Vyatta Network OS Documentation

Learn how to install, configure and operate the Vyatta NOS, which helps drive our virtual networking & physical platforms portfolio.

Deploying DMVPN for multiple end users from the same hub site

You can deploy DMVPN for multiple end users from the same hub site by segregating the user traffic into separate VRF routing instances. By assigning a GRE overlay tunnel interface to a routing instance, the tunnel interface becomes VRF-aware. All of the other VRF components, including IPsec control plane, IPsec data plane, and GRE underlay, are not VRF-aware. They remain in the default routing instance, and no change is required for their configuration.

The following example shows how to associate a tunnel interface with a routing instance. In the example, tunnel interface tun0 is assigned to routing instance vrf-1.

The following example shows how to associate a tunnel interface with a routing instance. In the example, tunnel interface tun0 is assigned to routing instance vrf-1.

vyatta@vyatta# set routing routing-instance vrf-1 instance-type vrf
vyatta@vyatta# set routing routing-instance vrf-1 interface tun0

Use the following command to view the configuration. Notice that the routing instance is included in the output.

vyatta@vyatta# run show ip nhrp
Status: ok
 
Interface: tun0
Type: local
Protocol-Address: 40.40.40.255/32
Alias-Address: 40.40.40.1
Flags: up
Routing instance: vrf-1   
 
Interface: tun0
Type: local
Protocol-Address: 40.40.40.1/32
Flags: up
 
Interface: tun0
Type: dynamic
Protocol-Address: 40.40.40.2/32
NBMA-Address: 33.0.0.2
Flags: up
Expires-In: 4:23

See for additional information about VRF and routing instances.