Cisco SD-Routing DMVPN Yang Commands

DMVPN Yang Commands

These DMVPN commands are qualified to use with Cisco SD-Routing devices on Cisco SD-WAN Manager.

DMVPN IPv4 EIRGP static transport yang commands

Configuration example for a hub

version 17.6
service timestamps debug datetime msec
service timestamps log datetime msec
service internal
service call-home
platform qfp utilization monitor load 80
platform punt-keepalive disable-kernel-core
!
hostname DC1-Hub1
!
boot-start-marker
boot system bootflash:c8000aep-universalk9.DC1-Hub1.dmvpn_soak.SSA.bin
boot-end-marker
!
!
vrf definition Mgmt-intf
 !
 address-family ipv4
 exit-address-family
 !
 address-family ipv6
 exit-address-family
!
no logging console
!
no aaa new-model
!
!
!
!
!
!
!
!
!
!
!
!
login on-success log
!
!
!
!
!
!
!
subscriber templating
! 
! 
! 
! 
!
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
crypto pki trustpoint TP-self-signed-2134189379
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-2134189379
 revocation-check none
 rsakeypair TP-self-signed-2134189379
!
crypto pki trustpoint SLA-TrustPoint
 enrollment pkcs12
 revocation-check crl
!
!
!
license udi pid C8500-12X4QC sn TTM231100CF
license boot level network-advantage addon dna-advantage
no memory lite
memory free low-watermark processor 984138
hw-module subslot 0/1 mode 10G
hw-module subslot 0/2 mode 40G
hw-module subslot 0/2 breakout none port all
!
!
spanning-tree extend system-id
diagnostic bootup level minimal
!
!
redundancy
 mode none
!
!
crypto ikev2 proposal ikev2proposal 
 encryption aes-cbc-192
 integrity sha512
 group 16
!
crypto ikev2 policy ikev2policy 
 proposal ikev2proposal
!
crypto ikev2 keyring ikev2keyring
 peer ikev2peer
  address 0.0.0.0 0.0.0.0
  pre-shared-key Cisco@123
 !
!
!
crypto ikev2 profile ikev2profile
 match identity remote address 0.0.0.0 
 authentication remote pre-share
 authentication local pre-share
 keyring local ikev2keyring
!
crypto ikev2 dpd 60 3 on-demand
!
!
!
!
class-map match-all group1_Routing
 match ip precedence 6 
class-map match-all group2_Routing
 match ip precedence 6 
class-map match-all group2_voice
 match access-group 100
class-map match-all group1_voice
 match access-group 100
!
policy-map group2
 class group2_voice
  priority percent 20
 class group2_Routing
  bandwidth percent 10 
policy-map group2_parent
 class class-default
  shape average 2000000   
   service-policy group2
policy-map group1
 class group1_voice
  priority 1000
 class group1_Routing
  bandwidth percent 20 
policy-map group1_parent
 class class-default
  shape average 3000000   
   service-policy group1
!
!
! 
!
!
!
!
!
!
crypto ipsec transform-set tset1 esp-aes 256 esp-sha256-hmac 
 mode transport
!
!
crypto ipsec profile dmvpn-hub
 set transform-set tset1 
 set pfs group19
 set ikev2-profile ikev2profile
!
!
!
!
!
! 
! 
!
!
interface Tunnel1
 ip address <removed> no ip redirects
 ip mtu 1400
 ip hello-interval eigrp 101 30
 ip hold-time eigrp 101 90
 ip nhrp network-id 1000
 ip nhrp redirect
 ip tcp adjust-mss 1200
 ip summary-address eigrp 101 10.0.0.0 255.0.0.0
 nhrp map group spoke_group1 service-policy output group1_parent
 nhrp map group spoke_group2 service-policy output group2_parent
 cts sgt inline
 bfd interval 1000 min_rx 1000 multiplier 5
 no bfd echo
 tunnel source TenGigabitEthernet0/1/0
 tunnel mode gre multipoint
 tunnel path-mtu-discovery
 tunnel protection ipsec profile dmvpn-hub
!
interface TenGigabitEthernet0/0/0
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/0/1
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/0/2
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/0/3
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/0/4
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/0/5
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/0/6
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/0/7
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/0
 ip address <removed> no negotiation auto
!
interface TenGigabitEthernet0/1/1
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/2
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/3
 ip address <removed> no negotiation auto
!
interface FortyGigabitEthernet0/2/0
 no ip address
 shutdown
 no negotiation auto
!
interface FortyGigabitEthernet0/2/4
 no ip address
 shutdown
 no negotiation auto
!
interface FortyGigabitEthernet0/2/8
 no ip address
 shutdown
 no negotiation auto
!
interface GigabitEthernet0
 vrf forwarding Mgmt-intf
 ip address <removed> negotiation auto
!
!
router eigrp 101
 network 150.100.0.0
 network 192.0.0.0 0.255.255.255
!
router nhrp 200
 network 100.0.0.0
!
ip http server
ip http authentication local
ip http secure-server
ip forward-protocol nd
!
ip tftp source-interface GigabitEthernet0
ip tftp blocksize 8192
ip route 0.0.0.0 0.0.0.0 100.0.10.1
ip route vrf Mgmt-intf 202.153.144.90 255.255.255.255 9.41.0.1
!
!
!
snmp-server user roni g1 v3 
snmp-server group g1 v3 noauth 
snmp-server group g1 v3 auth read campus write campus 
snmp mib nhrp
!
!
!
control-plane
!
!
!
!
!
!
line con 0
 exec-timeout 0 0
 stopbits 1
line aux 0
line vty 0 4
 login
 transport input ssh
!
call-home
 ! If contact email address in call-home is configured as sch-smart-licensing@cisco.com
 ! the email address configured in Cisco Smart License Portal will be used as contact email address to send SCH notifications.
 contact-email-addr sch-smart-licensing@cisco.com
 profile "CiscoTAC-1"
  active
  destination transport-method http
!
!
!
!
!
!
end

Configuration example for a spoke

version 17.13
service timestamps debug datetime msec
service timestamps log datetime msec
service internal
service call-home
platform qfp utilization monitor load 80
platform punt-keepalive disable-kernel-core
platform ipsec flexvpn-bypass-tcam
platform hardware crypto-throughput level 8-16g 
!
hostname spk1
!
boot-start-marker
boot system bootflash:asr1000-universalk9.spk1.dmvpn_soak.SSA.bin
boot-end-marker
!
!
vrf definition C1_1
 rd 1:1
 !
 address-family ipv4
 exit-address-family
!
vrf definition Mgmt-intf
 !
 address-family ipv4
 exit-address-family
 !
 address-family ipv6
 exit-address-family
!
no logging console
no aaa new-model
!
!
subscriber templating
!
!
!
!
!
!
!
!
!
!
!
!
login on-success log
!
!
!
!
!
!
!
! 
! 
! 
! 
!
!
crypto pki trustpoint TP-self-signed-1147572831
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-1147572831
 revocation-check none
 rsakeypair TP-self-signed-1147572831
 hash sha256
!
crypto pki trustpoint SLA-TrustPoint
 enrollment pkcs12
 revocation-check crl
 hash sha256
!
!
!
!
!
!
!
!
!
license udi pid ASR1001-HX sn JAE24530LQG
license boot level adventerprise
!
no memory lite
memory free low-watermark processor 675468
diagnostic bootup level minimal
!
spanning-tree extend system-id
!
!
!
redundancy
 mode none
!
crypto ikev2 proposal ikev2proposal 
 encryption aes-cbc-192
 integrity sha512
 group 16
!
crypto ikev2 policy ikev2policy 
 proposal ikev2proposal
!
crypto ikev2 keyring ikev2keyring
 peer ikev2peer
  address 0.0.0.0 0.0.0.0
  pre-shared-key Cisco@123
 !
!
!
crypto ikev2 profile ikev2profile
 match identity remote address 0.0.0.0 
 authentication remote pre-share
 authentication local pre-share
 keyring local ikev2keyring
!
crypto ikev2 dpd 60 3 on-demand
!
!
!
!
class-map match-all group1_Routing
 match ip precedence 6 
class-map match-all group2_Routing
 match ip precedence 6 
class-map match-all group2_voice
 match access-group 100
class-map match-all group1_voice
 match access-group 100
!
policy-map group2
 class group2_voice
  priority percent 20
 class group2_Routing
  bandwidth percent 10 
policy-map group2_parent
 class class-default
  shape average 2000000   
  service-policy group2
policy-map group1
 class group1_voice
  priority 1000
 class group1_Routing
  bandwidth percent 20 
policy-map group1_parent
 class class-default
  shape average 3000000   
  service-policy group1
!
!
! 
!
!
!
!
!
!
crypto ipsec transform-set tset1 esp-aes 256 esp-sha256-hmac 
 mode transport
!
!
crypto ipsec profile dmvpn-hub
 set transform-set tset1 
 set pfs group19
 set ikev2-profile ikev2profile
!
!
!
!
!
! 
! 
!
!
interface Loopback1
 ip address <removed>!
interface Tunnel1
 vrf forwarding C1_1
 ip address <removed> no ip redirects
 ip hello-interval eigrp 101 30
 ip hold-time eigrp 101 90
 ip nhrp network-id 1000
 ip nhrp nhs 192.0.1.1 nbma 100.0.10.2 multicast
 ip tcp adjust-mss 1200
 nhrp group spoke_group1
 cts sgt inline
 bfd interval 1000 min_rx 1000 multiplier 5
 no bfd echo
 tunnel source Loopback1
 tunnel mode gre multipoint
 tunnel path-mtu-discovery
 tunnel protection ipsec profile dmvpn-hub
!
interface GigabitEthernet0/0/0
 no ip address
 shutdown
 negotiation auto
!
interface GigabitEthernet0/0/1
 no ip address
 shutdown
 negotiation auto
!
interface GigabitEthernet0/0/2
 no ip address
 negotiation auto
!
interface GigabitEthernet0/0/2.1
 encapsulation dot1Q 100
 vrf forwarding C1_1
 ip address <removed>!
interface GigabitEthernet0/0/3
 no ip address
 shutdown
 negotiation auto
!
interface GigabitEthernet0/0/4
 no ip address
 shutdown
 negotiation auto
!
interface GigabitEthernet0/0/5
 no ip address
 shutdown
 negotiation auto
!
interface GigabitEthernet0/0/6
 no ip address
 shutdown
 negotiation auto
!
interface GigabitEthernet0/0/7
 no ip address
 shutdown
 negotiation auto
!
interface TenGigabitEthernet0/1/0
 ip address <removed> no negotiation auto
!
interface TenGigabitEthernet0/1/1
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/2
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/3
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/4
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/5
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/6
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/7
 no ip address
 shutdown
 no negotiation auto
!
interface GigabitEthernet0
 vrf forwarding Mgmt-intf
 ip address <removed> negotiation auto
!
!
router eigrp 101
 !
 address-family ipv4 vrf C1_1 autonomous-system 101
  network 10.2.2.0 0.0.0.255
  network 192.0.0.0 0.255.255.255
  passive-interface GigabitEthernet0/0/2.1
 exit-address-family
!
ip forward-protocol nd
!
ip tftp source-interface GigabitEthernet0
ip tftp blocksize 8192
ip http server
ip http authentication local
ip http secure-server
ip ssh bulk-mode 131072
ip route 0.0.0.0 0.0.0.0 50.50.50.1
ip route vrf Mgmt-intf 202.153.144.90 255.255.255.255 9.45.0.1
ip route vrf Mgmt-intf 202.153.144.90 255.255.255.255 9.41.0.1
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
line con 0
 exec-timeout 0 0
 stopbits 1
line aux 0
line vty 0 4
 login
 transport input ssh
!
call-home
 ! If contact email address in call-home is configured as sch-smart-licensing@cisco.com
 ! the email address configured in Cisco Smart License Portal will be used as contact email address to send SCH notifications.
 contact-email-addr sch-smart-licensing@cisco.com
 profile "CiscoTAC-1"
  active
  destination transport-method http
!
!
!
!
!
!
end

DMVPN IPv4 EIGRP static tunnel yang commands

Configuration example for a hub

version 17.6
service timestamps debug datetime msec
service timestamps log datetime msec
service internal
service call-home
platform qfp utilization monitor load 80
platform punt-keepalive disable-kernel-core
!
hostname DC1-Hub1
!
boot-start-marker
boot system bootflash:c8000aep-universalk9.DC1-Hub1.dmvpn_soak.SSA.bin
boot-end-marker
!
!
vrf definition Mgmt-intf
 !
 address-family ipv4
 exit-address-family
 !
 address-family ipv6
 exit-address-family
!
no logging console
!
no aaa new-model
!
!
!
!
!
!
!
!
!
!
!
!
login on-success log
!
!
!
!
!
!
!
subscriber templating
! 
! 
! 
! 
!
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
crypto pki trustpoint TP-self-signed-2134189379
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-2134189379
 revocation-check none
 rsakeypair TP-self-signed-2134189379
!
crypto pki trustpoint SLA-TrustPoint
 enrollment pkcs12
 revocation-check crl
!
!
!
license udi pid C8500-12X4QC sn TTM231100CF
license boot level network-advantage addon dna-advantage
no memory lite
memory free low-watermark processor 984138
hw-module subslot 0/1 mode 10G
hw-module subslot 0/2 mode 40G
hw-module subslot 0/2 breakout none port all
!
!
spanning-tree extend system-id
diagnostic bootup level minimal
!
!
redundancy
 mode none
!
!
crypto ikev2 proposal ikev2proposal 
 encryption aes-cbc-192
 integrity sha512
 group 16
!
crypto ikev2 policy ikev2policy 
 proposal ikev2proposal
!
crypto ikev2 keyring ikev2keyring
 peer ikev2peer
  address 0.0.0.0 0.0.0.0
  pre-shared-key Cisco@123
 !
!
!
crypto ikev2 profile ikev2profile
 match identity remote address 0.0.0.0 
 authentication remote pre-share
 authentication local pre-share
 keyring local ikev2keyring
!
crypto ikev2 dpd 60 3 on-demand
!
!
!
!
class-map match-all group1_Routing
 match ip precedence 6 
class-map match-all group2_Routing
 match ip precedence 6 
class-map match-all group2_voice
 match access-group 100
class-map match-all group1_voice
 match access-group 100
!
policy-map group2
 class group2_voice
  priority percent 20
 class group2_Routing
  bandwidth percent 10 
policy-map group2_parent
 class class-default
  shape average 2000000   
   service-policy group2
policy-map group1
 class group1_voice
  priority 1000
 class group1_Routing
  bandwidth percent 20 
policy-map group1_parent
 class class-default
  shape average 3000000   
   service-policy group1
!
!
! 
!
!
!
!
!
!
crypto ipsec transform-set tset1 esp-aes 256 esp-sha256-hmac 
 mode tunnel
!
!
crypto ipsec profile dmvpn-hub
 set transform-set tset1 
 set pfs group19
 set ikev2-profile ikev2profile
!
!
!
!
!
! 
! 
!
!
interface Tunnel1
 ip address <removed> no ip redirects
 ip mtu 1400
 ip hello-interval eigrp 101 30
 ip hold-time eigrp 101 90
 ip nhrp network-id 1000
 ip nhrp redirect
 ip tcp adjust-mss 1200
 ip summary-address eigrp 101 10.0.0.0 255.0.0.0
 nhrp map group spoke_group1 service-policy output group1_parent
 nhrp map group spoke_group2 service-policy output group2_parent
 cts sgt inline
 bfd interval 1000 min_rx 1000 multiplier 5
 no bfd echo
 tunnel source TenGigabitEthernet0/1/0
 tunnel mode gre multipoint
 tunnel path-mtu-discovery
 tunnel protection ipsec profile dmvpn-hub
!
interface TenGigabitEthernet0/0/0
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/0/1
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/0/2
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/0/3
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/0/4
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/0/5
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/0/6
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/0/7
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/0
 ip address <removed> no negotiation auto
!
interface TenGigabitEthernet0/1/1
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/2
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/3
 ip address <removed> no negotiation auto
!
interface FortyGigabitEthernet0/2/0
 no ip address
 shutdown
 no negotiation auto
!
interface FortyGigabitEthernet0/2/4
 no ip address
 shutdown
 no negotiation auto
!
interface FortyGigabitEthernet0/2/8
 no ip address
 shutdown
 no negotiation auto
!
interface GigabitEthernet0
 vrf forwarding Mgmt-intf
 ip address <removed> negotiation auto
!
!
router eigrp 101
 network 150.100.0.0
 network 192.0.0.0 0.255.255.255
!
router nhrp 200
 network 100.0.0.0
!
ip http server
ip http authentication local
ip http secure-server
ip forward-protocol nd
!
ip tftp source-interface GigabitEthernet0
ip tftp blocksize 8192
ip route 0.0.0.0 0.0.0.0 100.0.10.1
ip route vrf Mgmt-intf 202.153.144.90 255.255.255.255 9.41.0.1
!
!
!
snmp-server user roni g1 v3 
snmp-server group g1 v3 noauth 
snmp-server group g1 v3 auth read campus write campus 
snmp mib nhrp
!
!
!
control-plane
!
!
!
!
!
!
line con 0
 exec-timeout 0 0
 stopbits 1
line aux 0
line vty 0 4
 login
 transport input ssh
!
call-home
 ! If contact email address in call-home is configured as sch-smart-licensing@cisco.com
 ! the email address configured in Cisco Smart License Portal will be used as contact email address to send SCH notifications.
 contact-email-addr sch-smart-licensing@cisco.com
 profile "CiscoTAC-1"
  active
  destination transport-method http
!
!
!
!
!
!
end

Configuration example for a spoke

version 17.13
service timestamps debug datetime msec
service timestamps log datetime msec
service internal
service call-home
platform qfp utilization monitor load 80
platform punt-keepalive disable-kernel-core
platform ipsec flexvpn-bypass-tcam
platform hardware crypto-throughput level 8-16g 
!
hostname spk1
!
boot-start-marker
boot system bootflash:asr1000-universalk9.spk1.dmvpn_soak.SSA.bin
boot-end-marker
!
!
vrf definition C1_1
 rd 1:1
 !
 address-family ipv4
 exit-address-family
!
vrf definition Mgmt-intf
 !
 address-family ipv4
 exit-address-family
 !
 address-family ipv6
 exit-address-family
!
no logging console
no aaa new-model
!
!
subscriber templating
!
!
!
!
!
!
!
!
!
!
!
!
login on-success log
!
!
!
!
!
!
!
! 
! 
! 
! 
!
!
crypto pki trustpoint TP-self-signed-1147572831
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-1147572831
 revocation-check none
 rsakeypair TP-self-signed-1147572831
 hash sha256
!
crypto pki trustpoint SLA-TrustPoint
 enrollment pkcs12
 revocation-check crl
 hash sha256
!
!
!
!
!
!
!
!
!
!
license udi pid ASR1001-HX sn JAE24530LQG
license boot level adventerprise
!
no memory lite
memory free low-watermark processor 675468
diagnostic bootup level minimal
!
spanning-tree extend system-id
!
!
!
redundancy
 mode none
!
crypto ikev2 proposal ikev2proposal 
 encryption aes-cbc-192
 integrity sha512
 group 16
!
crypto ikev2 policy ikev2policy 
 proposal ikev2proposal
!
crypto ikev2 keyring ikev2keyring
 peer ikev2peer
  address 0.0.0.0 0.0.0.0
  pre-shared-key Cisco@123
 !
!
!
crypto ikev2 profile ikev2profile
 match identity remote address 0.0.0.0 
 authentication remote pre-share
 authentication local pre-share
 keyring local ikev2keyring
!
crypto ikev2 dpd 60 3 on-demand
!
!
!
!
class-map match-all group1_Routing
 match ip precedence 6 
class-map match-all group2_Routing
 match ip precedence 6 
class-map match-all group2_voice
 match access-group 100
class-map match-all group1_voice
 match access-group 100
!
policy-map group2
 class group2_voice
  priority percent 20
 class group2_Routing
  bandwidth percent 10 
policy-map group2_parent
 class class-default
  shape average 2000000   
  service-policy group2
policy-map group1
 class group1_voice
  priority 1000
 class group1_Routing
  bandwidth percent 20 
policy-map group1_parent
 class class-default
  shape average 3000000   
  service-policy group1
!
!
! 
!
!
!
!
!
!
crypto ipsec transform-set tset1 esp-aes 256 esp-sha256-hmac 
 mode tunnel
!
!
crypto ipsec profile dmvpn-hub
 set transform-set tset1 
 set pfs group19
 set ikev2-profile ikev2profile
!
!
!
!
!
! 
! 
!
!
interface Loopback1
 ip address <removed>!
interface Tunnel1
 vrf forwarding C1_1
 ip address <removed> no ip redirects
 ip hello-interval eigrp 101 30
 ip hold-time eigrp 101 90
 ip nhrp network-id 1000
 ip nhrp nhs 192.0.1.1 nbma 100.0.10.2 multicast
 ip tcp adjust-mss 1200
 nhrp group spoke_group1
 cts sgt inline
 bfd interval 1000 min_rx 1000 multiplier 5
 no bfd echo
 tunnel source Loopback1
 tunnel mode gre multipoint
 tunnel path-mtu-discovery
 tunnel protection ipsec profile dmvpn-hub
!
interface GigabitEthernet0/0/0
 no ip address
 shutdown
 negotiation auto
!
interface GigabitEthernet0/0/1
 no ip address
 shutdown
 negotiation auto
!
interface GigabitEthernet0/0/2
 no ip address
 negotiation auto
!
interface GigabitEthernet0/0/2.1
 encapsulation dot1Q 100
 vrf forwarding C1_1
 ip address <removed>!
interface GigabitEthernet0/0/3
 no ip address
 shutdown
 negotiation auto
!
interface GigabitEthernet0/0/4
 no ip address
 shutdown
 negotiation auto
!
interface GigabitEthernet0/0/5
 no ip address
 shutdown
 negotiation auto
!
interface GigabitEthernet0/0/6
 no ip address
 shutdown
 negotiation auto
!
interface GigabitEthernet0/0/7
 no ip address
 shutdown
 negotiation auto
!
interface TenGigabitEthernet0/1/0
 ip address <removed> no negotiation auto
!
interface TenGigabitEthernet0/1/1
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/2
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/3
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/4
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/5
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/6
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/7
 no ip address
 shutdown
 no negotiation auto
!
interface GigabitEthernet0
 vrf forwarding Mgmt-intf
 ip address <removed> negotiation auto
!
!
router eigrp 101
 !
 address-family ipv4 vrf C1_1 autonomous-system 101
  network 10.2.2.0 0.0.0.255
  network 192.0.0.0 0.255.255.255
  passive-interface GigabitEthernet0/0/2.1
 exit-address-family
!
ip forward-protocol nd
!
ip tftp source-interface GigabitEthernet0
ip tftp blocksize 8192
ip http server
ip http authentication local
ip http secure-server
ip ssh bulk-mode 131072
ip route 0.0.0.0 0.0.0.0 50.50.50.1
ip route vrf Mgmt-intf 202.153.144.90 255.255.255.255 9.45.0.1
ip route vrf Mgmt-intf 202.153.144.90 255.255.255.255 9.41.0.1
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
line con 0
 exec-timeout 0 0
 stopbits 1
line aux 0
line vty 0 4
 login
 transport input ssh
!
call-home
 ! If contact email address in call-home is configured as sch-smart-licensing@cisco.com
 ! the email address configured in Cisco Smart License Portal will be used as contact email address to send SCH notifications.
 contact-email-addr sch-smart-licensing@cisco.com
 profile "CiscoTAC-1"
  active
  destination transport-method http
!
!
!
!
!
!
end

DMVPN IPv4 OSPF BGP crypto yang commands

Configuration example for a hub

version 17.6
service timestamps debug datetime msec
service timestamps log datetime msec
service internal
! Call-home is enabled by Smart-Licensing.
service call-home
platform qfp utilization monitor load 80
platform punt-keepalive disable-kernel-core
!
hostname DC1-Hub1
!
boot-start-marker
boot system bootflash:c8000aep-universalk9.DC1-Hub1.dmvpn_soak.SSA.bin
boot-end-marker
!         
!
vrf definition Mgmt-intf
 !
 address-family ipv4
 exit-address-family
 !
 address-family ipv6
 exit-address-family
!
no logging console
!
no aaa new-model
!
!
!
!
!
!
!         
!
!
!
!
!
login on-success log
!
!
!
!
!
!
!
subscriber templating
! 
! 
! 
! 
!         
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
crypto pki trustpoint SLA-TrustPoint
 enrollment pkcs12
 revocation-check crl
 hash sha256
!
crypto pki trustpoint TP-self-signed-2134189379
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-2134189379
 revocation-check none
 rsakeypair TP-self-signed-2134189379
 hash sha256
!
!
!
license udi pid C8500-12X4QC sn TTM231100CF
license boot level network-advantage addon dna-advantage
no memory lite
memory free low-watermark processor 982757
hw-module subslot 0/1 mode 10G
hw-module subslot 0/2 mode 40G
hw-module subslot 0/2 breakout none port all
!
!
spanning-tree extend system-id
diagnostic bootup level minimal
!
!
redundancy
 mode none
!
!
crypto ikev2 proposal ikev2proposal 
 encryption aes-cbc-192
 integrity sha512
 group 16
!
crypto ikev2 policy ikev2policy 
 proposal ikev2proposal
!
crypto ikev2 keyring ikev2keyring
 peer ikev2peer
  address 0.0.0.0 0.0.0.0
  pre-shared-key Cisco@123
 !        
!
!
crypto ikev2 profile ikev2profile
 match identity remote address 0.0.0.0 
 authentication remote pre-share
 authentication local pre-share
 keyring local ikev2keyring
!
crypto ikev2 dpd 60 3 on-demand
!
!
!
!
! 
!
!
!
!
!         
!
crypto ipsec transform-set tset1 esp-aes 256 esp-sha256-hmac 
 mode tunnel
!
!
crypto ipsec profile dmvpn-hub
 set transform-set tset1 
 set pfs group19
 set ikev2-profile ikev2profile
!
!
!
!
!
! 
! 
!
!
interface Tunnel1
 bandwidth 100000
 ip address <removed> no ip redirects
 ip mtu 1400
 ip hello-interval eigrp 101 30
 ip hold-time eigrp 101 90
 ip nhrp network-id 1000
 ip nhrp holdtime 900
 ip nhrp redirect
 ip tcp adjust-mss 1200
 ip summary-address eigrp 101 100.0.0.0 255.0.0.0
 cts sgt inline
 tunnel source TenGigabitEthernet0/1/0
 tunnel mode gre multipoint
 tunnel path-mtu-discovery
 tunnel protection ipsec profile dmvpn-hub
!
interface TenGigabitEthernet0/0/0
 no ip address
 no negotiation auto
!
interface TenGigabitEthernet0/0/1
 no ip address
 no negotiation auto
!
interface TenGigabitEthernet0/0/2
 no ip address
 no negotiation auto
!
interface TenGigabitEthernet0/0/3
 no ip address
 no negotiation auto
!
interface TenGigabitEthernet0/0/4
 no ip address
 no negotiation auto
!
interface TenGigabitEthernet0/0/5
 no ip address
 no negotiation auto
!
interface TenGigabitEthernet0/0/6
 no ip address
 no negotiation auto
!
interface TenGigabitEthernet0/0/7
 no ip address
 no negotiation auto
!
interface TenGigabitEthernet0/1/0
 ip address <removed> no negotiation auto
!
interface TenGigabitEthernet0/1/1
 no ip address
 no negotiation auto
!         
interface TenGigabitEthernet0/1/2
 no ip address
 no negotiation auto
!
interface TenGigabitEthernet0/1/3
 ip address <removed> no negotiation auto
!
interface FortyGigabitEthernet0/2/0
 no ip address
 no negotiation auto
!
interface FortyGigabitEthernet0/2/4
 no ip address
 no negotiation auto
!
interface FortyGigabitEthernet0/2/8
 no ip address
 no negotiation auto
!
interface GigabitEthernet0
 vrf forwarding Mgmt-intf
 ip address <removed> negotiation auto
!
router ospf 100
 network 100.0.10.0 0.0.0.255 area 0
!
router bgp 64001
 bgp router-id 1.1.1.2
 bgp log-neighbor-changes
 bgp listen range 192.0.0.0/8 peer-group DMVPN_SPOKES
 bgp listen limit 10000
 timers bgp 10 30
 neighbor DMVPN_SPOKES peer-group
 neighbor DMVPN_SPOKES remote-as 64001
 !
 address-family ipv4
  network 0.0.0.0
  network 150.100.0.0
  neighbor DMVPN_SPOKES activate
  neighbor DMVPN_SPOKES next-hop-self
  neighbor DMVPN_SPOKES as-override split-horizon
 exit-address-family
!
no ip http server
ip http secure-server
ip forward-protocol nd
!
ip tftp source-interface GigabitEthernet0
ip tftp blocksize 8192
ip route 0.0.0.0 0.0.0.0 Null0
ip route vrf Mgmt-intf 202.153.144.90 255.255.255.255 9.41.0.1
ip ssh bulk-mode 131072
!
!
!         
!
!
!
control-plane
!
!
!
!
!
!
line con 0
 exec-timeout 0 0
 stopbits 1
line aux 0
line vty 0 4
 login
 transport input ssh
!
call-home 
 ! If contact email address in call-home is configured as sch-smart-licensing@cisco.com
 ! the email address configured in Cisco Smart License Portal will be used as contact email address to send SCH notifications.
 contact-email-addr sch-smart-licensing@cisco.com
 profile "CiscoTAC-1"
  active
  destination transport-method http
!
!
!
!
!
!
end

Configuration example for a spoke

version 17.6
service timestamps debug datetime msec
service timestamps log datetime msec
service internal
service call-home
platform qfp utilization monitor load 80
platform punt-keepalive disable-kernel-core
platform ipsec flexvpn-bypass-tcam
platform hardware crypto-throughput level 8-16g 
!
hostname spk1
!
boot-start-marker
boot system bootflash:asr1000-universalk9.spk1.dmvpn_soak.SSA.bin
boot-end-marker
!
!
vrf definition C1_0
 rd 1:0   
 !
 address-family ipv4
 exit-address-family
!
vrf definition Mgmt-intf
 !
 address-family ipv4
 exit-address-family
 !
 address-family ipv6
 exit-address-family
!
no logging console
!
no aaa new-model
!
!
!
!
!
!
!
!         
!
!
!
!
login on-success log
!
!
!
!
!
!
!
subscriber templating
! 
! 
! 
! 
!
!
multilink bundle-name authenticated
!
!
!         
!
!
!
!
!
!
crypto pki trustpoint TP-self-signed-1147572831
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-1147572831
 revocation-check none
 rsakeypair TP-self-signed-1147572831
 hash sha256
!
crypto pki trustpoint SLA-TrustPoint
 enrollment pkcs12
 revocation-check crl
 hash sha256
!
!
!
!
license udi pid ASR1001-HX sn JAE24530LQG
license boot level adventerprise
no memory lite
memory free low-watermark processor 675468
!
!
spanning-tree extend system-id
diagnostic bootup level minimal
!
!
redundancy
 mode none
!         
!
crypto ikev2 proposal ikev2proposal 
 encryption aes-cbc-192
 integrity sha512
 group 16
!
crypto ikev2 policy ikev2policy 
 proposal ikev2proposal
!
crypto ikev2 keyring ikev2keyring
 peer ikev2peer
  address 0.0.0.0 0.0.0.0
  pre-shared-key Cisco@123
 !
!
!
crypto ikev2 profile ikev2profile
 match identity remote address 0.0.0.0 
 authentication remote pre-share
 authentication local pre-share
 keyring local ikev2keyring
!
crypto ikev2 dpd 60 3 on-demand
!
!
!
!
! 
!
!
!
!
!
!
crypto ipsec transform-set tset1 esp-aes 256 esp-sha256-hmac 
 mode tunnel
!
!
crypto ipsec profile dmvpn-hub
 set transform-set tset1 
 set pfs group19
 set ikev2-profile ikev2profile
!
!
!
!         
!
! 
! 
!
!
interface Loopback1
 ip address <removed>!
interface Tunnel1
 bandwidth 100000
 vrf forwarding C1_0
 ip address <removed> no ip redirects
 ip hello-interval eigrp 101 30
 ip hold-time eigrp 101 90
 ip nhrp network-id 1000
 ip nhrp holdtime 900
 ip nhrp nhs 192.0.1.1 nbma 100.0.10.2 multicast
 ip tcp adjust-mss 1200
 cts sgt inline
 tunnel source Loopback1
 tunnel mode gre multipoint
 tunnel path-mtu-discovery
 tunnel protection ipsec profile dmvpn-hub
!
interface Tunnel2
 no ip address
!
interface GigabitEthernet0/0/0
 no ip address
 shutdown
 negotiation auto
!
interface GigabitEthernet0/0/1
 no ip address
 shutdown
 negotiation auto
!
interface GigabitEthernet0/0/2
 no ip address
 negotiation auto
!         
interface GigabitEthernet0/0/2.1
 encapsulation dot1Q 100
 vrf forwarding C1_0
 ip address <removed>!
interface GigabitEthernet0/0/3
 no ip address
 shutdown
 negotiation auto
!
interface GigabitEthernet0/0/4
 no ip address
 shutdown
 negotiation auto
!
interface GigabitEthernet0/0/5
 no ip address
 shutdown
 negotiation auto
!
interface GigabitEthernet0/0/6
 no ip address
 shutdown 
 negotiation auto
!
interface GigabitEthernet0/0/7
 no ip address
 shutdown
 negotiation auto
!
interface TenGigabitEthernet0/1/0
 ip address <removed> no negotiation auto
!
interface TenGigabitEthernet0/1/1
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/2
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/3
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/4
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/5
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/6
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/7
 no ip address
 shutdown
 no negotiation auto
!         
interface GigabitEthernet0
 vrf forwarding Mgmt-intf
 ip address <removed> negotiation auto
!
router ospf 100
 network 50.50.50.0 0.0.0.255 area 0
 network 208.200.0.2 0.0.0.0 area 0
!
router bgp 64001
 bgp router-id 111.111.111.111
 bgp log-neighbor-changes
 !
 address-family ipv4 vrf C1_0
  network 192.0.0.0
  redistribute connected
  neighbor 192.0.1.1 remote-as 64001
  neighbor 192.0.1.1 activate
 exit-address-family
!
ip http server
ip http authentication local
ip http secure-server
ip forward-protocol nd
!
ip tftp source-interface GigabitEthernet0
ip tftp blocksize 8192
ip route vrf Mgmt-intf 202.153.144.90 255.255.255.255 9.45.0.1
ip route vrf Mgmt-intf 202.153.144.90 255.255.255.255 9.41.0.1
ip ssh bulk-mode 131072
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
line con 0
 exec-timeout 0 0
 stopbits 1
line aux 0
line vty 0 4
 login
 transport input ssh
!
call-home
 ! If contact email address in call-home is configured as sch-smart-licensing@cisco.com
 ! the email address configured in Cisco Smart License Portal will be used as contact email address to send SCH notifications.
 contact-email-addr sch-smart-licensing@cisco.com
 profile "CiscoTAC-1"
  active
  destination transport-method http
!
!
!
!
!
!
end

DMVPN IPv4 OSPF BGP DHDD transport yang commands

Configuration example for hub1

version 17.6
service timestamps debug datetime msec
service timestamps log datetime msec
service internal
service call-home
platform qfp utilization monitor load 80
platform punt-keepalive disable-kernel-core
!
hostname DC1-Hub1
!
boot-start-marker
boot system bootflash:c8000aep-universalk9.DC1-Hub1.dmvpn_soak.SSA.bin
boot-end-marker
!
!
vrf definition Mgmt-intf
 !
 address-family ipv4
 exit-address-family
 !
 address-family ipv6
 exit-address-family
!
no logging console
!
no aaa new-model
!
!
!
!
!
!
!
!
!
!
!
!
login on-success log
!
!
!
!
!
!
!
subscriber templating
! 
! 
! 
! 
!
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
crypto pki trustpoint TP-self-signed-2134189379
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-2134189379
 revocation-check none
 rsakeypair TP-self-signed-2134189379
!
crypto pki trustpoint SLA-TrustPoint
 enrollment pkcs12
 revocation-check crl
!
!
license udi pid C8500-12X4QC sn TTM231100CF
license boot level network-advantage addon dna-advantage
no memory lite
memory free low-watermark processor 984138
hw-module subslot 0/1 mode 10G
hw-module subslot 0/2 mode 40G
hw-module subslot 0/2 breakout none port all
!
!
spanning-tree extend system-id
diagnostic bootup level minimal
!
!
redundancy
 mode none
!
!
crypto ikev2 proposal ikev2proposal 
 encryption aes-cbc-192
 integrity sha512
 group 16
!
crypto ikev2 policy ikev2policy 
 proposal ikev2proposal
!
crypto ikev2 keyring ikev2keyring
 peer ikev2peer
  address 0.0.0.0 0.0.0.0
  pre-shared-key Cisco@123
 !
!
!
crypto ikev2 profile ikev2profile
 match identity remote address 0.0.0.0 
 authentication remote pre-share
 authentication local pre-share
 keyring local ikev2keyring
!
crypto ikev2 dpd 60 3 on-demand
!
!
!
!
! 
!
!
!
!
!
!
crypto ipsec transform-set tset1 esp-aes 256 esp-sha256-hmac 
 mode transport
!
!
crypto ipsec profile dmvpn-hub
 set transform-set tset1 
 set pfs group19
 set ikev2-profile ikev2profile
!
!
!
!
!
! 
! 
!
!
interface Tunnel1
 bandwidth 100000
 ip address <removed> no ip redirects
 ip mtu 1400
 ip hello-interval eigrp 101 30
 ip hold-time eigrp 101 90
 ip nhrp network-id 1000
 ip nhrp holdtime 900
 ip nhrp redirect
 ip tcp adjust-mss 1200
 ip summary-address eigrp 101 100.0.0.0 255.0.0.0
 cts sgt inline
 tunnel source TenGigabitEthernet0/1/0
 tunnel mode gre multipoint
 tunnel path-mtu-discovery
 tunnel protection ipsec profile dmvpn-hub
!
interface TenGigabitEthernet0/0/0
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/0/1
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/0/2
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/0/3
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/0/4
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/0/5
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/0/6
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/0/7
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/0
 ip address <removed> no negotiation auto
!
interface TenGigabitEthernet0/1/1
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/2
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/3
 ip address <removed> no negotiation auto
!
interface FortyGigabitEthernet0/2/0
 no ip address
 shutdown
 no negotiation auto
!
interface FortyGigabitEthernet0/2/4
 no ip address
 shutdown
 no negotiation auto
!
interface FortyGigabitEthernet0/2/8
 no ip address
 shutdown
 no negotiation auto
!
interface GigabitEthernet0
 vrf forwarding Mgmt-intf
 ip address <removed> negotiation auto
!
router ospf 100
 network 100.0.10.0 0.0.0.255 area 0
!
router bgp 64001
 bgp router-id 1.1.1.2
 bgp log-neighbor-changes
 bgp listen range 192.0.0.0/8 peer-group DMVPN_SPOKES
 bgp listen limit 10000
 timers bgp 10 30
 neighbor DMVPN_SPOKES peer-group
 neighbor DMVPN_SPOKES remote-as 64001
 !
 address-family ipv4
  network 0.0.0.0
  network 150.100.0.0
  neighbor DMVPN_SPOKES activate
  neighbor DMVPN_SPOKES next-hop-self
  neighbor DMVPN_SPOKES as-override split-horizon
 exit-address-family
!
ip http server
ip http authentication local
ip http secure-server
ip forward-protocol nd
!
ip tftp source-interface GigabitEthernet0
ip tftp blocksize 8192
ip route 0.0.0.0 0.0.0.0 Null0
ip route vrf Mgmt-intf 202.153.144.90 255.255.255.255 9.41.0.1
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
line con 0
 exec-timeout 0 0
 stopbits 1
line aux 0
line vty 0 4
 login
 transport input ssh
!
call-home
 ! If contact email address in call-home is configured as sch-smart-licensing@cisco.com
 ! the email address configured in Cisco Smart License Portal will be used as contact email address to send SCH notifications.
 contact-email-addr sch-smart-licensing@cisco.com
 profile "CiscoTAC-1"
  active
  destination transport-method http
!
!
!
!
!
!
end

