LAB SIMULATION 13
Guidelines
This is a lab item in which tasks will be performed on virtual devices.
* Refer to the Tasks tab to view the tasks for this lab item.
* Refer to the Topology tab to access the device console(s) and perform the tasks.
* Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window.
* All necessary preconfigurations have been applied.
* Do not change the enable password or hostname for any device.
* Do not replace existing routing policies or configurations.
* Save your configurations to NVRAM before moving to the next item.
* Click Next at the bottom of the screen to submit this lab and move to the next question.
* When Next is clicked, the lab closes and cannot be reopened.
Topology

Tasks
HUB and SPOKE routers are configured using mGRE tunnels according to the topology.
Configure HUB and SPOKE routers to achieve these goals:
1. Configure NHRP authentication using password "Ci$c0123".
2. Configure SPOKE routers to establish direct tunnels between them where LAN routes should be learned from the tunnel interfaces.
Correct Answer:
Task 1:
1. Configuration on Hub (R0):
interface Tunnel0
ip address 10.0.0.254 255.255.255.0
no ip split-horizon eigrp 100
ip nhrp network-id 1
ip nhrp authentication Ci$c0123
tunnel source <WAN_Interface>
tunnel mode gre multipoint
tunnel key 100
2. Configuration on Spokes (R1 and R2):
R1:
interface Tunnel0
ip address 10.0.0.1 255.255.255.0
ip nhrp network-id 1
ip nhrp nhs 10.0.0.254
ip nhrp authentication Ci$c0123
ip nhrp map multicast 10.0.0.254
ip nhrp map 10.0.0.254 <Hub_NBMA_IP>
tunnel source <WAN_Interface>
tunnel mode gre multipoint
tunnel key 100
R2:
interface Tunnel0
ip address 10.0.0.2 255.255.255.0
ip nhrp network-id 1
ip nhrp nhs 10.0.0.254
ip nhrp authentication Ci$c0123
ip nhrp map multicast 10.0.0.254
ip nhrp map 10.0.0.254 <Hub_NBMA_IP>
tunnel source <WAN_Interface>
tunnel mode gre multipoint
tunnel key 100
Task 2:
Enable NHRP spoke-to-spoke functionality by adding mapping commands to establish direct tunnels:
R1:
ip nhrp map 10.0.0.2 <R2_NBMA_IP>
ip nhrp shortcut
R2:
ip nhrp map 10.0.0.1 <R1_NBMA_IP>
ip nhrp shortcut
Configure dynamic routing (EIGRP) to learn LAN routes over the tunnel interface:
R0 (Hub):
router eigrp 100
network 10.0.0.0 0.0.0.255
no auto-summary
R1 and R2 (Spokes):
router eigrp 100
network 10.0.0.0 0.0.0.255
network <LAN_Subnet>
no auto-summary
Verification:
1. Verify NHRP Authentication:
show dmvpn
show ip nhrp
2. Verify Spoke-to-Spoke Connectivity:
Ping from PC2 to PC3.
ping 10.100.2.10
3. Verify EIGRP Routes:
show ip route eigrp