No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search


To have a better experience, please upgrade your IE browser.


CLI-based Configuration Guide - VPN

AR100, AR120, AR150, AR160, AR200, AR1200, AR2200, AR3200, and AR3600 V200R010

This document describes VPN features on the device and provides configuration procedures and configuration examples.
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Deploying DSVPN in Hierarchical Hub Networking

Deploying DSVPN in Hierarchical Hub Networking

Figure 4-13 shows a network topology of an enterprise. The organizations of the enterprise are hierarchical. DSVPN is deployed on the network. Some intermediate nodes function as both the Spokes and Hubs. For example, Hub1 and Hub2 function as Hubs for its downstream Spokes and serve as Spokes for the Hub in the headquarters.

The principles of establishing dynamic mGRE tunnels between Spokes of Hub1 and Hub2 are similar to Principles. When a Spoke of Hub1 needs to establish a dynamic mGRE tunnel with a Spoke of Hub2, the source Spoke sends an NHRP Resolution Request packet to Hub1. Hub1 sends the NHRP Resolution Request packet to the Hub, the Hub sends the NHRP Resolution Request packet to Hub2, and Hub2 sends the NHRP Resolution Request packet to the destination Spoke. Finally, a dynamic mGRE tunnel is set up between Spokes in hierarchical Hub networking.


When DSVPN is deployed in hierarchical Hub networking, branches can learn routes from each other in shortcut mode only.

During the DSVPN deployment, two tunnel interfaces need to be created on Hub1 and Hub2 separately, so that Hub1 and Hub2 can set up static mGRE tunnels with the Hub and corresponding Spoke. Hub1 and Hub2 can be regarded as Spokes of the Hub.

Figure 4-13  Deploying DSVPN in hierarchical Hub networking
Updated: 2019-08-07

Document ID: EDOC1100033725

Views: 143334

Downloads: 361

Average rating:
This Document Applies to these Products
Related Version
Related Documents
Previous Next