Configuration example for hub2

version 17.6
service timestamps debug datetime msec
service timestamps log datetime msec
service internal
service call-home
platform qfp utilization monitor load 80
platform punt-keepalive disable-kernel-core
!
hostname DC2-Hub1
!
boot-start-marker
boot system bootflash:c8000aep-universalk9.DC2-Hub1.dmvpn_soak.SSA.bin
boot-end-marker
!
!
vrf definition Mgmt-intf
 !
 address-family ipv4
 exit-address-family
 !
 address-family ipv6
 exit-address-family
!
no logging console
!
no aaa new-model
!
!
!
!
!
!
!
!
!
!
!
!
login on-success log
!
!
!
!
!
!
!
subscriber templating
! 
! 
! 
! 
!
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
crypto pki trustpoint TP-self-signed-345927470
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-345927470
 revocation-check none
 rsakeypair TP-self-signed-345927470
 hash sha256
!
crypto pki trustpoint SLA-TrustPoint
 enrollment pkcs12
 revocation-check crl
 hash sha256
!
!
!
license udi pid C8500-12X sn TTM224202LR
license boot level network-advantage addon dna-advantage
no memory lite
memory free low-watermark processor 675468
!
!
spanning-tree extend system-id
diagnostic bootup level minimal
!
!
redundancy
 mode none
!
!
crypto ikev2 proposal ikev2proposal 
 encryption aes-cbc-192
 integrity sha512
 group 16
!
crypto ikev2 policy ikev2policy 
 proposal ikev2proposal
!
crypto ikev2 keyring ikev2keyring
 peer ikev2peer
  address 0.0.0.0 0.0.0.0
  pre-shared-key Cisco@123
 !
!
!
crypto ikev2 profile ikev2profile
 match identity remote address 0.0.0.0 
 authentication remote pre-share
 authentication local pre-share
 keyring local ikev2keyring
!
crypto ikev2 dpd 60 3 on-demand
!
!
!
!
! 
!
!
!
!
!
!
crypto ipsec transform-set tset1 esp-aes 256 esp-sha256-hmac 
 mode transport
!
!
crypto ipsec profile dmvpn-hub
 set transform-set tset1 
 set pfs group19
 set ikev2-profile ikev2profile
!
!
!
!
!
! 
! 
!
!
interface Tunnel1
 bandwidth 100000
 ip address <removed> no ip redirects
 ip mtu 1400
 ip hello-interval eigrp 101 30
 ip hold-time eigrp 101 90
 ip nhrp network-id 1000
 ip nhrp holdtime 900
 ip nhrp redirect
 ip tcp adjust-mss 1200
 ip summary-address eigrp 101 100.0.0.0 255.0.0.0
 cts sgt inline
 tunnel source TenGigabitEthernet0/0/0
 tunnel mode gre multipoint
 tunnel path-mtu-discovery
 tunnel protection ipsec profile dmvpn-hub
!
interface TenGigabitEthernet0/0/0
 ip address <removed> no negotiation auto
!
interface TenGigabitEthernet0/0/1
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/0/2
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/0/3
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/0/4
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/0/5
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/0/6
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/0/7
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/0/8
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/0/9
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/0/10
 ip address <removed> no negotiation auto
!
interface TenGigabitEthernet0/0/11
 no ip address
 shutdown
 no negotiation auto
!
interface GigabitEthernet0
 vrf forwarding Mgmt-intf
 ip address <removed> negotiation auto
!
router ospf 100
 network 200.0.10.0 0.0.0.255 area 0
!
router bgp 64001
 bgp router-id 1.1.1.3
 bgp log-neighbor-changes
 bgp listen range 193.0.0.0/8 peer-group DMVPN_SPOKES
 bgp listen limit 10000
 timers bgp 10 30
 neighbor DMVPN_SPOKES peer-group
 neighbor DMVPN_SPOKES remote-as 64001
 !
 address-family ipv4
  network 0.0.0.0
  network 150.100.0.0
  neighbor DMVPN_SPOKES activate
  neighbor DMVPN_SPOKES next-hop-self
  neighbor DMVPN_SPOKES as-override split-horizon
 exit-address-family
!
ip http server
ip http authentication local
ip http secure-server
ip forward-protocol nd
!
ip tftp source-interface GigabitEthernet0
ip tftp blocksize 8192
ip route 0.0.0.0 0.0.0.0 Null0
ip route vrf Mgmt-intf 202.153.144.90 255.255.255.255 9.41.0.1
ip ssh bulk-mode 131072
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
line con 0
 exec-timeout 0 0
 stopbits 1
line aux 0
line vty 0
 login
 length 0
 transport input ssh
line vty 1 4
 login
 transport input ssh
!
call-home
 ! If contact email address in call-home is configured as sch-smart-licensing@cisco.com
 ! the email address configured in Cisco Smart License Portal will be used as contact email address to send SCH notifications.
 contact-email-addr sch-smart-licensing@cisco.com
 profile "CiscoTAC-1"
  active
  destination transport-method http
!
!
!
!
!
!
end

DC2-Hub1#  

Configuration example for spoke

version 17.13
service timestamps debug datetime msec
service timestamps log datetime msec
service internal
service call-home
platform qfp utilization monitor load 80
platform punt-keepalive disable-kernel-core
platform ipsec flexvpn-bypass-tcam
platform hardware crypto-throughput level 8-16g 
!
hostname spk1
!
boot-start-marker
boot system bootflash:asr1000-universalk9.spk1.dmvpn_soak.SSA.bin
boot-end-marker
!
!
vrf definition C1_0
 rd 1:0
 !
 address-family ipv4
 exit-address-family
!
vrf definition C1_1
 rd 1:1
 !
 address-family ipv4
 exit-address-family
!
vrf definition Mgmt-intf
 !
 address-family ipv4
 exit-address-family
 !
 address-family ipv6
 exit-address-family
!
no logging console
no aaa new-model
!
!
subscriber templating
!
!
!
!
!
!
!
!
!
!
!
!
login on-success log
!
!
!
!
!
!
!
! 
! 
! 
! 
!
!
crypto pki trustpoint TP-self-signed-1147572831
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-1147572831
 revocation-check none
 rsakeypair TP-self-signed-1147572831
 hash sha256
!
crypto pki trustpoint SLA-TrustPoint
 enrollment pkcs12
 revocation-check crl
 hash sha256
!
!
!
!
!
!
!
!
!
!
license udi pid ASR1001-HX sn JAE24530LQG
license boot level adventerprise
!
no memory lite
memory free low-watermark processor 675468
diagnostic bootup level minimal
!
spanning-tree extend system-id
!
!
!
redundancy
 mode none
!
crypto ikev2 proposal ikev2proposal 
 encryption aes-cbc-192
 integrity sha512
 group 16
!
crypto ikev2 policy ikev2policy 
 proposal ikev2proposal
!
crypto ikev2 keyring ikev2keyring
 peer ikev2peer
  address 0.0.0.0 0.0.0.0
  pre-shared-key Cisco@123
 !
!
!
crypto ikev2 profile ikev2profile
 match identity remote address 0.0.0.0 
 authentication remote pre-share
 authentication local pre-share
 keyring local ikev2keyring
!
crypto ikev2 dpd 60 3 on-demand
!
!
!
!
! 
!
!
!
!
!
!
crypto ipsec transform-set tset1 esp-aes 256 esp-sha256-hmac 
 mode transport
!
!
crypto ipsec profile dmvpn-hub
 set transform-set tset1 
 set pfs group19
 set ikev2-profile ikev2profile
!
!
!
!
!
! 
! 
!
!
interface Loopback1
 ip address <removed>!
interface Loopback2
 ip address <removed>!
interface Tunnel1
 bandwidth 100000
 vrf forwarding C1_0
 ip address <removed> no ip redirects
 ip hello-interval eigrp 101 30
 ip hold-time eigrp 101 90
 ip nhrp network-id 1000
 ip nhrp holdtime 900
 ip nhrp nhs 192.0.1.1 nbma 100.0.10.2 multicast
 ip tcp adjust-mss 1200
 cts sgt inline
 tunnel source Loopback1
 tunnel mode gre multipoint
 tunnel path-mtu-discovery
 tunnel protection ipsec profile dmvpn-hub
!
interface Tunnel2
 bandwidth 100000
 vrf forwarding C1_1
 ip address <removed> no ip redirects
 ip hello-interval eigrp 101 30
 ip hold-time eigrp 101 90
 ip nhrp network-id 1000
 ip nhrp holdtime 900
 ip nhrp nhs 193.0.2.1 nbma 200.0.10.2 multicast
 ip tcp adjust-mss 1200
 cts sgt inline
 tunnel source Loopback2
 tunnel mode gre multipoint
 tunnel path-mtu-discovery
 tunnel protection ipsec profile dmvpn-hub
!
interface Tunnel3
 no ip address
!
interface Tunnel4
 no ip address
!
interface Tunnel5
 no ip address
!
interface Tunnel6
 no ip address
!
interface Tunnel7
 no ip address
!
interface Tunnel8
 no ip address
!
interface Tunnel9
 no ip address
!
interface Tunnel10
 no ip address
!
interface Tunnel11
 no ip address
!
interface Tunnel12
 no ip address
!
interface Tunnel13
 no ip address
!
interface Tunnel14
 no ip address
!
interface Tunnel15
 no ip address
!
interface Tunnel16
 no ip address
!
interface Tunnel17
 no ip address
!
interface Tunnel18
 no ip address
!
interface Tunnel19
 no ip address
!
interface Tunnel20
 no ip address
!
interface Tunnel21
 no ip address
!
interface Tunnel22
 no ip address
!
interface Tunnel23
 no ip address
!
interface Tunnel24
 no ip address
!
interface Tunnel25
 no ip address
!
interface Tunnel26
 no ip address
!
interface Tunnel27
 no ip address
!
interface Tunnel28
 no ip address
!
interface Tunnel29
 no ip address
!
interface Tunnel30
 no ip address
!
interface Tunnel31
 no ip address
!
interface Tunnel32
 no ip address
!
interface Tunnel33
 no ip address
!
interface Tunnel34
 no ip address
!
interface Tunnel35
 no ip address
!
interface Tunnel36
 no ip address
!
interface Tunnel37
 no ip address
!
interface Tunnel38
 no ip address
!
interface Tunnel39
 no ip address
!
interface Tunnel40
 no ip address
!
interface Tunnel41
 no ip address
!
interface Tunnel42
 no ip address
!
interface Tunnel43
 no ip address
!
interface Tunnel44
 no ip address
!
interface Tunnel45
 no ip address
!
interface Tunnel46
 no ip address
!
interface Tunnel47
 no ip address
!
interface Tunnel48
 no ip address
!
interface Tunnel49
 no ip address
!
interface Tunnel50
 no ip address
!
interface Tunnel51
 no ip address
!
interface Tunnel52
 no ip address
!
interface Tunnel53
 no ip address
!
interface Tunnel54
 no ip address
!
interface Tunnel55
 no ip address
!
interface Tunnel56
 no ip address
!
interface Tunnel57
 no ip address
!
interface Tunnel58
 no ip address
!
interface Tunnel59
 no ip address
!
interface Tunnel60
 no ip address
!
interface Tunnel61
 no ip address
!
interface Tunnel62
 no ip address
!
interface Tunnel63
 no ip address
!
interface Tunnel64
 no ip address
!
interface Tunnel65
 no ip address
!
interface Tunnel66
 no ip address
!
interface Tunnel67
 no ip address
!
interface Tunnel68
 no ip address
!
interface Tunnel69
 no ip address
!
interface Tunnel70
 no ip address
!
interface Tunnel71
 no ip address
!
interface Tunnel72
 no ip address
!
interface Tunnel73
 no ip address
!
interface Tunnel74
 no ip address
!
interface Tunnel75
 no ip address
!
interface Tunnel76
 no ip address
!
interface Tunnel77
 no ip address
!
interface Tunnel78
 no ip address
!
interface Tunnel79
 no ip address
!
interface Tunnel80
 no ip address
!
interface Tunnel81
 no ip address
!
interface Tunnel82
 no ip address
!
interface Tunnel83
 no ip address
!
interface Tunnel84
 no ip address
!
interface Tunnel85
 no ip address
!
interface Tunnel86
 no ip address
!
interface Tunnel87
 no ip address
!
interface Tunnel88
 no ip address
!
interface Tunnel89
 no ip address
!
interface Tunnel90
 no ip address
!
interface Tunnel91
 no ip address
!
interface Tunnel92
 no ip address
!
interface Tunnel93
 no ip address
!
interface Tunnel94
 no ip address
!
interface Tunnel95
 no ip address
!
interface Tunnel96
 no ip address
!
interface Tunnel97
 no ip address
!
interface Tunnel98
 no ip address
!
interface Tunnel99
 no ip address
!
interface Tunnel100
 no ip address
!
interface Tunnel101
 no ip address
!
interface Tunnel102
 no ip address
!
interface Tunnel103
 no ip address
!
interface Tunnel104
 no ip address
!
interface Tunnel105
 no ip address
!
interface Tunnel106
 no ip address
!
interface Tunnel107
 no ip address
!
interface Tunnel108
 no ip address
!
interface Tunnel109
 no ip address
!
interface Tunnel110
 no ip address
!
interface Tunnel111
 no ip address
!
interface Tunnel112
 no ip address
!
interface Tunnel113
 no ip address
!
interface Tunnel114
 no ip address
!
interface Tunnel115
 no ip address
!
interface Tunnel116
 no ip address
!
interface Tunnel117
 no ip address
!
interface Tunnel118
 no ip address
!
interface Tunnel119
 no ip address
!
interface Tunnel120
 no ip address
!
interface Tunnel121
 no ip address
!
interface Tunnel122
 no ip address
!
interface Tunnel123
 no ip address
!
interface Tunnel124
 no ip address
!
interface Tunnel125
 no ip address
!
interface Tunnel126
 no ip address
!
interface Tunnel127
 no ip address
!
interface Tunnel128
 no ip address
!
interface Tunnel129
 no ip address
!
interface Tunnel130
 no ip address
!
interface Tunnel131
 no ip address
!
interface Tunnel132
 no ip address
!
interface Tunnel133
 no ip address
!
interface Tunnel134
 no ip address
!
interface Tunnel135
 no ip address
!
interface Tunnel136
 no ip address
!
interface Tunnel137
 no ip address
!
interface Tunnel138
 no ip address
!
interface Tunnel139
 no ip address
!
interface Tunnel140
 no ip address
!
interface Tunnel141
 no ip address
!
interface Tunnel142
 no ip address
!
interface Tunnel143
 no ip address
!
interface Tunnel144
 no ip address
!
interface Tunnel145
 no ip address
!
interface Tunnel146
 no ip address
!
interface Tunnel147
 no ip address
!
interface Tunnel148
 no ip address
!
interface Tunnel149
 no ip address
!
interface Tunnel150
 no ip address
!
interface Tunnel151
 no ip address
!
interface Tunnel152
 no ip address
!
interface Tunnel153
 no ip address
!
interface Tunnel154
 no ip address
!
interface Tunnel155
 no ip address
!
interface Tunnel156
 no ip address
!
interface Tunnel157
 no ip address
!
interface Tunnel158
 no ip address
!
interface Tunnel159
 no ip address
!
interface Tunnel160
 no ip address
!
interface Tunnel161
 no ip address
!
interface Tunnel162
 no ip address
!
interface Tunnel163
 no ip address
!
interface Tunnel164
 no ip address
!
interface Tunnel165
 no ip address
!
interface Tunnel166
 no ip address
!
interface Tunnel167
 no ip address
!
interface Tunnel168
 no ip address
!
interface Tunnel169
 no ip address
!
interface Tunnel170
 no ip address
!
interface Tunnel171
 no ip address
!
interface Tunnel172
 no ip address
!
interface Tunnel173
 no ip address
!
interface Tunnel174
 no ip address
!
interface Tunnel175
 no ip address
!
interface Tunnel176
 no ip address
!
interface Tunnel177
 no ip address
!
interface Tunnel178
 no ip address
!
interface Tunnel179
 no ip address
!
interface Tunnel180
 no ip address
!
interface Tunnel181
 no ip address
!
interface Tunnel182
 no ip address
!
interface Tunnel183
 no ip address
!
interface Tunnel184
 no ip address
!
interface Tunnel185
 no ip address
!
interface Tunnel186
 no ip address
!
interface Tunnel187
 no ip address
!
interface Tunnel188
 no ip address
!
interface Tunnel189
 no ip address
!
interface Tunnel190
 no ip address
!
interface Tunnel191
 no ip address
!
interface Tunnel192
 no ip address
!
interface Tunnel193
 no ip address
!
interface Tunnel194
 no ip address
!
interface Tunnel195
 no ip address
!
interface Tunnel196
 no ip address
!
interface Tunnel197
 no ip address
!
interface Tunnel198
 no ip address
!
interface Tunnel199
 no ip address
!
interface Tunnel200
 no ip address
!
interface Tunnel201
 no ip address
!
interface Tunnel202
 no ip address
!
interface Tunnel203
 no ip address
!
interface Tunnel204
 no ip address
!
interface Tunnel205
 no ip address
!
interface Tunnel206
 no ip address
!
interface Tunnel207
 no ip address
!
interface Tunnel208
 no ip address
!
interface Tunnel209
 no ip address
!
interface Tunnel210
 no ip address
!
interface Tunnel211
 no ip address
!
interface Tunnel212
 no ip address
!
interface Tunnel213
 no ip address
!
interface Tunnel214
 no ip address
!
interface Tunnel215
 no ip address
!
interface Tunnel216
 no ip address
!
interface Tunnel217
 no ip address
!
interface Tunnel218
 no ip address
!
interface Tunnel219
 no ip address
!
interface Tunnel220
 no ip address
!
interface Tunnel221
 no ip address
!
interface Tunnel222
 no ip address
!
interface Tunnel223
 no ip address
!
interface Tunnel224
 no ip address
!
interface Tunnel225
 no ip address
!
interface Tunnel226
 no ip address
!
interface Tunnel227
 no ip address
!
interface Tunnel228
 no ip address
!
interface Tunnel229
 no ip address
!
interface Tunnel230
 no ip address
!
interface Tunnel231
 no ip address
!
interface Tunnel232
 no ip address
!
interface Tunnel233
 no ip address
!
interface Tunnel234
 no ip address
!
interface Tunnel235
 no ip address
!
interface Tunnel236
 no ip address
!
interface Tunnel237
 no ip address
!
interface Tunnel238
 no ip address
!
interface Tunnel239
 no ip address
!
interface Tunnel240
 no ip address
!
interface Tunnel241
 no ip address
!
interface Tunnel242
 no ip address
!
interface Tunnel243
 no ip address
!
interface Tunnel244
 no ip address
!
interface Tunnel245
 no ip address
!
interface Tunnel246
 no ip address
!
interface Tunnel247
 no ip address
!
interface Tunnel248
 no ip address
!
interface Tunnel249
 no ip address
!
interface Tunnel250
 no ip address
!
interface Tunnel251
 no ip address
!
interface Tunnel252
 no ip address
!
interface Tunnel253
 no ip address
!
interface Tunnel254
 no ip address
!
interface Tunnel255
 no ip address
!
interface Tunnel256
 no ip address
!
interface Tunnel257
 no ip address
!
interface Tunnel258
 no ip address
!
interface Tunnel259
 no ip address
!
interface Tunnel260
 no ip address
!
interface Tunnel261
 no ip address
!
interface Tunnel262
 no ip address
!
interface Tunnel263
 no ip address
!
interface Tunnel264
 no ip address
!
interface Tunnel265
 no ip address
!
interface Tunnel266
 no ip address
!
interface Tunnel267
 no ip address
!
interface Tunnel268
 no ip address
!
interface Tunnel269
 no ip address
!
interface Tunnel270
 no ip address
!
interface Tunnel271
 no ip address
!
interface Tunnel272
 no ip address
!
interface Tunnel273
 no ip address
!
interface Tunnel274
 no ip address
!
interface Tunnel275
 no ip address
!
interface Tunnel276
 no ip address
!
interface Tunnel277
 no ip address
!
interface Tunnel278
 no ip address
!
interface Tunnel279
 no ip address
!
interface Tunnel280
 no ip address
!
interface Tunnel281
 no ip address
!
interface Tunnel282
 no ip address
!
interface Tunnel283
 no ip address
!
interface Tunnel284
 no ip address
!
interface Tunnel285
 no ip address
!
interface Tunnel286
 no ip address
!
interface Tunnel287
 no ip address
!
interface Tunnel288
 no ip address
!
interface Tunnel289
 no ip address
!
interface Tunnel290
 no ip address
!
interface Tunnel291
 no ip address
!
interface Tunnel292
 no ip address
!
interface Tunnel293
 no ip address
!
interface Tunnel294
 no ip address
!
interface Tunnel295
 no ip address
!
interface Tunnel296
 no ip address
!
interface Tunnel297
 no ip address
!
interface Tunnel298
 no ip address
!
interface Tunnel299
 no ip address
!
interface Tunnel300
 no ip address
!
interface Tunnel301
 no ip address
!
interface Tunnel302
 no ip address
!
interface Tunnel303
 no ip address
!
interface Tunnel304
 no ip address
!
interface Tunnel305
 no ip address
!
interface Tunnel306
 no ip address
!
interface Tunnel307
 no ip address
!
interface Tunnel308
 no ip address
!
interface Tunnel309
 no ip address
!
interface Tunnel310
 no ip address
!
interface Tunnel311
 no ip address
!
interface Tunnel312
 no ip address
!
interface Tunnel313
 no ip address
!
interface Tunnel314
 no ip address
!
interface Tunnel315
 no ip address
!
interface Tunnel316
 no ip address
!
interface Tunnel317
 no ip address
!
interface Tunnel318
 no ip address
!
interface Tunnel319
 no ip address
!
interface Tunnel320
 no ip address
!
interface Tunnel321
 no ip address
!
interface Tunnel322
 no ip address
!
interface Tunnel323
 no ip address
!
interface Tunnel324
 no ip address
!
interface Tunnel325
 no ip address
!
interface Tunnel326
 no ip address
!
interface Tunnel327
 no ip address
!
interface Tunnel328
 no ip address
!
interface Tunnel329
 no ip address
!
interface Tunnel330
 no ip address
!
interface Tunnel331
 no ip address
!
interface Tunnel332
 no ip address
!
interface Tunnel333
 no ip address
!
interface Tunnel334
 no ip address
!
interface Tunnel335
 no ip address
!
interface Tunnel336
 no ip address
!
interface Tunnel337
 no ip address
!
interface Tunnel338
 no ip address
!
interface Tunnel339
 no ip address
!
interface Tunnel340
 no ip address
!
interface Tunnel341
 no ip address
!
interface Tunnel342
 no ip address
!
interface Tunnel343
 no ip address
!
interface Tunnel344
 no ip address
!
interface Tunnel345
 no ip address
!
interface Tunnel346
 no ip address
!
interface Tunnel347
 no ip address
!
interface Tunnel348
 no ip address
!
interface Tunnel349
 no ip address
!
interface Tunnel350
 no ip address
!
interface Tunnel351
 no ip address
!
interface Tunnel352
 no ip address
!
interface Tunnel353
 no ip address
!
interface Tunnel354
 no ip address
!
interface Tunnel355
 no ip address
!
interface Tunnel356
 no ip address
!
interface Tunnel357
 no ip address
!
interface Tunnel358
 no ip address
!
interface Tunnel359
 no ip address
!
interface Tunnel360
 no ip address
!
interface Tunnel361
 no ip address
!
interface Tunnel362
 no ip address
!
interface Tunnel363
 no ip address
!
interface Tunnel364
 no ip address
!
interface Tunnel365
 no ip address
!
interface Tunnel366
 no ip address
!
interface Tunnel367
 no ip address
!
interface Tunnel368
 no ip address
!
interface Tunnel369
 no ip address
!
interface Tunnel370
 no ip address
!
interface Tunnel371
 no ip address
!
interface Tunnel372
 no ip address
!
interface Tunnel373
 no ip address
!
interface Tunnel374
 no ip address
!
interface Tunnel375
 no ip address
!
interface Tunnel376
 no ip address
!
interface Tunnel377
 no ip address
!
interface Tunnel378
 no ip address
!
interface Tunnel379
 no ip address
!
interface Tunnel380
 no ip address
!
interface Tunnel381
 no ip address
!
interface Tunnel382
 no ip address
!
interface Tunnel383
 no ip address
!
interface Tunnel384
 no ip address
!
interface Tunnel385
 no ip address
!
interface Tunnel386
 no ip address
!
interface Tunnel387
 no ip address
!
interface Tunnel388
 no ip address
!
interface Tunnel389
 no ip address
!
interface Tunnel390
 no ip address
!
interface Tunnel391
 no ip address
!
interface Tunnel392
 no ip address
!
interface Tunnel393
 no ip address
!
interface Tunnel394
 no ip address
!
interface Tunnel395
 no ip address
!
interface Tunnel396
 no ip address
!
interface Tunnel397
 no ip address
!
interface Tunnel398
 no ip address
!
interface Tunnel399
 no ip address
!
interface Tunnel400
 no ip address
!
interface Tunnel401
 no ip address
!
interface Tunnel402
 no ip address
!
interface Tunnel403
 no ip address
!
interface Tunnel404
 no ip address
!
interface Tunnel405
 no ip address
!
interface Tunnel406
 no ip address
!
interface Tunnel407
 no ip address
!
interface Tunnel408
 no ip address
!
interface Tunnel409
 no ip address
!
interface Tunnel410
 no ip address
!
interface Tunnel411
 no ip address
!
interface Tunnel412
 no ip address
!
interface Tunnel413
 no ip address
!
interface Tunnel414
 no ip address
!
interface Tunnel415
 no ip address
!
interface Tunnel416
 no ip address
!
interface Tunnel417
 no ip address
!
interface Tunnel418
 no ip address
!
interface Tunnel419
 no ip address
!
interface Tunnel420
 no ip address
!
interface Tunnel421
 no ip address
!
interface Tunnel422
 no ip address
!
interface Tunnel423
 no ip address
!
interface Tunnel424
 no ip address
!
interface Tunnel425
 no ip address
!
interface Tunnel426
 no ip address
!
interface Tunnel427
 no ip address
!
interface Tunnel428
 no ip address
!
interface Tunnel429
 no ip address
!
interface Tunnel430
 no ip address
!
interface Tunnel431
 no ip address
!
interface Tunnel432
 no ip address
!
interface Tunnel433
 no ip address
!
interface Tunnel434
 no ip address
!
interface Tunnel435
 no ip address
!
interface Tunnel436
 no ip address
!
interface Tunnel437
 no ip address
!
interface Tunnel438
 no ip address
!
interface Tunnel439
 no ip address
!
interface Tunnel440
 no ip address
!
interface Tunnel441
 no ip address
!
interface Tunnel442
 no ip address
!
interface Tunnel443
 no ip address
!
interface Tunnel444
 no ip address
!
interface Tunnel445
 no ip address
!
interface Tunnel446
 no ip address
!
interface Tunnel447
 no ip address
!
interface Tunnel448
 no ip address
!
interface Tunnel449
 no ip address
!
interface Tunnel450
 no ip address
!
interface Tunnel451
 no ip address
!
interface Tunnel452
 no ip address
!
interface Tunnel453
 no ip address
!
interface Tunnel454
 no ip address
!
interface Tunnel455
 no ip address
!
interface Tunnel456
 no ip address
!
interface Tunnel457
 no ip address
!
interface Tunnel458
 no ip address
!
interface Tunnel459
 no ip address
!
interface Tunnel460
 no ip address
!
interface Tunnel461
 no ip address
!
interface Tunnel462
 no ip address
!
interface Tunnel463
 no ip address
!
interface Tunnel464
 no ip address
!
interface Tunnel465
 no ip address
!
interface Tunnel466
 no ip address
!
interface Tunnel467
 no ip address
!
interface Tunnel468
 no ip address
!
interface Tunnel469
 no ip address
!
interface Tunnel470
 no ip address
!
interface Tunnel471
 no ip address
!
interface Tunnel472
 no ip address
!
interface Tunnel473
 no ip address
!
interface Tunnel474
 no ip address
!
interface Tunnel475
 no ip address
!
interface Tunnel476
 no ip address
!
interface Tunnel477
 no ip address
!
interface Tunnel478
 no ip address
!
interface Tunnel479
 no ip address
!
interface Tunnel480
 no ip address
!
interface Tunnel481
 no ip address
!
interface Tunnel482
 no ip address
!
interface Tunnel483
 no ip address
!
interface Tunnel484
 no ip address
!
interface Tunnel485
 no ip address
!
interface Tunnel486
 no ip address
!
interface Tunnel487
 no ip address
!
interface Tunnel488
 no ip address
!
interface Tunnel489
 no ip address
!
interface Tunnel490
 no ip address
!
interface Tunnel491
 no ip address
!
interface Tunnel492
 no ip address
!
interface Tunnel493
 no ip address
!
interface Tunnel494
 no ip address
!
interface Tunnel495
 no ip address
!
interface Tunnel496
 no ip address
!
interface Tunnel497
 no ip address
!
interface Tunnel498
 no ip address
!
interface Tunnel499
 no ip address
!
interface Tunnel500
 no ip address
!
interface Tunnel501
 no ip address
!
interface Tunnel502
 no ip address
!
interface Tunnel503
 no ip address
!
interface Tunnel504
 no ip address
!
interface Tunnel505
 no ip address
!
interface Tunnel506
 no ip address
!
interface Tunnel507
 no ip address
!
interface Tunnel508
 no ip address
!
interface Tunnel509
 no ip address
!
interface Tunnel510
 no ip address
!
interface Tunnel511
 no ip address
!
interface Tunnel512
 no ip address
!
interface Tunnel513
 no ip address
!
interface Tunnel514
 no ip address
!
interface Tunnel515
 no ip address
!
interface Tunnel516
 no ip address
!
interface Tunnel517
 no ip address
!
interface Tunnel518
 no ip address
!
interface Tunnel519
 no ip address
!
interface Tunnel520
 no ip address
!
interface Tunnel521
 no ip address
!
interface Tunnel522
 no ip address
!
interface Tunnel523
 no ip address
!
interface Tunnel524
 no ip address
!
interface Tunnel525
 no ip address
!
interface Tunnel526
 no ip address
!
interface Tunnel527
 no ip address
!
interface Tunnel528
 no ip address
!
interface Tunnel529
 no ip address
!
interface Tunnel530
 no ip address
!
interface Tunnel531
 no ip address
!
interface Tunnel532
 no ip address
!
interface Tunnel533
 no ip address
!
interface Tunnel534
 no ip address
!
interface Tunnel535
 no ip address
!
interface Tunnel536
 no ip address
!
interface Tunnel537
 no ip address
!
interface Tunnel538
 no ip address
!
interface Tunnel539
 no ip address
!
interface Tunnel540
 no ip address
!
interface Tunnel541
 no ip address
!
interface Tunnel542
 no ip address
!
interface Tunnel543
 no ip address
!
interface Tunnel544
 no ip address
!
interface Tunnel545
 no ip address
!
interface Tunnel546
 no ip address
!
interface Tunnel547
 no ip address
!
interface Tunnel548
 no ip address
!
interface Tunnel549
 no ip address
!
interface Tunnel550
 no ip address
!
interface Tunnel551
 no ip address
!
interface Tunnel552
 no ip address
!
interface Tunnel553
 no ip address
!
interface Tunnel554
 no ip address
!
interface Tunnel555
 no ip address
!
interface Tunnel556
 no ip address
!
interface Tunnel557
 no ip address
!
interface Tunnel558
 no ip address
!
interface Tunnel559
 no ip address
!
interface Tunnel560
 no ip address
!
interface Tunnel561
 no ip address
!
interface Tunnel562
 no ip address
!
interface Tunnel563
 no ip address
!
interface Tunnel564
 no ip address
!
interface Tunnel565
 no ip address
!
interface Tunnel566
 no ip address
!
interface Tunnel567
 no ip address
!
interface Tunnel568
 no ip address
!
interface Tunnel569
 no ip address
!
interface Tunnel570
 no ip address
!
interface Tunnel571
 no ip address
!
interface Tunnel572
 no ip address
!
interface Tunnel573
 no ip address
!
interface Tunnel574
 no ip address
!
interface Tunnel575
 no ip address
!
interface Tunnel576
 no ip address
!
interface Tunnel577
 no ip address
!
interface Tunnel578
 no ip address
!
interface Tunnel579
 no ip address
!
interface Tunnel580
 no ip address
!
interface Tunnel581
 no ip address
!
interface Tunnel582
 no ip address
!
interface Tunnel583
 no ip address
!
interface Tunnel584
 no ip address
!
interface Tunnel585
 no ip address
!
interface Tunnel586
 no ip address
!
interface Tunnel587
 no ip address
!
interface Tunnel588
 no ip address
!
interface Tunnel589
 no ip address
!
interface Tunnel590
 no ip address
!
interface Tunnel591
 no ip address
!
interface Tunnel592
 no ip address
!
interface Tunnel593
 no ip address
!
interface Tunnel594
 no ip address
!
interface Tunnel595
 no ip address
!
interface Tunnel596
 no ip address
!
interface Tunnel597
 no ip address
!
interface Tunnel598
 no ip address
!
interface Tunnel599
 no ip address
!
interface Tunnel600
 no ip address
!
interface Tunnel601
 no ip address
!
interface Tunnel602
 no ip address
!
interface Tunnel603
 no ip address
!
interface Tunnel604
 no ip address
!
interface Tunnel605
 no ip address
!
interface Tunnel606
 no ip address
!
interface Tunnel607
 no ip address
!
interface Tunnel608
 no ip address
!
interface Tunnel609
 no ip address
!
interface Tunnel610
 no ip address
!
interface Tunnel611
 no ip address
!
interface Tunnel612
 no ip address
!
interface Tunnel613
 no ip address
!
interface Tunnel614
 no ip address
!
interface Tunnel615
 no ip address
!
interface Tunnel616
 no ip address
!
interface Tunnel617
 no ip address
!
interface Tunnel618
 no ip address
!
interface Tunnel619
 no ip address
!
interface Tunnel620
 no ip address
!
interface Tunnel621
 no ip address
!
interface Tunnel622
 no ip address
!
interface Tunnel623
 no ip address
!
interface Tunnel624
 no ip address
!
interface Tunnel625
 no ip address
!
interface Tunnel626
 no ip address
!
interface Tunnel627
 no ip address
!
interface Tunnel628
 no ip address
!
interface Tunnel629
 no ip address
!
interface Tunnel630
 no ip address
!
interface Tunnel631
 no ip address
!
interface Tunnel632
 no ip address
!
interface Tunnel633
 no ip address
!
interface Tunnel634
 no ip address
!
interface Tunnel635
 no ip address
!
interface Tunnel636
 no ip address
!
interface Tunnel637
 no ip address
!
interface Tunnel638
 no ip address
!
interface Tunnel639
 no ip address
!
interface Tunnel640
 no ip address
!
interface Tunnel641
 no ip address
!
interface Tunnel642
 no ip address
!
interface Tunnel643
 no ip address
!
interface Tunnel644
 no ip address
!
interface Tunnel645
 no ip address
!
interface Tunnel646
 no ip address
!
interface Tunnel647
 no ip address
!
interface Tunnel648
 no ip address
!
interface Tunnel649
 no ip address
!
interface Tunnel650
 no ip address
!
interface Tunnel651
 no ip address
!
interface Tunnel652
 no ip address
!
interface Tunnel653
 no ip address
!
interface Tunnel654
 no ip address
!
interface Tunnel655
 no ip address
!
interface Tunnel656
 no ip address
!
interface Tunnel657
 no ip address
!
interface Tunnel658
 no ip address
!
interface Tunnel659
 no ip address
!
interface Tunnel660
 no ip address
!
interface Tunnel661
 no ip address
!
interface Tunnel662
 no ip address
!
interface Tunnel663
 no ip address
!
interface Tunnel664
 no ip address
!
interface Tunnel665
 no ip address
!
interface Tunnel666
 no ip address
!
interface Tunnel667
 no ip address
!
interface Tunnel668
 no ip address
!
interface Tunnel669
 no ip address
!
interface Tunnel670
 no ip address
!
interface Tunnel671
 no ip address
!
interface Tunnel672
 no ip address
!
interface Tunnel673
 no ip address
!
interface Tunnel674
 no ip address
!
interface Tunnel675
 no ip address
!
interface Tunnel676
 no ip address
!
interface Tunnel677
 no ip address
!
interface Tunnel678
 no ip address
!
interface Tunnel679
 no ip address
!
interface Tunnel680
 no ip address
!
interface Tunnel681
 no ip address
!
interface Tunnel682
 no ip address
!
interface Tunnel683
 no ip address
!
interface Tunnel684
 no ip address
!
interface Tunnel685
 no ip address
!
interface Tunnel686
 no ip address
!
interface Tunnel687
 no ip address
!
interface Tunnel688
 no ip address
!
interface Tunnel689
 no ip address
!
interface Tunnel690
 no ip address
!
interface Tunnel691
 no ip address
!
interface Tunnel692
 no ip address
!
interface Tunnel693
 no ip address
!
interface Tunnel694
 no ip address
!
interface Tunnel695
 no ip address
!
interface Tunnel696
 no ip address
!
interface Tunnel697
 no ip address
!
interface Tunnel698
 no ip address
!
interface Tunnel699
 no ip address
!
interface Tunnel700
 no ip address
!
interface Tunnel701
 no ip address
!
interface Tunnel702
 no ip address
!
interface Tunnel703
 no ip address
!
interface Tunnel704
 no ip address
!
interface Tunnel705
 no ip address
!
interface Tunnel706
 no ip address
!
interface Tunnel707
 no ip address
!
interface Tunnel708
 no ip address
!
interface Tunnel709
 no ip address
!
interface Tunnel710
 no ip address
!
interface Tunnel711
 no ip address
!
interface Tunnel712
 no ip address
!
interface Tunnel713
 no ip address
!
interface Tunnel714
 no ip address
!
interface Tunnel715
 no ip address
!
interface Tunnel716
 no ip address
!
interface Tunnel717
 no ip address
!
interface Tunnel718
 no ip address
!
interface Tunnel719
 no ip address
!
interface Tunnel720
 no ip address
!
interface Tunnel721
 no ip address
!
interface Tunnel722
 no ip address
!
interface Tunnel723
 no ip address
!
interface Tunnel724
 no ip address
!
interface Tunnel725
 no ip address
!
interface Tunnel726
 no ip address
!
interface Tunnel727
 no ip address
!
interface Tunnel728
 no ip address
!
interface Tunnel729
 no ip address
!
interface Tunnel730
 no ip address
!
interface Tunnel731
 no ip address
!
interface Tunnel732
 no ip address
!
interface Tunnel733
 no ip address
!
interface Tunnel734
 no ip address
!
interface Tunnel735
 no ip address
!
interface Tunnel736
 no ip address
!
interface Tunnel737
 no ip address
!
interface Tunnel738
 no ip address
!
interface Tunnel739
 no ip address
!
interface Tunnel740
 no ip address
!
interface Tunnel741
 no ip address
!
interface Tunnel742
 no ip address
!
interface Tunnel743
 no ip address
!
interface Tunnel744
 no ip address
!
interface Tunnel745
 no ip address
!
interface Tunnel746
 no ip address
!
interface Tunnel747
 no ip address
!
interface Tunnel748
 no ip address
!
interface Tunnel749
 no ip address
!
interface Tunnel750
 no ip address
!
interface Tunnel751
 no ip address
!
interface Tunnel752
 no ip address
!
interface Tunnel753
 no ip address
!
interface Tunnel754
 no ip address
!
interface Tunnel755
 no ip address
!
interface Tunnel756
 no ip address
!
interface Tunnel757
 no ip address
!
interface Tunnel758
 no ip address
!
interface Tunnel759
 no ip address
!
interface Tunnel760
 no ip address
!
interface Tunnel761
 no ip address
!
interface Tunnel762
 no ip address
!
interface Tunnel763
 no ip address
!
interface Tunnel764
 no ip address
!
interface Tunnel765
 no ip address
!
interface Tunnel766
 no ip address
!
interface Tunnel767
 no ip address
!
interface Tunnel768
 no ip address
!
interface Tunnel769
 no ip address
!
interface Tunnel770
 no ip address
!
interface Tunnel771
 no ip address
!
interface Tunnel772
 no ip address
!
interface Tunnel773
 no ip address
!
interface Tunnel774
 no ip address
!
interface Tunnel775
 no ip address
!
interface Tunnel776
 no ip address
!
interface Tunnel777
 no ip address
!
interface Tunnel778
 no ip address
!
interface Tunnel779
 no ip address
!
interface Tunnel780
 no ip address
!
interface Tunnel781
 no ip address
!
interface Tunnel782
 no ip address
!
interface Tunnel783
 no ip address
!
interface Tunnel784
 no ip address
!
interface Tunnel785
 no ip address
!
interface Tunnel786
 no ip address
!
interface Tunnel787
 no ip address
!
interface Tunnel788
 no ip address
!
interface Tunnel789
 no ip address
!
interface Tunnel790
 no ip address
!
interface Tunnel791
 no ip address
!
interface Tunnel792
 no ip address
!
interface Tunnel793
 no ip address
!
interface Tunnel794
 no ip address
!
interface Tunnel795
 no ip address
!
interface Tunnel796
 no ip address
!
interface Tunnel797
 no ip address
!
interface Tunnel798
 no ip address
!
interface Tunnel799
 no ip address
!
interface Tunnel800
 no ip address
!
interface Tunnel801
 no ip address
!
interface Tunnel802
 no ip address
!
interface Tunnel803
 no ip address
!
interface Tunnel804
 no ip address
!
interface Tunnel805
 no ip address
!
interface Tunnel806
 no ip address
!
interface Tunnel807
 no ip address
!
interface Tunnel808
 no ip address
!
interface Tunnel809
 no ip address
!
interface Tunnel810
 no ip address
!
interface Tunnel811
 no ip address
!
interface Tunnel812
 no ip address
!
interface Tunnel813
 no ip address
!
interface Tunnel814
 no ip address
!
interface Tunnel815
 no ip address
!
interface Tunnel816
 no ip address
!
interface Tunnel817
 no ip address
!
interface Tunnel818
 no ip address
!
interface Tunnel819
 no ip address
!
interface Tunnel820
 no ip address
!
interface Tunnel821
 no ip address
!
interface Tunnel822
 no ip address
!
interface Tunnel823
 no ip address
!
interface Tunnel824
 no ip address
!
interface Tunnel825
 no ip address
!
interface Tunnel826
 no ip address
!
interface Tunnel827
 no ip address
!
interface Tunnel828
 no ip address
!
interface Tunnel829
 no ip address
!
interface Tunnel830
 no ip address
!
interface Tunnel831
 no ip address
!
interface Tunnel832
 no ip address
!
interface Tunnel833
 no ip address
!
interface Tunnel834
 no ip address
!
interface Tunnel835
 no ip address
!
interface Tunnel836
 no ip address
!
interface Tunnel837
 no ip address
!
interface Tunnel838
 no ip address
!
interface Tunnel839
 no ip address
!
interface Tunnel840
 no ip address
!
interface Tunnel841
 no ip address
!
interface Tunnel842
 no ip address
!
interface Tunnel843
 no ip address
!
interface Tunnel844
 no ip address
!
interface Tunnel845
 no ip address
!
interface Tunnel846
 no ip address
!
interface Tunnel847
 no ip address
!
interface Tunnel848
 no ip address
!
interface Tunnel849
 no ip address
!
interface Tunnel850
 no ip address
!
interface Tunnel851
 no ip address
!
interface Tunnel852
 no ip address
!
interface Tunnel853
 no ip address
!
interface Tunnel854
 no ip address
!
interface Tunnel855
 no ip address
!
interface Tunnel856
 no ip address
!
interface Tunnel857
 no ip address
!
interface Tunnel858
 no ip address
!
interface Tunnel859
 no ip address
!
interface Tunnel860
 no ip address
!
interface Tunnel861
 no ip address
!
interface Tunnel862
 no ip address
!
interface Tunnel863
 no ip address
!
interface Tunnel864
 no ip address
!
interface Tunnel865
 no ip address
!
interface Tunnel866
 no ip address
!
interface Tunnel867
 no ip address
!
interface Tunnel868
 no ip address
!
interface Tunnel869
 no ip address
!
interface Tunnel870
 no ip address
!
interface Tunnel871
 no ip address
!
interface Tunnel872
 no ip address
!
interface Tunnel873
 no ip address
!
interface Tunnel874
 no ip address
!
interface Tunnel875
 no ip address
!
interface Tunnel876
 no ip address
!
interface Tunnel877
 no ip address
!
interface Tunnel878
 no ip address
!
interface Tunnel879
 no ip address
!
interface Tunnel880
 no ip address
!
interface Tunnel881
 no ip address
!
interface Tunnel882
 no ip address
!
interface Tunnel883
 no ip address
!
interface Tunnel884
 no ip address
!
interface Tunnel885
 no ip address
!
interface Tunnel886
 no ip address
!
interface Tunnel887
 no ip address
!
interface Tunnel888
 no ip address
!
interface Tunnel889
 no ip address
!
interface Tunnel890
 no ip address
!
interface Tunnel891
 no ip address
!
interface Tunnel892
 no ip address
!
interface Tunnel893
 no ip address
!
interface Tunnel894
 no ip address
!
interface Tunnel895
 no ip address
!
interface Tunnel896
 no ip address
!
interface Tunnel897
 no ip address
!
interface Tunnel898
 no ip address
!
interface Tunnel899
 no ip address
!
interface Tunnel900
 no ip address
!
interface Tunnel901
 no ip address
!
interface Tunnel902
 no ip address
!
interface Tunnel903
 no ip address
!
interface Tunnel904
 no ip address
!
interface Tunnel905
 no ip address
!
interface Tunnel906
 no ip address
!
interface Tunnel907
 no ip address
!
interface Tunnel908
 no ip address
!
interface Tunnel909
 no ip address
!
interface Tunnel910
 no ip address
!
interface Tunnel911
 no ip address
!
interface Tunnel912
 no ip address
!
interface Tunnel913
 no ip address
!
interface Tunnel914
 no ip address
!
interface Tunnel915
 no ip address
!
interface Tunnel916
 no ip address
!
interface Tunnel917
 no ip address
!
interface Tunnel918
 no ip address
!
interface Tunnel919
 no ip address
!
interface Tunnel920
 no ip address
!
interface Tunnel921
 no ip address
!
interface Tunnel922
 no ip address
!
interface Tunnel923
 no ip address
!
interface Tunnel924
 no ip address
!
interface Tunnel925
 no ip address
!
interface Tunnel926
 no ip address
!
interface Tunnel927
 no ip address
!
interface Tunnel928
 no ip address
!
interface Tunnel929
 no ip address
!
interface Tunnel930
 no ip address
!
interface Tunnel931
 no ip address
!
interface Tunnel932
 no ip address
!
interface Tunnel933
 no ip address
!
interface Tunnel934
 no ip address
!
interface Tunnel935
 no ip address
!
interface Tunnel936
 no ip address
!
interface Tunnel937
 no ip address
!
interface Tunnel938
 no ip address
!
interface Tunnel939
 no ip address
!
interface Tunnel940
 no ip address
!
interface Tunnel941
 no ip address
!
interface Tunnel942
 no ip address
!
interface Tunnel943
 no ip address
!
interface Tunnel944
 no ip address
!
interface Tunnel945
 no ip address
!
interface Tunnel946
 no ip address
!
interface Tunnel947
 no ip address
!
interface Tunnel948
 no ip address
!
interface Tunnel949
 no ip address
!
interface Tunnel950
 no ip address
!
interface Tunnel951
 no ip address
!
interface Tunnel952
 no ip address
!
interface Tunnel953
 no ip address
!
interface Tunnel954
 no ip address
!
interface Tunnel955
 no ip address
!
interface Tunnel956
 no ip address
!
interface Tunnel957
 no ip address
!
interface Tunnel958
 no ip address
!
interface Tunnel959
 no ip address
!
interface Tunnel960
 no ip address
!
interface Tunnel961
 no ip address
!
interface Tunnel962
 no ip address
!
interface Tunnel963
 no ip address
!
interface Tunnel964
 no ip address
!
interface Tunnel965
 no ip address
!
interface Tunnel966
 no ip address
!
interface Tunnel967
 no ip address
!
interface Tunnel968
 no ip address
!
interface Tunnel969
 no ip address
!
interface Tunnel970
 no ip address
!
interface Tunnel971
 no ip address
!
interface Tunnel972
 no ip address
!
interface Tunnel973
 no ip address
!
interface Tunnel974
 no ip address
!
interface Tunnel975
 no ip address
!
interface Tunnel976
 no ip address
!
interface Tunnel977
 no ip address
!
interface Tunnel978
 no ip address
!
interface Tunnel979
 no ip address
!
interface Tunnel980
 no ip address
!
interface Tunnel981
 no ip address
!
interface Tunnel982
 no ip address
!
interface Tunnel983
 no ip address
!
interface Tunnel984
 no ip address
!
interface Tunnel985
 no ip address
!
interface Tunnel986
 no ip address
!
interface Tunnel987
 no ip address
!
interface Tunnel988
 no ip address
!
interface Tunnel989
 no ip address
!
interface Tunnel990
 no ip address
!
interface Tunnel991
 no ip address
!
interface Tunnel992
 no ip address
!
interface Tunnel993
 no ip address
!
interface Tunnel994
 no ip address
!
interface Tunnel995
 no ip address
!
interface Tunnel996
 no ip address
!
interface Tunnel997
 no ip address
!
interface Tunnel998
 no ip address
!
interface Tunnel999
 no ip address
!
interface Tunnel1000
 no ip address
!
interface GigabitEthernet0/0/0
 no ip address
 shutdown
 negotiation auto
!
interface GigabitEthernet0/0/1
 no ip address
 shutdown
 negotiation auto
!
interface GigabitEthernet0/0/2
 no ip address
 negotiation auto
!
interface GigabitEthernet0/0/2.1
 encapsulation dot1Q 100
 vrf forwarding C1_0
 ip address <removed>!
interface GigabitEthernet0/0/2.2
 encapsulation dot1Q 101
 vrf forwarding C1_1
 ip address <removed>!
interface GigabitEthernet0/0/3
 no ip address
 shutdown
 negotiation auto
!
interface GigabitEthernet0/0/4
 no ip address
 shutdown
 negotiation auto
!
interface GigabitEthernet0/0/5
 no ip address
 shutdown
 negotiation auto
!
interface GigabitEthernet0/0/6
 no ip address
 shutdown
 negotiation auto
!
interface GigabitEthernet0/0/7
 no ip address
 shutdown
 negotiation auto
!
interface TenGigabitEthernet0/1/0
 ip address <removed> no negotiation auto
!
interface TenGigabitEthernet0/1/1
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/2
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/3
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/4
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/5
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/6
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/7
 no ip address
 shutdown
 no negotiation auto
!
interface GigabitEthernet0
 vrf forwarding Mgmt-intf
 ip address <removed> negotiation auto
!
router ospf 100
 network 50.50.50.0 0.0.0.255 area 0
 network 208.200.0.2 0.0.0.0 area 0
 network 208.200.0.3 0.0.0.0 area 0
!
router bgp 64001
 bgp router-id 111.111.111.111
 bgp log-neighbor-changes
 !
 address-family ipv4 vrf C1_0
  network 192.0.0.0
  redistribute connected
  neighbor 192.0.1.1 remote-as 64001
  neighbor 192.0.1.1 activate
 exit-address-family
 !
 address-family ipv4 vrf C1_1
  network 193.0.0.0
  redistribute connected
  neighbor 193.0.2.1 remote-as 64001
  neighbor 193.0.2.1 activate
 exit-address-family
!
ip forward-protocol nd
!
ip tftp source-interface GigabitEthernet0
ip tftp blocksize 8192
ip http server
ip http authentication local
ip http secure-server
ip ssh bulk-mode 131072
ip route vrf Mgmt-intf 202.153.144.90 255.255.255.255 9.45.0.1
ip route vrf Mgmt-intf 202.153.144.90 255.255.255.255 9.41.0.1
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
line con 0
 exec-timeout 0 0
 stopbits 1
line aux 0
line vty 0 4
 login
 transport input ssh
!
call-home
 ! If contact email address in call-home is configured as sch-smart-licensing@cisco.com
 ! the email address configured in Cisco Smart License Portal will be used as contact email address to send SCH notifications.
 contact-email-addr sch-smart-licensing@cisco.com
 profile "CiscoTAC-1"
  active
  destination transport-method http
!
!
!
!
!
!
end

