You can deploy DMVPN for multiple end users from the same hub site by segregating the user traffic into separate VRF routing instances. By assigning a GRE overlay tunnel interface to a routing instance, the tunnel interface becomes VRF-aware. All of the other VRF components, including IPsec control plane, IPsec data plane, and GRE underlay, are not VRF-aware. They remain in the default routing instance, and no change is required for their configuration.

The following example shows how to associate a tunnel interface with a routing instance. In the example, tunnel interface tun0 is assigned to routing instance vrf-1.

The following example shows how to associate a tunnel interface with a routing instance. In the example, tunnel interface tun0 is assigned to routing instance vrf-1.

vyatta@vyatta# set routing routing-instance vrf-1 instance-type vrf
vyatta@vyatta# set routing routing-instance vrf-1 interface tun0

Use the following command to view the configuration. Notice that the routing instance is included in the output.

vyatta@vyatta# run show ip nhrp
Status: ok
 
Interface: tun0
Type: local
Protocol-Address: 40.40.40.255/32
Alias-Address: 40.40.40.1
Flags: up
Routing instance: vrf-1   
 
Interface: tun0
Type: local
Protocol-Address: 40.40.40.1/32
Flags: up
 
Interface: tun0
Type: dynamic
Protocol-Address: 40.40.40.2/32
NBMA-Address: 33.0.0.2
Flags: up
Expires-In: 4:23

See for additional information about VRF and routing instances.