=======Lab 3-3
=====BRANCH
!
no router ospf 1
!
=====HQ
!
router ospf 1
no network 10.10.100.0 0.0.0.255 area 0
!
distance 210
exit
!
=====BRANCH
!
router bgp 65001
network 10.11.11.0 mask 255.255.255.0
neighbor 10.10.100.99 remote-as 65001
exit
!
=====PARTNER
!
router bgp 65001
network 10.10.10.0 mask 255.255.255.0
neighbor 10.10.100.99 remote-as 65001
exit
!
=====HQ
!
router bgp 65001
bgp listen range 10.10.100.0/24 peer-group spokes
aggregate-address 10.0.0.0 255.0.0.0
neighbor spokes peer-group
neighbor spokes remote-as 65001
neighbor spokes update-source loopback 0
!
===TEST
=====BRANCH
!
interface tunnel 0
shutdown
!
=====PARTNER
!
interface tunnel 0
shutdown
!
=====HQ
!
interface virtual-template 1 type tunnel
ip nhrp network-id 1
ip nhrp redirect
!
=====BRANCH
!
interface virtual-template 1 type tunnel
ip unnumbered tunnel 0
ip nhrp network-id 1
ip nhrp shortcut virtual-template 1
tunnel protection ipsec profile ccnp-ipsec-profile
!
=====PARTNER
!
interface virtual-template 1 type tunnel
ip unnumbered tunnel 0
ip nhrp network-id 1
ip nhrp shortcut virtual-template 1
tunnel protection ipsec profile ccnp-ipsec-profile
!
=====BRANCH
!
crypto ikev2 profile ccnp-ikev2-profile
virtual-template 1
!
=====PARTNER
!
crypto ikev2 profile ccnp-ikev2-profile
virtual-template 1
!
=====BRANCH
!
interface tunnel 0
ip nhrp network-id 1
ip nhrp shortcut virtual-template 1
exit
!
=====PARTNER
!
!
interface tunnel 0
ip nhrp network-id 1
ip nhrp shortcut virtual-template 1
exit
!
=====BRANCH
!
crypto ikev2 profile ccnp-ikev2-profile
match identity remote fqdn domain partner.public
!
=====BRANCH
!
interface tunnel 0
no shutdown
!
=====PARTNER
!
interface tunnel 0
no shutdown
!
====TEST