DMVPN IPv4 OSPF BGP DHDD tunnel yang commands

Configuration example for hub1

version 17.6
service timestamps debug datetime msec
service timestamps log datetime msec
service internal
service call-home
platform qfp utilization monitor load 80
platform punt-keepalive disable-kernel-core
!
hostname DC1-Hub1
!
boot-start-marker
boot system bootflash:c8000aep-universalk9.DC1-Hub1.dmvpn_soak.SSA.bin
boot-end-marker
!
!
vrf definition Mgmt-intf
 !
 address-family ipv4
 exit-address-family
 !
 address-family ipv6
 exit-address-family
!
no logging console
!
no aaa new-model
!
!
!
!
!
!
!
!
!
!
!
!
login on-success log
!
!
!
!
!
!
!
subscriber templating
! 
! 
! 
! 
!
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
crypto pki trustpoint TP-self-signed-2134189379
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-2134189379
 revocation-check none
 rsakeypair TP-self-signed-2134189379
!
crypto pki trustpoint SLA-TrustPoint
 enrollment pkcs12
 revocation-check crl
!
!
!
!
license udi pid C8500-12X4QC sn TTM231100CF
license boot level network-advantage addon dna-advantage
no memory lite
memory free low-watermark processor 984138
hw-module subslot 0/1 mode 10G
hw-module subslot 0/2 mode 40G
hw-module subslot 0/2 breakout none port all
!
!
spanning-tree extend system-id
diagnostic bootup level minimal
!
!
redundancy
 mode none
!
!
crypto ikev2 proposal ikev2proposal 
 encryption aes-cbc-192
 integrity sha512
 group 16
!
crypto ikev2 policy ikev2policy 
 proposal ikev2proposal
!
crypto ikev2 keyring ikev2keyring
 peer ikev2peer
  address 0.0.0.0 0.0.0.0
  pre-shared-key Cisco@123
 !
!
!
crypto ikev2 profile ikev2profile
 match identity remote address 0.0.0.0 
 authentication remote pre-share
 authentication local pre-share
 keyring local ikev2keyring
!
crypto ikev2 dpd 60 3 on-demand
!
!
!
!
! 
!
!
!
!
!
!
crypto ipsec transform-set tset1 esp-aes 256 esp-sha256-hmac 
 mode tunnel
!
!
crypto ipsec profile dmvpn-hub
 set transform-set tset1 
 set pfs group19
 set ikev2-profile ikev2profile
!
!
!
!
!
! 
! 
!
!
interface Tunnel1
 bandwidth 100000
 ip address <removed> no ip redirects
 ip mtu 1400
 ip hello-interval eigrp 101 30
 ip hold-time eigrp 101 90
 ip nhrp network-id 1000
 ip nhrp holdtime 900
 ip nhrp redirect
 ip tcp adjust-mss 1200
 ip summary-address eigrp 101 100.0.0.0 255.0.0.0
 cts sgt inline
 tunnel source TenGigabitEthernet0/1/0
 tunnel mode gre multipoint
 tunnel path-mtu-discovery
 tunnel protection ipsec profile dmvpn-hub
!
interface TenGigabitEthernet0/0/0
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/0/1
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/0/2
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/0/3
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/0/4
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/0/5
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/0/6
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/0/7
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/0
 ip address <removed> no negotiation auto
!
interface TenGigabitEthernet0/1/1
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/2
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/3
 ip address <removed> no negotiation auto
!
interface FortyGigabitEthernet0/2/0
 no ip address
 shutdown
 no negotiation auto
!
interface FortyGigabitEthernet0/2/4
 no ip address
 shutdown
 no negotiation auto
!
interface FortyGigabitEthernet0/2/8
 no ip address
 shutdown
 no negotiation auto
!
interface GigabitEthernet0
 vrf forwarding Mgmt-intf
 ip address <removed> negotiation auto
!
router ospf 100
 network 100.0.10.0 0.0.0.255 area 0
!
router bgp 64001
 bgp router-id 1.1.1.2
 bgp log-neighbor-changes
 bgp listen range 192.0.0.0/8 peer-group DMVPN_SPOKES
 bgp listen limit 10000
 timers bgp 10 30
 neighbor DMVPN_SPOKES peer-group
 neighbor DMVPN_SPOKES remote-as 64001
 !
 address-family ipv4
  network 0.0.0.0
  network 150.100.0.0
  neighbor DMVPN_SPOKES activate
  neighbor DMVPN_SPOKES next-hop-self
  neighbor DMVPN_SPOKES as-override split-horizon
 exit-address-family
!
ip http server
ip http authentication local
ip http secure-server
ip forward-protocol nd
!
ip tftp source-interface GigabitEthernet0
ip tftp blocksize 8192
ip route 0.0.0.0 0.0.0.0 Null0
ip route vrf Mgmt-intf 202.153.144.90 255.255.255.255 9.41.0.1
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
line con 0
 exec-timeout 0 0
 stopbits 1
line aux 0
line vty 0 4
 login
 transport input ssh
!
call-home
 ! If contact email address in call-home is configured as sch-smart-licensing@cisco.com
 ! the email address configured in Cisco Smart License Portal will be used as contact email address to send SCH notifications.
 contact-email-addr sch-smart-licensing@cisco.com
 profile "CiscoTAC-1"
  active
  destination transport-method http
!
!
!
!
!
!
end

Configuration example for hub2

version 17.6
service timestamps debug datetime msec
service timestamps log datetime msec
service internal
service call-home
platform qfp utilization monitor load 80
platform punt-keepalive disable-kernel-core
!
hostname DC2-Hub1
!
boot-start-marker
boot system bootflash:c8000aep-universalk9.DC2-Hub1.dmvpn_soak.SSA.bin
boot-end-marker
!
!
vrf definition Mgmt-intf
 !
 address-family ipv4
 exit-address-family
 !
 address-family ipv6
 exit-address-family
!
no logging console
!
no aaa new-model
!
!
!
!
!
!
!
!
!
!
!
!
login on-success log
!
!
!
!
!
!
!
subscriber templating
! 
! 
! 
! 
!
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
crypto pki trustpoint TP-self-signed-345927470
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-345927470
 revocation-check none
 rsakeypair TP-self-signed-345927470
 hash sha256
!
crypto pki trustpoint SLA-TrustPoint
 enrollment pkcs12
 revocation-check crl
 hash sha256
!
!
!
license udi pid C8500-12X sn TTM224202LR
license boot level network-advantage addon dna-advantage
no memory lite
memory free low-watermark processor 675468
!
!
spanning-tree extend system-id
diagnostic bootup level minimal
!
!
redundancy
 mode none
!
!
crypto ikev2 proposal ikev2proposal 
 encryption aes-cbc-192
 integrity sha512
 group 16
!
crypto ikev2 policy ikev2policy 
 proposal ikev2proposal
!
crypto ikev2 keyring ikev2keyring
 peer ikev2peer
  address 0.0.0.0 0.0.0.0
  pre-shared-key Cisco@123
 !
!
!
crypto ikev2 profile ikev2profile
 match identity remote address 0.0.0.0 
 authentication remote pre-share
 authentication local pre-share
 keyring local ikev2keyring
!
crypto ikev2 dpd 60 3 on-demand
!
!
!
!
! 
!
!
!
!
!
!
crypto ipsec transform-set tset1 esp-aes 256 esp-sha256-hmac 
 mode tunnel
!
!
crypto ipsec profile dmvpn-hub
 set transform-set tset1 
 set pfs group19
 set ikev2-profile ikev2profile
!
!
!
!
!
! 
! 
!
!
interface Tunnel1
 bandwidth 100000
 ip address <removed> no ip redirects
 ip mtu 1400
 ip hello-interval eigrp 101 30
 ip hold-time eigrp 101 90
 ip nhrp network-id 1000
 ip nhrp holdtime 900
 ip nhrp redirect
 ip tcp adjust-mss 1200
 ip summary-address eigrp 101 100.0.0.0 255.0.0.0
 cts sgt inline
 tunnel source TenGigabitEthernet0/0/0
 tunnel mode gre multipoint
 tunnel path-mtu-discovery
 tunnel protection ipsec profile dmvpn-hub
!
interface TenGigabitEthernet0/0/0
 ip address <removed> no negotiation auto
!
interface TenGigabitEthernet0/0/1
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/0/2
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/0/3
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/0/4
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/0/5
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/0/6
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/0/7
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/0/8
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/0/9
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/0/10
 ip address <removed> no negotiation auto
!
interface TenGigabitEthernet0/0/11
 no ip address
 shutdown
 no negotiation auto
!
interface GigabitEthernet0
 vrf forwarding Mgmt-intf
 ip address <removed> negotiation auto
!
router ospf 100
 network 200.0.10.0 0.0.0.255 area 0
!
router bgp 64001
 bgp router-id 1.1.1.3
 bgp log-neighbor-changes
 bgp listen range 193.0.0.0/8 peer-group DMVPN_SPOKES
 bgp listen limit 10000
 timers bgp 10 30
 neighbor DMVPN_SPOKES peer-group
 neighbor DMVPN_SPOKES remote-as 64001
 !
 address-family ipv4
  network 0.0.0.0
  network 150.100.0.0
  neighbor DMVPN_SPOKES activate
  neighbor DMVPN_SPOKES next-hop-self
  neighbor DMVPN_SPOKES as-override split-horizon
 exit-address-family
!
ip http server
ip http authentication local
ip http secure-server
ip forward-protocol nd
!
ip tftp source-interface GigabitEthernet0
ip tftp blocksize 8192
ip route 0.0.0.0 0.0.0.0 Null0
ip route vrf Mgmt-intf 202.153.144.90 255.255.255.255 9.41.0.1
ip ssh bulk-mode 131072
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
line con 0
 exec-timeout 0 0
 stopbits 1
line aux 0
line vty 0
 login
 length 0
 transport input ssh
line vty 1 4
 login
 transport input ssh
!
call-home
 ! If contact email address in call-home is configured as sch-smart-licensing@cisco.com
 ! the email address configured in Cisco Smart License Portal will be used as contact email address to send SCH notifications.
 contact-email-addr sch-smart-licensing@cisco.com
 profile "CiscoTAC-1"
  active
  destination transport-method http
!
!
!
!
!
!
end

