DMVPN Phase 3 Basic Configuration

DMVPN supports three different versions called “phases”. In my first DMVPN lesson I explained the basics and the DMVPN phase 2 configuration and DMVPN phase 1 configuration lessons explain how to configure the first two phases.

This time, I’ll show you how to configure DMVPN phase 3. We’ll use the following topology for this:

We have one hub router and two spoke routers.

Configuration

DMVPN supports three different versions called "phases". In my first DMVPN lesson I explained the basics and the DMVPN phase 2 configuration and DMVPN phase 1 configuration lessons explain how to configure the first two phases. This time, I'll show you how to configure DMVPN phase 3. We'll use the

The configuration of DMVPN phase 3 and 2 is very similar. Let’s start with the following DMVPN phase 2 configuration on all routers:

Hub(config)#interface Tunnel0
Hub(config-if)#ip address 172.16.123.1 255.255.255.0
Hub(config-if)#ip nhrp authentication DMVPN
Hub(config-if)#ip nhrp map multicast dynamic
Hub(config-if)#ip nhrp network-id 1
Hub(config-if)#tunnel source GigabitEthernet0/1
Hub(config-if)#tunnel mode gre multipoint

Spoke1(config)#interface Tunnel0
Spoke1(config-if)#ip address 172.16.123.2 255.255.255.0
Spoke1(config-if)#ip nhrp authentication DMVPN
Spoke1(config-if)#ip nhrp map 172.16.123.1 192.168.123.1
Spoke1(config-if)#ip nhrp map multicast 192.168.123.1
Spoke1(config-if)#ip nhrp network-id 1
Spoke1(config-if)#ip nhrp nhs 172.16.123.1
Spoke1(config-if)#tunnel source GigabitEthernet0/1
Spoke1(config-if)#tunnel mode gre multipoint

Spoke2(config)#interface Tunnel0
Spoke2(config-if)#ip address 172.16.123.3 255.255.255.0
Spoke2(config-if)#ip nhrp authentication DMVPN
Spoke2(config-if)#ip nhrp map 172.16.123.1 192.168.123.1
Spoke2(config-if)#ip nhrp map multicast 192.168.123.1
Spoke2(config-if)#ip nhrp network-id 1
Spoke2(config-if)#ip nhrp nhs 172.16.123.1
Spoke2(config-if)#tunnel source GigabitEthernet0/1
Spoke2(config-if)#tunnel mode gre multipoint

To migrate from DMVPN phase 2 to 3, we only need two commands…here’s the first command:

Hub(config)#interface tunnel 0
Hub(config-if)#ip nhrp redirect

The NHRP redirect command on the hub will inform spoke routers that they can reach another spoke router directly. The second command is needed on the spoke routers:

Forum Replies

Rene,

When would we choose to use Phase 1, 2, or 3, and why? I understand the differences between the three, but do we gain any benefit from implementing one or the other that is noticeable to end users?

It seems to me that perhaps allowing spoke routers to talk to each other may decrease latency in the real world, as they would not have to hop through the hub router, but other than that I’m not sure.

Thanks,

Patrick

Hi Patrick,

The different versions are like an evolution of DMVPN. We don’t really use phase 1 anymore unless you have a really good reason why you want to force all traffic through the hub (security perhaps?). Otherwise, it’s more effective to allow spoke-to-spoke traffic.

Both phase 2 and 3 allow spoke-to-spoke traffic, the advantage of phase 3 is that we use the “shortcuts” so you don’t need specific entries anymore in the routing tables of the spoke routers. I can’t think of any advantages right now that phase 2 has over phase 3 so if you implement this, yo

... Continue reading in our forum

Hello Heng

This is a very good question. Looking at the process in more detail, when using Phase 3.

Initially, (and that is the key word) all spoke to spoke packets are switched across the hub. In order for a spoke to learn about the true NBMA IP address of another spoke, the NHRP redirect message is used.

So when a hub receives an IP packet inbound on its interface and switches it out of the same interface, it sends a special NHRP redirect message to the source indicating that this is a suboptimal path. It should look for a better way using NHRP resolution.

... Continue reading in our forum

Hello Lagapides
Thank you so much for your time. I got it now .
Sovandara

Thanks Laz - I’ve only ever known ethernet in my time as a network engineer so to imagine that something else can exist in it’s place at layer 2 is a strange concept for me!

I’ve since heard that home power line network can actually be used to shuttle ethernet frames around too… absolute madness!

40 more replies! Ask a question or join the discussion by visiting our Community Forum