Ok so I'm trying to set up dmvpn eigrp over a backup 4g lte connection. I want to join this to a dmvpn group already going but this will be the only one coming in over 4g. When setting up the crypto iskmp key command my other addresses were the public addresses used as the underlay for my tunnel. With the 4g those addresses are negotiated so is the 0.0.0.0 0.0.0.0 correct?
Ex Hub router:
crypto isakmp key cisco123 address 0.0.0.0 no-xauth
Also how would I set up a crypto map if the peer address is auto negotiated?
So the other branches are set up on the hub as follows:
Ex on the hub:
>crypto ipsec transform-set NAME esp-aes 256
mode transport
>crypto map NAME10 ipsec-isakmp
set peer (PUBLIC ADDRESS)
set transform-set NAME
match address VPN-GRE
>interface Tunnel1
description GRE over VPN to BB
bandwidth 56
ip address (TUNNEL ADDRESS)
ip mtu 1460
ip tcp adjust-mss 1360
qos pre-classify
keepalive 10 3
tunnel source Loopback1
tunnel destination (BRANCH TUNNEL ADDRESS)
tunnel key #
>ip route (TUNNEL ADDRESS) 255.255.255.255 (HUB PUBLIC ADDRESS) name ROUTE_TABLE_INJECTION
>ip access-list extended VPN-GRE
permit gre host (HUB TUNNEL ADDRESS) host (BRANCH TUNNEL ADDRESS) log
>ip route (Public address of brach) 255.255.255.255 (HUB PUBLIC ADDRESS) name BRANCH
>router eigrp 100
network 10.X.X.X 0.0.0.3
Also at the branches we just had to seperate routers so I guess a script would need to be added on the branch router saying if the primary ip goes down the 4g link needs to activate.
Thanks