Configuration example for spoke

version 17.13
service timestamps debug datetime msec
service timestamps log datetime msec
service internal
service call-home
platform qfp utilization monitor load 80
platform punt-keepalive disable-kernel-core
platform ipsec flexvpn-bypass-tcam
platform hardware crypto-throughput level 8-16g 
!
hostname spk1
!
boot-start-marker
boot system bootflash:asr1000-universalk9.spk1.dmvpn_soak.SSA.bin
boot-end-marker
!
!
vrf definition C1_0
 rd 1:0
 !
 address-family ipv4
 exit-address-family
!
vrf definition C1_1
 rd 1:1
 !
 address-family ipv4
 exit-address-family
!
vrf definition Mgmt-intf
 !
 address-family ipv4
 exit-address-family
 !
 address-family ipv6
 exit-address-family
!
no logging console
no aaa new-model
!
!
subscriber templating
!
!
!
!
!
!
!
!
!
!
!
!
login on-success log
!
!
!
!
!
!
!
! 
! 
! 
! 
!
!
crypto pki trustpoint TP-self-signed-1147572831
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-1147572831
 revocation-check none
 rsakeypair TP-self-signed-1147572831
 hash sha256
!
crypto pki trustpoint SLA-TrustPoint
 enrollment pkcs12
 revocation-check crl
 hash sha256
!
!
!
!
!
!
!
!
!
!
license udi pid ASR1001-HX sn JAE24530LQG
license boot level adventerprise
!
no memory lite
memory free low-watermark processor 675468
diagnostic bootup level minimal
!
spanning-tree extend system-id
!
!
!
redundancy
 mode none
!
crypto ikev2 proposal ikev2proposal 
 encryption aes-cbc-192
 integrity sha512
 group 16
!
crypto ikev2 policy ikev2policy 
 proposal ikev2proposal
!
crypto ikev2 keyring ikev2keyring
 peer ikev2peer
  address 0.0.0.0 0.0.0.0
  pre-shared-key Cisco@123
 !
!
!
crypto ikev2 profile ikev2profile
 match identity remote address 0.0.0.0 
 authentication remote pre-share
 authentication local pre-share
 keyring local ikev2keyring
!
crypto ikev2 dpd 60 3 on-demand
!
!
!
!
! 
!
!
!
!
!
!
crypto ipsec transform-set tset1 esp-aes 256 esp-sha256-hmac 
 mode tunnel
!
!
crypto ipsec profile dmvpn-hub
 set transform-set tset1 
 set pfs group19
 set ikev2-profile ikev2profile
!
!
!
!
!
! 
! 
!
!
interface Loopback1
 ip address <removed>!
interface Loopback2
 ip address <removed>!
interface Tunnel1
 bandwidth 100000
 vrf forwarding C1_0
 ip address <removed> no ip redirects
 ip hello-interval eigrp 101 30
 ip hold-time eigrp 101 90
 ip nhrp network-id 1000
 ip nhrp holdtime 900
 ip nhrp nhs 192.0.1.1 nbma 100.0.10.2 multicast
 ip tcp adjust-mss 1200
 cts sgt inline
 tunnel source Loopback1
 tunnel mode gre multipoint
 tunnel path-mtu-discovery
 tunnel protection ipsec profile dmvpn-hub
!
interface Tunnel2
 bandwidth 100000
 vrf forwarding C1_1
 ip address <removed> no ip redirects
 ip hello-interval eigrp 101 30
 ip hold-time eigrp 101 90
 ip nhrp network-id 1000
 ip nhrp holdtime 900
 ip nhrp nhs 193.0.2.1 nbma 200.0.10.2 multicast
 ip tcp adjust-mss 1200
 cts sgt inline
 tunnel source Loopback2
 tunnel mode gre multipoint
 tunnel path-mtu-discovery
 tunnel protection ipsec profile dmvpn-hub
!
interface Tunnel3
 no ip address
!
interface Tunnel4
 no ip address
!
interface Tunnel5
 no ip address
!
interface Tunnel6
 no ip address
!
interface Tunnel7
 no ip address
!
interface Tunnel8
 no ip address
!
interface Tunnel9
 no ip address
!
interface Tunnel10
 no ip address
!
interface Tunnel11
 no ip address
!
interface Tunnel12
 no ip address
!
interface Tunnel13
 no ip address
!
interface Tunnel14
 no ip address
!
interface Tunnel15
 no ip address
!
interface Tunnel16
 no ip address
!
interface Tunnel17
 no ip address
!
interface Tunnel18
 no ip address
!
interface Tunnel19
 no ip address
!
interface Tunnel20
 no ip address
!
interface Tunnel21
 no ip address
!
interface Tunnel22
 no ip address
!
interface Tunnel23
 no ip address
!
interface Tunnel24
 no ip address
!
interface Tunnel25
 no ip address
!
interface Tunnel26
 no ip address
!
interface Tunnel27
 no ip address
!
interface Tunnel28
 no ip address
!
interface Tunnel29
 no ip address
!
interface Tunnel30
 no ip address
!
interface Tunnel31
 no ip address
!
interface Tunnel32
 no ip address
!
interface Tunnel33
 no ip address
!
interface Tunnel34
 no ip address
!
interface Tunnel35
 no ip address
!
interface Tunnel36
 no ip address
!
interface Tunnel37
 no ip address
!
interface Tunnel38
 no ip address
!
interface Tunnel39
 no ip address
!
interface Tunnel40
 no ip address
!
interface Tunnel41
 no ip address
!
interface Tunnel42
 no ip address
!
interface Tunnel43
 no ip address
!
interface Tunnel44
 no ip address
!
interface Tunnel45
 no ip address
!
interface Tunnel46
 no ip address
!
interface Tunnel47
 no ip address
!
interface Tunnel48
 no ip address
!
interface Tunnel49
 no ip address
!
interface Tunnel50
 no ip address
!
interface Tunnel51
 no ip address
!
interface Tunnel52
 no ip address
!
interface Tunnel53
 no ip address
!
interface Tunnel54
 no ip address
!
interface Tunnel55
 no ip address
!
interface Tunnel56
 no ip address
!
interface Tunnel57
 no ip address
!
interface Tunnel58
 no ip address
!
interface Tunnel59
 no ip address
!
interface Tunnel60
 no ip address
!
interface Tunnel61
 no ip address
!
interface Tunnel62
 no ip address
!
interface Tunnel63
 no ip address
!
interface Tunnel64
 no ip address
!
interface Tunnel65
 no ip address
!
interface Tunnel66
 no ip address
!
interface Tunnel67
 no ip address
!
interface Tunnel68
 no ip address
!
interface Tunnel69
 no ip address
!
interface Tunnel70
 no ip address
!
interface Tunnel71
 no ip address
!
interface Tunnel72
 no ip address
!
interface Tunnel73
 no ip address
!
interface Tunnel74
 no ip address
!
interface Tunnel75
 no ip address
!
interface Tunnel76
 no ip address
!
interface Tunnel77
 no ip address
!
interface Tunnel78
 no ip address
!
interface Tunnel79
 no ip address
!
interface Tunnel80
 no ip address
!
interface Tunnel81
 no ip address
!
interface Tunnel82
 no ip address
!
interface Tunnel83
 no ip address
!
interface Tunnel84
 no ip address
!
interface Tunnel85
 no ip address
!
interface Tunnel86
 no ip address
!
interface Tunnel87
 no ip address
!
interface Tunnel88
 no ip address
!
interface Tunnel89
 no ip address
!
interface Tunnel90
 no ip address
!
interface Tunnel91
 no ip address
!
interface Tunnel92
 no ip address
!
interface Tunnel93
 no ip address
!
interface Tunnel94
 no ip address
!
interface Tunnel95
 no ip address
!
interface Tunnel96
 no ip address
!
interface Tunnel97
 no ip address
!
interface Tunnel98
 no ip address
!
interface Tunnel99
 no ip address
!
interface Tunnel100
 no ip address
!
interface Tunnel101
 no ip address
!
interface Tunnel102
 no ip address
!
interface Tunnel103
 no ip address
!
interface Tunnel104
 no ip address
!
interface Tunnel105
 no ip address
!
interface Tunnel106
 no ip address
!
interface Tunnel107
 no ip address
!
interface Tunnel108
 no ip address
!
interface Tunnel109
 no ip address
!
interface Tunnel110
 no ip address
!
interface Tunnel111
 no ip address
!
interface Tunnel112
 no ip address
!
interface Tunnel113
 no ip address
!
interface Tunnel114
 no ip address
!
interface Tunnel115
 no ip address
!
interface Tunnel116
 no ip address
!
interface Tunnel117
 no ip address
!
interface Tunnel118
 no ip address
!
interface Tunnel119
 no ip address
!
interface Tunnel120
 no ip address
!
interface Tunnel121
 no ip address
!
interface Tunnel122
 no ip address
!
interface Tunnel123
 no ip address
!
interface Tunnel124
 no ip address
!
interface Tunnel125
 no ip address
!
interface Tunnel126
 no ip address
!
interface Tunnel127
 no ip address
!
interface Tunnel128
 no ip address
!
interface Tunnel129
 no ip address
!
interface Tunnel130
 no ip address
!
interface Tunnel131
 no ip address
!
interface Tunnel132
 no ip address
!
interface Tunnel133
 no ip address
!
interface Tunnel134
 no ip address
!
interface Tunnel135
 no ip address
!
interface Tunnel136
 no ip address
!
interface Tunnel137
 no ip address
!
interface Tunnel138
 no ip address
!
interface Tunnel139
 no ip address
!
interface Tunnel140
 no ip address
!
interface Tunnel141
 no ip address
!
interface Tunnel142
 no ip address
!
interface Tunnel143
 no ip address
!
interface Tunnel144
 no ip address
!
interface Tunnel145
 no ip address
!
interface Tunnel146
 no ip address
!
interface Tunnel147
 no ip address
!
interface Tunnel148
 no ip address
!
interface Tunnel149
 no ip address
!
interface Tunnel150
 no ip address
!
interface Tunnel151
 no ip address
!
interface Tunnel152
 no ip address
!
interface Tunnel153
 no ip address
!
interface Tunnel154
 no ip address
!
interface Tunnel155
 no ip address
!
interface Tunnel156
 no ip address
!
interface Tunnel157
 no ip address
!
interface Tunnel158
 no ip address
!
interface Tunnel159
 no ip address
!
interface Tunnel160
 no ip address
!
interface Tunnel161
 no ip address
!
interface Tunnel162
 no ip address
!
interface Tunnel163
 no ip address
!
interface Tunnel164
 no ip address
!
interface Tunnel165
 no ip address
!
interface Tunnel166
 no ip address
!
interface Tunnel167
 no ip address
!
interface Tunnel168
 no ip address
!
interface Tunnel169
 no ip address
!
interface Tunnel170
 no ip address
!
interface Tunnel171
 no ip address
!
interface Tunnel172
 no ip address
!
interface Tunnel173
 no ip address
!
interface Tunnel174
 no ip address
!
interface Tunnel175
 no ip address
!
interface Tunnel176
 no ip address
!
interface Tunnel177
 no ip address
!
interface Tunnel178
 no ip address
!
interface Tunnel179
 no ip address
!
interface Tunnel180
 no ip address
!
interface Tunnel181
 no ip address
!
interface Tunnel182
 no ip address
!
interface Tunnel183
 no ip address
!
interface Tunnel184
 no ip address
!
interface Tunnel185
 no ip address
!
interface Tunnel186
 no ip address
!
interface Tunnel187
 no ip address
!
interface Tunnel188
 no ip address
!
interface Tunnel189
 no ip address
!
interface Tunnel190
 no ip address
!
interface Tunnel191
 no ip address
!
interface Tunnel192
 no ip address
!
interface Tunnel193
 no ip address
!
interface Tunnel194
 no ip address
!
interface Tunnel195
 no ip address
!
interface Tunnel196
 no ip address
!
interface Tunnel197
 no ip address
!
interface Tunnel198
 no ip address
!
interface Tunnel199
 no ip address
!
interface Tunnel200
 no ip address
!
interface Tunnel201
 no ip address
!
interface Tunnel202
 no ip address
!
interface Tunnel203
 no ip address
!
interface Tunnel204
 no ip address
!
interface Tunnel205
 no ip address
!
interface Tunnel206
 no ip address
!
interface Tunnel207
 no ip address
!
interface Tunnel208
 no ip address
!
interface Tunnel209
 no ip address
!
interface Tunnel210
 no ip address
!
interface Tunnel211
 no ip address
!
interface Tunnel212
 no ip address
!
interface Tunnel213
 no ip address
!
interface Tunnel214
 no ip address
!
interface Tunnel215
 no ip address
!
interface Tunnel216
 no ip address
!
interface Tunnel217
 no ip address
!
interface Tunnel218
 no ip address
!
interface Tunnel219
 no ip address
!
interface Tunnel220
 no ip address
!
interface Tunnel221
 no ip address
!
interface Tunnel222
 no ip address
!
interface Tunnel223
 no ip address
!
interface Tunnel224
 no ip address
!
interface Tunnel225
 no ip address
!
interface Tunnel226
 no ip address
!
interface Tunnel227
 no ip address
!
interface Tunnel228
 no ip address
!
interface Tunnel229
 no ip address
!
interface Tunnel230
 no ip address
!
interface Tunnel231
 no ip address
!
interface Tunnel232
 no ip address
!
interface Tunnel233
 no ip address
!
interface Tunnel234
 no ip address
!
interface Tunnel235
 no ip address
!
interface Tunnel236
 no ip address
!
interface Tunnel237
 no ip address
!
interface Tunnel238
 no ip address
!
interface Tunnel239
 no ip address
!
interface Tunnel240
 no ip address
!
interface Tunnel241
 no ip address
!
interface Tunnel242
 no ip address
!
interface Tunnel243
 no ip address
!
interface Tunnel244
 no ip address
!
interface Tunnel245
 no ip address
!
interface Tunnel246
 no ip address
!
interface Tunnel247
 no ip address
!
interface Tunnel248
 no ip address
!
interface Tunnel249
 no ip address
!
interface Tunnel250
 no ip address
!
interface Tunnel251
 no ip address
!
interface Tunnel252
 no ip address
!
interface Tunnel253
 no ip address
!
interface Tunnel254
 no ip address
!
interface Tunnel255
 no ip address
!
interface Tunnel256
 no ip address
!
interface Tunnel257
 no ip address
!
interface Tunnel258
 no ip address
!
interface Tunnel259
 no ip address
!
interface Tunnel260
 no ip address
!
interface Tunnel261
 no ip address
!
interface Tunnel262
 no ip address
!
interface Tunnel263
 no ip address
!
interface Tunnel264
 no ip address
!
interface Tunnel265
 no ip address
!
interface Tunnel266
 no ip address
!
interface Tunnel267
 no ip address
!
interface Tunnel268
 no ip address
!
interface Tunnel269
 no ip address
!
interface Tunnel270
 no ip address
!
interface Tunnel271
 no ip address
!
interface Tunnel272
 no ip address
!
interface Tunnel273
 no ip address
!
interface Tunnel274
 no ip address
!
interface Tunnel275
 no ip address
!
interface Tunnel276
 no ip address
!
interface Tunnel277
 no ip address
!
interface Tunnel278
 no ip address
!
interface Tunnel279
 no ip address
!
interface Tunnel280
 no ip address
!
interface Tunnel281
 no ip address
!
interface Tunnel282
 no ip address
!
interface Tunnel283
 no ip address
!
interface Tunnel284
 no ip address
!
interface Tunnel285
 no ip address
!
interface Tunnel286
 no ip address
!
interface Tunnel287
 no ip address
!
interface Tunnel288
 no ip address
!
interface Tunnel289
 no ip address
!
interface Tunnel290
 no ip address
!
interface Tunnel291
 no ip address
!
interface Tunnel292
 no ip address
!
interface Tunnel293
 no ip address
!
interface Tunnel294
 no ip address
!
interface Tunnel295
 no ip address
!
interface Tunnel296
 no ip address
!
interface Tunnel297
 no ip address
!
interface Tunnel298
 no ip address
!
interface Tunnel299
 no ip address
!
interface Tunnel300
 no ip address
!
interface Tunnel301
 no ip address
!
interface Tunnel302
 no ip address
!
interface Tunnel303
 no ip address
!
interface Tunnel304
 no ip address
!
interface Tunnel305
 no ip address
!
interface Tunnel306
 no ip address
!
interface Tunnel307
 no ip address
!
interface Tunnel308
 no ip address
!
interface Tunnel309
 no ip address
!
interface Tunnel310
 no ip address
!
interface Tunnel311
 no ip address
!
interface Tunnel312
 no ip address
!
interface Tunnel313
 no ip address
!
interface Tunnel314
 no ip address
!
interface Tunnel315
 no ip address
!
interface Tunnel316
 no ip address
!
interface Tunnel317
 no ip address
!
interface Tunnel318
 no ip address
!
interface Tunnel319
 no ip address
!
interface Tunnel320
 no ip address
!
interface Tunnel321
 no ip address
!
interface Tunnel322
 no ip address
!
interface Tunnel323
 no ip address
!
interface Tunnel324
 no ip address
!
interface Tunnel325
 no ip address
!
interface Tunnel326
 no ip address
!
interface Tunnel327
 no ip address
!
interface Tunnel328
 no ip address
!
interface Tunnel329
 no ip address
!
interface Tunnel330
 no ip address
!
interface Tunnel331
 no ip address
!
interface Tunnel332
 no ip address
!
interface Tunnel333
 no ip address
!
interface Tunnel334
 no ip address
!
interface Tunnel335
 no ip address
!
interface Tunnel336
 no ip address
!
interface Tunnel337
 no ip address
!
interface Tunnel338
 no ip address
!
interface Tunnel339
 no ip address
!
interface Tunnel340
 no ip address
!
interface Tunnel341
 no ip address
!
interface Tunnel342
 no ip address
!
interface Tunnel343
 no ip address
!
interface Tunnel344
 no ip address
!
interface Tunnel345
 no ip address
!
interface Tunnel346
 no ip address
!
interface Tunnel347
 no ip address
!
interface Tunnel348
 no ip address
!
interface Tunnel349
 no ip address
!
interface Tunnel350
 no ip address
!
interface Tunnel351
 no ip address
!
interface Tunnel352
 no ip address
!
interface Tunnel353
 no ip address
!
interface Tunnel354
 no ip address
!
interface Tunnel355
 no ip address
!
interface Tunnel356
 no ip address
!
interface Tunnel357
 no ip address
!
interface Tunnel358
 no ip address
!
interface Tunnel359
 no ip address
!
interface Tunnel360
 no ip address
!
interface Tunnel361
 no ip address
!
interface Tunnel362
 no ip address
!
interface Tunnel363
 no ip address
!
interface Tunnel364
 no ip address
!
interface Tunnel365
 no ip address
!
interface Tunnel366
 no ip address
!
interface Tunnel367
 no ip address
!
interface Tunnel368
 no ip address
!
interface Tunnel369
 no ip address
!
interface Tunnel370
 no ip address
!
interface Tunnel371
 no ip address
!
interface Tunnel372
 no ip address
!
interface Tunnel373
 no ip address
!
interface Tunnel374
 no ip address
!
interface Tunnel375
 no ip address
!
interface Tunnel376
 no ip address
!
interface Tunnel377
 no ip address
!
interface Tunnel378
 no ip address
!
interface Tunnel379
 no ip address
!
interface Tunnel380
 no ip address
!
interface Tunnel381
 no ip address
!
interface Tunnel382
 no ip address
!
interface Tunnel383
 no ip address
!
interface Tunnel384
 no ip address
!
interface Tunnel385
 no ip address
!
interface Tunnel386
 no ip address
!
interface Tunnel387
 no ip address
!
interface Tunnel388
 no ip address
!
interface Tunnel389
 no ip address
!
interface Tunnel390
 no ip address
!
interface Tunnel391
 no ip address
!
interface Tunnel392
 no ip address
!
interface Tunnel393
 no ip address
!
interface Tunnel394
 no ip address
!
interface Tunnel395
 no ip address
!
interface Tunnel396
 no ip address
!
interface Tunnel397
 no ip address
!
interface Tunnel398
 no ip address
!
interface Tunnel399
 no ip address
!
interface Tunnel400
 no ip address
!
interface Tunnel401
 no ip address
!
interface Tunnel402
 no ip address
!
interface Tunnel403
 no ip address
!
interface Tunnel404
 no ip address
!
interface Tunnel405
 no ip address
!
interface Tunnel406
 no ip address
!
interface Tunnel407
 no ip address
!
interface Tunnel408
 no ip address
!
interface Tunnel409
 no ip address
!
interface Tunnel410
 no ip address
!
interface Tunnel411
 no ip address
!
interface Tunnel412
 no ip address
!
interface Tunnel413
 no ip address
!
interface Tunnel414
 no ip address
!
interface Tunnel415
 no ip address
!
interface Tunnel416
 no ip address
!
interface Tunnel417
 no ip address
!
interface Tunnel418
 no ip address
!
interface Tunnel419
 no ip address
!
interface Tunnel420
 no ip address
!
interface Tunnel421
 no ip address
!
interface Tunnel422
 no ip address
!
interface Tunnel423
 no ip address
!
interface Tunnel424
 no ip address
!
interface Tunnel425
 no ip address
!
interface Tunnel426
 no ip address
!
interface Tunnel427
 no ip address
!
interface Tunnel428
 no ip address
!
interface Tunnel429
 no ip address
!
interface Tunnel430
 no ip address
!
interface Tunnel431
 no ip address
!
interface Tunnel432
 no ip address
!
interface Tunnel433
 no ip address
!
interface Tunnel434
 no ip address
!
interface Tunnel435
 no ip address
!
interface Tunnel436
 no ip address
!
interface Tunnel437
 no ip address
!
interface Tunnel438
 no ip address
!
interface Tunnel439
 no ip address
!
interface Tunnel440
 no ip address
!
interface Tunnel441
 no ip address
!
interface Tunnel442
 no ip address
!
interface Tunnel443
 no ip address
!
interface Tunnel444
 no ip address
!
interface Tunnel445
 no ip address
!
interface Tunnel446
 no ip address
!
interface Tunnel447
 no ip address
!
interface Tunnel448
 no ip address
!
interface Tunnel449
 no ip address
!
interface Tunnel450
 no ip address
!
interface Tunnel451
 no ip address
!
interface Tunnel452
 no ip address
!
interface Tunnel453
 no ip address
!
interface Tunnel454
 no ip address
!
interface Tunnel455
 no ip address
!
interface Tunnel456
 no ip address
!
interface Tunnel457
 no ip address
!
interface Tunnel458
 no ip address
!
interface Tunnel459
 no ip address
!
interface Tunnel460
 no ip address
!
interface Tunnel461
 no ip address
!
interface Tunnel462
 no ip address
!
interface Tunnel463
 no ip address
!
interface Tunnel464
 no ip address
!
interface Tunnel465
 no ip address
!
interface Tunnel466
 no ip address
!
interface Tunnel467
 no ip address
!
interface Tunnel468
 no ip address
!
interface Tunnel469
 no ip address
!
interface Tunnel470
 no ip address
!
interface Tunnel471
 no ip address
!
interface Tunnel472
 no ip address
!
interface Tunnel473
 no ip address
!
interface Tunnel474
 no ip address
!
interface Tunnel475
 no ip address
!
interface Tunnel476
 no ip address
!
interface Tunnel477
 no ip address
!
interface Tunnel478
 no ip address
!
interface Tunnel479
 no ip address
!
interface Tunnel480
 no ip address
!
interface Tunnel481
 no ip address
!
interface Tunnel482
 no ip address
!
interface Tunnel483
 no ip address
!
interface Tunnel484
 no ip address
!
interface Tunnel485
 no ip address
!
interface Tunnel486
 no ip address
!
interface Tunnel487
 no ip address
!
interface Tunnel488
 no ip address
!
interface Tunnel489
 no ip address
!
interface Tunnel490
 no ip address
!
interface Tunnel491
 no ip address
!
interface Tunnel492
 no ip address
!
interface Tunnel493
 no ip address
!
interface Tunnel494
 no ip address
!
interface Tunnel495
 no ip address
!
interface Tunnel496
 no ip address
!
interface Tunnel497
 no ip address
!
interface Tunnel498
 no ip address
!
interface Tunnel499
 no ip address
!
interface Tunnel500
 no ip address
!
interface Tunnel501
 no ip address
!
interface Tunnel502
 no ip address
!
interface Tunnel503
 no ip address
!
interface Tunnel504
 no ip address
!
interface Tunnel505
 no ip address
!
interface Tunnel506
 no ip address
!
interface Tunnel507
 no ip address
!
interface Tunnel508
 no ip address
!
interface Tunnel509
 no ip address
!
interface Tunnel510
 no ip address
!
interface Tunnel511
 no ip address
!
interface Tunnel512
 no ip address
!
interface Tunnel513
 no ip address
!
interface Tunnel514
 no ip address
!
interface Tunnel515
 no ip address
!
interface Tunnel516
 no ip address
!
interface Tunnel517
 no ip address
!
interface Tunnel518
 no ip address
!
interface Tunnel519
 no ip address
!
interface Tunnel520
 no ip address
!
interface Tunnel521
 no ip address
!
interface Tunnel522
 no ip address
!
interface Tunnel523
 no ip address
!
interface Tunnel524
 no ip address
!
interface Tunnel525
 no ip address
!
interface Tunnel526
 no ip address
!
interface Tunnel527
 no ip address
!
interface Tunnel528
 no ip address
!
interface Tunnel529
 no ip address
!
interface Tunnel530
 no ip address
!
interface Tunnel531
 no ip address
!
interface Tunnel532
 no ip address
!
interface Tunnel533
 no ip address
!
interface Tunnel534
 no ip address
!
interface Tunnel535
 no ip address
!
interface Tunnel536
 no ip address
!
interface Tunnel537
 no ip address
!
interface Tunnel538
 no ip address
!
interface Tunnel539
 no ip address
!
interface Tunnel540
 no ip address
!
interface Tunnel541
 no ip address
!
interface Tunnel542
 no ip address
!
interface Tunnel543
 no ip address
!
interface Tunnel544
 no ip address
!
interface Tunnel545
 no ip address
!
interface Tunnel546
 no ip address
!
interface Tunnel547
 no ip address
!
interface Tunnel548
 no ip address
!
interface Tunnel549
 no ip address
!
interface Tunnel550
 no ip address
!
interface Tunnel551
 no ip address
!
interface Tunnel552
 no ip address
!
interface Tunnel553
 no ip address
!
interface Tunnel554
 no ip address
!
interface Tunnel555
 no ip address
!
interface Tunnel556
 no ip address
!
interface Tunnel557
 no ip address
!
interface Tunnel558
 no ip address
!
interface Tunnel559
 no ip address
!
interface Tunnel560
 no ip address
!
interface Tunnel561
 no ip address
!
interface Tunnel562
 no ip address
!
interface Tunnel563
 no ip address
!
interface Tunnel564
 no ip address
!
interface Tunnel565
 no ip address
!
interface Tunnel566
 no ip address
!
interface Tunnel567
 no ip address
!
interface Tunnel568
 no ip address
!
interface Tunnel569
 no ip address
!
interface Tunnel570
 no ip address
!
interface Tunnel571
 no ip address
!
interface Tunnel572
 no ip address
!
interface Tunnel573
 no ip address
!
interface Tunnel574
 no ip address
!
interface Tunnel575
 no ip address
!
interface Tunnel576
 no ip address
!
interface Tunnel577
 no ip address
!
interface Tunnel578
 no ip address
!
interface Tunnel579
 no ip address
!
interface Tunnel580
 no ip address
!
interface Tunnel581
 no ip address
!
interface Tunnel582
 no ip address
!
interface Tunnel583
 no ip address
!
interface Tunnel584
 no ip address
!
interface Tunnel585
 no ip address
!
interface Tunnel586
 no ip address
!
interface Tunnel587
 no ip address
!
interface Tunnel588
 no ip address
!
interface Tunnel589
 no ip address
!
interface Tunnel590
 no ip address
!
interface Tunnel591
 no ip address
!
interface Tunnel592
 no ip address
!
interface Tunnel593
 no ip address
!
interface Tunnel594
 no ip address
!
interface Tunnel595
 no ip address
!
interface Tunnel596
 no ip address
!
interface Tunnel597
 no ip address
!
interface Tunnel598
 no ip address
!
interface Tunnel599
 no ip address
!
interface Tunnel600
 no ip address
!
interface Tunnel601
 no ip address
!
interface Tunnel602
 no ip address
!
interface Tunnel603
 no ip address
!
interface Tunnel604
 no ip address
!
interface Tunnel605
 no ip address
!
interface Tunnel606
 no ip address
!
interface Tunnel607
 no ip address
!
interface Tunnel608
 no ip address
!
interface Tunnel609
 no ip address
!
interface Tunnel610
 no ip address
!
interface Tunnel611
 no ip address
!
interface Tunnel612
 no ip address
!
interface Tunnel613
 no ip address
!
interface Tunnel614
 no ip address
!
interface Tunnel615
 no ip address
!
interface Tunnel616
 no ip address
!
interface Tunnel617
 no ip address
!
interface Tunnel618
 no ip address
!
interface Tunnel619
 no ip address
!
interface Tunnel620
 no ip address
!
interface Tunnel621
 no ip address
!
interface Tunnel622
 no ip address
!
interface Tunnel623
 no ip address
!
interface Tunnel624
 no ip address
!
interface Tunnel625
 no ip address
!
interface Tunnel626
 no ip address
!
interface Tunnel627
 no ip address
!
interface Tunnel628
 no ip address
!
interface Tunnel629
 no ip address
!
interface Tunnel630
 no ip address
!
interface Tunnel631
 no ip address
!
interface Tunnel632
 no ip address
!
interface Tunnel633
 no ip address
!
interface Tunnel634
 no ip address
!
interface Tunnel635
 no ip address
!
interface Tunnel636
 no ip address
!
interface Tunnel637
 no ip address
!
interface Tunnel638
 no ip address
!
interface Tunnel639
 no ip address
!
interface Tunnel640
 no ip address
!
interface Tunnel641
 no ip address
!
interface Tunnel642
 no ip address
!
interface Tunnel643
 no ip address
!
interface Tunnel644
 no ip address
!
interface Tunnel645
 no ip address
!
interface Tunnel646
 no ip address
!
interface Tunnel647
 no ip address
!
interface Tunnel648
 no ip address
!
interface Tunnel649
 no ip address
!
interface Tunnel650
 no ip address
!
interface Tunnel651
 no ip address
!
interface Tunnel652
 no ip address
!
interface Tunnel653
 no ip address
!
interface Tunnel654
 no ip address
!
interface Tunnel655
 no ip address
!
interface Tunnel656
 no ip address
!
interface Tunnel657
 no ip address
!
interface Tunnel658
 no ip address
!
interface Tunnel659
 no ip address
!
interface Tunnel660
 no ip address
!
interface Tunnel661
 no ip address
!
interface Tunnel662
 no ip address
!
interface Tunnel663
 no ip address
!
interface Tunnel664
 no ip address
!
interface Tunnel665
 no ip address
!
interface Tunnel666
 no ip address
!
interface Tunnel667
 no ip address
!
interface Tunnel668
 no ip address
!
interface Tunnel669
 no ip address
!
interface Tunnel670
 no ip address
!
interface Tunnel671
 no ip address
!
interface Tunnel672
 no ip address
!
interface Tunnel673
 no ip address
!
interface Tunnel674
 no ip address
!
interface Tunnel675
 no ip address
!
interface Tunnel676
 no ip address
!
interface Tunnel677
 no ip address
!
interface Tunnel678
 no ip address
!
interface Tunnel679
 no ip address
!
interface Tunnel680
 no ip address
!
interface Tunnel681
 no ip address
!
interface Tunnel682
 no ip address
!
interface Tunnel683
 no ip address
!
interface Tunnel684
 no ip address
!
interface Tunnel685
 no ip address
!
interface Tunnel686
 no ip address
!
interface Tunnel687
 no ip address
!
interface Tunnel688
 no ip address
!
interface Tunnel689
 no ip address
!
interface Tunnel690
 no ip address
!
interface Tunnel691
 no ip address
!
interface Tunnel692
 no ip address
!
interface Tunnel693
 no ip address
!
interface Tunnel694
 no ip address
!
interface Tunnel695
 no ip address
!
interface Tunnel696
 no ip address
!
interface Tunnel697
 no ip address
!
interface Tunnel698
 no ip address
!
interface Tunnel699
 no ip address
!
interface Tunnel700
 no ip address
!
interface Tunnel701
 no ip address
!
interface Tunnel702
 no ip address
!
interface Tunnel703
 no ip address
!
interface Tunnel704
 no ip address
!
interface Tunnel705
 no ip address
!
interface Tunnel706
 no ip address
!
interface Tunnel707
 no ip address
!
interface Tunnel708
 no ip address
!
interface Tunnel709
 no ip address
!
interface Tunnel710
 no ip address
!
interface Tunnel711
 no ip address
!
interface Tunnel712
 no ip address
!
interface Tunnel713
 no ip address
!
interface Tunnel714
 no ip address
!
interface Tunnel715
 no ip address
!
interface Tunnel716
 no ip address
!
interface Tunnel717
 no ip address
!
interface Tunnel718
 no ip address
!
interface Tunnel719
 no ip address
!
interface Tunnel720
 no ip address
!
interface Tunnel721
 no ip address
!
interface Tunnel722
 no ip address
!
interface Tunnel723
 no ip address
!
interface Tunnel724
 no ip address
!
interface Tunnel725
 no ip address
!
interface Tunnel726
 no ip address
!
interface Tunnel727
 no ip address
!
interface Tunnel728
 no ip address
!
interface Tunnel729
 no ip address
!
interface Tunnel730
 no ip address
!
interface Tunnel731
 no ip address
!
interface Tunnel732
 no ip address
!
interface Tunnel733
 no ip address
!
interface Tunnel734
 no ip address
!
interface Tunnel735
 no ip address
!
interface Tunnel736
 no ip address
!
interface Tunnel737
 no ip address
!
interface Tunnel738
 no ip address
!
interface Tunnel739
 no ip address
!
interface Tunnel740
 no ip address
!
interface Tunnel741
 no ip address
!
interface Tunnel742
 no ip address
!
interface Tunnel743
 no ip address
!
interface Tunnel744
 no ip address
!
interface Tunnel745
 no ip address
!
interface Tunnel746
 no ip address
!
interface Tunnel747
 no ip address
!
interface Tunnel748
 no ip address
!
interface Tunnel749
 no ip address
!
interface Tunnel750
 no ip address
!
interface Tunnel751
 no ip address
!
interface Tunnel752
 no ip address
!
interface Tunnel753
 no ip address
!
interface Tunnel754
 no ip address
!
interface Tunnel755
 no ip address
!
interface Tunnel756
 no ip address
!
interface Tunnel757
 no ip address
!
interface Tunnel758
 no ip address
!
interface Tunnel759
 no ip address
!
interface Tunnel760
 no ip address
!
interface Tunnel761
 no ip address
!
interface Tunnel762
 no ip address
!
interface Tunnel763
 no ip address
!
interface Tunnel764
 no ip address
!
interface Tunnel765
 no ip address
!
interface Tunnel766
 no ip address
!
interface Tunnel767
 no ip address
!
interface Tunnel768
 no ip address
!
interface Tunnel769
 no ip address
!
interface Tunnel770
 no ip address
!
interface Tunnel771
 no ip address
!
interface Tunnel772
 no ip address
!
interface Tunnel773
 no ip address
!
interface Tunnel774
 no ip address
!
interface Tunnel775
 no ip address
!
interface Tunnel776
 no ip address
!
interface Tunnel777
 no ip address
!
interface Tunnel778
 no ip address
!
interface Tunnel779
 no ip address
!
interface Tunnel780
 no ip address
!
interface Tunnel781
 no ip address
!
interface Tunnel782
 no ip address
!
interface Tunnel783
 no ip address
!
interface Tunnel784
 no ip address
!
interface Tunnel785
 no ip address
!
interface Tunnel786
 no ip address
!
interface Tunnel787
 no ip address
!
interface Tunnel788
 no ip address
!
interface Tunnel789
 no ip address
!
interface Tunnel790
 no ip address
!
interface Tunnel791
 no ip address
!
interface Tunnel792
 no ip address
!
interface Tunnel793
 no ip address
!
interface Tunnel794
 no ip address
!
interface Tunnel795
 no ip address
!
interface Tunnel796
 no ip address
!
interface Tunnel797
 no ip address
!
interface Tunnel798
 no ip address
!
interface Tunnel799
 no ip address
!
interface Tunnel800
 no ip address
!
interface Tunnel801
 no ip address
!
interface Tunnel802
 no ip address
!
interface Tunnel803
 no ip address
!
interface Tunnel804
 no ip address
!
interface Tunnel805
 no ip address
!
interface Tunnel806
 no ip address
!
interface Tunnel807
 no ip address
!
interface Tunnel808
 no ip address
!
interface Tunnel809
 no ip address
!
interface Tunnel810
 no ip address
!
interface Tunnel811
 no ip address
!
interface Tunnel812
 no ip address
!
interface Tunnel813
 no ip address
!
interface Tunnel814
 no ip address
!
interface Tunnel815
 no ip address
!
interface Tunnel816
 no ip address
!
interface Tunnel817
 no ip address
!
interface Tunnel818
 no ip address
!
interface Tunnel819
 no ip address
!
interface Tunnel820
 no ip address
!
interface Tunnel821
 no ip address
!
interface Tunnel822
 no ip address
!
interface Tunnel823
 no ip address
!
interface Tunnel824
 no ip address
!
interface Tunnel825
 no ip address
!
interface Tunnel826
 no ip address
!
interface Tunnel827
 no ip address
!
interface Tunnel828
 no ip address
!
interface Tunnel829
 no ip address
!
interface Tunnel830
 no ip address
!
interface Tunnel831
 no ip address
!
interface Tunnel832
 no ip address
!
interface Tunnel833
 no ip address
!
interface Tunnel834
 no ip address
!
interface Tunnel835
 no ip address
!
interface Tunnel836
 no ip address
!
interface Tunnel837
 no ip address
!
interface Tunnel838
 no ip address
!
interface Tunnel839
 no ip address
!
interface Tunnel840
 no ip address
!
interface Tunnel841
 no ip address
!
interface Tunnel842
 no ip address
!
interface Tunnel843
 no ip address
!
interface Tunnel844
 no ip address
!
interface Tunnel845
 no ip address
!
interface Tunnel846
 no ip address
!
interface Tunnel847
 no ip address
!
interface Tunnel848
 no ip address
!
interface Tunnel849
 no ip address
!
interface Tunnel850
 no ip address
!
interface Tunnel851
 no ip address
!
interface Tunnel852
 no ip address
!
interface Tunnel853
 no ip address
!
interface Tunnel854
 no ip address
!
interface Tunnel855
 no ip address
!
interface Tunnel856
 no ip address
!
interface Tunnel857
 no ip address
!
interface Tunnel858
 no ip address
!
interface Tunnel859
 no ip address
!
interface Tunnel860
 no ip address
!
interface Tunnel861
 no ip address
!
interface Tunnel862
 no ip address
!
interface Tunnel863
 no ip address
!
interface Tunnel864
 no ip address
!
interface Tunnel865
 no ip address
!
interface Tunnel866
 no ip address
!
interface Tunnel867
 no ip address
!
interface Tunnel868
 no ip address
!
interface Tunnel869
 no ip address
!
interface Tunnel870
 no ip address
!
interface Tunnel871
 no ip address
!
interface Tunnel872
 no ip address
!
interface Tunnel873
 no ip address
!
interface Tunnel874
 no ip address
!
interface Tunnel875
 no ip address
!
interface Tunnel876
 no ip address
!
interface Tunnel877
 no ip address
!
interface Tunnel878
 no ip address
!
interface Tunnel879
 no ip address
!
interface Tunnel880
 no ip address
!
interface Tunnel881
 no ip address
!
interface Tunnel882
 no ip address
!
interface Tunnel883
 no ip address
!
interface Tunnel884
 no ip address
!
interface Tunnel885
 no ip address
!
interface Tunnel886
 no ip address
!
interface Tunnel887
 no ip address
!
interface Tunnel888
 no ip address
!
interface Tunnel889
 no ip address
!
interface Tunnel890
 no ip address
!
interface Tunnel891
 no ip address
!
interface Tunnel892
 no ip address
!
interface Tunnel893
 no ip address
!
interface Tunnel894
 no ip address
!
interface Tunnel895
 no ip address
!
interface Tunnel896
 no ip address
!
interface Tunnel897
 no ip address
!
interface Tunnel898
 no ip address
!
interface Tunnel899
 no ip address
!
interface Tunnel900
 no ip address
!
interface Tunnel901
 no ip address
!
interface Tunnel902
 no ip address
!
interface Tunnel903
 no ip address
!
interface Tunnel904
 no ip address
!
interface Tunnel905
 no ip address
!
interface Tunnel906
 no ip address
!
interface Tunnel907
 no ip address
!
interface Tunnel908
 no ip address
!
interface Tunnel909
 no ip address
!
interface Tunnel910
 no ip address
!
interface Tunnel911
 no ip address
!
interface Tunnel912
 no ip address
!
interface Tunnel913
 no ip address
!
interface Tunnel914
 no ip address
!
interface Tunnel915
 no ip address
!
interface Tunnel916
 no ip address
!
interface Tunnel917
 no ip address
!
interface Tunnel918
 no ip address
!
interface Tunnel919
 no ip address
!
interface Tunnel920
 no ip address
!
interface Tunnel921
 no ip address
!
interface Tunnel922
 no ip address
!
interface Tunnel923
 no ip address
!
interface Tunnel924
 no ip address
!
interface Tunnel925
 no ip address
!
interface Tunnel926
 no ip address
!
interface Tunnel927
 no ip address
!
interface Tunnel928
 no ip address
!
interface Tunnel929
 no ip address
!
interface Tunnel930
 no ip address
!
interface Tunnel931
 no ip address
!
interface Tunnel932
 no ip address
!
interface Tunnel933
 no ip address
!
interface Tunnel934
 no ip address
!
interface Tunnel935
 no ip address
!
interface Tunnel936
 no ip address
!
interface Tunnel937
 no ip address
!
interface Tunnel938
 no ip address
!
interface Tunnel939
 no ip address
!
interface Tunnel940
 no ip address
!
interface Tunnel941
 no ip address
!
interface Tunnel942
 no ip address
!
interface Tunnel943
 no ip address
!
interface Tunnel944
 no ip address
!
interface Tunnel945
 no ip address
!
interface Tunnel946
 no ip address
!
interface Tunnel947
 no ip address
!
interface Tunnel948
 no ip address
!
interface Tunnel949
 no ip address
!
interface Tunnel950
 no ip address
!
interface Tunnel951
 no ip address
!
interface Tunnel952
 no ip address
!
interface Tunnel953
 no ip address
!
interface Tunnel954
 no ip address
!
interface Tunnel955
 no ip address
!
interface Tunnel956
 no ip address
!
interface Tunnel957
 no ip address
!
interface Tunnel958
 no ip address
!
interface Tunnel959
 no ip address
!
interface Tunnel960
 no ip address
!
interface Tunnel961
 no ip address
!
interface Tunnel962
 no ip address
!
interface Tunnel963
 no ip address
!
interface Tunnel964
 no ip address
!
interface Tunnel965
 no ip address
!
interface Tunnel966
 no ip address
!
interface Tunnel967
 no ip address
!
interface Tunnel968
 no ip address
!
interface Tunnel969
 no ip address
!
interface Tunnel970
 no ip address
!
interface Tunnel971
 no ip address
!
interface Tunnel972
 no ip address
!
interface Tunnel973
 no ip address
!
interface Tunnel974
 no ip address
!
interface Tunnel975
 no ip address
!
interface Tunnel976
 no ip address
!
interface Tunnel977
 no ip address
!
interface Tunnel978
 no ip address
!
interface Tunnel979
 no ip address
!
interface Tunnel980
 no ip address
!
interface Tunnel981
 no ip address
!
interface Tunnel982
 no ip address
!
interface Tunnel983
 no ip address
!
interface Tunnel984
 no ip address
!
interface Tunnel985
 no ip address
!
interface Tunnel986
 no ip address
!
interface Tunnel987
 no ip address
!
interface Tunnel988
 no ip address
!
interface Tunnel989
 no ip address
!
interface Tunnel990
 no ip address
!
interface Tunnel991
 no ip address
!
interface Tunnel992
 no ip address
!
interface Tunnel993
 no ip address
!
interface Tunnel994
 no ip address
!
interface Tunnel995
 no ip address
!
interface Tunnel996
 no ip address
!
interface Tunnel997
 no ip address
!
interface Tunnel998
 no ip address
!
interface Tunnel999
 no ip address
!
interface Tunnel1000
 no ip address
!
interface GigabitEthernet0/0/0
 no ip address
 shutdown
 negotiation auto
!
interface GigabitEthernet0/0/1
 no ip address
 shutdown
 negotiation auto
!
interface GigabitEthernet0/0/2
 no ip address
 negotiation auto
!
interface GigabitEthernet0/0/2.1
 encapsulation dot1Q 100
 vrf forwarding C1_0
 ip address <removed>!
interface GigabitEthernet0/0/2.2
 encapsulation dot1Q 101
 vrf forwarding C1_1
 ip address <removed>!
interface GigabitEthernet0/0/3
 no ip address
 shutdown
 negotiation auto
!
interface GigabitEthernet0/0/4
 no ip address
 shutdown
 negotiation auto
!
interface GigabitEthernet0/0/5
 no ip address
 shutdown
 negotiation auto
!
interface GigabitEthernet0/0/6
 no ip address
 shutdown
 negotiation auto
!
interface GigabitEthernet0/0/7
 no ip address
 shutdown
 negotiation auto
!
interface TenGigabitEthernet0/1/0
 ip address <removed> no negotiation auto
!
interface TenGigabitEthernet0/1/1
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/2
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/3
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/4
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/5
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/6
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/7
 no ip address
 shutdown
 no negotiation auto
!
interface GigabitEthernet0
 vrf forwarding Mgmt-intf
 ip address <removed> negotiation auto
!
router ospf 100
 network 50.50.50.0 0.0.0.255 area 0
 network 208.200.0.2 0.0.0.0 area 0
 network 208.200.0.3 0.0.0.0 area 0
!
router bgp 64001
 bgp router-id 111.111.111.111
 bgp log-neighbor-changes
 !
 address-family ipv4 vrf C1_0
  network 192.0.0.0
  redistribute connected
  neighbor 192.0.1.1 remote-as 64001
  neighbor 192.0.1.1 activate
 exit-address-family
 !
 address-family ipv4 vrf C1_1
  network 193.0.0.0
  redistribute connected
  neighbor 193.0.2.1 remote-as 64001
  neighbor 193.0.2.1 activate
 exit-address-family
!
ip forward-protocol nd
!
ip tftp source-interface GigabitEthernet0
ip tftp blocksize 8192
ip http server
ip http authentication local
ip http secure-server
ip ssh bulk-mode 131072
ip route vrf Mgmt-intf 202.153.144.90 255.255.255.255 9.45.0.1
ip route vrf Mgmt-intf 202.153.144.90 255.255.255.255 9.41.0.1
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
line con 0
 exec-timeout 0 0
 stopbits 1
line aux 0
line vty 0 4
 login
 transport input ssh
!
call-home
 ! If contact email address in call-home is configured as sch-smart-licensing@cisco.com
 ! the email address configured in Cisco Smart License Portal will be used as contact email address to send SCH notifications.
 contact-email-addr sch-smart-licensing@cisco.com
 profile "CiscoTAC-1"
  active
  destination transport-method http
!
!
!
!
!
!
end

DMVPN IPv4 OSPF BGP non crypto yang commands

Configuration example for a hub

version 17.6
service timestamps debug datetime msec
service timestamps log datetime msec
service internal
service call-home
platform qfp utilization monitor load 80
platform punt-keepalive disable-kernel-core
!
hostname DC1-Hub1
!
boot-start-marker
boot system bootflash:c8000aep-universalk9.DC1-Hub1.dmvpn_soak.SSA.bin
boot-end-marker
!
!
vrf definition Mgmt-intf
 !
 address-family ipv4
 exit-address-family
 !
 address-family ipv6
 exit-address-family
!
no logging console
!
no aaa new-model
!
!
!
!
!
!
!
!
!
!
!
!
login on-success log
!
!
!
!
!
!
!
subscriber templating
! 
! 
! 
! 
!
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
crypto pki trustpoint TP-self-signed-2134189379
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-2134189379
 revocation-check none
 rsakeypair TP-self-signed-2134189379
!
crypto pki trustpoint SLA-TrustPoint
 enrollment pkcs12
 revocation-check crl
!
!

!
license udi pid C8500-12X4QC sn TTM231100CF
license boot level network-advantage addon dna-advantage
no memory lite
memory free low-watermark processor 984138
hw-module subslot 0/1 mode 10G
hw-module subslot 0/2 mode 40G
hw-module subslot 0/2 breakout none port all
!
!
spanning-tree extend system-id
diagnostic bootup level minimal
!
!
redundancy
 mode none
!
!
crypto ikev2 proposal ikev2proposal 
 encryption aes-cbc-192
 integrity sha512
 group 16
!
crypto ikev2 policy ikev2policy 
 proposal ikev2proposal
!
crypto ikev2 keyring ikev2keyring
 peer ikev2peer
  address 0.0.0.0 0.0.0.0
  pre-shared-key Cisco@123
 !
!
!
crypto ikev2 profile ikev2profile
 match identity remote address 0.0.0.0 
 authentication remote pre-share
 authentication local pre-share
 keyring local ikev2keyring
!
crypto ikev2 dpd 60 3 on-demand
!
!
!
!
! 
!
!
!
!
!
!
crypto ipsec transform-set tset1 esp-aes 256 esp-sha256-hmac 
 mode tunnel
!
!
crypto ipsec profile dmvpn-hub
 set transform-set tset1 
 set pfs group19
 set ikev2-profile ikev2profile
!
!
!
!
! 
! 
!
!
interface Tunnel1
 bandwidth 100000
 ip address <removed> no ip redirects
 ip mtu 1400
 ip hello-interval eigrp 101 30
 ip hold-time eigrp 101 90
 ip nhrp network-id 1000
 ip nhrp holdtime 900
 ip nhrp redirect
 ip tcp adjust-mss 1200
 ip summary-address eigrp 101 100.0.0.0 255.0.0.0
 cts sgt inline
 tunnel source TenGigabitEthernet0/1/0
 tunnel mode gre multipoint
 tunnel path-mtu-discovery
!
interface TenGigabitEthernet0/0/0
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/0/1
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/0/2
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/0/3
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/0/4
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/0/5
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/0/6
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/0/7
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/0
 ip address <removed> no negotiation auto
!
interface TenGigabitEthernet0/1/1
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/2
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/3
 ip address <removed> no negotiation auto
!
interface FortyGigabitEthernet0/2/0
 no ip address
 shutdown
 no negotiation auto
!
interface FortyGigabitEthernet0/2/4
 no ip address
 shutdown
 no negotiation auto
!
interface FortyGigabitEthernet0/2/8
 no ip address
 shutdown
 no negotiation auto
!
interface GigabitEthernet0
 vrf forwarding Mgmt-intf
 ip address <removed> negotiation auto
!
router ospf 100
 network 100.0.10.0 0.0.0.255 area 0
!
router bgp 64001
 bgp router-id 1.1.1.2
 bgp log-neighbor-changes
 bgp listen range 192.0.0.0/8 peer-group DMVPN_SPOKES
 bgp listen limit 10000
 timers bgp 10 30
 neighbor DMVPN_SPOKES peer-group
 neighbor DMVPN_SPOKES remote-as 64001
 !
 address-family ipv4
  network 0.0.0.0
  network 150.100.0.0
  neighbor DMVPN_SPOKES activate
  neighbor DMVPN_SPOKES next-hop-self
  neighbor DMVPN_SPOKES as-override split-horizon
 exit-address-family
!
ip http server
ip http authentication local
ip http secure-server
ip forward-protocol nd
!
ip tftp source-interface GigabitEthernet0
ip tftp blocksize 8192
ip route 0.0.0.0 0.0.0.0 Null0
ip route vrf Mgmt-intf 202.153.144.90 255.255.255.255 9.41.0.1
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
line con 0
 exec-timeout 0 0
 stopbits 1
line aux 0
line vty 0 4
 login
 transport input ssh
!
call-home
 ! If contact email address in call-home is configured as sch-smart-licensing@cisco.com
 ! the email address configured in Cisco Smart License Portal will be used as contact email address to send SCH notifications.
 contact-email-addr sch-smart-licensing@cisco.com
 profile "CiscoTAC-1"
  active
  destination transport-method http
!
!
!
!
!
!
end

