Adding VRF for Internet traffic on DMVPN solution

[FLOYD SALAZAR]

Hi,

I have  Hub -Spoke design that is active for private network traffic.

How can I add a VRF and force the Internet traffic into the tunnel and is there a standard configuration for this?

I am using EIGRP to propagate traffic from the Hub and I want to push default to the spokes via the tunnel.

I read a lot of information about FVRF and IVRF and since my tunnel has the following configuration

Interfact tunnel0

....

tunnel source Diale1

tunnel destiantion <Public_GW_Addressof_Hub>

Not sure if what will work to keep tunnel up but add VRF-lite configuration for Internet traffic.

Thoughts

[Alain Jourez]

Hello

I am not quite sure of what you are trying to achieve here.

The way I read your question is that you would like to have traffic from  the spokes that need to reach the internet being sent to the Hub,  rather that to exit locally through the spoke router, and intend to  use  a VRF aware ipsec design to do so.

But I am not sure I am getting you  correctly.

Could you clarify what you are trying to actually do?

Thanks

Alain.