto endpt.: 104.1.1.100, remote crypto endpt.: 101.1.1.100
path mtu 1500, ip mtu 1500, ip mtu idb Serial0/0
current outbound spi: 0xA347CF36(2739392310)
inbound esp sas:
spi: 0x37DB83F1(937133041)
transform: esp-aes esp-sha-hmac ,
in use settings ={Transport, }
conn id: 2001, flow_id: SW:1, crypto map: Tunnel0-head-0
sa timing: remaining key lifetime (k/sec): (4398054/3374)
IV size: 16 bytes
replay detection support: Y
Status: ACTIVE
outbound esp sas:
spi: 0xA347CF36(2739392310)
transform: esp-aes esp-sha-hmac ,
in use settings ={Transport, }
conn id: 2002, flow_id: SW:2, crypto map: Tunnel0-head-0
sa timing: remaining key lifetime (k/sec): (4398054/3372)
IV size: 16 bytes
replay detection support: Y
Status: ACTIVE
**********************************************************************************
R4#ping 192.168.102.1 source fastEthernet 0/0 repeat 1000
Type escape sequence to abort.
Sending 1000, 100-byte ICMP Echos to 192.168.102.1, timeout is 2 seconds:
Packet sent with a source address of 192.168.104.1
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!
Success rate is 100 percent (1000/1000), round-trip min/avg/max = 1/2/56 ms
***********************************************************************************
R4#show ip nhrp
192.168.1.1/32 via 192.168.1.1, Tunnel0 created 00:07:16, never expire
Type: static, Flags: authoritative used
NBMA address: 101.1.1.100
192.168.1.2/32 via 192.168.1.2, Tunnel0 created 00:00:30, expire 00:04:32
Type: dynamic, Flags: router
NBMA address: 102.1.1.100
R4#
************************************************************************************