Configuration example for a spoke

version 17.13
service timestamps debug datetime msec
service timestamps log datetime msec
service internal
service call-home
platform qfp utilization monitor load 80
platform punt-keepalive disable-kernel-core
platform ipsec flexvpn-bypass-tcam
platform hardware crypto-throughput level 8-16g 
!
hostname spk1
!
boot-start-marker
boot system bootflash:asr1000-universalk9.spk1.dmvpn_soak.SSA.bin
boot-end-marker
!
!
vrf definition C1_0
 rd 1:0
 !
 address-family ipv4
 exit-address-family
!
vrf definition Mgmt-intf
 !
 address-family ipv4
 exit-address-family
 !
 address-family ipv6
 exit-address-family
!
no logging console
no aaa new-model
!
!
subscriber templating
!
!
!
!
!
!
!
!
!
!
!
!
login on-success log
!
!
!
!
!
!
!
! 
! 
! 
! 
!
!
crypto pki trustpoint TP-self-signed-1147572831
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-1147572831
 revocation-check none
 rsakeypair TP-self-signed-1147572831
 hash sha256
!
crypto pki trustpoint SLA-TrustPoint
 enrollment pkcs12
 revocation-check crl
 hash sha256
!
!
!
!
!
!
!
!
!
!
license udi pid ASR1001-HX sn JAE24530LQG
license boot level adventerprise
!
no memory lite
memory free low-watermark processor 675468
diagnostic bootup level minimal
!
spanning-tree extend system-id
!
!
!
redundancy
 mode none
!
crypto ikev2 proposal ikev2proposal 
 encryption aes-cbc-192
 integrity sha512
 group 16
!
crypto ikev2 policy ikev2policy 
 proposal ikev2proposal
!
crypto ikev2 keyring ikev2keyring
 peer ikev2peer
  address 0.0.0.0 0.0.0.0
  pre-shared-key Cisco@123
 !
!
!
crypto ikev2 profile ikev2profile
 match identity remote address 0.0.0.0 
 authentication remote pre-share
 authentication local pre-share
 keyring local ikev2keyring
!
crypto ikev2 dpd 60 3 on-demand
!
!
!
!
! 
!
!
!
!
!
!
crypto ipsec transform-set tset1 esp-aes 256 esp-sha256-hmac 
 mode tunnel
!
!
crypto ipsec profile dmvpn-hub
 set transform-set tset1 
 set pfs group19
 set ikev2-profile ikev2profile
!
!
!
!
! 
! 
!
!
interface Loopback1
 ip address <removed>!
interface Tunnel1
 bandwidth 100000
 vrf forwarding C1_0
 ip address <removed> no ip redirects
 ip hello-interval eigrp 101 30
 ip hold-time eigrp 101 90
 ip nhrp network-id 1000
 ip nhrp holdtime 900
 ip nhrp nhs 192.0.1.1 nbma 100.0.10.2 multicast
 ip tcp adjust-mss 1200
 cts sgt inline
 tunnel source Loopback1
 tunnel mode gre multipoint
 tunnel path-mtu-discovery
!
interface Tunnel2
 no ip address
!
interface Tunnel3
 no ip address
!
interface Tunnel4
 no ip address
!
interface Tunnel5
 no ip address
!
interface Tunnel6
 no ip address
!
interface Tunnel7
 no ip address
!
interface Tunnel8
 no ip address
!
interface Tunnel9
 no ip address
!
interface Tunnel10
 no ip address
!
interface Tunnel11
 no ip address
!
interface Tunnel12
 no ip address
!
interface Tunnel13
 no ip address
!
interface Tunnel14
 no ip address
!
interface Tunnel15
 no ip address
!
interface Tunnel16
 no ip address
!
interface Tunnel17
 no ip address
!
interface Tunnel18
 no ip address
!
interface Tunnel19
 no ip address
!
interface Tunnel20
 no ip address
!
interface Tunnel21
 no ip address
!
interface Tunnel22
 no ip address
!
interface Tunnel23
 no ip address
!
interface Tunnel24
 no ip address
!
interface Tunnel25
 no ip address
!
interface Tunnel26
 no ip address
!
interface Tunnel27
 no ip address
!
interface Tunnel28
 no ip address
!
interface Tunnel29
 no ip address
!
interface Tunnel30
 no ip address
!
interface Tunnel31
 no ip address
!
interface Tunnel32
 no ip address
!
interface Tunnel33
 no ip address
!
interface Tunnel34
 no ip address
!
interface Tunnel35
 no ip address
!
interface Tunnel36
 no ip address
!
interface Tunnel37
 no ip address
!
interface Tunnel38
 no ip address
!
interface Tunnel39
 no ip address
!
interface Tunnel40
 no ip address
!
interface Tunnel41
 no ip address
!
interface Tunnel42
 no ip address
!
interface Tunnel43
 no ip address
!
interface Tunnel44
 no ip address
!
interface Tunnel45
 no ip address
!
interface Tunnel46
 no ip address
!
interface Tunnel47
 no ip address
!
interface Tunnel48
 no ip address
!
interface Tunnel49
 no ip address
!
interface Tunnel50
 no ip address
!
interface Tunnel51
 no ip address
!
interface Tunnel52
 no ip address
!
interface Tunnel53
 no ip address
!
interface Tunnel54
 no ip address
!
interface Tunnel55
 no ip address
!
interface Tunnel56
 no ip address
!
interface Tunnel57
 no ip address
!
interface Tunnel58
 no ip address
!
interface Tunnel59
 no ip address
!
interface Tunnel60
 no ip address
!
interface Tunnel61
 no ip address
!
interface Tunnel62
 no ip address
!
interface Tunnel63
 no ip address
!
interface Tunnel64
 no ip address
!
interface Tunnel65
 no ip address
!
interface Tunnel66
 no ip address
!
interface Tunnel67
 no ip address
!
interface Tunnel68
 no ip address
!
interface Tunnel69
 no ip address
!
interface Tunnel70
 no ip address
!
interface Tunnel71
 no ip address
!
interface Tunnel72
 no ip address
!
interface Tunnel73
 no ip address
!
interface Tunnel74
 no ip address
!
interface Tunnel75
 no ip address
!
interface Tunnel76
 no ip address
!
interface Tunnel77
 no ip address
!
interface Tunnel78
 no ip address
!
interface Tunnel79
 no ip address
!
interface Tunnel80
 no ip address
!
interface Tunnel81
 no ip address
!
interface Tunnel82
 no ip address
!
interface Tunnel83
 no ip address
!
interface Tunnel84
 no ip address
!
interface Tunnel85
 no ip address
!
interface Tunnel86
 no ip address
!
interface Tunnel87
 no ip address
!
interface Tunnel88
 no ip address
!
interface Tunnel89
 no ip address
!
interface Tunnel90
 no ip address
!
interface Tunnel91
 no ip address
!
interface Tunnel92
 no ip address
!
interface Tunnel93
 no ip address
!
interface Tunnel94
 no ip address
!
interface Tunnel95
 no ip address
!
interface Tunnel96
 no ip address
!
interface Tunnel97
 no ip address
!
interface Tunnel98
 no ip address
!
interface Tunnel99
 no ip address
!
interface Tunnel100
 no ip address
!
interface Tunnel101
 no ip address
!
interface Tunnel102
 no ip address
!
interface Tunnel103
 no ip address
!
interface Tunnel104
 no ip address
!
interface Tunnel105
 no ip address
!
interface Tunnel106
 no ip address
!
interface Tunnel107
 no ip address
!
interface Tunnel108
 no ip address
!
interface Tunnel109
 no ip address
!
interface Tunnel110
 no ip address
!
interface Tunnel111
 no ip address
!
interface Tunnel112
 no ip address
!
interface Tunnel113
 no ip address
!
interface Tunnel114
 no ip address
!
interface Tunnel115
 no ip address
!
interface Tunnel116
 no ip address
!
interface Tunnel117
 no ip address
!
interface Tunnel118
 no ip address
!
interface Tunnel119
 no ip address
!
interface Tunnel120
 no ip address
!
interface Tunnel121
 no ip address
!
interface Tunnel122
 no ip address
!
interface Tunnel123
 no ip address
!
interface Tunnel124
 no ip address
!
interface Tunnel125
 no ip address
!
interface Tunnel126
 no ip address
!
interface Tunnel127
 no ip address
!
interface Tunnel128
 no ip address
!
interface Tunnel129
 no ip address
!
interface Tunnel130
 no ip address
!
interface Tunnel131
 no ip address
!
interface Tunnel132
 no ip address
!
interface Tunnel133
 no ip address
!
interface Tunnel134
 no ip address
!
interface Tunnel135
 no ip address
!
interface Tunnel136
 no ip address
!
interface Tunnel137
 no ip address
!
interface Tunnel138
 no ip address
!
interface Tunnel139
 no ip address
!
interface Tunnel140
 no ip address
!
interface Tunnel141
 no ip address
!
interface Tunnel142
 no ip address
!
interface Tunnel143
 no ip address
!
interface Tunnel144
 no ip address
!
interface Tunnel145
 no ip address
!
interface Tunnel146
 no ip address
!
interface Tunnel147
 no ip address
!
interface Tunnel148
 no ip address
!
interface Tunnel149
 no ip address
!
interface Tunnel150
 no ip address
!
interface Tunnel151
 no ip address
!
interface Tunnel152
 no ip address
!
interface Tunnel153
 no ip address
!
interface Tunnel154
 no ip address
!
interface Tunnel155
 no ip address
!
interface Tunnel156
 no ip address
!
interface Tunnel157
 no ip address
!
interface Tunnel158
 no ip address
!
interface Tunnel159
 no ip address
!
interface Tunnel160
 no ip address
!
interface Tunnel161
 no ip address
!
interface Tunnel162
 no ip address
!
interface Tunnel163
 no ip address
!
interface Tunnel164
 no ip address
!
interface Tunnel165
 no ip address
!
interface Tunnel166
 no ip address
!
interface Tunnel167
 no ip address
!
interface Tunnel168
 no ip address
!
interface Tunnel169
 no ip address
!
interface Tunnel170
 no ip address
!
interface Tunnel171
 no ip address
!
interface Tunnel172
 no ip address
!
interface Tunnel173
 no ip address
!
interface Tunnel174
 no ip address
!
interface Tunnel175
 no ip address
!
interface Tunnel176
 no ip address
!
interface Tunnel177
 no ip address
!
interface Tunnel178
 no ip address
!
interface Tunnel179
 no ip address
!
interface Tunnel180
 no ip address
!
interface Tunnel181
 no ip address
!
interface Tunnel182
 no ip address
!
interface Tunnel183
 no ip address
!
interface Tunnel184
 no ip address
!
interface Tunnel185
 no ip address
!
interface Tunnel186
 no ip address
!
interface Tunnel187
 no ip address
!
interface Tunnel188
 no ip address
!
interface Tunnel189
 no ip address
!
interface Tunnel190
 no ip address
!
interface Tunnel191
 no ip address
!
interface Tunnel192
 no ip address
!
interface Tunnel193
 no ip address
!
interface Tunnel194
 no ip address
!
interface Tunnel195
 no ip address
!
interface Tunnel196
 no ip address
!
interface Tunnel197
 no ip address
!
interface Tunnel198
 no ip address
!
interface Tunnel199
 no ip address
!
interface Tunnel200
 no ip address
!
interface Tunnel201
 no ip address
!
interface Tunnel202
 no ip address
!
interface Tunnel203
 no ip address
!
interface Tunnel204
 no ip address
!
interface Tunnel205
 no ip address
!
interface Tunnel206
 no ip address
!
interface Tunnel207
 no ip address
!
interface Tunnel208
 no ip address
!
interface Tunnel209
 no ip address
!
interface Tunnel210
 no ip address
!
interface Tunnel211
 no ip address
!
interface Tunnel212
 no ip address
!
interface Tunnel213
 no ip address
!
interface Tunnel214
 no ip address
!
interface Tunnel215
 no ip address
!
interface Tunnel216
 no ip address
!
interface Tunnel217
 no ip address
!
interface Tunnel218
 no ip address
!
interface Tunnel219
 no ip address
!
interface Tunnel220
 no ip address
!
interface Tunnel221
 no ip address
!
interface Tunnel222
 no ip address
!
interface Tunnel223
 no ip address
!
interface Tunnel224
 no ip address
!
interface Tunnel225
 no ip address
!
interface Tunnel226
 no ip address
!
interface Tunnel227
 no ip address
!
interface Tunnel228
 no ip address
!
interface Tunnel229
 no ip address
!
interface Tunnel230
 no ip address
!
interface Tunnel231
 no ip address
!
interface Tunnel232
 no ip address
!
interface Tunnel233
 no ip address
!
interface Tunnel234
 no ip address
!
interface Tunnel235
 no ip address
!
interface Tunnel236
 no ip address
!
interface Tunnel237
 no ip address
!
interface Tunnel238
 no ip address
!
interface Tunnel239
 no ip address
!
interface Tunnel240
 no ip address
!
interface Tunnel241
 no ip address
!
interface Tunnel242
 no ip address
!
interface Tunnel243
 no ip address
!
interface Tunnel244
 no ip address
!
interface Tunnel245
 no ip address
!
interface Tunnel246
 no ip address
!
interface Tunnel247
 no ip address
!
interface Tunnel248
 no ip address
!
interface Tunnel249
 no ip address
!
interface Tunnel250
 no ip address
!
interface Tunnel251
 no ip address
!
interface Tunnel252
 no ip address
!
interface Tunnel253
 no ip address
!
interface Tunnel254
 no ip address
!
interface Tunnel255
 no ip address
!
interface Tunnel256
 no ip address
!
interface Tunnel257
 no ip address
!
interface Tunnel258
 no ip address
!
interface Tunnel259
 no ip address
!
interface Tunnel260
 no ip address
!
interface Tunnel261
 no ip address
!
interface Tunnel262
 no ip address
!
interface Tunnel263
 no ip address
!
interface Tunnel264
 no ip address
!
interface Tunnel265
 no ip address
!
interface Tunnel266
 no ip address
!
interface Tunnel267
 no ip address
!
interface Tunnel268
 no ip address
!
interface Tunnel269
 no ip address
!
interface Tunnel270
 no ip address
!
interface Tunnel271
 no ip address
!
interface Tunnel272
 no ip address
!
interface Tunnel273
 no ip address
!
interface Tunnel274
 no ip address
!
interface Tunnel275
 no ip address
!
interface Tunnel276
 no ip address
!
interface Tunnel277
 no ip address
!
interface Tunnel278
 no ip address
!
interface Tunnel279
 no ip address
!
interface Tunnel280
 no ip address
!
interface Tunnel281
 no ip address
!
interface Tunnel282
 no ip address
!
interface Tunnel283
 no ip address
!
interface Tunnel284
 no ip address
!
interface Tunnel285
 no ip address
!
interface Tunnel286
 no ip address
!
interface Tunnel287
 no ip address
!
interface Tunnel288
 no ip address
!
interface Tunnel289
 no ip address
!
interface Tunnel290
 no ip address
!
interface Tunnel291
 no ip address
!
interface Tunnel292
 no ip address
!
interface Tunnel293
 no ip address
!
interface Tunnel294
 no ip address
!
interface Tunnel295
 no ip address
!
interface Tunnel296
 no ip address
!
interface Tunnel297
 no ip address
!
interface Tunnel298
 no ip address
!
interface Tunnel299
 no ip address
!
interface Tunnel300
 no ip address
!
interface Tunnel301
 no ip address
!
interface Tunnel302
 no ip address
!
interface Tunnel303
 no ip address
!
interface Tunnel304
 no ip address
!
interface Tunnel305
 no ip address
!
interface Tunnel306
 no ip address
!
interface Tunnel307
 no ip address
!
interface Tunnel308
 no ip address
!
interface Tunnel309
 no ip address
!
interface Tunnel310
 no ip address
!
interface Tunnel311
 no ip address
!
interface Tunnel312
 no ip address
!
interface Tunnel313
 no ip address
!
interface Tunnel314
 no ip address
!
interface Tunnel315
 no ip address
!
interface Tunnel316
 no ip address
!
interface Tunnel317
 no ip address
!
interface Tunnel318
 no ip address
!
interface Tunnel319
 no ip address
!
interface Tunnel320
 no ip address
!
interface Tunnel321
 no ip address
!
interface Tunnel322
 no ip address
!
interface Tunnel323
 no ip address
!
interface Tunnel324
 no ip address
!
interface Tunnel325
 no ip address
!
interface Tunnel326
 no ip address
!
interface Tunnel327
 no ip address
!
interface Tunnel328
 no ip address
!
interface Tunnel329
 no ip address
!
interface Tunnel330
 no ip address
!
interface Tunnel331
 no ip address
!
interface Tunnel332
 no ip address
!
interface Tunnel333
 no ip address
!
interface Tunnel334
 no ip address
!
interface Tunnel335
 no ip address
!
interface Tunnel336
 no ip address
!
interface Tunnel337
 no ip address
!
interface Tunnel338
 no ip address
!
interface Tunnel339
 no ip address
!
interface Tunnel340
 no ip address
!
interface Tunnel341
 no ip address
!
interface Tunnel342
 no ip address
!
interface Tunnel343
 no ip address
!
interface Tunnel344
 no ip address
!
interface Tunnel345
 no ip address
!
interface Tunnel346
 no ip address
!
interface Tunnel347
 no ip address
!
interface Tunnel348
 no ip address
!
interface Tunnel349
 no ip address
!
interface Tunnel350
 no ip address
!
interface Tunnel351
 no ip address
!
interface Tunnel352
 no ip address
!
interface Tunnel353
 no ip address
!
interface Tunnel354
 no ip address
!
interface Tunnel355
 no ip address
!
interface Tunnel356
 no ip address
!
interface Tunnel357
 no ip address
!
interface Tunnel358
 no ip address
!
interface Tunnel359
 no ip address
!
interface Tunnel360
 no ip address
!
interface Tunnel361
 no ip address
!
interface Tunnel362
 no ip address
!
interface Tunnel363
 no ip address
!
interface Tunnel364
 no ip address
!
interface Tunnel365
 no ip address
!
interface Tunnel366
 no ip address
!
interface Tunnel367
 no ip address
!
interface Tunnel368
 no ip address
!
interface Tunnel369
 no ip address
!
interface Tunnel370
 no ip address
!
interface Tunnel371
 no ip address
!
interface Tunnel372
 no ip address
!
interface Tunnel373
 no ip address
!
interface Tunnel374
 no ip address
!
interface Tunnel375
 no ip address
!
interface Tunnel376
 no ip address
!
interface Tunnel377
 no ip address
!
interface Tunnel378
 no ip address
!
interface Tunnel379
 no ip address
!
interface Tunnel380
 no ip address
!
interface Tunnel381
 no ip address
!
interface Tunnel382
 no ip address
!
interface Tunnel383
 no ip address
!
interface Tunnel384
 no ip address
!
interface Tunnel385
 no ip address
!
interface Tunnel386
 no ip address
!
interface Tunnel387
 no ip address
!
interface Tunnel388
 no ip address
!
interface Tunnel389
 no ip address
!
interface Tunnel390
 no ip address
!
interface Tunnel391
 no ip address
!
interface Tunnel392
 no ip address
!
interface Tunnel393
 no ip address
!
interface Tunnel394
 no ip address
!
interface Tunnel395
 no ip address
!
interface Tunnel396
 no ip address
!
interface Tunnel397
 no ip address
!
interface Tunnel398
 no ip address
!
interface Tunnel399
 no ip address
!
interface Tunnel400
 no ip address
!
interface Tunnel401
 no ip address
!
interface Tunnel402
 no ip address
!
interface Tunnel403
 no ip address
!
interface Tunnel404
 no ip address
!
interface Tunnel405
 no ip address
!
interface Tunnel406
 no ip address
!
interface Tunnel407
 no ip address
!
interface Tunnel408
 no ip address
!
interface Tunnel409
 no ip address
!
interface Tunnel410
 no ip address
!
interface Tunnel411
 no ip address
!
interface Tunnel412
 no ip address
!
interface Tunnel413
 no ip address
!
interface Tunnel414
 no ip address
!
interface Tunnel415
 no ip address
!
interface Tunnel416
 no ip address
!
interface Tunnel417
 no ip address
!
interface Tunnel418
 no ip address
!
interface Tunnel419
 no ip address
!
interface Tunnel420
 no ip address
!
interface Tunnel421
 no ip address
!
interface Tunnel422
 no ip address
!
interface Tunnel423
 no ip address
!
interface Tunnel424
 no ip address
!
interface Tunnel425
 no ip address
!
interface Tunnel426
 no ip address
!
interface Tunnel427
 no ip address
!
interface Tunnel428
 no ip address
!
interface Tunnel429
 no ip address
!
interface Tunnel430
 no ip address
!
interface Tunnel431
 no ip address
!
interface Tunnel432
 no ip address
!
interface Tunnel433
 no ip address
!
interface Tunnel434
 no ip address
!
interface Tunnel435
 no ip address
!
interface Tunnel436
 no ip address
!
interface Tunnel437
 no ip address
!
interface Tunnel438
 no ip address
!
interface Tunnel439
 no ip address
!
interface Tunnel440
 no ip address
!
interface Tunnel441
 no ip address
!
interface Tunnel442
 no ip address
!
interface Tunnel443
 no ip address
!
interface Tunnel444
 no ip address
!
interface Tunnel445
 no ip address
!
interface Tunnel446
 no ip address
!
interface Tunnel447
 no ip address
!
interface Tunnel448
 no ip address
!
interface Tunnel449
 no ip address
!
interface Tunnel450
 no ip address
!
interface Tunnel451
 no ip address
!
interface Tunnel452
 no ip address
!
interface Tunnel453
 no ip address
!
interface Tunnel454
 no ip address
!
interface Tunnel455
 no ip address
!
interface Tunnel456
 no ip address
!
interface Tunnel457
 no ip address
!
interface Tunnel458
 no ip address
!
interface Tunnel459
 no ip address
!
interface Tunnel460
 no ip address
!
interface Tunnel461
 no ip address
!
interface Tunnel462
 no ip address
!
interface Tunnel463
 no ip address
!
interface Tunnel464
 no ip address
!
interface Tunnel465
 no ip address
!
interface Tunnel466
 no ip address
!
interface Tunnel467
 no ip address
!
interface Tunnel468
 no ip address
!
interface Tunnel469
 no ip address
!
interface Tunnel470
 no ip address
!
interface Tunnel471
 no ip address
!
interface Tunnel472
 no ip address
!
interface Tunnel473
 no ip address
!
interface Tunnel474
 no ip address
!
interface Tunnel475
 no ip address
!
interface Tunnel476
 no ip address
!
interface Tunnel477
 no ip address
!
interface Tunnel478
 no ip address
!
interface Tunnel479
 no ip address
!
interface Tunnel480
 no ip address
!
interface Tunnel481
 no ip address
!
interface Tunnel482
 no ip address
!
interface Tunnel483
 no ip address
!
interface Tunnel484
 no ip address
!
interface Tunnel485
 no ip address
!
interface Tunnel486
 no ip address
!
interface Tunnel487
 no ip address
!
interface Tunnel488
 no ip address
!
interface Tunnel489
 no ip address
!
interface Tunnel490
 no ip address
!
interface Tunnel491
 no ip address
!
interface Tunnel492
 no ip address
!
interface Tunnel493
 no ip address
!
interface Tunnel494
 no ip address
!
interface Tunnel495
 no ip address
!
interface Tunnel496
 no ip address
!
interface Tunnel497
 no ip address
!
interface Tunnel498
 no ip address
!
interface Tunnel499
 no ip address
!
interface Tunnel500
 no ip address
!
interface Tunnel501
 no ip address
!
interface Tunnel502
 no ip address
!
interface Tunnel503
 no ip address
!
interface Tunnel504
 no ip address
!
interface Tunnel505
 no ip address
!
interface Tunnel506
 no ip address
!
interface Tunnel507
 no ip address
!
interface Tunnel508
 no ip address
!
interface Tunnel509
 no ip address
!
interface Tunnel510
 no ip address
!
interface Tunnel511
 no ip address
!
interface Tunnel512
 no ip address
!
interface Tunnel513
 no ip address
!
interface Tunnel514
 no ip address
!
interface Tunnel515
 no ip address
!
interface Tunnel516
 no ip address
!
interface Tunnel517
 no ip address
!
interface Tunnel518
 no ip address
!
interface Tunnel519
 no ip address
!
interface Tunnel520
 no ip address
!
interface Tunnel521
 no ip address
!
interface Tunnel522
 no ip address
!
interface Tunnel523
 no ip address
!
interface Tunnel524
 no ip address
!
interface Tunnel525
 no ip address
!
interface Tunnel526
 no ip address
!
interface Tunnel527
 no ip address
!
interface Tunnel528
 no ip address
!
interface Tunnel529
 no ip address
!
interface Tunnel530
 no ip address
!
interface Tunnel531
 no ip address
!
interface Tunnel532
 no ip address
!
interface Tunnel533
 no ip address
!
interface Tunnel534
 no ip address
!
interface Tunnel535
 no ip address
!
interface Tunnel536
 no ip address
!
interface Tunnel537
 no ip address
!
interface Tunnel538
 no ip address
!
interface Tunnel539
 no ip address
!
interface Tunnel540
 no ip address
!
interface Tunnel541
 no ip address
!
interface Tunnel542
 no ip address
!
interface Tunnel543
 no ip address
!
interface Tunnel544
 no ip address
!
interface Tunnel545
 no ip address
!
interface Tunnel546
 no ip address
!
interface Tunnel547
 no ip address
!
interface Tunnel548
 no ip address
!
interface Tunnel549
 no ip address
!
interface Tunnel550
 no ip address
!
interface Tunnel551
 no ip address
!
interface Tunnel552
 no ip address
!
interface Tunnel553
 no ip address
!
interface Tunnel554
 no ip address
!
interface Tunnel555
 no ip address
!
interface Tunnel556
 no ip address
!
interface Tunnel557
 no ip address
!
interface Tunnel558
 no ip address
!
interface Tunnel559
 no ip address
!
interface Tunnel560
 no ip address
!
interface Tunnel561
 no ip address
!
interface Tunnel562
 no ip address
!
interface Tunnel563
 no ip address
!
interface Tunnel564
 no ip address
!
interface Tunnel565
 no ip address
!
interface Tunnel566
 no ip address
!
interface Tunnel567
 no ip address
!
interface Tunnel568
 no ip address
!
interface Tunnel569
 no ip address
!
interface Tunnel570
 no ip address
!
interface Tunnel571
 no ip address
!
interface Tunnel572
 no ip address
!
interface Tunnel573
 no ip address
!
interface Tunnel574
 no ip address
!
interface Tunnel575
 no ip address
!
interface Tunnel576
 no ip address
!
interface Tunnel577
 no ip address
!
interface Tunnel578
 no ip address
!
interface Tunnel579
 no ip address
!
interface Tunnel580
 no ip address
!
interface Tunnel581
 no ip address
!
interface Tunnel582
 no ip address
!
interface Tunnel583
 no ip address
!
interface Tunnel584
 no ip address
!
interface Tunnel585
 no ip address
!
interface Tunnel586
 no ip address
!
interface Tunnel587
 no ip address
!
interface Tunnel588
 no ip address
!
interface Tunnel589
 no ip address
!
interface Tunnel590
 no ip address
!
interface Tunnel591
 no ip address
!
interface Tunnel592
 no ip address
!
interface Tunnel593
 no ip address
!
interface Tunnel594
 no ip address
!
interface Tunnel595
 no ip address
!
interface Tunnel596
 no ip address
!
interface Tunnel597
 no ip address
!
interface Tunnel598
 no ip address
!
interface Tunnel599
 no ip address
!
interface Tunnel600
 no ip address
!
interface Tunnel601
 no ip address
!
interface Tunnel602
 no ip address
!
interface Tunnel603
 no ip address
!
interface Tunnel604
 no ip address
!
interface Tunnel605
 no ip address
!
interface Tunnel606
 no ip address
!
interface Tunnel607
 no ip address
!
interface Tunnel608
 no ip address
!
interface Tunnel609
 no ip address
!
interface Tunnel610
 no ip address
!
interface Tunnel611
 no ip address
!
interface Tunnel612
 no ip address
!
interface Tunnel613
 no ip address
!
interface Tunnel614
 no ip address
!
interface Tunnel615
 no ip address
!
interface Tunnel616
 no ip address
!
interface Tunnel617
 no ip address
!
interface Tunnel618
 no ip address
!
interface Tunnel619
 no ip address
!
interface Tunnel620
 no ip address
!
interface Tunnel621
 no ip address
!
interface Tunnel622
 no ip address
!
interface Tunnel623
 no ip address
!
interface Tunnel624
 no ip address
!
interface Tunnel625
 no ip address
!
interface Tunnel626
 no ip address
!
interface Tunnel627
 no ip address
!
interface Tunnel628
 no ip address
!
interface Tunnel629
 no ip address
!
interface Tunnel630
 no ip address
!
interface Tunnel631
 no ip address
!
interface Tunnel632
 no ip address
!
interface Tunnel633
 no ip address
!
interface Tunnel634
 no ip address
!
interface Tunnel635
 no ip address
!
interface Tunnel636
 no ip address
!
interface Tunnel637
 no ip address
!
interface Tunnel638
 no ip address
!
interface Tunnel639
 no ip address
!
interface Tunnel640
 no ip address
!
interface Tunnel641
 no ip address
!
interface Tunnel642
 no ip address
!
interface Tunnel643
 no ip address
!
interface Tunnel644
 no ip address
!
interface Tunnel645
 no ip address
!
interface Tunnel646
 no ip address
!
interface Tunnel647
 no ip address
!
interface Tunnel648
 no ip address
!
interface Tunnel649
 no ip address
!
interface Tunnel650
 no ip address
!
interface Tunnel651
 no ip address
!
interface Tunnel652
 no ip address
!
interface Tunnel653
 no ip address
!
interface Tunnel654
 no ip address
!
interface Tunnel655
 no ip address
!
interface Tunnel656
 no ip address
!
interface Tunnel657
 no ip address
!
interface Tunnel658
 no ip address
!
interface Tunnel659
 no ip address
!
interface Tunnel660
 no ip address
!
interface Tunnel661
 no ip address
!
interface Tunnel662
 no ip address
!
interface Tunnel663
 no ip address
!
interface Tunnel664
 no ip address
!
interface Tunnel665
 no ip address
!
interface Tunnel666
 no ip address
!
interface Tunnel667
 no ip address
!
interface Tunnel668
 no ip address
!
interface Tunnel669
 no ip address
!
interface Tunnel670
 no ip address
!
interface Tunnel671
 no ip address
!
interface Tunnel672
 no ip address
!
interface Tunnel673
 no ip address
!
interface Tunnel674
 no ip address
!
interface Tunnel675
 no ip address
!
interface Tunnel676
 no ip address
!
interface Tunnel677
 no ip address
!
interface Tunnel678
 no ip address
!
interface Tunnel679
 no ip address
!
interface Tunnel680
 no ip address
!
interface Tunnel681
 no ip address
!
interface Tunnel682
 no ip address
!
interface Tunnel683
 no ip address
!
interface Tunnel684
 no ip address
!
interface Tunnel685
 no ip address
!
interface Tunnel686
 no ip address
!
interface Tunnel687
 no ip address
!
interface Tunnel688
 no ip address
!
interface Tunnel689
 no ip address
!
interface Tunnel690
 no ip address
!
interface Tunnel691
 no ip address
!
interface Tunnel692
 no ip address
!
interface Tunnel693
 no ip address
!
interface Tunnel694
 no ip address
!
interface Tunnel695
 no ip address
!
interface Tunnel696
 no ip address
!
interface Tunnel697
 no ip address
!
interface Tunnel698
 no ip address
!
interface Tunnel699
 no ip address
!
interface Tunnel700
 no ip address
!
interface Tunnel701
 no ip address
!
interface Tunnel702
 no ip address
!
interface Tunnel703
 no ip address
!
interface Tunnel704
 no ip address
!
interface Tunnel705
 no ip address
!
interface Tunnel706
 no ip address
!
interface Tunnel707
 no ip address
!
interface Tunnel708
 no ip address
!
interface Tunnel709
 no ip address
!
interface Tunnel710
 no ip address
!
interface Tunnel711
 no ip address
!
interface Tunnel712
 no ip address
!
interface Tunnel713
 no ip address
!
interface Tunnel714
 no ip address
!
interface Tunnel715
 no ip address
!
interface Tunnel716
 no ip address
!
interface Tunnel717
 no ip address
!
interface Tunnel718
 no ip address
!
interface Tunnel719
 no ip address
!
interface Tunnel720
 no ip address
!
interface Tunnel721
 no ip address
!
interface Tunnel722
 no ip address
!
interface Tunnel723
 no ip address
!
interface Tunnel724
 no ip address
!
interface Tunnel725
 no ip address
!
interface Tunnel726
 no ip address
!
interface Tunnel727
 no ip address
!
interface Tunnel728
 no ip address
!
interface Tunnel729
 no ip address
!
interface Tunnel730
 no ip address
!
interface Tunnel731
 no ip address
!
interface Tunnel732
 no ip address
!
interface Tunnel733
 no ip address
!
interface Tunnel734
 no ip address
!
interface Tunnel735
 no ip address
!
interface Tunnel736
 no ip address
!
interface Tunnel737
 no ip address
!
interface Tunnel738
 no ip address
!
interface Tunnel739
 no ip address
!
interface Tunnel740
 no ip address
!
interface Tunnel741
 no ip address
!
interface Tunnel742
 no ip address
!
interface Tunnel743
 no ip address
!
interface Tunnel744
 no ip address
!
interface Tunnel745
 no ip address
!
interface Tunnel746
 no ip address
!
interface Tunnel747
 no ip address
!
interface Tunnel748
 no ip address
!
interface Tunnel749
 no ip address
!
interface Tunnel750
 no ip address
!
interface Tunnel751
 no ip address
!
interface Tunnel752
 no ip address
!
interface Tunnel753
 no ip address
!
interface Tunnel754
 no ip address
!
interface Tunnel755
 no ip address
!
interface Tunnel756
 no ip address
!
interface Tunnel757
 no ip address
!
interface Tunnel758
 no ip address
!
interface Tunnel759
 no ip address
!
interface Tunnel760
 no ip address
!
interface Tunnel761
 no ip address
!
interface Tunnel762
 no ip address
!
interface Tunnel763
 no ip address
!
interface Tunnel764
 no ip address
!
interface Tunnel765
 no ip address
!
interface Tunnel766
 no ip address
!
interface Tunnel767
 no ip address
!
interface Tunnel768
 no ip address
!
interface Tunnel769
 no ip address
!
interface Tunnel770
 no ip address
!
interface Tunnel771
 no ip address
!
interface Tunnel772
 no ip address
!
interface Tunnel773
 no ip address
!
interface Tunnel774
 no ip address
!
interface Tunnel775
 no ip address
!
interface Tunnel776
 no ip address
!
interface Tunnel777
 no ip address
!
interface Tunnel778
 no ip address
!
interface Tunnel779
 no ip address
!
interface Tunnel780
 no ip address
!
interface Tunnel781
 no ip address
!
interface Tunnel782
 no ip address
!
interface Tunnel783
 no ip address
!
interface Tunnel784
 no ip address
!
interface Tunnel785
 no ip address
!
interface Tunnel786
 no ip address
!
interface Tunnel787
 no ip address
!
interface Tunnel788
 no ip address
!
interface Tunnel789
 no ip address
!
interface Tunnel790
 no ip address
!
interface Tunnel791
 no ip address
!
interface Tunnel792
 no ip address
!
interface Tunnel793
 no ip address
!
interface Tunnel794
 no ip address
!
interface Tunnel795
 no ip address
!
interface Tunnel796
 no ip address
!
interface Tunnel797
 no ip address
!
interface Tunnel798
 no ip address
!
interface Tunnel799
 no ip address
!
interface Tunnel800
 no ip address
!
interface Tunnel801
 no ip address
!
interface Tunnel802
 no ip address
!
interface Tunnel803
 no ip address
!
interface Tunnel804
 no ip address
!
interface Tunnel805
 no ip address
!
interface Tunnel806
 no ip address
!
interface Tunnel807
 no ip address
!
interface Tunnel808
 no ip address
!
interface Tunnel809
 no ip address
!
interface Tunnel810
 no ip address
!
interface Tunnel811
 no ip address
!
interface Tunnel812
 no ip address
!
interface Tunnel813
 no ip address
!
interface Tunnel814
 no ip address
!
interface Tunnel815
 no ip address
!
interface Tunnel816
 no ip address
!
interface Tunnel817
 no ip address
!
interface Tunnel818
 no ip address
!
interface Tunnel819
 no ip address
!
interface Tunnel820
 no ip address
!
interface Tunnel821
 no ip address
!
interface Tunnel822
 no ip address
!
interface Tunnel823
 no ip address
!
interface Tunnel824
 no ip address
!
interface Tunnel825
 no ip address
!
interface Tunnel826
 no ip address
!
interface Tunnel827
 no ip address
!
interface Tunnel828
 no ip address
!
interface Tunnel829
 no ip address
!
interface Tunnel830
 no ip address
!
interface Tunnel831
 no ip address
!
interface Tunnel832
 no ip address
!
interface Tunnel833
 no ip address
!
interface Tunnel834
 no ip address
!
interface Tunnel835
 no ip address
!
interface Tunnel836
 no ip address
!
interface Tunnel837
 no ip address
!
interface Tunnel838
 no ip address
!
interface Tunnel839
 no ip address
!
interface Tunnel840
 no ip address
!
interface Tunnel841
 no ip address
!
interface Tunnel842
 no ip address
!
interface Tunnel843
 no ip address
!
interface Tunnel844
 no ip address
!
interface Tunnel845
 no ip address
!
interface Tunnel846
 no ip address
!
interface Tunnel847
 no ip address
!
interface Tunnel848
 no ip address
!
interface Tunnel849
 no ip address
!
interface Tunnel850
 no ip address
!
interface Tunnel851
 no ip address
!
interface Tunnel852
 no ip address
!
interface Tunnel853
 no ip address
!
interface Tunnel854
 no ip address
!
interface Tunnel855
 no ip address
!
interface Tunnel856
 no ip address
!
interface Tunnel857
 no ip address
!
interface Tunnel858
 no ip address
!
interface Tunnel859
 no ip address
!
interface Tunnel860
 no ip address
!
interface Tunnel861
 no ip address
!
interface Tunnel862
 no ip address
!
interface Tunnel863
 no ip address
!
interface Tunnel864
 no ip address
!
interface Tunnel865
 no ip address
!
interface Tunnel866
 no ip address
!
interface Tunnel867
 no ip address
!
interface Tunnel868
 no ip address
!
interface Tunnel869
 no ip address
!
interface Tunnel870
 no ip address
!
interface Tunnel871
 no ip address
!
interface Tunnel872
 no ip address
!
interface Tunnel873
 no ip address
!
interface Tunnel874
 no ip address
!
interface Tunnel875
 no ip address
!
interface Tunnel876
 no ip address
!
interface Tunnel877
 no ip address
!
interface Tunnel878
 no ip address
!
interface Tunnel879
 no ip address
!
interface Tunnel880
 no ip address
!
interface Tunnel881
 no ip address
!
interface Tunnel882
 no ip address
!
interface Tunnel883
 no ip address
!
interface Tunnel884
 no ip address
!
interface Tunnel885
 no ip address
!
interface Tunnel886
 no ip address
!
interface Tunnel887
 no ip address
!
interface Tunnel888
 no ip address
!
interface Tunnel889
 no ip address
!
interface Tunnel890
 no ip address
!
interface Tunnel891
 no ip address
!
interface Tunnel892
 no ip address
!
interface Tunnel893
 no ip address
!
interface Tunnel894
 no ip address
!
interface Tunnel895
 no ip address
!
interface Tunnel896
 no ip address
!
interface Tunnel897
 no ip address
!
interface Tunnel898
 no ip address
!
interface Tunnel899
 no ip address
!
interface Tunnel900
 no ip address
!
interface Tunnel901
 no ip address
!
interface Tunnel902
 no ip address
!
interface Tunnel903
 no ip address
!
interface Tunnel904
 no ip address
!
interface Tunnel905
 no ip address
!
interface Tunnel906
 no ip address
!
interface Tunnel907
 no ip address
!
interface Tunnel908
 no ip address
!
interface Tunnel909
 no ip address
!
interface Tunnel910
 no ip address
!
interface Tunnel911
 no ip address
!
interface Tunnel912
 no ip address
!
interface Tunnel913
 no ip address
!
interface Tunnel914
 no ip address
!
interface Tunnel915
 no ip address
!
interface Tunnel916
 no ip address
!
interface Tunnel917
 no ip address
!
interface Tunnel918
 no ip address
!
interface Tunnel919
 no ip address
!
interface Tunnel920
 no ip address
!
interface Tunnel921
 no ip address
!
interface Tunnel922
 no ip address
!
interface Tunnel923
 no ip address
!
interface Tunnel924
 no ip address
!
interface Tunnel925
 no ip address
!
interface Tunnel926
 no ip address
!
interface Tunnel927
 no ip address
!
interface Tunnel928
 no ip address
!
interface Tunnel929
 no ip address
!
interface Tunnel930
 no ip address
!
interface Tunnel931
 no ip address
!
interface Tunnel932
 no ip address
!
interface Tunnel933
 no ip address
!
interface Tunnel934
 no ip address
!
interface Tunnel935
 no ip address
!
interface Tunnel936
 no ip address
!
interface Tunnel937
 no ip address
!
interface Tunnel938
 no ip address
!
interface Tunnel939
 no ip address
!
interface Tunnel940
 no ip address
!
interface Tunnel941
 no ip address
!
interface Tunnel942
 no ip address
!
interface Tunnel943
 no ip address
!
interface Tunnel944
 no ip address
!
interface Tunnel945
 no ip address
!
interface Tunnel946
 no ip address
!
interface Tunnel947
 no ip address
!
interface Tunnel948
 no ip address
!
interface Tunnel949
 no ip address
!
interface Tunnel950
 no ip address
!
interface Tunnel951
 no ip address
!
interface Tunnel952
 no ip address
!
interface Tunnel953
 no ip address
!
interface Tunnel954
 no ip address
!
interface Tunnel955
 no ip address
!
interface Tunnel956
 no ip address
!
interface Tunnel957
 no ip address
!
interface Tunnel958
 no ip address
!
interface Tunnel959
 no ip address
!
interface Tunnel960
 no ip address
!
interface Tunnel961
 no ip address
!
interface Tunnel962
 no ip address
!
interface Tunnel963
 no ip address
!
interface Tunnel964
 no ip address
!
interface Tunnel965
 no ip address
!
interface Tunnel966
 no ip address
!
interface Tunnel967
 no ip address
!
interface Tunnel968
 no ip address
!
interface Tunnel969
 no ip address
!
interface Tunnel970
 no ip address
!
interface Tunnel971
 no ip address
!
interface Tunnel972
 no ip address
!
interface Tunnel973
 no ip address
!
interface Tunnel974
 no ip address
!
interface Tunnel975
 no ip address
!
interface Tunnel976
 no ip address
!
interface Tunnel977
 no ip address
!
interface Tunnel978
 no ip address
!
interface Tunnel979
 no ip address
!
interface Tunnel980
 no ip address
!
interface Tunnel981
 no ip address
!
interface Tunnel982
 no ip address
!
interface Tunnel983
 no ip address
!
interface Tunnel984
 no ip address
!
interface Tunnel985
 no ip address
!
interface Tunnel986
 no ip address
!
interface Tunnel987
 no ip address
!
interface Tunnel988
 no ip address
!
interface Tunnel989
 no ip address
!
interface Tunnel990
 no ip address
!
interface Tunnel991
 no ip address
!
interface Tunnel992
 no ip address
!
interface Tunnel993
 no ip address
!
interface Tunnel994
 no ip address
!
interface Tunnel995
 no ip address
!
interface Tunnel996
 no ip address
!
interface Tunnel997
 no ip address
!
interface Tunnel998
 no ip address
!
interface Tunnel999
 no ip address
!
interface Tunnel1000
 no ip address
!
interface GigabitEthernet0/0/0
 no ip address
 shutdown
 negotiation auto
!
interface GigabitEthernet0/0/1
 no ip address
 shutdown
 negotiation auto
!
interface GigabitEthernet0/0/2
 no ip address
 negotiation auto
!
interface GigabitEthernet0/0/2.1
 encapsulation dot1Q 100
 vrf forwarding C1_0
 ip address <removed>!
interface GigabitEthernet0/0/3
 no ip address
 shutdown
 negotiation auto
!
interface GigabitEthernet0/0/4
 no ip address
 shutdown
 negotiation auto
!
interface GigabitEthernet0/0/5
 no ip address
 shutdown
 negotiation auto
!
interface GigabitEthernet0/0/6
 no ip address
 shutdown
 negotiation auto
!
interface GigabitEthernet0/0/7
 no ip address
 shutdown
 negotiation auto
!
interface TenGigabitEthernet0/1/0
 ip address <removed> no negotiation auto
!
interface TenGigabitEthernet0/1/1
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/2
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/3
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/4
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/5
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/6
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/7
 no ip address
 shutdown
 no negotiation auto
!
interface GigabitEthernet0
 vrf forwarding Mgmt-intf
 ip address <removed> negotiation auto
!
router ospf 100
 network 50.50.50.0 0.0.0.255 area 0
 network 208.200.0.2 0.0.0.0 area 0
!
router bgp 64001
 bgp router-id 111.111.111.111
 bgp log-neighbor-changes
 !
 address-family ipv4 vrf C1_0
  network 192.0.0.0
  redistribute connected
  neighbor 192.0.1.1 remote-as 64001
  neighbor 192.0.1.1 activate
 exit-address-family
!
ip forward-protocol nd
!
ip tftp source-interface GigabitEthernet0
ip tftp blocksize 8192
ip http server
ip http authentication local
ip http secure-server
ip ssh bulk-mode 131072
ip route vrf Mgmt-intf 202.153.144.90 255.255.255.255 9.45.0.1
ip route vrf Mgmt-intf 202.153.144.90 255.255.255.255 9.41.0.1
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
line con 0
 exec-timeout 0 0
 stopbits 1
line aux 0
line vty 0 4
 login
 transport input ssh
!
call-home
 ! If contact email address in call-home is configured as sch-smart-licensing@cisco.com
 ! the email address configured in Cisco Smart License Portal will be used as contact email address to send SCH notifications.
 contact-email-addr sch-smart-licensing@cisco.com
 profile "CiscoTAC-1"
  active
  destination transport-method http
!
!
!
!
!
!
end

DMVPN IPv4 OSPF BGP RR yang commands

Configuration example for a hub

version 17.6
service timestamps debug datetime msec
service timestamps log datetime msec
service internal
service call-home
platform qfp utilization monitor load 80
platform punt-keepalive disable-kernel-core
!
hostname DC1-Hub1
!
boot-start-marker
boot system bootflash:c8000aep-universalk9.DC1-Hub1.dmvpn_soak.SSA.bin
boot-end-marker
!
!
vrf definition Mgmt-intf
 !
 address-family ipv4
 exit-address-family
 !
 address-family ipv6
 exit-address-family
!
no logging console
!
no aaa new-model
!
!
!
!
!
!
!
!
!
!
!
!
login on-success log
!
!
!
!
!
!
!
subscriber templating
! 
! 
! 
! 
!
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
crypto pki trustpoint TP-self-signed-2134189379
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-2134189379
 revocation-check none
 rsakeypair TP-self-signed-2134189379
!
crypto pki trustpoint SLA-TrustPoint
 enrollment pkcs12
 revocation-check crl
!
!
!
license udi pid C8500-12X4QC sn TTM231100CF
license boot level network-advantage addon dna-advantage
no memory lite
memory free low-watermark processor 984138
hw-module subslot 0/1 mode 10G
hw-module subslot 0/2 mode 40G
hw-module subslot 0/2 breakout none port all
!
!
spanning-tree extend system-id
diagnostic bootup level minimal
!
!
redundancy
 mode none
!
!
crypto ikev2 proposal ikev2proposal 
 encryption aes-cbc-192
 integrity sha512
 group 16
!
crypto ikev2 policy ikev2policy 
 proposal ikev2proposal
!
crypto ikev2 keyring ikev2keyring
 peer ikev2peer
  address 0.0.0.0 0.0.0.0
  pre-shared-key Cisco@123
 !
!
!
crypto ikev2 profile ikev2profile
 match identity remote address 0.0.0.0 
 authentication remote pre-share
 authentication local pre-share
 keyring local ikev2keyring
!
crypto ikev2 dpd 60 3 on-demand
!
!
!
!
! 
!
!
!
!
!
!
crypto ipsec transform-set tset1 esp-aes 256 esp-sha256-hmac 
 mode tunnel
!
!
crypto ipsec profile dmvpn-hub
 set transform-set tset1 
 set pfs group19
 set ikev2-profile ikev2profile
!
!
!
!
!
! 
! 
!
!
interface Tunnel1
 bandwidth 100000
 ip address <removed> no ip redirects
 ip mtu 1400
 ip hello-interval eigrp 101 30
 ip hold-time eigrp 101 90
 ip nhrp network-id 1000
 ip nhrp holdtime 900
 ip nhrp redirect
 ip tcp adjust-mss 1200
 ip summary-address eigrp 101 100.0.0.0 255.0.0.0
 cts sgt inline
 tunnel source TenGigabitEthernet0/1/0
 tunnel mode gre multipoint
 tunnel path-mtu-discovery
 tunnel protection ipsec profile dmvpn-hub
!
interface TenGigabitEthernet0/0/0
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/0/1
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/0/2
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/0/3
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/0/4
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/0/5
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/0/6
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/0/7
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/0
 ip address <removed> no negotiation auto
!
interface TenGigabitEthernet0/1/1
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/2
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/3
 ip address <removed> no negotiation auto
!
interface FortyGigabitEthernet0/2/0
 no ip address
 shutdown
 no negotiation auto
!
interface FortyGigabitEthernet0/2/4
 no ip address
 shutdown
 no negotiation auto
!
interface FortyGigabitEthernet0/2/8
 no ip address
 shutdown
 no negotiation auto
!
interface GigabitEthernet0
 vrf forwarding Mgmt-intf
 ip address <removed> negotiation auto
!
router ospf 100
 network 100.0.10.0 0.0.0.255 area 0
!
router bgp 64001
 bgp router-id 1.1.1.2
 bgp log-neighbor-changes
 bgp listen range 192.0.0.0/8 peer-group DMVPN_SPOKES
 bgp listen limit 10000
 timers bgp 10 30
 neighbor DMVPN_SPOKES peer-group
 neighbor DMVPN_SPOKES remote-as 64001
 !
 address-family ipv4
  network 0.0.0.0
  network 150.100.0.0
  aggregate-address 25.0.0.0 255.0.0.0 summary-only
  aggregate-address 24.0.0.0 255.0.0.0 summary-only
  aggregate-address 23.0.0.0 255.0.0.0 summary-only
  aggregate-address 22.0.0.0 255.0.0.0 summary-only
  aggregate-address 21.0.0.0 255.0.0.0 summary-only
  aggregate-address 20.0.0.0 255.0.0.0 summary-only
  aggregate-address 19.0.0.0 255.0.0.0 summary-only
  aggregate-address 18.0.0.0 255.0.0.0 summary-only
  aggregate-address 17.0.0.0 255.0.0.0 summary-only
  aggregate-address 16.0.0.0 255.0.0.0 summary-only
  aggregate-address 15.0.0.0 255.0.0.0 summary-only
  aggregate-address 14.0.0.0 255.0.0.0 summary-only
  aggregate-address 13.0.0.0 255.0.0.0 summary-only
  aggregate-address 12.0.0.0 255.0.0.0 summary-only
  aggregate-address 11.0.0.0 255.0.0.0 summary-only
  aggregate-address 10.0.0.0 255.0.0.0 summary-only
  neighbor DMVPN_SPOKES activate
  neighbor DMVPN_SPOKES route-reflector-client
  neighbor DMVPN_SPOKES next-hop-self all
  neighbor DMVPN_SPOKES as-override split-horizon
  neighbor DMVPN_SPOKES route-map SPOKE_ROUTERS out
 exit-address-family
!
ip http server
ip http authentication local
ip http secure-server
ip forward-protocol nd
!
ip tftp source-interface GigabitEthernet0
ip tftp blocksize 8192
ip route 0.0.0.0 0.0.0.0 Null0
ip route vrf Mgmt-intf 202.153.144.90 255.255.255.255 9.41.0.1
!
!
!
ip prefix-list AGG_ROUTE seq 5 permit 10.0.0.0/8
ip prefix-list AGG_ROUTE seq 10 permit 11.0.0.0/8
ip prefix-list AGG_ROUTE seq 15 permit 12.0.0.0/8
ip prefix-list AGG_ROUTE seq 20 permit 13.0.0.0/8
ip prefix-list AGG_ROUTE seq 25 permit 14.0.0.0/8
ip prefix-list AGG_ROUTE seq 30 permit 15.0.0.0/8
ip prefix-list AGG_ROUTE seq 35 permit 16.0.0.0/8
ip prefix-list AGG_ROUTE seq 40 permit 17.0.0.0/8
ip prefix-list AGG_ROUTE seq 45 permit 18.0.0.0/8
ip prefix-list AGG_ROUTE seq 50 permit 19.0.0.0/8
ip prefix-list AGG_ROUTE seq 55 permit 20.0.0.0/8
ip prefix-list AGG_ROUTE seq 60 permit 21.0.0.0/8
ip prefix-list AGG_ROUTE seq 65 permit 22.0.0.0/8
ip prefix-list AGG_ROUTE seq 70 permit 23.0.0.0/8
ip prefix-list AGG_ROUTE seq 75 permit 24.0.0.0/8
ip prefix-list AGG_ROUTE seq 80 permit 25.0.0.0/8
!
route-map SPOKE_ROUTERS permit 10 
 match ip address prefix-list AGG_ROUTE
 set local-preference 170
!
!
!
!
control-plane
!
!
!
!
!
!
line con 0
 exec-timeout 0 0
 stopbits 1
line aux 0
line vty 0 4
 login
 transport input ssh
!
call-home
 ! If contact email address in call-home is configured as sch-smart-licensing@cisco.com
 ! the email address configured in Cisco Smart License Portal will be used as contact email address to send SCH notifications.
 contact-email-addr sch-smart-licensing@cisco.com
 profile "CiscoTAC-1"
  active
  destination transport-method http
!
!
!
!
!
!
end

Configuration example for a spoke

version 17.13
service timestamps debug datetime msec
service timestamps log datetime msec
service internal
service call-home
platform qfp utilization monitor load 80
platform punt-keepalive disable-kernel-core
platform ipsec flexvpn-bypass-tcam
platform hardware crypto-throughput level 8-16g 
!
hostname spk1
!
boot-start-marker
boot system bootflash:asr1000-universalk9.spk1.dmvpn_soak.SSA.bin
boot-end-marker
!
!
vrf definition C1_0
 rd 1:0
 !
 address-family ipv4
 exit-address-family
!
vrf definition Mgmt-intf
 !
 address-family ipv4
 exit-address-family
 !
 address-family ipv6
 exit-address-family
!
no logging console
no aaa new-model
!
!
subscriber templating
!
!
!
!
!
!
!
!
!
!
!
!
login on-success log
!
!
!
!
!
!
!
! 
! 
! 
! 
!
!
crypto pki trustpoint TP-self-signed-1147572831
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-1147572831
 revocation-check none
 rsakeypair TP-self-signed-1147572831
 hash sha256
!
crypto pki trustpoint SLA-TrustPoint
 enrollment pkcs12
 revocation-check crl
 hash sha256
!
!
!
!
!
!
!
!
!
!
license udi pid ASR1001-HX sn JAE24530LQG
license boot level adventerprise
!
no memory lite
memory free low-watermark processor 675468
diagnostic bootup level minimal
!
spanning-tree extend system-id
!
!
!
redundancy
 mode none
!
crypto ikev2 proposal ikev2proposal 
 encryption aes-cbc-192
 integrity sha512
 group 16
!
crypto ikev2 policy ikev2policy 
 proposal ikev2proposal
!
crypto ikev2 keyring ikev2keyring
 peer ikev2peer
  address 0.0.0.0 0.0.0.0
  pre-shared-key Cisco@123
 !
!
!
crypto ikev2 profile ikev2profile
 match identity remote address 0.0.0.0 
 authentication remote pre-share
 authentication local pre-share
 keyring local ikev2keyring
!
crypto ikev2 dpd 60 3 on-demand
!
!
!
!
! 
!
!
!
!
!
!
crypto ipsec transform-set tset1 esp-aes 256 esp-sha256-hmac 
 mode tunnel
!
!
crypto ipsec profile dmvpn-hub
 set transform-set tset1 
 set pfs group19
 set ikev2-profile ikev2profile
!
!
!
!
!
! 
! 
!
!
interface Loopback1
 ip address <removed>!
interface Tunnel1
 bandwidth 100000
 vrf forwarding C1_0
 ip address <removed> no ip redirects
 ip hello-interval eigrp 101 30
 ip hold-time eigrp 101 90
 ip nhrp network-id 1000
 ip nhrp holdtime 900
 ip nhrp nhs 192.0.1.1 nbma 100.0.10.2 multicast
 ip tcp adjust-mss 1200
 cts sgt inline
 tunnel source Loopback1
 tunnel mode gre multipoint
 tunnel path-mtu-discovery
 tunnel protection ipsec profile dmvpn-hub
!
interface Tunnel2
 no ip address
!
interface Tunnel3
 no ip address
!
interface Tunnel4
 no ip address
!
interface Tunnel5
 no ip address
!
interface Tunnel6
 no ip address
!
interface Tunnel7
 no ip address
!
interface Tunnel8
 no ip address
!
interface Tunnel9
 no ip address
!
interface Tunnel10
 no ip address
!
interface Tunnel11
 no ip address
!
interface Tunnel12
 no ip address
!
interface Tunnel13
 no ip address
!
interface Tunnel14
 no ip address
!
interface Tunnel15
 no ip address
!
interface Tunnel16
 no ip address
!
interface Tunnel17
 no ip address
!
interface Tunnel18
 no ip address
!
interface Tunnel19
 no ip address
!
interface Tunnel20
 no ip address
!
interface Tunnel21
 no ip address
!
interface Tunnel22
 no ip address
!
interface Tunnel23
 no ip address
!
interface Tunnel24
 no ip address
!
interface Tunnel25
 no ip address
!
interface Tunnel26
 no ip address
!
interface Tunnel27
 no ip address
!
interface Tunnel28
 no ip address
!
interface Tunnel29
 no ip address
!
interface Tunnel30
 no ip address
!
interface Tunnel31
 no ip address
!
interface Tunnel32
 no ip address
!
interface Tunnel33
 no ip address
!
interface Tunnel34
 no ip address
!
interface Tunnel35
 no ip address
!
interface Tunnel36
 no ip address
!
interface Tunnel37
 no ip address
!
interface Tunnel38
 no ip address
!
interface Tunnel39
 no ip address
!
interface Tunnel40
 no ip address
!
interface Tunnel41
 no ip address
!
interface Tunnel42
 no ip address
!
interface Tunnel43
 no ip address
!
interface Tunnel44
 no ip address
!
interface Tunnel45
 no ip address
!
interface Tunnel46
 no ip address
!
interface Tunnel47
 no ip address
!
interface Tunnel48
 no ip address
!
interface Tunnel49
 no ip address
!
interface Tunnel50
 no ip address
!
interface Tunnel51
 no ip address
!
interface Tunnel52
 no ip address
!
interface Tunnel53
 no ip address
!
interface Tunnel54
 no ip address
!
interface Tunnel55
 no ip address
!
interface Tunnel56
 no ip address
!
interface Tunnel57
 no ip address
!
interface Tunnel58
 no ip address
!
interface Tunnel59
 no ip address
!
interface Tunnel60
 no ip address
!
interface Tunnel61
 no ip address
!
interface Tunnel62
 no ip address
!
interface Tunnel63
 no ip address
!
interface Tunnel64
 no ip address
!
interface Tunnel65
 no ip address
!
interface Tunnel66
 no ip address
!
interface Tunnel67
 no ip address
!
interface Tunnel68
 no ip address
!
interface Tunnel69
 no ip address
!
interface Tunnel70
 no ip address
!
interface Tunnel71
 no ip address
!
interface Tunnel72
 no ip address
!
interface Tunnel73
 no ip address
!
interface Tunnel74
 no ip address
!
interface Tunnel75
 no ip address
!
interface Tunnel76
 no ip address
!
interface Tunnel77
 no ip address
!
interface Tunnel78
 no ip address
!
interface Tunnel79
 no ip address
!
interface Tunnel80
 no ip address
!
interface Tunnel81
 no ip address
!
interface Tunnel82
 no ip address
!
interface Tunnel83
 no ip address
!
interface Tunnel84
 no ip address
!
interface Tunnel85
 no ip address
!
interface Tunnel86
 no ip address
!
interface Tunnel87
 no ip address
!
interface Tunnel88
 no ip address
!
interface Tunnel89
 no ip address
!
interface Tunnel90
 no ip address
!
interface Tunnel91
 no ip address
!
interface Tunnel92
 no ip address
!
interface Tunnel93
 no ip address
!
interface Tunnel94
 no ip address
!
interface Tunnel95
 no ip address
!
interface Tunnel96
 no ip address
!
interface Tunnel97
 no ip address
!
interface Tunnel98
 no ip address
!
interface Tunnel99
 no ip address
!
interface Tunnel100
 no ip address
!
interface Tunnel101
 no ip address
!
interface Tunnel102
 no ip address
!
interface Tunnel103
 no ip address
!
interface Tunnel104
 no ip address
!
interface Tunnel105
 no ip address
!
interface Tunnel106
 no ip address
!
interface Tunnel107
 no ip address
!
interface Tunnel108
 no ip address
!
interface Tunnel109
 no ip address
!
interface Tunnel110
 no ip address
!
interface Tunnel111
 no ip address
!
interface Tunnel112
 no ip address
!
interface Tunnel113
 no ip address
!
interface Tunnel114
 no ip address
!
interface Tunnel115
 no ip address
!
interface Tunnel116
 no ip address
!
interface Tunnel117
 no ip address
!
interface Tunnel118
 no ip address
!
interface Tunnel119
 no ip address
!
interface Tunnel120
 no ip address
!
interface Tunnel121
 no ip address
!
interface Tunnel122
 no ip address
!
interface Tunnel123
 no ip address
!
interface Tunnel124
 no ip address
!
interface Tunnel125
 no ip address
!
interface Tunnel126
 no ip address
!
interface Tunnel127
 no ip address
!
interface Tunnel128
 no ip address
!
interface Tunnel129
 no ip address
!
interface Tunnel130
 no ip address
!
interface Tunnel131
 no ip address
!
interface Tunnel132
 no ip address
!
interface Tunnel133
 no ip address
!
interface Tunnel134
 no ip address
!
interface Tunnel135
 no ip address
!
interface Tunnel136
 no ip address
!
interface Tunnel137
 no ip address
!
interface Tunnel138
 no ip address
!
interface Tunnel139
 no ip address
!
interface Tunnel140
 no ip address
!
interface Tunnel141
 no ip address
!
interface Tunnel142
 no ip address
!
interface Tunnel143
 no ip address
!
interface Tunnel144
 no ip address
!
interface Tunnel145
 no ip address
!
interface Tunnel146
 no ip address
!
interface Tunnel147
 no ip address
!
interface Tunnel148
 no ip address
!
interface Tunnel149
 no ip address
!
interface Tunnel150
 no ip address
!
interface Tunnel151
 no ip address
!
interface Tunnel152
 no ip address
!
interface Tunnel153
 no ip address
!
interface Tunnel154
 no ip address
!
interface Tunnel155
 no ip address
!
interface Tunnel156
 no ip address
!
interface Tunnel157
 no ip address
!
interface Tunnel158
 no ip address
!
interface Tunnel159
 no ip address
!
interface Tunnel160
 no ip address
!
interface Tunnel161
 no ip address
!
interface Tunnel162
 no ip address
!
interface Tunnel163
 no ip address
!
interface Tunnel164
 no ip address
!
interface Tunnel165
 no ip address
!
interface Tunnel166
 no ip address
!
interface Tunnel167
 no ip address
!
interface Tunnel168
 no ip address
!
interface Tunnel169
 no ip address
!
interface Tunnel170
 no ip address
!
interface Tunnel171
 no ip address
!
interface Tunnel172
 no ip address
!
interface Tunnel173
 no ip address
!
interface Tunnel174
 no ip address
!
interface Tunnel175
 no ip address
!
interface Tunnel176
 no ip address
!
interface Tunnel177
 no ip address
!
interface Tunnel178
 no ip address
!
interface Tunnel179
 no ip address
!
interface Tunnel180
 no ip address
!
interface Tunnel181
 no ip address
!
interface Tunnel182
 no ip address
!
interface Tunnel183
 no ip address
!
interface Tunnel184
 no ip address
!
interface Tunnel185
 no ip address
!
interface Tunnel186
 no ip address
!
interface Tunnel187
 no ip address
!
interface Tunnel188
 no ip address
!
interface Tunnel189
 no ip address
!
interface Tunnel190
 no ip address
!
interface Tunnel191
 no ip address
!
interface Tunnel192
 no ip address
!
interface Tunnel193
 no ip address
!
interface Tunnel194
 no ip address
!
interface Tunnel195
 no ip address
!
interface Tunnel196
 no ip address
!
interface Tunnel197
 no ip address
!
interface Tunnel198
 no ip address
!
interface Tunnel199
 no ip address
!
interface Tunnel200
 no ip address
!
interface Tunnel201
 no ip address
!
interface Tunnel202
 no ip address
!
interface Tunnel203
 no ip address
!
interface Tunnel204
 no ip address
!
interface Tunnel205
 no ip address
!
interface Tunnel206
 no ip address
!
interface Tunnel207
 no ip address
!
interface Tunnel208
 no ip address
!
interface Tunnel209
 no ip address
!
interface Tunnel210
 no ip address
!
interface Tunnel211
 no ip address
!
interface Tunnel212
 no ip address
!
interface Tunnel213
 no ip address
!
interface Tunnel214
 no ip address
!
interface Tunnel215
 no ip address
!
interface Tunnel216
 no ip address
!
interface Tunnel217
 no ip address
!
interface Tunnel218
 no ip address
!
interface Tunnel219
 no ip address
!
interface Tunnel220
 no ip address
!
interface Tunnel221
 no ip address
!
interface Tunnel222
 no ip address
!
interface Tunnel223
 no ip address
!
interface Tunnel224
 no ip address
!
interface Tunnel225
 no ip address
!
interface Tunnel226
 no ip address
!
interface Tunnel227
 no ip address
!
interface Tunnel228
 no ip address
!
interface Tunnel229
 no ip address
!
interface Tunnel230
 no ip address
!
interface Tunnel231
 no ip address
!
interface Tunnel232
 no ip address
!
interface Tunnel233
 no ip address
!
interface Tunnel234
 no ip address
!
interface Tunnel235
 no ip address
!
interface Tunnel236
 no ip address
!
interface Tunnel237
 no ip address
!
interface Tunnel238
 no ip address
!
interface Tunnel239
 no ip address
!
interface Tunnel240
 no ip address
!
interface Tunnel241
 no ip address
!
interface Tunnel242
 no ip address
!
interface Tunnel243
 no ip address
!
interface Tunnel244
 no ip address
!
interface Tunnel245
 no ip address
!
interface Tunnel246
 no ip address
!
interface Tunnel247
 no ip address
!
interface Tunnel248
 no ip address
!
interface Tunnel249
 no ip address
!
interface Tunnel250
 no ip address
!
interface Tunnel251
 no ip address
!
interface Tunnel252
 no ip address
!
interface Tunnel253
 no ip address
!
interface Tunnel254
 no ip address
!
interface Tunnel255
 no ip address
!
interface Tunnel256
 no ip address
!
interface Tunnel257
 no ip address
!
interface Tunnel258
 no ip address
!
interface Tunnel259
 no ip address
!
interface Tunnel260
 no ip address
!
interface Tunnel261
 no ip address
!
interface Tunnel262
 no ip address
!
interface Tunnel263
 no ip address
!
interface Tunnel264
 no ip address
!
interface Tunnel265
 no ip address
!
interface Tunnel266
 no ip address
!
interface Tunnel267
 no ip address
!
interface Tunnel268
 no ip address
!
interface Tunnel269
 no ip address
!
interface Tunnel270
 no ip address
!
interface Tunnel271
 no ip address
!
interface Tunnel272
 no ip address
!
interface Tunnel273
 no ip address
!
interface Tunnel274
 no ip address
!
interface Tunnel275
 no ip address
!
interface Tunnel276
 no ip address
!
interface Tunnel277
 no ip address
!
interface Tunnel278
 no ip address
!
interface Tunnel279
 no ip address
!
interface Tunnel280
 no ip address
!
interface Tunnel281
 no ip address
!
interface Tunnel282
 no ip address
!
interface Tunnel283
 no ip address
!
interface Tunnel284
 no ip address
!
interface Tunnel285
 no ip address
!
interface Tunnel286
 no ip address
!
interface Tunnel287
 no ip address
!
interface Tunnel288
 no ip address
!
interface Tunnel289
 no ip address
!
interface Tunnel290
 no ip address
!
interface Tunnel291
 no ip address
!
interface Tunnel292
 no ip address
!
interface Tunnel293
 no ip address
!
interface Tunnel294
 no ip address
!
interface Tunnel295
 no ip address
!
interface Tunnel296
 no ip address
!
interface Tunnel297
 no ip address
!
interface Tunnel298
 no ip address
!
interface Tunnel299
 no ip address
!
interface Tunnel300
 no ip address
!
interface Tunnel301
 no ip address
!
interface Tunnel302
 no ip address
!
interface Tunnel303
 no ip address
!
interface Tunnel304
 no ip address
!
interface Tunnel305
 no ip address
!
interface Tunnel306
 no ip address
!
interface Tunnel307
 no ip address
!
interface Tunnel308
 no ip address
!
interface Tunnel309
 no ip address
!
interface Tunnel310
 no ip address
!
interface Tunnel311
 no ip address
!
interface Tunnel312
 no ip address
!
interface Tunnel313
 no ip address
!
interface Tunnel314
 no ip address
!
interface Tunnel315
 no ip address
!
interface Tunnel316
 no ip address
!
interface Tunnel317
 no ip address
!
interface Tunnel318
 no ip address
!
interface Tunnel319
 no ip address
!
interface Tunnel320
 no ip address
!
interface Tunnel321
 no ip address
!
interface Tunnel322
 no ip address
!
interface Tunnel323
 no ip address
!
interface Tunnel324
 no ip address
!
interface Tunnel325
 no ip address
!
interface Tunnel326
 no ip address
!
interface Tunnel327
 no ip address
!
interface Tunnel328
 no ip address
!
interface Tunnel329
 no ip address
!
interface Tunnel330
 no ip address
!
interface Tunnel331
 no ip address
!
interface Tunnel332
 no ip address
!
interface Tunnel333
 no ip address
!
interface Tunnel334
 no ip address
!
interface Tunnel335
 no ip address
!
interface Tunnel336
 no ip address
!
interface Tunnel337
 no ip address
!
interface Tunnel338
 no ip address
!
interface Tunnel339
 no ip address
!
interface Tunnel340
 no ip address
!
interface Tunnel341
 no ip address
!
interface Tunnel342
 no ip address
!
interface Tunnel343
 no ip address
!
interface Tunnel344
 no ip address
!
interface Tunnel345
 no ip address
!
interface Tunnel346
 no ip address
!
interface Tunnel347
 no ip address
!
interface Tunnel348
 no ip address
!
interface Tunnel349
 no ip address
!
interface Tunnel350
 no ip address
!
interface Tunnel351
 no ip address
!
interface Tunnel352
 no ip address
!
interface Tunnel353
 no ip address
!
interface Tunnel354
 no ip address
!
interface Tunnel355
 no ip address
!
interface Tunnel356
 no ip address
!
interface Tunnel357
 no ip address
!
interface Tunnel358
 no ip address
!
interface Tunnel359
 no ip address
!
interface Tunnel360
 no ip address
!
interface Tunnel361
 no ip address
!
interface Tunnel362
 no ip address
!
interface Tunnel363
 no ip address
!
interface Tunnel364
 no ip address
!
interface Tunnel365
 no ip address
!
interface Tunnel366
 no ip address
!
interface Tunnel367
 no ip address
!
interface Tunnel368
 no ip address
!
interface Tunnel369
 no ip address
!
interface Tunnel370
 no ip address
!
interface Tunnel371
 no ip address
!
interface Tunnel372
 no ip address
!
interface Tunnel373
 no ip address
!
interface Tunnel374
 no ip address
!
interface Tunnel375
 no ip address
!
interface Tunnel376
 no ip address
!
interface Tunnel377
 no ip address
!
interface Tunnel378
 no ip address
!
interface Tunnel379
 no ip address
!
interface Tunnel380
 no ip address
!
interface Tunnel381
 no ip address
!
interface Tunnel382
 no ip address
!
interface Tunnel383
 no ip address
!
interface Tunnel384
 no ip address
!
interface Tunnel385
 no ip address
!
interface Tunnel386
 no ip address
!
interface Tunnel387
 no ip address
!
interface Tunnel388
 no ip address
!
interface Tunnel389
 no ip address
!
interface Tunnel390
 no ip address
!
interface Tunnel391
 no ip address
!
interface Tunnel392
 no ip address
!
interface Tunnel393
 no ip address
!
interface Tunnel394
 no ip address
!
interface Tunnel395
 no ip address
!
interface Tunnel396
 no ip address
!
interface Tunnel397
 no ip address
!
interface Tunnel398
 no ip address
!
interface Tunnel399
 no ip address
!
interface Tunnel400
 no ip address
!
interface Tunnel401
 no ip address
!
interface Tunnel402
 no ip address
!
interface Tunnel403
 no ip address
!
interface Tunnel404
 no ip address
!
interface Tunnel405
 no ip address
!
interface Tunnel406
 no ip address
!
interface Tunnel407
 no ip address
!
interface Tunnel408
 no ip address
!
interface Tunnel409
 no ip address
!
interface Tunnel410
 no ip address
!
interface Tunnel411
 no ip address
!
interface Tunnel412
 no ip address
!
interface Tunnel413
 no ip address
!
interface Tunnel414
 no ip address
!
interface Tunnel415
 no ip address
!
interface Tunnel416
 no ip address
!
interface Tunnel417
 no ip address
!
interface Tunnel418
 no ip address
!
interface Tunnel419
 no ip address
!
interface Tunnel420
 no ip address
!
interface Tunnel421
 no ip address
!
interface Tunnel422
 no ip address
!
interface Tunnel423
 no ip address
!
interface Tunnel424
 no ip address
!
interface Tunnel425
 no ip address
!
interface Tunnel426
 no ip address
!
interface Tunnel427
 no ip address
!
interface Tunnel428
 no ip address
!
interface Tunnel429
 no ip address
!
interface Tunnel430
 no ip address
!
interface Tunnel431
 no ip address
!
interface Tunnel432
 no ip address
!
interface Tunnel433
 no ip address
!
interface Tunnel434
 no ip address
!
interface Tunnel435
 no ip address
!
interface Tunnel436
 no ip address
!
interface Tunnel437
 no ip address
!
interface Tunnel438
 no ip address
!
interface Tunnel439
 no ip address
!
interface Tunnel440
 no ip address
!
interface Tunnel441
 no ip address
!
interface Tunnel442
 no ip address
!
interface Tunnel443
 no ip address
!
interface Tunnel444
 no ip address
!
interface Tunnel445
 no ip address
!
interface Tunnel446
 no ip address
!
interface Tunnel447
 no ip address
!
interface Tunnel448
 no ip address
!
interface Tunnel449
 no ip address
!
interface Tunnel450
 no ip address
!
interface Tunnel451
 no ip address
!
interface Tunnel452
 no ip address
!
interface Tunnel453
 no ip address
!
interface Tunnel454
 no ip address
!
interface Tunnel455
 no ip address
!
interface Tunnel456
 no ip address
!
interface Tunnel457
 no ip address
!
interface Tunnel458
 no ip address
!
interface Tunnel459
 no ip address
!
interface Tunnel460
 no ip address
!
interface Tunnel461
 no ip address
!
interface Tunnel462
 no ip address
!
interface Tunnel463
 no ip address
!
interface Tunnel464
 no ip address
!
interface Tunnel465
 no ip address
!
interface Tunnel466
 no ip address
!
interface Tunnel467
 no ip address
!
interface Tunnel468
 no ip address
!
interface Tunnel469
 no ip address
!
interface Tunnel470
 no ip address
!
interface Tunnel471
 no ip address
!
interface Tunnel472
 no ip address
!
interface Tunnel473
 no ip address
!
interface Tunnel474
 no ip address
!
interface Tunnel475
 no ip address
!
interface Tunnel476
 no ip address
!
interface Tunnel477
 no ip address
!
interface Tunnel478
 no ip address
!
interface Tunnel479
 no ip address
!
interface Tunnel480
 no ip address
!
interface Tunnel481
 no ip address
!
interface Tunnel482
 no ip address
!
interface Tunnel483
 no ip address
!
interface Tunnel484
 no ip address
!
interface Tunnel485
 no ip address
!
interface Tunnel486
 no ip address
!
interface Tunnel487
 no ip address
!
interface Tunnel488
 no ip address
!
interface Tunnel489
 no ip address
!
interface Tunnel490
 no ip address
!
interface Tunnel491
 no ip address
!
interface Tunnel492
 no ip address
!
interface Tunnel493
 no ip address
!
interface Tunnel494
 no ip address
!
interface Tunnel495
 no ip address
!
interface Tunnel496
 no ip address
!
interface Tunnel497
 no ip address
!
interface Tunnel498
 no ip address
!
interface Tunnel499
 no ip address
!
interface Tunnel500
 no ip address
!
interface Tunnel501
 no ip address
!
interface Tunnel502
 no ip address
!
interface Tunnel503
 no ip address
!
interface Tunnel504
 no ip address
!
interface Tunnel505
 no ip address
!
interface Tunnel506
 no ip address
!
interface Tunnel507
 no ip address
!
interface Tunnel508
 no ip address
!
interface Tunnel509
 no ip address
!
interface Tunnel510
 no ip address
!
interface Tunnel511
 no ip address
!
interface Tunnel512
 no ip address
!
interface Tunnel513
 no ip address
!
interface Tunnel514
 no ip address
!
interface Tunnel515
 no ip address
!
interface Tunnel516
 no ip address
!
interface Tunnel517
 no ip address
!
interface Tunnel518
 no ip address
!
interface Tunnel519
 no ip address
!
interface Tunnel520
 no ip address
!
interface Tunnel521
 no ip address
!
interface Tunnel522
 no ip address
!
interface Tunnel523
 no ip address
!
interface Tunnel524
 no ip address
!
interface Tunnel525
 no ip address
!
interface Tunnel526
 no ip address
!
interface Tunnel527
 no ip address
!
interface Tunnel528
 no ip address
!
interface Tunnel529
 no ip address
!
interface Tunnel530
 no ip address
!
interface Tunnel531
 no ip address
!
interface Tunnel532
 no ip address
!
interface Tunnel533
 no ip address
!
interface Tunnel534
 no ip address
!
interface Tunnel535
 no ip address
!
interface Tunnel536
 no ip address
!
interface Tunnel537
 no ip address
!
interface Tunnel538
 no ip address
!
interface Tunnel539
 no ip address
!
interface Tunnel540
 no ip address
!
interface Tunnel541
 no ip address
!
interface Tunnel542
 no ip address
!
interface Tunnel543
 no ip address
!
interface Tunnel544
 no ip address
!
interface Tunnel545
 no ip address
!
interface Tunnel546
 no ip address
!
interface Tunnel547
 no ip address
!
interface Tunnel548
 no ip address
!
interface Tunnel549
 no ip address
!
interface Tunnel550
 no ip address
!
interface Tunnel551
 no ip address
!
interface Tunnel552
 no ip address
!
interface Tunnel553
 no ip address
!
interface Tunnel554
 no ip address
!
interface Tunnel555
 no ip address
!
interface Tunnel556
 no ip address
!
interface Tunnel557
 no ip address
!
interface Tunnel558
 no ip address
!
interface Tunnel559
 no ip address
!
interface Tunnel560
 no ip address
!
interface Tunnel561
 no ip address
!
interface Tunnel562
 no ip address
!
interface Tunnel563
 no ip address
!
interface Tunnel564
 no ip address
!
interface Tunnel565
 no ip address
!
interface Tunnel566
 no ip address
!
interface Tunnel567
 no ip address
!
interface Tunnel568
 no ip address
!
interface Tunnel569
 no ip address
!
interface Tunnel570
 no ip address
!
interface Tunnel571
 no ip address
!
interface Tunnel572
 no ip address
!
interface Tunnel573
 no ip address
!
interface Tunnel574
 no ip address
!
interface Tunnel575
 no ip address
!
interface Tunnel576
 no ip address
!
interface Tunnel577
 no ip address
!
interface Tunnel578
 no ip address
!
interface Tunnel579
 no ip address
!
interface Tunnel580
 no ip address
!
interface Tunnel581
 no ip address
!
interface Tunnel582
 no ip address
!
interface Tunnel583
 no ip address
!
interface Tunnel584
 no ip address
!
interface Tunnel585
 no ip address
!
interface Tunnel586
 no ip address
!
interface Tunnel587
 no ip address
!
interface Tunnel588
 no ip address
!
interface Tunnel589
 no ip address
!
interface Tunnel590
 no ip address
!
interface Tunnel591
 no ip address
!
interface Tunnel592
 no ip address
!
interface Tunnel593
 no ip address
!
interface Tunnel594
 no ip address
!
interface Tunnel595
 no ip address
!
interface Tunnel596
 no ip address
!
interface Tunnel597
 no ip address
!
interface Tunnel598
 no ip address
!
interface Tunnel599
 no ip address
!
interface Tunnel600
 no ip address
!
interface Tunnel601
 no ip address
!
interface Tunnel602
 no ip address
!
interface Tunnel603
 no ip address
!
interface Tunnel604
 no ip address
!
interface Tunnel605
 no ip address
!
interface Tunnel606
 no ip address
!
interface Tunnel607
 no ip address
!
interface Tunnel608
 no ip address
!
interface Tunnel609
 no ip address
!
interface Tunnel610
 no ip address
!
interface Tunnel611
 no ip address
!
interface Tunnel612
 no ip address
!
interface Tunnel613
 no ip address
!
interface Tunnel614
 no ip address
!
interface Tunnel615
 no ip address
!
interface Tunnel616
 no ip address
!
interface Tunnel617
 no ip address
!
interface Tunnel618
 no ip address
!
interface Tunnel619
 no ip address
!
interface Tunnel620
 no ip address
!
interface Tunnel621
 no ip address
!
interface Tunnel622
 no ip address
!
interface Tunnel623
 no ip address
!
interface Tunnel624
 no ip address
!
interface Tunnel625
 no ip address
!
interface Tunnel626
 no ip address
!
interface Tunnel627
 no ip address
!
interface Tunnel628
 no ip address
!
interface Tunnel629
 no ip address
!
interface Tunnel630
 no ip address
!
interface Tunnel631
 no ip address
!
interface Tunnel632
 no ip address
!
interface Tunnel633
 no ip address
!
interface Tunnel634
 no ip address
!
interface Tunnel635
 no ip address
!
interface Tunnel636
 no ip address
!
interface Tunnel637
 no ip address
!
interface Tunnel638
 no ip address
!
interface Tunnel639
 no ip address
!
interface Tunnel640
 no ip address
!
interface Tunnel641
 no ip address
!
interface Tunnel642
 no ip address
!
interface Tunnel643
 no ip address
!
interface Tunnel644
 no ip address
!
interface Tunnel645
 no ip address
!
interface Tunnel646
 no ip address
!
interface Tunnel647
 no ip address
!
interface Tunnel648
 no ip address
!
interface Tunnel649
 no ip address
!
interface Tunnel650
 no ip address
!
interface Tunnel651
 no ip address
!
interface Tunnel652
 no ip address
!
interface Tunnel653
 no ip address
!
interface Tunnel654
 no ip address
!
interface Tunnel655
 no ip address
!
interface Tunnel656
 no ip address
!
interface Tunnel657
 no ip address
!
interface Tunnel658
 no ip address
!
interface Tunnel659
 no ip address
!
interface Tunnel660
 no ip address
!
interface Tunnel661
 no ip address
!
interface Tunnel662
 no ip address
!
interface Tunnel663
 no ip address
!
interface Tunnel664
 no ip address
!
interface Tunnel665
 no ip address
!
interface Tunnel666
 no ip address
!
interface Tunnel667
 no ip address
!
interface Tunnel668
 no ip address
!
interface Tunnel669
 no ip address
!
interface Tunnel670
 no ip address
!
interface Tunnel671
 no ip address
!
interface Tunnel672
 no ip address
!
interface Tunnel673
 no ip address
!
interface Tunnel674
 no ip address
!
interface Tunnel675
 no ip address
!
interface Tunnel676
 no ip address
!
interface Tunnel677
 no ip address
!
interface Tunnel678
 no ip address
!
interface Tunnel679
 no ip address
!
interface Tunnel680
 no ip address
!
interface Tunnel681
 no ip address
!
interface Tunnel682
 no ip address
!
interface Tunnel683
 no ip address
!
interface Tunnel684
 no ip address
!
interface Tunnel685
 no ip address
!
interface Tunnel686
 no ip address
!
interface Tunnel687
 no ip address
!
interface Tunnel688
 no ip address
!
interface Tunnel689
 no ip address
!
interface Tunnel690
 no ip address
!
interface Tunnel691
 no ip address
!
interface Tunnel692
 no ip address
!
interface Tunnel693
 no ip address
!
interface Tunnel694
 no ip address
!
interface Tunnel695
 no ip address
!
interface Tunnel696
 no ip address
!
interface Tunnel697
 no ip address
!
interface Tunnel698
 no ip address
!
interface Tunnel699
 no ip address
!
interface Tunnel700
 no ip address
!
interface Tunnel701
 no ip address
!
interface Tunnel702
 no ip address
!
interface Tunnel703
 no ip address
!
interface Tunnel704
 no ip address
!
interface Tunnel705
 no ip address
!
interface Tunnel706
 no ip address
!
interface Tunnel707
 no ip address
!
interface Tunnel708
 no ip address
!
interface Tunnel709
 no ip address
!
interface Tunnel710
 no ip address
!
interface Tunnel711
 no ip address
!
interface Tunnel712
 no ip address
!
interface Tunnel713
 no ip address
!
interface Tunnel714
 no ip address
!
interface Tunnel715
 no ip address
!
interface Tunnel716
 no ip address
!
interface Tunnel717
 no ip address
!
interface Tunnel718
 no ip address
!
interface Tunnel719
 no ip address
!
interface Tunnel720
 no ip address
!
interface Tunnel721
 no ip address
!
interface Tunnel722
 no ip address
!
interface Tunnel723
 no ip address
!
interface Tunnel724
 no ip address
!
interface Tunnel725
 no ip address
!
interface Tunnel726
 no ip address
!
interface Tunnel727
 no ip address
!
interface Tunnel728
 no ip address
!
interface Tunnel729
 no ip address
!
interface Tunnel730
 no ip address
!
interface Tunnel731
 no ip address
!
interface Tunnel732
 no ip address
!
interface Tunnel733
 no ip address
!
interface Tunnel734
 no ip address
!
interface Tunnel735
 no ip address
!
interface Tunnel736
 no ip address
!
interface Tunnel737
 no ip address
!
interface Tunnel738
 no ip address
!
interface Tunnel739
 no ip address
!
interface Tunnel740
 no ip address
!
interface Tunnel741
 no ip address
!
interface Tunnel742
 no ip address
!
interface Tunnel743
 no ip address
!
interface Tunnel744
 no ip address
!
interface Tunnel745
 no ip address
!
interface Tunnel746
 no ip address
!
interface Tunnel747
 no ip address
!
interface Tunnel748
 no ip address
!
interface Tunnel749
 no ip address
!
interface Tunnel750
 no ip address
!
interface Tunnel751
 no ip address
!
interface Tunnel752
 no ip address
!
interface Tunnel753
 no ip address
!
interface Tunnel754
 no ip address
!
interface Tunnel755
 no ip address
!
interface Tunnel756
 no ip address
!
interface Tunnel757
 no ip address
!
interface Tunnel758
 no ip address
!
interface Tunnel759
 no ip address
!
interface Tunnel760
 no ip address
!
interface Tunnel761
 no ip address
!
interface Tunnel762
 no ip address
!
interface Tunnel763
 no ip address
!
interface Tunnel764
 no ip address
!
interface Tunnel765
 no ip address
!
interface Tunnel766
 no ip address
!
interface Tunnel767
 no ip address
!
interface Tunnel768
 no ip address
!
interface Tunnel769
 no ip address
!
interface Tunnel770
 no ip address
!
interface Tunnel771
 no ip address
!
interface Tunnel772
 no ip address
!
interface Tunnel773
 no ip address
!
interface Tunnel774
 no ip address
!
interface Tunnel775
 no ip address
!
interface Tunnel776
 no ip address
!
interface Tunnel777
 no ip address
!
interface Tunnel778
 no ip address
!
interface Tunnel779
 no ip address
!
interface Tunnel780
 no ip address
!
interface Tunnel781
 no ip address
!
interface Tunnel782
 no ip address
!
interface Tunnel783
 no ip address
!
interface Tunnel784
 no ip address
!
interface Tunnel785
 no ip address
!
interface Tunnel786
 no ip address
!
interface Tunnel787
 no ip address
!
interface Tunnel788
 no ip address
!
interface Tunnel789
 no ip address
!
interface Tunnel790
 no ip address
!
interface Tunnel791
 no ip address
!
interface Tunnel792
 no ip address
!
interface Tunnel793
 no ip address
!
interface Tunnel794
 no ip address
!
interface Tunnel795
 no ip address
!
interface Tunnel796
 no ip address
!
interface Tunnel797
 no ip address
!
interface Tunnel798
 no ip address
!
interface Tunnel799
 no ip address
!
interface Tunnel800
 no ip address
!
interface Tunnel801
 no ip address
!
interface Tunnel802
 no ip address
!
interface Tunnel803
 no ip address
!
interface Tunnel804
 no ip address
!
interface Tunnel805
 no ip address
!
interface Tunnel806
 no ip address
!
interface Tunnel807
 no ip address
!
interface Tunnel808
 no ip address
!
interface Tunnel809
 no ip address
!
interface Tunnel810
 no ip address
!
interface Tunnel811
 no ip address
!
interface Tunnel812
 no ip address
!
interface Tunnel813
 no ip address
!
interface Tunnel814
 no ip address
!
interface Tunnel815
 no ip address
!
interface Tunnel816
 no ip address
!
interface Tunnel817
 no ip address
!
interface Tunnel818
 no ip address
!
interface Tunnel819
 no ip address
!
interface Tunnel820
 no ip address
!
interface Tunnel821
 no ip address
!
interface Tunnel822
 no ip address
!
interface Tunnel823
 no ip address
!
interface Tunnel824
 no ip address
!
interface Tunnel825
 no ip address
!
interface Tunnel826
 no ip address
!
interface Tunnel827
 no ip address
!
interface Tunnel828
 no ip address
!
interface Tunnel829
 no ip address
!
interface Tunnel830
 no ip address
!
interface Tunnel831
 no ip address
!
interface Tunnel832
 no ip address
!
interface Tunnel833
 no ip address
!
interface Tunnel834
 no ip address
!
interface Tunnel835
 no ip address
!
interface Tunnel836
 no ip address
!
interface Tunnel837
 no ip address
!
interface Tunnel838
 no ip address
!
interface Tunnel839
 no ip address
!
interface Tunnel840
 no ip address
!
interface Tunnel841
 no ip address
!
interface Tunnel842
 no ip address
!
interface Tunnel843
 no ip address
!
interface Tunnel844
 no ip address
!
interface Tunnel845
 no ip address
!
interface Tunnel846
 no ip address
!
interface Tunnel847
 no ip address
!
interface Tunnel848
 no ip address
!
interface Tunnel849
 no ip address
!
interface Tunnel850
 no ip address
!
interface Tunnel851
 no ip address
!
interface Tunnel852
 no ip address
!
interface Tunnel853
 no ip address
!
interface Tunnel854
 no ip address
!
interface Tunnel855
 no ip address
!
interface Tunnel856
 no ip address
!
interface Tunnel857
 no ip address
!
interface Tunnel858
 no ip address
!
interface Tunnel859
 no ip address
!
interface Tunnel860
 no ip address
!
interface Tunnel861
 no ip address
!
interface Tunnel862
 no ip address
!
interface Tunnel863
 no ip address
!
interface Tunnel864
 no ip address
!
interface Tunnel865
 no ip address
!
interface Tunnel866
 no ip address
!
interface Tunnel867
 no ip address
!
interface Tunnel868
 no ip address
!
interface Tunnel869
 no ip address
!
interface Tunnel870
 no ip address
!
interface Tunnel871
 no ip address
!
interface Tunnel872
 no ip address
!
interface Tunnel873
 no ip address
!
interface Tunnel874
 no ip address
!
interface Tunnel875
 no ip address
!
interface Tunnel876
 no ip address
!
interface Tunnel877
 no ip address
!
interface Tunnel878
 no ip address
!
interface Tunnel879
 no ip address
!
interface Tunnel880
 no ip address
!
interface Tunnel881
 no ip address
!
interface Tunnel882
 no ip address
!
interface Tunnel883
 no ip address
!
interface Tunnel884
 no ip address
!
interface Tunnel885
 no ip address
!
interface Tunnel886
 no ip address
!
interface Tunnel887
 no ip address
!
interface Tunnel888
 no ip address
!
interface Tunnel889
 no ip address
!
interface Tunnel890
 no ip address
!
interface Tunnel891
 no ip address
!
interface Tunnel892
 no ip address
!
interface Tunnel893
 no ip address
!
interface Tunnel894
 no ip address
!
interface Tunnel895
 no ip address
!
interface Tunnel896
 no ip address
!
interface Tunnel897
 no ip address
!
interface Tunnel898
 no ip address
!
interface Tunnel899
 no ip address
!
interface Tunnel900
 no ip address
!
interface Tunnel901
 no ip address
!
interface Tunnel902
 no ip address
!
interface Tunnel903
 no ip address
!
interface Tunnel904
 no ip address
!
interface Tunnel905
 no ip address
!
interface Tunnel906
 no ip address
!
interface Tunnel907
 no ip address
!
interface Tunnel908
 no ip address
!
interface Tunnel909
 no ip address
!
interface Tunnel910
 no ip address
!
interface Tunnel911
 no ip address
!
interface Tunnel912
 no ip address
!
interface Tunnel913
 no ip address
!
interface Tunnel914
 no ip address
!
interface Tunnel915
 no ip address
!
interface Tunnel916
 no ip address
!
interface Tunnel917
 no ip address
!
interface Tunnel918
 no ip address
!
interface Tunnel919
 no ip address
!
interface Tunnel920
 no ip address
!
interface Tunnel921
 no ip address
!
interface Tunnel922
 no ip address
!
interface Tunnel923
 no ip address
!
interface Tunnel924
 no ip address
!
interface Tunnel925
 no ip address
!
interface Tunnel926
 no ip address
!
interface Tunnel927
 no ip address
!
interface Tunnel928
 no ip address
!
interface Tunnel929
 no ip address
!
interface Tunnel930
 no ip address
!
interface Tunnel931
 no ip address
!
interface Tunnel932
 no ip address
!
interface Tunnel933
 no ip address
!
interface Tunnel934
 no ip address
!
interface Tunnel935
 no ip address
!
interface Tunnel936
 no ip address
!
interface Tunnel937
 no ip address
!
interface Tunnel938
 no ip address
!
interface Tunnel939
 no ip address
!
interface Tunnel940
 no ip address
!
interface Tunnel941
 no ip address
!
interface Tunnel942
 no ip address
!
interface Tunnel943
 no ip address
!
interface Tunnel944
 no ip address
!
interface Tunnel945
 no ip address
!
interface Tunnel946
 no ip address
!
interface Tunnel947
 no ip address
!
interface Tunnel948
 no ip address
!
interface Tunnel949
 no ip address
!
interface Tunnel950
 no ip address
!
interface Tunnel951
 no ip address
!
interface Tunnel952
 no ip address
!
interface Tunnel953
 no ip address
!
interface Tunnel954
 no ip address
!
interface Tunnel955
 no ip address
!
interface Tunnel956
 no ip address
!
interface Tunnel957
 no ip address
!
interface Tunnel958
 no ip address
!
interface Tunnel959
 no ip address
!
interface Tunnel960
 no ip address
!
interface Tunnel961
 no ip address
!
interface Tunnel962
 no ip address
!
interface Tunnel963
 no ip address
!
interface Tunnel964
 no ip address
!
interface Tunnel965
 no ip address
!
interface Tunnel966
 no ip address
!
interface Tunnel967
 no ip address
!
interface Tunnel968
 no ip address
!
interface Tunnel969
 no ip address
!
interface Tunnel970
 no ip address
!
interface Tunnel971
 no ip address
!
interface Tunnel972
 no ip address
!
interface Tunnel973
 no ip address
!
interface Tunnel974
 no ip address
!
interface Tunnel975
 no ip address
!
interface Tunnel976
 no ip address
!
interface Tunnel977
 no ip address
!
interface Tunnel978
 no ip address
!
interface Tunnel979
 no ip address
!
interface Tunnel980
 no ip address
!
interface Tunnel981
 no ip address
!
interface Tunnel982
 no ip address
!
interface Tunnel983
 no ip address
!
interface Tunnel984
 no ip address
!
interface Tunnel985
 no ip address
!
interface Tunnel986
 no ip address
!
interface Tunnel987
 no ip address
!
interface Tunnel988
 no ip address
!
interface Tunnel989
 no ip address
!
interface Tunnel990
 no ip address
!
interface Tunnel991
 no ip address
!
interface Tunnel992
 no ip address
!
interface Tunnel993
 no ip address
!
interface Tunnel994
 no ip address
!
interface Tunnel995
 no ip address
!
interface Tunnel996
 no ip address
!
interface Tunnel997
 no ip address
!
interface Tunnel998
 no ip address
!
interface Tunnel999
 no ip address
!
interface Tunnel1000
 no ip address
!
interface GigabitEthernet0/0/0
 no ip address
 shutdown
 negotiation auto
!
interface GigabitEthernet0/0/1
 no ip address
 shutdown
 negotiation auto
!
interface GigabitEthernet0/0/2
 no ip address
 negotiation auto
!
interface GigabitEthernet0/0/2.1
 encapsulation dot1Q 100
 vrf forwarding C1_0
 ip address <removed>!
interface GigabitEthernet0/0/3
 no ip address
 shutdown
 negotiation auto
!
interface GigabitEthernet0/0/4
 no ip address
 shutdown
 negotiation auto
!
interface GigabitEthernet0/0/5
 no ip address
 shutdown
 negotiation auto
!
interface GigabitEthernet0/0/6
 no ip address
 shutdown
 negotiation auto
!
interface GigabitEthernet0/0/7
 no ip address
 shutdown
 negotiation auto
!
interface TenGigabitEthernet0/1/0
 ip address <removed> no negotiation auto
!
interface TenGigabitEthernet0/1/1
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/2
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/3
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/4
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/5
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/6
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/7
 no ip address
 shutdown
 no negotiation auto
!
interface GigabitEthernet0
 vrf forwarding Mgmt-intf
 ip address <removed> negotiation auto
!
router ospf 100
 network 50.50.50.0 0.0.0.255 area 0
 network 208.200.0.2 0.0.0.0 area 0
!
router bgp 64001
 bgp router-id 111.111.111.111
 bgp log-neighbor-changes
 !
 address-family ipv4 vrf C1_0
  network 192.0.0.0
  redistribute connected
  neighbor 192.0.1.1 remote-as 64001
  neighbor 192.0.1.1 activate
 exit-address-family
!
ip forward-protocol nd
!
ip tftp source-interface GigabitEthernet0
ip tftp blocksize 8192
ip http server
ip http authentication local
ip http secure-server
ip ssh bulk-mode 131072
ip route vrf Mgmt-intf 202.153.144.90 255.255.255.255 9.45.0.1
ip route vrf Mgmt-intf 202.153.144.90 255.255.255.255 9.41.0.1
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
line con 0
 exec-timeout 0 0
 stopbits 1
line aux 0
line vty 0 4
 login
 transport input ssh
!
call-home
 ! If contact email address in call-home is configured as sch-smart-licensing@cisco.com
 ! the email address configured in Cisco Smart License Portal will be used as contact email address to send SCH notifications.
 contact-email-addr sch-smart-licensing@cisco.com
 profile "CiscoTAC-1"
  active
  destination transport-method http
!
!
!
!
!
!
end

IPv6 yang commands

Configuration example for hub1

version 17.6
service timestamps debug datetime msec
service timestamps log datetime msec
service internal
service call-home
platform qfp utilization monitor load 80
platform punt-keepalive disable-kernel-core
!
hostname DC1-Hub1
!
boot-start-marker
boot system bootflash:c8000aep-universalk9.DC1-Hub1.dmvpn_soak.SSA.bin
boot-end-marker
!
!
vrf definition Mgmt-intf
 !
 address-family ipv4
 exit-address-family
 !
 address-family ipv6
 exit-address-family
!
no logging console
!
no aaa new-model
!
!
!
!
!
!
!
!
!
!
!
!
login on-success log
ipv6 unicast-routing
!
!
!
!
!
!
!
subscriber templating
! 
! 
! 
! 
!
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
crypto pki trustpoint TP-self-signed-2134189379
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-2134189379
 revocation-check none
 rsakeypair TP-self-signed-2134189379
!
crypto pki trustpoint SLA-TrustPoint
 enrollment pkcs12
 revocation-check crl
!
crypto pki trustpoint client
 enrollment url http://[3001:0:0:1::1]:80
 subject-name CN=Hub
 revocation-check none
 rsakeypair client
!
!
!
license udi pid C8500-12X4QC sn TTM231100CF
license boot level network-advantage addon dna-advantage
no memory lite
memory free low-watermark processor 984138
hw-module subslot 0/1 mode 10G
hw-module subslot 0/2 mode 40G
hw-module subslot 0/2 breakout none port all
!
!
spanning-tree extend system-id
diagnostic bootup level minimal
!
!
redundancy
 mode none
!
!
crypto ikev2 proposal IKEv2_PROPOSAL 
 encryption aes-gcm-256
 prf sha512
 group 15
!
crypto ikev2 policy IKEv2_POLICY 
 proposal IKEv2_PROPOSAL
!
!
crypto ikev2 profile IKEv2_PROFILE
 match identity remote address ::/0
 authentication remote rsa-sig
 authentication local rsa-sig
 pki trustpoint client
!
crypto ikev2 dpd 60 3 on-demand
crypto ikev2 limit max-in-negotation-sa 10 outgoing
!
!
!
!
! 
!
!
!
!
!
!
crypto ipsec transform-set TRANSFORM_SET esp-gcm 256 
 mode transport
!
crypto ipsec profile IPSec_PROFILE
 set transform-set TRANSFORM_SET 
 set pfs group15
 set ikev2-profile IKEv2_PROFILE
!
!
!
!
!
!
! 
! 
!
!
interface Loopback1
 no ip address
 ipv6 address <removed>
 ipv6 enable
 ospfv3 100 ipv6 area 0
!
interface Loopback2
 no ip address
 ipv6 address <removed>
 ipv6 enable
 ospfv3 100 ipv6 area 0
!
interface Tunnel1
 no ip address
 ipv6 address <removed> link-local
 ipv6 address <removed>
 ipv6 enable
 ipv6 mtu 1400
 ipv6 tcp adjust-mss 1200
 ipv6 nhrp network-id 1000
 ipv6 nhrp holdtime 3600
 ipv6 nhrp redirect
 cts sgt inline
 bfd interval 1000 min_rx 1000 multiplier 5
 tunnel source Loopback1
 tunnel mode gre multipoint ipv6
 tunnel path-mtu-discovery
 tunnel protection ipsec profile IPSec_PROFILE
!
interface Tunnel11
 no ip address
 ipv6 address <removed> link-local
 ipv6 address <removed>
 ipv6 enable
 ipv6 mtu 1400
 ipv6 tcp adjust-mss 1200
 ipv6 nhrp network-id 1000
 ipv6 nhrp holdtime 3600
 ipv6 nhrp nhs 4003::1 nbma 4004:0:0:1::1 multicast
 cts sgt inline
 bfd interval 1000 min_rx 1000 multiplier 5
 tunnel source Loopback2
 tunnel mode gre multipoint ipv6
 tunnel path-mtu-discovery
 tunnel protection ipsec profile IPSec_PROFILE
!
interface TenGigabitEthernet0/0/0
 no ip address
 no negotiation auto
!
interface TenGigabitEthernet0/0/1
 no ip address
 no negotiation auto
!
interface TenGigabitEthernet0/0/2
 no ip address
 no negotiation auto
!
interface TenGigabitEthernet0/0/3
 no ip address
 no negotiation auto
!
interface TenGigabitEthernet0/0/4
 no ip address
 no negotiation auto
!
interface TenGigabitEthernet0/0/5
 no ip address
 no negotiation auto
!
interface TenGigabitEthernet0/0/6
 no ip address
 no negotiation auto
!
interface TenGigabitEthernet0/0/7
 no ip address
 no negotiation auto
!
interface TenGigabitEthernet0/1/0
 no ip address
 no negotiation auto
 ipv6 address <removed>
 ipv6 enable
 ospfv3 100 ipv6 area 0
!
interface TenGigabitEthernet0/1/1
 no ip address
 no negotiation auto
!
interface TenGigabitEthernet0/1/2
 no ip address
 no negotiation auto
!
interface TenGigabitEthernet0/1/3
 no ip address
 no negotiation auto
!
interface FortyGigabitEthernet0/2/0
 no ip address
 shutdown
 no negotiation auto
!
interface FortyGigabitEthernet0/2/4
 no ip address
 shutdown
 no negotiation auto
!
interface FortyGigabitEthernet0/2/8
 no ip address
 shutdown
 no negotiation auto
!
interface GigabitEthernet0
 vrf forwarding Mgmt-intf
 ip address <removed> negotiation auto
!
router ospfv3 100
 !
 address-family ipv6 unicast
  router-id 1.1.1.2
 exit-address-family
!
router bgp 65000
 bgp router-id 1.1.1.2
 bgp log-neighbor-changes
 bgp listen range 2003::/48 peer-group DMVPN_SPOKES
 bgp listen limit 10000
 timers bgp 10 30
 neighbor DMVPN_SPOKES peer-group
 neighbor DMVPN_SPOKES remote-as 65001
 neighbor 4003::1 remote-as 64999
 !
 address-family ipv4
  neighbor DMVPN_SPOKES activate
  no neighbor 4003::1 activate
 exit-address-family
 !
 address-family ipv6
  aggregate-address 3700::/48 summary-only
  aggregate-address 3500::/48 summary-only
  aggregate-address 3300::/48 summary-only
  aggregate-address 3100::/48 summary-only
  neighbor DMVPN_SPOKES activate
  neighbor DMVPN_SPOKES next-hop-self
  neighbor DMVPN_SPOKES as-override split-horizon
  neighbor 4003::1 activate
  neighbor 4003::1 next-hop-self
  neighbor 4003::1 as-override split-horizon
 exit-address-family
!
ip http server
ip http authentication local
ip http secure-server
ip forward-protocol nd
!
ip tftp source-interface GigabitEthernet0
ip tftp blocksize 8192
ip route vrf Mgmt-intf 202.153.144.25 255.255.255.255 9.41.0.1
ip route vrf Mgmt-intf 202.153.144.90 255.255.255.255 9.41.0.1
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
line con 0
 exec-timeout 0 0
 stopbits 1
line aux 0
line vty 0 4
 exec-timeout 0 0
 login
 transport input ssh
!
call-home
 ! If contact email address in call-home is configured as sch-smart-licensing@cisco.com
 ! the email address configured in Cisco Smart License Portal will be used as contact email address to send SCH notifications.
 contact-email-addr sch-smart-licensing@cisco.com
 profile "CiscoTAC-1"
  active
  destination transport-method http
!
!
!
!
!
!
end

Configuration example for hub2

version 17.6
service timestamps debug datetime msec
service timestamps log datetime msec
service internal
service call-home
platform qfp utilization monitor load 80
platform punt-keepalive disable-kernel-core
!
hostname regional_hub2
!
boot-start-marker
boot system bootflash:asr1001x-universalk9.BLD_V176_THROTTLE_LATEST_20220713_231940.SSA.bin
boot-end-marker
!
!
vrf definition Mgmt-intf
 !
 address-family ipv4
 exit-address-family
 !
 address-family ipv6
 exit-address-family
!
no logging console
!
no aaa new-model
clock timezone IST 5 30
!
!
!
!
!
!
!
!
!
!
!
!
login on-success log
ipv6 unicast-routing
!
!
!
!
!
!
!
subscriber templating
! 
! 
! 
! 
!
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
crypto pki server rootca
 no database archive
 grant auto
 hash sha256
!
crypto pki trustpoint SLA-TrustPoint
 enrollment pkcs12
 revocation-check crl
!
crypto pki trustpoint rootca
 revocation-check crl
 rsakeypair rootca
!
crypto pki trustpoint client
 enrollment url http://[3001:0:0:1::1]:80
 subject-name CN=Hub
 revocation-check none
 rsakeypair client
!
!
crypto pki certificate chain client
!
!
license udi pid ASR1001-X sn JAE184605L3
license accept end user agreement
license boot level adventerprise
memory free low-watermark processor 374207
!
!
spanning-tree extend system-id
diagnostic bootup level minimal
!
!
redundancy
 mode none
!
!
crypto ikev2 proposal IKEv2_PROPOSAL 
 encryption aes-gcm-256
 prf sha512
 group 15
!
crypto ikev2 policy IKEv2_POLICY 
 proposal IKEv2_PROPOSAL
!
!
crypto ikev2 profile IKEv2_PROFILE
 match identity remote address ::/0
 authentication remote rsa-sig
 authentication local rsa-sig
 pki trustpoint client
 pki trustpoint rootca
!
crypto ikev2 dpd 60 3 on-demand
!
!
!
!
! 
!
!
!
!
!
!
crypto ipsec transform-set TRANSFORM_SET esp-gcm 256 
 mode transport
!
crypto ipsec profile IPSec_PROFILE
 set transform-set TRANSFORM_SET 
 set pfs group15
 set ikev2-profile IKEv2_PROFILE
!
!
!
!
!
!
! 
! 
!
!
interface Loopback1
 no ip address
 ipv6 address <removed>
 ipv6 enable
 ospfv3 100 ipv6 area 0
!
interface Loopback2
 no ip address
 ipv6 address <removed>
 ipv6 enable
 ospfv3 100 ipv6 area 0
!
interface Loopback10001
 no ip address
 ipv6 address <removed>
 ipv6 enable
 ospfv3 100 ipv6 area 0
!
interface Tunnel1
 no ip address
 ipv6 address <removed> link-local
 ipv6 address <removed>
 ipv6 enable
 ipv6 mtu 1400
 ipv6 tcp adjust-mss 1200
 ipv6 nhrp network-id 1000
 ipv6 nhrp holdtime 3600
 ipv6 nhrp redirect
 cts sgt inline
 bfd interval 1000 min_rx 1000 multiplier 5
 tunnel source Loopback1
 tunnel mode gre multipoint ipv6
 tunnel path-mtu-discovery
 tunnel protection ipsec profile IPSec_PROFILE
!
interface Tunnel11
 no ip address
 ipv6 address <removed> link-local
 ipv6 address <removed>
 ipv6 enable
 ipv6 mtu 1400
 ipv6 tcp adjust-mss 1200
 ipv6 nhrp network-id 1000
 ipv6 nhrp holdtime 3600
 ipv6 nhrp nhs 4003::1 nbma 4004:0:0:1::1 multicast
 cts sgt inline
 bfd interval 1000 min_rx 1000 multiplier 5
 tunnel source Loopback2
 tunnel mode gre multipoint ipv6
 tunnel path-mtu-discovery
 tunnel protection ipsec profile IPSec_PROFILE
!
interface TenGigabitEthernet0/0/0
 no ip address
!
interface TenGigabitEthernet0/0/1
 no ip address
!
interface GigabitEthernet0/0/0
 no ip address
 negotiation auto
!
interface GigabitEthernet0/0/1
 no ip address
 negotiation auto
 ipv6 address <removed>
 ipv6 enable
 ospfv3 100 ipv6 area 0
!
interface GigabitEthernet0/0/2
 no ip address
 negotiation auto
!
interface GigabitEthernet0/0/3
 no ip address
 negotiation auto
!
interface GigabitEthernet0/0/4
 no ip address
 negotiation auto
!
interface GigabitEthernet0/0/5
 no ip address
 negotiation auto
!
interface POS0/1/0
 no ip address
!
interface POS0/1/1
 no ip address
!
interface GigabitEthernet0
 vrf forwarding Mgmt-intf
 ip address <removed> negotiation auto
!
router ospfv3 100
 !
 address-family ipv6 unicast
  router-id 1.1.1.3
 exit-address-family
!
router bgp 65100
 bgp router-id 1.1.1.3
 bgp log-neighbor-changes
 bgp listen range 3003::/48 peer-group DMVPN_SPOKES
 bgp listen limit 10000
 timers bgp 10 30
 neighbor DMVPN_SPOKES peer-group
 neighbor DMVPN_SPOKES remote-as 65100
 neighbor 4003::1 remote-as 64999
 !
 address-family ipv4
  neighbor DMVPN_SPOKES activate
  no neighbor 4003::1 activate
 exit-address-family
 !
 address-family ipv6
  aggregate-address 3800::/48 summary-only
  aggregate-address 3600::/48 summary-only
  aggregate-address 3400::/48 summary-only
  aggregate-address 3200::/48 summary-only
  neighbor DMVPN_SPOKES activate
  neighbor DMVPN_SPOKES next-hop-self
  neighbor DMVPN_SPOKES as-override split-horizon
  neighbor 4003::1 activate
  neighbor 4003::1 next-hop-self
  neighbor 4003::1 as-override split-horizon
 exit-address-family
!
ip http server
ip http secure-server
ip forward-protocol nd
!
ip tftp source-interface GigabitEthernet0
ip route vrf Mgmt-intf 202.153.144.25 255.255.255.255 9.41.0.1
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
line con 0
 exec-timeout 0 0
 stopbits 1
line aux 0
line vty 0 4
 exec-timeout 0 0
 login
 transport input ssh
!
call-home
 ! If contact email address in call-home is configured as sch-smart-licensing@cisco.com
 ! the email address configured in Cisco Smart License Portal will be used as contact email address to send SCH notifications.
 contact-email-addr sch-smart-licensing@cisco.com
 profile "CiscoTAC-1"
  active
  destination transport-method http
ntp master
!
!
!
!
!
!
end

Configuration example for root

version 17.6
service timestamps debug datetime msec
service timestamps log datetime msec
service internal
service call-home
platform qfp utilization monitor load 80
platform punt-keepalive disable-kernel-core
!
hostname root_primary
!
boot-start-marker
boot system bootflash:c8000aep-universalk9.DC2-Hub1.dmvpn_soak.SSA.bin
boot-end-marker
!
!
vrf definition Mgmt-intf
 !
 address-family ipv4
 exit-address-family
 !
 address-family ipv6
 exit-address-family
!
no logging console
!
no aaa new-model
!
!
!
!
!
!
!
!
!
!
!
!
login on-success log
ipv6 unicast-routing
!
!
!
!
!
!
!
subscriber templating
! 
! 
! 
! 
!
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
crypto pki trustpoint TP-self-signed-345927470
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-345927470
 revocation-check none
 rsakeypair TP-self-signed-345927470
 hash sha256
!
crypto pki trustpoint SLA-TrustPoint
 enrollment pkcs12
 revocation-check crl
 hash sha256
!
crypto pki trustpoint client
 enrollment url http://[3001:0:0:1::1]:80
 subject-name CN=Hub
 revocation-check none
 rsakeypair client
!
!
!
!
license udi pid C8500-12X sn TTM224202LR
license boot level network-advantage addon dna-advantage
no memory lite
memory free low-watermark processor 675468
!
!
spanning-tree extend system-id
diagnostic bootup level minimal
!
!
redundancy
 mode none
!
!
crypto ikev2 proposal IKEv2_PROPOSAL 
 encryption aes-gcm-256
 prf sha512
 group 15
!
crypto ikev2 policy IKEv2_POLICY 
 proposal IKEv2_PROPOSAL
!
!
crypto ikev2 profile IKEv2_PROFILE
 match identity remote address ::/0
 authentication remote rsa-sig
 authentication local rsa-sig
 pki trustpoint client
!
crypto ikev2 dpd 60 3 on-demand
!
!
!
!
! 
!
!
!
!
!
!
crypto ipsec transform-set TRANSFORM_SET esp-gcm 256 
 mode transport
!
crypto ipsec profile IPSec_PROFILE
 set transform-set TRANSFORM_SET 
 set pfs group15
 set ikev2-profile IKEv2_PROFILE
!
!
!
!
!
!
! 
! 
!
!
interface Loopback1
 no ip address
 ipv6 address <removed>
 ipv6 enable
 ospfv3 100 ipv6 area 0
!
interface Tunnel1
 no ip address
 ipv6 address <removed> link-local
 ipv6 address <removed>
 ipv6 enable
 ipv6 mtu 1400
 ipv6 tcp adjust-mss 1200
 ipv6 nhrp network-id 1000
 ipv6 nhrp holdtime 3600
 ipv6 nhrp redirect
 cts sgt inline
 bfd interval 1000 min_rx 1000 multiplier 5
 tunnel source Loopback1
 tunnel mode gre multipoint ipv6
 tunnel path-mtu-discovery
 tunnel protection ipsec profile IPSec_PROFILE
!
interface TenGigabitEthernet0/0/0
 no ip address
 no negotiation auto
 ipv6 address <removed>
 ipv6 enable
 ospfv3 100 ipv6 area 0
!
interface TenGigabitEthernet0/0/1
 no ip address
 no negotiation auto
!
interface TenGigabitEthernet0/0/2
 no ip address
 no negotiation auto
!
interface TenGigabitEthernet0/0/3
 no ip address
 no negotiation auto
!
interface TenGigabitEthernet0/0/4
 no ip address
 no negotiation auto
!
interface TenGigabitEthernet0/0/5
 no ip address
 no negotiation auto
!
interface TenGigabitEthernet0/0/6
 no ip address
 no negotiation auto
!
interface TenGigabitEthernet0/0/7
 no ip address
 no negotiation auto
!
interface TenGigabitEthernet0/0/8
 no ip address
 no negotiation auto
!
interface TenGigabitEthernet0/0/9
 no ip address
 no negotiation auto
!
interface TenGigabitEthernet0/0/10
 no ip address
 no negotiation auto
!
interface TenGigabitEthernet0/0/11
 no ip address
 no negotiation auto
!
interface GigabitEthernet0
 vrf forwarding Mgmt-intf
 ip address <removed> negotiation auto
!
router ospfv3 100
 !
 address-family ipv6 unicast
  router-id 1.1.1.1
 exit-address-family
!
router bgp 64999
 bgp router-id 1.1.1.1
 bgp log-neighbor-changes
 timers bgp 10 30
 neighbor 4003:0:0:1::1 remote-as 65000
 neighbor 4003:0:0:2::1 remote-as 65100
 !
 address-family ipv4
  no neighbor 4003:0:0:1::1 activate
  no neighbor 4003:0:0:2::1 activate
 exit-address-family
 !
 address-family ipv6
  neighbor 4003:0:0:1::1 activate
  neighbor 4003:0:0:1::1 next-hop-self
  neighbor 4003:0:0:1::1 as-override split-horizon
  neighbor 4003:0:0:2::1 activate
  neighbor 4003:0:0:2::1 next-hop-self
  neighbor 4003:0:0:2::1 as-override split-horizon
 exit-address-family
!
ip http server
ip http authentication local
ip http secure-server
ip forward-protocol nd
!
ip tftp source-interface GigabitEthernet0
ip tftp blocksize 8192
ip route vrf Mgmt-intf 202.153.144.25 255.255.255.255 9.41.0.1
ip route vrf Mgmt-intf 202.153.144.90 255.255.255.255 9.41.0.1
ip ssh bulk-mode 131072
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
line con 0
 exec-timeout 0 0
 stopbits 1
line aux 0
line vty 0
 exec-timeout 0 0
 login
 length 0
 transport input ssh
line vty 1 4
 exec-timeout 0 0
 login
 transport input ssh
!
call-home
 ! If contact email address in call-home is configured as sch-smart-licensing@cisco.com
 ! the email address configured in Cisco Smart License Portal will be used as contact email address to send SCH notifications.
 contact-email-addr sch-smart-licensing@cisco.com
 profile "CiscoTAC-1"
  active
  destination transport-method http
!
!
!
!
!
!
end

Configuration example for spoke

version 17.13
service timestamps debug datetime msec
service timestamps log datetime msec
service internal
service call-home
platform qfp utilization monitor load 80
platform punt-keepalive disable-kernel-core
platform ipsec flexvpn-bypass-tcam
platform hardware crypto-throughput level 8-16g 
!
hostname spk1
!
boot-start-marker
boot system bootflash:asr1000-universalk9.spk1.dmvpn_soak.SSA.bin
boot-end-marker
!
!
vrf definition C1_1
 rd 1:1
 !
 address-family ipv6
 exit-address-family
!
vrf definition Mgmt-intf
 !
 address-family ipv4
 exit-address-family
 !
 address-family ipv6
 exit-address-family
!
no logging console
no aaa new-model
!
!
subscriber templating
!
!
!
!
!
!
!
!
!
!
!
!
login on-success log
!
!
!
!
!
ipv6 unicast-routing
!
!
! 
! 
! 
! 
!
!
crypto pki trustpoint TP-self-signed-1147572831
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-1147572831
 revocation-check none
 rsakeypair TP-self-signed-1147572831
 hash sha256
!
crypto pki trustpoint SLA-TrustPoint
 enrollment pkcs12
 revocation-check crl
 hash sha256
!
crypto pki trustpoint client
 enrollment url http://[3001:0:0:1::1]:80
 subject-name CN=Hub
 revocation-check none
 rsakeypair client
 hash sha256
!
!
!
!
!
!
!
!
!
!
license udi pid ASR1001-HX sn JAE24530LQG
license boot level adventerprise
!
no memory lite
memory free low-watermark processor 675468
diagnostic bootup level minimal
!
spanning-tree extend system-id
!
!
!
redundancy
 mode none
!
crypto ikev2 proposal IKEv2_PROPOSAL 
 encryption aes-gcm-256
 prf sha512
 group 15
!
crypto ikev2 policy IKEv2_POLICY 
 proposal IKEv2_PROPOSAL
!
!
crypto ikev2 profile IKEv2_PROFILE
 match identity remote address ::/0
 authentication remote rsa-sig
 authentication local rsa-sig
 pki trustpoint client
!
crypto ikev2 dpd 60 3 on-demand
!
!
!
!
! 
!
!
!
!
!
!
crypto ipsec transform-set TRANSFORM_SET esp-gcm 256 
 mode transport
!
crypto ipsec profile IPSec_PROFILE
 set transform-set TRANSFORM_SET 
 set pfs group15
 set ikev2-profile IKEv2_PROFILE
!
!
!
!
!
!
! 
! 
!
!
interface Loopback1
 no ip address
 ipv6 address <removed>
 ipv6 enable
 ospfv3 100 ipv6 area 0
!
interface Tunnel1
 vrf forwarding C1_1
 no ip address
 ipv6 address <removed> link-local
 ipv6 address <removed>
 ipv6 enable
 ipv6 mtu 1400
 ipv6 tcp adjust-mss 1200
 ipv6 nhrp network-id 1000
 ipv6 nhrp holdtime 3600
 ipv6 nhrp nhs 2003::1 nbma 2004:0:0:1::1 multicast
 cts sgt inline
 bfd interval 1000 min_rx 1000 multiplier 5
 tunnel source Loopback1
 tunnel mode gre multipoint ipv6
 tunnel path-mtu-discovery
 tunnel protection ipsec profile IPSec_PROFILE
!
interface GigabitEthernet0/0/0
 no ip address
 negotiation auto
!
interface GigabitEthernet0/0/1
 no ip address
 negotiation auto
!
interface GigabitEthernet0/0/2
 no ip address
 negotiation auto
!
interface GigabitEthernet0/0/2.1
 encapsulation dot1Q 100
 vrf forwarding C1_1
 ipv6 address <removed>
 ipv6 enable
!
interface GigabitEthernet0/0/3
 no ip address
 negotiation auto
!
interface GigabitEthernet0/0/4
 no ip address
 negotiation auto
!
interface GigabitEthernet0/0/5
 no ip address
 negotiation auto
!
interface GigabitEthernet0/0/6
 no ip address
 negotiation auto
!
interface GigabitEthernet0/0/7
 no ip address
 negotiation auto
!
interface TenGigabitEthernet0/1/0
 no ip address
 no negotiation auto
 ipv6 address <removed>
 ipv6 enable
 ospfv3 100 ipv6 area 0
!
interface TenGigabitEthernet0/1/1
 no ip address
 no negotiation auto
!
interface TenGigabitEthernet0/1/2
 no ip address
 no negotiation auto
!
interface TenGigabitEthernet0/1/3
 no ip address
 no negotiation auto
!
interface TenGigabitEthernet0/1/4
 no ip address
 no negotiation auto
!
interface TenGigabitEthernet0/1/5
 no ip address
 no negotiation auto
!
interface TenGigabitEthernet0/1/6
 no ip address
 no negotiation auto
!
interface TenGigabitEthernet0/1/7
 no ip address
 no negotiation auto
!
interface GigabitEthernet0
 vrf forwarding Mgmt-intf
 ip address <removed> negotiation auto
!
router ospfv3 100
 !
 address-family ipv6 unicast
  router-id 21.21.21.21
 exit-address-family
!
router bgp 65001
 bgp router-id 21.21.21.21
 bgp log-neighbor-changes
 timers bgp 10 30
 !
 address-family ipv6 vrf C1_1
  network 2003::/48
  network 3100:0:0:1::/64
  neighbor 2003::1 remote-as 65000
  neighbor 2003::1 activate
 exit-address-family
!
ip forward-protocol nd
!
ip tftp source-interface GigabitEthernet0
ip tftp blocksize 8192
ip http server
ip http authentication local
ip http secure-server
ip ssh bulk-mode 131072
ip route vrf Mgmt-intf 202.153.144.25 255.255.255.255 9.41.0.1
ip route vrf Mgmt-intf 202.153.144.90 255.255.255.255 9.45.0.1
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
line con 0
 exec-timeout 0 0
 stopbits 1
line aux 0
line vty 0 4
 exec-timeout 0 0
 login
 transport input ssh
!
call-home
 ! If contact email address in call-home is configured as sch-smart-licensing@cisco.com
 ! the email address configured in Cisco Smart License Portal will be used as contact email address to send SCH notifications.
 contact-email-addr sch-smart-licensing@cisco.com
 profile "CiscoTAC-1"
  active
  destination transport-method http
ntp master
!
!
!
!
!
!
end

IP4 EIGRP static IKEv1 yang commands

Configuration example for a hub

version 17.6
service timestamps debug datetime msec
service timestamps log datetime msec
service internal
service call-home
platform qfp utilization monitor load 80
platform punt-keepalive disable-kernel-core
!
hostname DC1-Hub1
!
boot-start-marker
boot system bootflash:c8000aep-universalk9.DC1-Hub1.dmvpn_soak.SSA.bin
boot-end-marker
!
!
vrf definition Mgmt-intf
 !
 address-family ipv4
 exit-address-family
 !
 address-family ipv6
 exit-address-family
!
no logging console
!
no aaa new-model
!
!
!
!
!
!
!
!
!
!
!
!
login on-success log
!
!
!
!
!
!
!
subscriber templating
! 
! 
! 
! 
!
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
crypto pki trustpoint TP-self-signed-2134189379
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-2134189379
 revocation-check none
 rsakeypair TP-self-signed-2134189379
!
crypto pki trustpoint SLA-TrustPoint
 enrollment pkcs12
 revocation-check crl
!
!
license udi pid C8500-12X4QC sn TTM231100CF
license boot level network-advantage addon dna-advantage
no memory lite
memory free low-watermark processor 984138
hw-module subslot 0/1 mode 10G
hw-module subslot 0/2 mode 40G
hw-module subslot 0/2 breakout none port all
!
!
spanning-tree extend system-id
diagnostic bootup level minimal
!
!
redundancy
 mode none
!
!
!
!
!
!
!
!
class-map match-all group1_Routing
 match ip precedence 6 
class-map match-all group2_Routing
 match ip precedence 6 
class-map match-all group2_voice
 match access-group 100
class-map match-all group1_voice
 match access-group 100
!
policy-map group2
 class group2_voice
  priority percent 20
 class group2_Routing
  bandwidth percent 10 
policy-map group2_parent
 class class-default
  shape average 2000000   
   service-policy group2
policy-map group1
 class group1_voice
  priority 1000
 class group1_Routing
  bandwidth percent 20 
policy-map group1_parent
 class class-default
  shape average 3000000   
   service-policy group1
!
!
! 
!
!
!
!
!
crypto isakmp policy 10
 encryption aes 256
 hash sha256
 authentication pre-share
 group 14
crypto isakmp key cisco123 address 0.0.0.0        
!
!
crypto ipsec transform-set tset1 esp-aes 256 esp-sha256-hmac 
 mode transport
!
!
crypto ipsec profile dmvpn-hub-ikev1
 set transform-set tset1 
 set pfs group19
!
!
!
!
!
! 
! 
!
!
interface Tunnel1
 ip address <removed> no ip redirects
 ip mtu 1400
 ip hello-interval eigrp 101 30
 ip hold-time eigrp 101 90
 ip nhrp network-id 1000
 ip nhrp redirect
 ip tcp adjust-mss 1200
 ip summary-address eigrp 101 10.0.0.0 255.0.0.0
 nhrp map group spoke_group1 service-policy output group1_parent
 nhrp map group spoke_group2 service-policy output group2_parent
 cts sgt inline
 bfd interval 1000 min_rx 1000 multiplier 5
 no bfd echo
 tunnel source TenGigabitEthernet0/1/0
 tunnel mode gre multipoint
 tunnel path-mtu-discovery
 tunnel protection ipsec profile dmvpn-hub-ikev1
!
interface TenGigabitEthernet0/0/0
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/0/1
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/0/2
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/0/3
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/0/4
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/0/5
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/0/6
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/0/7
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/0
 ip address <removed> no negotiation auto
!
interface TenGigabitEthernet0/1/1
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/2
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/3
 ip address <removed> no negotiation auto
!
interface FortyGigabitEthernet0/2/0
 no ip address
 shutdown
 no negotiation auto
!
interface FortyGigabitEthernet0/2/4
 no ip address
 shutdown
 no negotiation auto
!
interface FortyGigabitEthernet0/2/8
 no ip address
 shutdown
 no negotiation auto
!
interface GigabitEthernet0
 vrf forwarding Mgmt-intf
 ip address <removed> negotiation auto
!
!
router eigrp 101
 network 150.100.0.0
 network 192.0.0.0 0.255.255.255
!
router nhrp 200
 network 100.0.0.0
!
ip http server
ip http authentication local
ip http secure-server
ip forward-protocol nd
!
ip tftp source-interface GigabitEthernet0
ip tftp blocksize 8192
ip route 0.0.0.0 0.0.0.0 100.0.10.1
ip route vrf Mgmt-intf 202.153.144.90 255.255.255.255 9.41.0.1
!
!
!
snmp-server user roni g1 v3 
snmp-server group g1 v3 noauth 
snmp-server group g1 v3 auth read campus write campus 
snmp mib nhrp
!
!
!
control-plane
!
!
!
!
!
!
line con 0
 exec-timeout 0 0
 stopbits 1
line aux 0
line vty 0 4
 login
 transport input ssh
!
call-home
 ! If contact email address in call-home is configured as sch-smart-licensing@cisco.com
 ! the email address configured in Cisco Smart License Portal will be used as contact email address to send SCH notifications.
 contact-email-addr sch-smart-licensing@cisco.com
 profile "CiscoTAC-1"
  active
  destination transport-method http
!
!
!
!
!
!
end

Configuration example for a spoke

version 17.13
service timestamps debug datetime msec
service timestamps log datetime msec
service internal
service call-home
platform qfp utilization monitor load 80
platform punt-keepalive disable-kernel-core
platform ipsec flexvpn-bypass-tcam
platform hardware crypto-throughput level 8-16g 
!
hostname spk1
!
boot-start-marker
boot system bootflash:asr1000-universalk9.spk1.dmvpn_soak.SSA.bin
boot-end-marker
!
!
vrf definition C1_1
 rd 1:1
 !
 address-family ipv4
 exit-address-family
!
vrf definition Mgmt-intf
 !
 address-family ipv4
 exit-address-family
 !
 address-family ipv6
 exit-address-family
!
no logging console
no aaa new-model
!
!
subscriber templating
!
!
!
!
!
!
!
!
!
!
!
!
login on-success log
!
!
!
!
!
!
!
! 
! 
! 
! 
!
!
crypto pki trustpoint TP-self-signed-1147572831
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-1147572831
 revocation-check none
 rsakeypair TP-self-signed-1147572831
 hash sha256
!
crypto pki trustpoint SLA-TrustPoint
 enrollment pkcs12
 revocation-check crl
 hash sha256
!
!
!
!
!
!
!
!
!
!
license udi pid ASR1001-HX sn JAE24530LQG
license boot level adventerprise
!
no memory lite
memory free low-watermark processor 675468
diagnostic bootup level minimal
!
spanning-tree extend system-id
!
!
!
redundancy
 mode none
!
!
!
!
!
!
!
class-map match-all group1_Routing
 match ip precedence 6 
class-map match-all group2_Routing
 match ip precedence 6 
class-map match-all group2_voice
 match access-group 100
class-map match-all group1_voice
 match access-group 100
!
policy-map group2
 class group2_voice
  priority percent 20
 class group2_Routing
  bandwidth percent 10 
policy-map group2_parent
 class class-default
  shape average 2000000   
  service-policy group2
policy-map group1
 class group1_voice
  priority 1000
 class group1_Routing
  bandwidth percent 20 
policy-map group1_parent
 class class-default
  shape average 3000000   
  service-policy group1
!
!
! 
!
!
!
!
!
crypto isakmp policy 10
 encryption aes 256
 hash sha256
 authentication pre-share
 group 14
crypto isakmp key cisco123 address 0.0.0.0        
!
!
crypto ipsec transform-set tset1 esp-aes 256 esp-sha256-hmac 
 mode transport
!
!
crypto ipsec profile dmvpn-hub-ikev1
 set transform-set tset1 
 set pfs group19
!
!
!
!
!
! 
! 
!
!
interface Loopback1
 ip address <removed>!
interface Tunnel1
 vrf forwarding C1_1
 ip address <removed> no ip redirects
 ip hello-interval eigrp 101 30
 ip hold-time eigrp 101 90
 ip nhrp network-id 1000
 ip nhrp nhs 192.0.1.1 nbma 100.0.10.2 multicast
 ip tcp adjust-mss 1200
 nhrp group spoke_group1
 cts sgt inline
 bfd interval 1000 min_rx 1000 multiplier 5
 no bfd echo
 tunnel source Loopback1
 tunnel mode gre multipoint
 tunnel path-mtu-discovery
 tunnel protection ipsec profile dmvpn-hub-ikev1
!
interface GigabitEthernet0/0/0
 no ip address
 shutdown
 negotiation auto
!
interface GigabitEthernet0/0/1
 no ip address
 shutdown
 negotiation auto
!
interface GigabitEthernet0/0/2
 no ip address
 negotiation auto
!
interface GigabitEthernet0/0/2.1
 encapsulation dot1Q 100
 vrf forwarding C1_1
 ip address <removed>!
interface GigabitEthernet0/0/3
 no ip address
 shutdown
 negotiation auto
!
interface GigabitEthernet0/0/4
 no ip address
 shutdown
 negotiation auto
!
interface GigabitEthernet0/0/5
 no ip address
 shutdown
 negotiation auto
!
interface GigabitEthernet0/0/6
 no ip address
 shutdown
 negotiation auto
!
interface GigabitEthernet0/0/7
 no ip address
 shutdown
 negotiation auto
!
interface TenGigabitEthernet0/1/0
 ip address <removed> no negotiation auto
!
interface TenGigabitEthernet0/1/1
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/2
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/3
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/4
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/5
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/6
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/7
 no ip address
 shutdown
 no negotiation auto
!
interface GigabitEthernet0
 vrf forwarding Mgmt-intf
 ip address <removed> negotiation auto
!
!
router eigrp 101
 !
 address-family ipv4 vrf C1_1 autonomous-system 101
  network 10.2.2.0 0.0.0.255
  network 192.0.0.0 0.255.255.255
  passive-interface GigabitEthernet0/0/2.1
 exit-address-family
!
ip forward-protocol nd
!
ip tftp source-interface GigabitEthernet0
ip tftp blocksize 8192
ip http server
ip http authentication local
ip http secure-server
ip ssh bulk-mode 131072
ip route 0.0.0.0 0.0.0.0 50.50.50.1
ip route vrf Mgmt-intf 202.153.144.90 255.255.255.255 9.45.0.1
ip route vrf Mgmt-intf 202.153.144.90 255.255.255.255 9.41.0.1
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
line con 0
 exec-timeout 0 0
 stopbits 1
line aux 0
line vty 0 4
 login
 transport input ssh
!
call-home
 ! If contact email address in call-home is configured as sch-smart-licensing@cisco.com
 ! the email address configured in Cisco Smart License Portal will be used as contact email address to send SCH notifications.
 contact-email-addr sch-smart-licensing@cisco.com
 profile "CiscoTAC-1"
  active
  destination transport-method http
!
!
!
!
!
!
end

IP4 EIGRP static IKEv2 yang commands

Configuration example for a hub

version 17.6
service timestamps debug datetime msec
service timestamps log datetime msec
service internal
service call-home
platform qfp utilization monitor load 80
platform punt-keepalive disable-kernel-core
!
hostname DC1-Hub1
!
boot-start-marker
boot system bootflash:c8000aep-universalk9.DC1-Hub1.dmvpn_soak.SSA.bin
boot-end-marker
!
!
vrf definition Mgmt-intf
 !
 address-family ipv4
 exit-address-family
 !
 address-family ipv6
 exit-address-family
!
no logging console
!
no aaa new-model
!
!
!
!
!
!
!
!
!
!
!
!
login on-success log
!
!
!
!
!
!
!
subscriber templating
! 
! 
! 
! 
!
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
crypto pki trustpoint TP-self-signed-2134189379
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-2134189379
 revocation-check none
 rsakeypair TP-self-signed-2134189379
!
crypto pki trustpoint SLA-TrustPoint
 enrollment pkcs12
 revocation-check crl
!
!
!
license udi pid C8500-12X4QC sn TTM231100CF
license boot level network-advantage addon dna-advantage
no memory lite
memory free low-watermark processor 984138
hw-module subslot 0/1 mode 10G
hw-module subslot 0/2 mode 40G
hw-module subslot 0/2 breakout none port all
!
!
spanning-tree extend system-id
diagnostic bootup level minimal
!
!
redundancy
 mode none
!
!
crypto ikev2 proposal ikev2proposal 
 encryption aes-cbc-192
 integrity sha512
 group 16
!
crypto ikev2 policy ikev2policy 
 proposal ikev2proposal
!
crypto ikev2 keyring ikev2keyring
 peer ikev2peer
  address 0.0.0.0 0.0.0.0
  pre-shared-key Cisco@123
 !
!
!
crypto ikev2 profile ikev2profile
 match identity remote address 0.0.0.0 
 authentication remote pre-share
 authentication local pre-share
 keyring local ikev2keyring
!
crypto ikev2 dpd 60 3 on-demand
!
!
!
!
class-map match-all group1_Routing
 match ip precedence 6 
class-map match-all group2_Routing
 match ip precedence 6 
class-map match-all group2_voice
 match access-group 100
class-map match-all group1_voice
 match access-group 100
!
policy-map group2
 class group2_voice
  priority percent 20
 class group2_Routing
  bandwidth percent 10 
policy-map group2_parent
 class class-default
  shape average 2000000   
   service-policy group2
policy-map group1
 class group1_voice
  priority 1000
 class group1_Routing
  bandwidth percent 20 
policy-map group1_parent
 class class-default
  shape average 3000000   
   service-policy group1
!
!
! 
!
!
!
!
!
!
crypto ipsec transform-set tset1 esp-aes 256 esp-sha256-hmac 
 mode transport
!
!
crypto ipsec profile dmvpn-hub
 set transform-set tset1 
 set pfs group19
 set ikev2-profile ikev2profile
!
!
!
!
!
! 
! 
!
!
interface Tunnel1
 ip address <removed> no ip redirects
 ip mtu 1400
 ip hello-interval eigrp 101 30
 ip hold-time eigrp 101 90
 ip nhrp network-id 1000
 ip nhrp redirect
 ip tcp adjust-mss 1200
 ip summary-address eigrp 101 10.0.0.0 255.0.0.0
 nhrp map group spoke_group1 service-policy output group1_parent
 nhrp map group spoke_group2 service-policy output group2_parent
 cts sgt inline
 bfd interval 1000 min_rx 1000 multiplier 5
 no bfd echo
 tunnel source TenGigabitEthernet0/1/0
 tunnel mode gre multipoint
 tunnel path-mtu-discovery
 tunnel protection ipsec profile dmvpn-hub
!
interface TenGigabitEthernet0/0/0
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/0/1
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/0/2
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/0/3
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/0/4
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/0/5
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/0/6
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/0/7
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/0
 ip address <removed> no negotiation auto
!
interface TenGigabitEthernet0/1/1
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/2
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/3
 ip address <removed> no negotiation auto
!
interface FortyGigabitEthernet0/2/0
 no ip address
 shutdown
 no negotiation auto
!
interface FortyGigabitEthernet0/2/4
 no ip address
 shutdown
 no negotiation auto
!
interface FortyGigabitEthernet0/2/8
 no ip address
 shutdown
 no negotiation auto
!
interface GigabitEthernet0
 vrf forwarding Mgmt-intf
 ip address <removed> negotiation auto
!
!
router eigrp 101
 network 150.100.0.0
 network 192.0.0.0 0.255.255.255
!
router nhrp 200
 network 100.0.0.0
!
ip http server
ip http authentication local
ip http secure-server
ip forward-protocol nd
!
ip tftp source-interface GigabitEthernet0
ip tftp blocksize 8192
ip route 0.0.0.0 0.0.0.0 100.0.10.1
ip route vrf Mgmt-intf 202.153.144.90 255.255.255.255 9.41.0.1
!
!
!
snmp-server user roni g1 v3 
snmp-server group g1 v3 noauth 
snmp-server group g1 v3 auth read campus write campus 
snmp mib nhrp
!
!
!
control-plane
!
!
!
!
!
!
line con 0
 exec-timeout 0 0
 stopbits 1
line aux 0
line vty 0 4
 login
 transport input ssh
!
call-home
 ! If contact email address in call-home is configured as sch-smart-licensing@cisco.com
 ! the email address configured in Cisco Smart License Portal will be used as contact email address to send SCH notifications.
 contact-email-addr sch-smart-licensing@cisco.com
 profile "CiscoTAC-1"
  active
  destination transport-method http
!
!
!
!
!
!
end

Configuration example for a spoke

version 17.13
service timestamps debug datetime msec
service timestamps log datetime msec
service internal
service call-home
platform qfp utilization monitor load 80
platform punt-keepalive disable-kernel-core
platform ipsec flexvpn-bypass-tcam
platform hardware crypto-throughput level 8-16g 
!
hostname spk1
!
boot-start-marker
boot system bootflash:asr1000-universalk9.spk1.dmvpn_soak.SSA.bin
boot-end-marker
!
!
vrf definition C1_1
 rd 1:1
 !
 address-family ipv4
 exit-address-family
!
vrf definition Mgmt-intf
 !
 address-family ipv4
 exit-address-family
 !
 address-family ipv6
 exit-address-family
!
no logging console
no aaa new-model
!
!
subscriber templating
!
!
!
!
!
!
!
!
!
!
!
!
login on-success log
!
!
!
!
!
!
!
! 
! 
! 
! 
!
!
crypto pki trustpoint TP-self-signed-1147572831
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-1147572831
 revocation-check none
 rsakeypair TP-self-signed-1147572831
 hash sha256
!
crypto pki trustpoint SLA-TrustPoint
 enrollment pkcs12
 revocation-check crl
 hash sha256
!
!
!
!
!
!
!
!
!
!
license udi pid ASR1001-HX sn JAE24530LQG
license boot level adventerprise
!
no memory lite
memory free low-watermark processor 675468
diagnostic bootup level minimal
!
spanning-tree extend system-id
!
!
!
redundancy
 mode none
!
crypto ikev2 proposal ikev2proposal 
 encryption aes-cbc-192
 integrity sha512
 group 16
!
crypto ikev2 policy ikev2policy 
 proposal ikev2proposal
!
crypto ikev2 keyring ikev2keyring
 peer ikev2peer
  address 0.0.0.0 0.0.0.0
  pre-shared-key Cisco@123
 !
!
!
crypto ikev2 profile ikev2profile
 match identity remote address 0.0.0.0 
 authentication remote pre-share
 authentication local pre-share
 keyring local ikev2keyring
!
crypto ikev2 dpd 60 3 on-demand
!
!
!
!
class-map match-all group1_Routing
 match ip precedence 6 
class-map match-all group2_Routing
 match ip precedence 6 
class-map match-all group2_voice
 match access-group 100
class-map match-all group1_voice
 match access-group 100
!
policy-map group2
 class group2_voice
  priority percent 20
 class group2_Routing
  bandwidth percent 10 
policy-map group2_parent
 class class-default
  shape average 2000000   
  service-policy group2
policy-map group1
 class group1_voice
  priority 1000
 class group1_Routing
  bandwidth percent 20 
policy-map group1_parent
 class class-default
  shape average 3000000   
  service-policy group1
!
!
! 
!
!
!
!
!
!
crypto ipsec transform-set tset1 esp-aes 256 esp-sha256-hmac 
 mode transport
!
!
crypto ipsec profile dmvpn-hub
 set transform-set tset1 
 set pfs group19
 set ikev2-profile ikev2profile
!
!
!
!
!
! 
! 
!
!
interface Loopback1
 ip address <removed>!
interface Tunnel1
 vrf forwarding C1_1
 ip address <removed> no ip redirects
 ip hello-interval eigrp 101 30
 ip hold-time eigrp 101 90
 ip nhrp network-id 1000
 ip nhrp nhs 192.0.1.1 nbma 100.0.10.2 multicast
 ip tcp adjust-mss 1200
 nhrp group spoke_group1
 cts sgt inline
 bfd interval 1000 min_rx 1000 multiplier 5
 no bfd echo
 tunnel source Loopback1
 tunnel mode gre multipoint
 tunnel path-mtu-discovery
 tunnel protection ipsec profile dmvpn-hub
!
interface GigabitEthernet0/0/0
 no ip address
 shutdown
 negotiation auto
!
interface GigabitEthernet0/0/1
 no ip address
 shutdown
 negotiation auto
!
interface GigabitEthernet0/0/2
 no ip address
 negotiation auto
!
interface GigabitEthernet0/0/2.1
 encapsulation dot1Q 100
 vrf forwarding C1_1
 ip address <removed>!
interface GigabitEthernet0/0/3
 no ip address
 shutdown
 negotiation auto
!
interface GigabitEthernet0/0/4
 no ip address
 shutdown
 negotiation auto
!
interface GigabitEthernet0/0/5
 no ip address
 shutdown
 negotiation auto
!
interface GigabitEthernet0/0/6
 no ip address
 shutdown
 negotiation auto
!
interface GigabitEthernet0/0/7
 no ip address
 shutdown
 negotiation auto
!
interface TenGigabitEthernet0/1/0
 ip address <removed> no negotiation auto
!
interface TenGigabitEthernet0/1/1
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/2
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/3
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/4
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/5
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/6
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/7
 no ip address
 shutdown
 no negotiation auto
!
interface GigabitEthernet0
 vrf forwarding Mgmt-intf
 ip address <removed> negotiation auto
!
!
router eigrp 101
 !
 address-family ipv4 vrf C1_1 autonomous-system 101
  network 10.2.2.0 0.0.0.255
  network 192.0.0.0 0.255.255.255
  passive-interface GigabitEthernet0/0/2.1
 exit-address-family
!
ip forward-protocol nd
!
ip tftp source-interface GigabitEthernet0
ip tftp blocksize 8192
ip http server
ip http authentication local
ip http secure-server
ip ssh bulk-mode 131072
ip route 0.0.0.0 0.0.0.0 50.50.50.1
ip route vrf Mgmt-intf 202.153.144.90 255.255.255.255 9.45.0.1
ip route vrf Mgmt-intf 202.153.144.90 255.255.255.255 9.41.0.1
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
line con 0
 exec-timeout 0 0
 stopbits 1
line aux 0
line vty 0 4
 login
 transport input ssh
!
call-home
 ! If contact email address in call-home is configured as sch-smart-licensing@cisco.com
 ! the email address configured in Cisco Smart License Portal will be used as contact email address to send SCH notifications.
 contact-email-addr sch-smart-licensing@cisco.com
 profile "CiscoTAC-1"
  active
  destination transport-method http
!
!
!
!
!
!
end

IP4 EIGRP static non crypto yang commands

Configuration example for a hub

version 17.6
service timestamps debug datetime msec
service timestamps log datetime msec
service internal
service call-home
platform qfp utilization monitor load 80
platform punt-keepalive disable-kernel-core
!
hostname DC1-Hub1
!
boot-start-marker
boot system bootflash:c8000aep-universalk9.DC1-Hub1.dmvpn_soak.SSA.bin
boot-end-marker
!
!
vrf definition Mgmt-intf
 !
 address-family ipv4
 exit-address-family
 !
 address-family ipv6
 exit-address-family
!
no logging console
!
no aaa new-model
!
!
!
!
!
!
!
!
!
!
!
!
login on-success log
!
!
!
!
!
!
!
subscriber templating
! 
! 
! 
! 
!
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
crypto pki trustpoint TP-self-signed-2134189379
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-2134189379
 revocation-check none
 rsakeypair TP-self-signed-2134189379
!
crypto pki trustpoint SLA-TrustPoint
 enrollment pkcs12
 revocation-check crl
!
!
!
license udi pid C8500-12X4QC sn TTM231100CF
license boot level network-advantage addon dna-advantage
no memory lite
memory free low-watermark processor 984138
hw-module subslot 0/1 mode 10G
hw-module subslot 0/2 mode 40G
hw-module subslot 0/2 breakout none port all
!
!
spanning-tree extend system-id
diagnostic bootup level minimal
!
!
redundancy
 mode none
!
!
crypto ikev2 proposal ikev2proposal 
 encryption aes-cbc-192
 integrity sha512
 group 16
!
crypto ikev2 policy ikev2policy 
 proposal ikev2proposal
!
crypto ikev2 keyring ikev2keyring
 peer ikev2peer
  address 0.0.0.0 0.0.0.0
  pre-shared-key Cisco@123
 !
!
!
crypto ikev2 profile ikev2profile
 match identity remote address 0.0.0.0 
 authentication remote pre-share
 authentication local pre-share
 keyring local ikev2keyring
!
crypto ikev2 dpd 60 3 on-demand
!
!
!
!
class-map match-all group1_Routing
 match ip precedence 6 
class-map match-all group2_Routing
 match ip precedence 6 
class-map match-all group2_voice
 match access-group 100
class-map match-all group1_voice
 match access-group 100
!
policy-map group2
 class group2_voice
  priority percent 20
 class group2_Routing
  bandwidth percent 10 
policy-map group2_parent
 class class-default
  shape average 2000000   
   service-policy group2
policy-map group1
 class group1_voice
  priority 1000
 class group1_Routing
  bandwidth percent 20 
policy-map group1_parent
 class class-default
  shape average 3000000   
   service-policy group1
!
!
! 
!
!
!
!
!
!
crypto ipsec transform-set tset1 esp-aes 256 esp-sha256-hmac 
 mode transport
!
!
crypto ipsec profile dmvpn-hub
 set transform-set tset1 
 set pfs group19
 set ikev2-profile ikev2profile
!
!
!
!
!
! 
! 
!
!
interface Tunnel1
 ip address <removed> no ip redirects
 ip mtu 1400
 ip hello-interval eigrp 101 30
 ip hold-time eigrp 101 90
 ip nhrp network-id 1000
 ip nhrp redirect
 ip tcp adjust-mss 1200
 ip summary-address eigrp 101 10.0.0.0 255.0.0.0
 nhrp map group spoke_group1 service-policy output group1_parent
 nhrp map group spoke_group2 service-policy output group2_parent
 cts sgt inline
 bfd interval 1000 min_rx 1000 multiplier 5
 no bfd echo
 tunnel source TenGigabitEthernet0/1/0
 tunnel mode gre multipoint
 tunnel path-mtu-discovery
 tunnel protection ipsec profile dmvpn-hub
!
interface TenGigabitEthernet0/0/0
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/0/1
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/0/2
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/0/3
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/0/4
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/0/5
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/0/6
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/0/7
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/0
 ip address <removed> no negotiation auto
!
interface TenGigabitEthernet0/1/1
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/2
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/3
 ip address <removed> no negotiation auto
!
interface FortyGigabitEthernet0/2/0
 no ip address
 shutdown
 no negotiation auto
!
interface FortyGigabitEthernet0/2/4
 no ip address
 shutdown
 no negotiation auto
!
interface FortyGigabitEthernet0/2/8
 no ip address
 shutdown
 no negotiation auto
!
interface GigabitEthernet0
 vrf forwarding Mgmt-intf
 ip address <removed> negotiation auto
!
!
router eigrp 101
 network 150.100.0.0
 network 192.0.0.0 0.255.255.255
!
router nhrp 200
 network 100.0.0.0
!
ip http server
ip http authentication local
ip http secure-server
ip forward-protocol nd
!
ip tftp source-interface GigabitEthernet0
ip tftp blocksize 8192
ip route 0.0.0.0 0.0.0.0 100.0.10.1
ip route vrf Mgmt-intf 202.153.144.90 255.255.255.255 9.41.0.1
!
!
!
snmp-server user roni g1 v3 
snmp-server group g1 v3 noauth 
snmp-server group g1 v3 auth read campus write campus 
snmp mib nhrp
!
!
!
control-plane
!
!
!
!
!
!
line con 0
 exec-timeout 0 0
 stopbits 1
line aux 0
line vty 0 4
 login
 transport input ssh
!
call-home
 ! If contact email address in call-home is configured as sch-smart-licensing@cisco.com
 ! the email address configured in Cisco Smart License Portal will be used as contact email address to send SCH notifications.
 contact-email-addr sch-smart-licensing@cisco.com
 profile "CiscoTAC-1"
  active
  destination transport-method http
!
!
!
!
!
!
end

Configuration example for a spoke

version 17.13
service timestamps debug datetime msec
service timestamps log datetime msec
service internal
service call-home
platform qfp utilization monitor load 80
platform punt-keepalive disable-kernel-core
platform ipsec flexvpn-bypass-tcam
platform hardware crypto-throughput level 8-16g 
!
hostname spk1
!
boot-start-marker
boot system bootflash:asr1000-universalk9.spk1.dmvpn_soak.SSA.bin
boot-end-marker
!
!
vrf definition C1_1
 rd 1:1
 !
 address-family ipv4
 exit-address-family
!
vrf definition Mgmt-intf
 !
 address-family ipv4
 exit-address-family
 !
 address-family ipv6
 exit-address-family
!
no logging console
no aaa new-model
!
!
subscriber templating
!
!
!
!
!
!
!
!
!
!
!
!
login on-success log
!
!
!
!
!
!
!
! 
! 
! 
! 
!
!
crypto pki trustpoint TP-self-signed-1147572831
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-1147572831
 revocation-check none
 rsakeypair TP-self-signed-1147572831
 hash sha256
!
crypto pki trustpoint SLA-TrustPoint
 enrollment pkcs12
 revocation-check crl
 hash sha256
!
!
!
!
!
!
!
!
!
!
!
license udi pid ASR1001-HX sn JAE24530LQG
license boot level adventerprise
!
no memory lite
memory free low-watermark processor 675468
diagnostic bootup level minimal
!
spanning-tree extend system-id
!
!
!
redundancy
 mode none
!
crypto ikev2 proposal ikev2proposal 
 encryption aes-cbc-192
 integrity sha512
 group 16
!
crypto ikev2 policy ikev2policy 
 proposal ikev2proposal
!
crypto ikev2 keyring ikev2keyring
 peer ikev2peer
  address 0.0.0.0 0.0.0.0
  pre-shared-key Cisco@123
 !
!
!
crypto ikev2 profile ikev2profile
 match identity remote address 0.0.0.0 
 authentication remote pre-share
 authentication local pre-share
 keyring local ikev2keyring
!
crypto ikev2 dpd 60 3 on-demand
!
!
!
!
class-map match-all group1_Routing
 match ip precedence 6 
class-map match-all group2_Routing
 match ip precedence 6 
class-map match-all group2_voice
 match access-group 100
class-map match-all group1_voice
 match access-group 100
!
policy-map group2
 class group2_voice
  priority percent 20
 class group2_Routing
  bandwidth percent 10 
policy-map group2_parent
 class class-default
  shape average 2000000   
  service-policy group2
policy-map group1
 class group1_voice
  priority 1000
 class group1_Routing
  bandwidth percent 20 
policy-map group1_parent
 class class-default
  shape average 3000000   
  service-policy group1
!
!
! 
!
!
!
!
!
!
crypto ipsec transform-set tset1 esp-aes 256 esp-sha256-hmac 
 mode transport
!
!
crypto ipsec profile dmvpn-hub
 set transform-set tset1 
 set pfs group19
 set ikev2-profile ikev2profile
!
!
!
!
!
! 
! 
!
!
interface Loopback1
 ip address <removed>!
interface Tunnel1
 vrf forwarding C1_1
 ip address <removed> no ip redirects
 ip hello-interval eigrp 101 30
 ip hold-time eigrp 101 90
 ip nhrp network-id 1000
 ip nhrp nhs 192.0.1.1 nbma 100.0.10.2 multicast
 ip tcp adjust-mss 1200
 nhrp group spoke_group1
 cts sgt inline
 bfd interval 1000 min_rx 1000 multiplier 5
 no bfd echo
 tunnel source Loopback1
 tunnel mode gre multipoint
 tunnel path-mtu-discovery
 tunnel protection ipsec profile dmvpn-hub
!
interface GigabitEthernet0/0/0
 no ip address
 shutdown
 negotiation auto
!
interface GigabitEthernet0/0/1
 no ip address
 shutdown
 negotiation auto
!
interface GigabitEthernet0/0/2
 no ip address
 negotiation auto
!
interface GigabitEthernet0/0/2.1
 encapsulation dot1Q 100
 vrf forwarding C1_1
 ip address <removed>!
interface GigabitEthernet0/0/3
 no ip address
 shutdown
 negotiation auto
!
interface GigabitEthernet0/0/4
 no ip address
 shutdown
 negotiation auto
!
interface GigabitEthernet0/0/5
 no ip address
 shutdown
 negotiation auto
!
interface GigabitEthernet0/0/6
 no ip address
 shutdown
 negotiation auto
!
interface GigabitEthernet0/0/7
 no ip address
 shutdown
 negotiation auto
!
interface TenGigabitEthernet0/1/0
 ip address <removed> no negotiation auto
!
interface TenGigabitEthernet0/1/1
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/2
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/3
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/4
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/5
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/6
 no ip address
 shutdown
 no negotiation auto
!
interface TenGigabitEthernet0/1/7
 no ip address
 shutdown
 no negotiation auto
!
interface GigabitEthernet0
 vrf forwarding Mgmt-intf
 ip address <removed> negotiation auto
!
!
router eigrp 101
 !
 address-family ipv4 vrf C1_1 autonomous-system 101
  network 10.2.2.0 0.0.0.255
  network 192.0.0.0 0.255.255.255
  passive-interface GigabitEthernet0/0/2.1
 exit-address-family
!
ip forward-protocol nd
!
ip tftp source-interface GigabitEthernet0
ip tftp blocksize 8192
ip http server
ip http authentication local
ip http secure-server
ip ssh bulk-mode 131072
ip route 0.0.0.0 0.0.0.0 50.50.50.1
ip route vrf Mgmt-intf 202.153.144.90 255.255.255.255 9.45.0.1
ip route vrf Mgmt-intf 202.153.144.90 255.255.255.255 9.41.0.1
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
line con 0
 exec-timeout 0 0
 stopbits 1
line aux 0
line vty 0 4
 login
 transport input ssh
!
call-home
 ! If contact email address in call-home is configured as sch-smart-licensing@cisco.com
 ! the email address configured in Cisco Smart License Portal will be used as contact email address to send SCH notifications.
 contact-email-addr sch-smart-licensing@cisco.com
 profile "CiscoTAC-1"
  active
  destination transport-method http
!
!
!
!
!
!
end