Configuration_DMVPN:

Hub:

set interfaces tunnel tun100 address '172.19.200.1/24'
set interfaces tunnel tun100 enable-multicast
set interfaces tunnel tun100 encapsulation 'gre'
set interfaces tunnel tun100 ip adjust-mss '1360'
set interfaces tunnel tun100 mtu '1400'
set interfaces tunnel tun100 parameters ip key '50120'
set interfaces tunnel tun100 source-interface 'eth0'
set protocols nhrp tunnel tun100 holding-time '10'
set protocols nhrp tunnel tun100 multicast 'dynamic'
set protocols nhrp tunnel tun100 redirect
set protocols nhrp tunnel tun100 shortcut
set protocols nhrp tunnel tun100 shortcut-destination
set vpn ipsec esp-group esp-hub lifetime '1800'
set vpn ipsec esp-group esp-hub mode 'transport'
set vpn ipsec esp-group esp-hub pfs 'dh-group19'
set vpn ipsec esp-group esp-hub proposal 1 encryption 'aes256'
set vpn ipsec esp-group esp-hub proposal 1 hash 'sha256'
set vpn ipsec ike-group ike-hub key-exchange 'ikev2'
set vpn ipsec ike-group ike-hub lifetime '1800'
set vpn ipsec ike-group ike-hub proposal 1 dh-group '19'
set vpn ipsec ike-group ike-hub proposal 1 encryption 'aes256'
set vpn ipsec ike-group ike-hub proposal 1 hash 'sha256'
set vpn ipsec ike-group ike-hub proposal 1 prf 'prfsha256'
set vpn ipsec interface 'eth0'
set vpn ipsec profile nhrpvpn authentication mode 'pre-shared-secret'
set vpn ipsec profile nhrpvpn authentication pre-shared-secret 'secret'
set vpn ipsec profile nhrpvpn bind tunnel 'tun100'
set vpn ipsec profile nhrpvpn esp-group 'esp-hub'
set vpn ipsec profile nhrpvpn ike-group 'ike-hub'



Spoke:

set interfaces tunnel tun100 address '172.19.200.3/24'
set interfaces tunnel tun100 enable-multicast
set interfaces tunnel tun100 encapsulation 'gre'
set interfaces tunnel tun100 ip adjust-mss '1360'
set interfaces tunnel tun100 mtu '1400'
set interfaces tunnel tun100 parameters ip key '50120'
set interfaces tunnel tun100 source-interface 'eth0'
set protocols nhrp tunnel tun100 holding-time '10'
set protocols nhrp tunnel tun100 map 172.19.200.1/24 nbma-address '100.10.1.2'
set protocols nhrp tunnel tun100 map 172.19.200.1/24 register
set protocols nhrp tunnel tun100 multicast 'nhs'
set protocols nhrp tunnel tun100 redirect
set protocols nhrp tunnel tun100 shortcut
set vpn ipsec esp-group esp-spoke lifetime '1800'
set vpn ipsec esp-group esp-spoke mode 'transport'
set vpn ipsec esp-group esp-spoke pfs 'dh-group19'
set vpn ipsec esp-group esp-spoke proposal 1 encryption 'aes256'
set vpn ipsec esp-group esp-spoke proposal 1 hash 'sha256'
set vpn ipsec ike-group ike-spoke close-action 'start'
set vpn ipsec ike-group ike-spoke dead-peer-detection action 'restart'
set vpn ipsec ike-group ike-spoke key-exchange 'ikev2'
set vpn ipsec ike-group ike-spoke lifetime '1800'
set vpn ipsec ike-group ike-spoke proposal 1 dh-group '19'
set vpn ipsec ike-group ike-spoke proposal 1 encryption 'aes256'
set vpn ipsec ike-group ike-spoke proposal 1 hash 'sha256'
set vpn ipsec ike-group ike-spoke proposal 1 prf 'prfsha256'
set vpn ipsec interface 'eth0'
set vpn ipsec profile nhrvpn authentication mode 'pre-shared-secret'
set vpn ipsec profile nhrvpn authentication pre-shared-secret 'secret'
set vpn ipsec profile nhrvpn bind tunnel 'tun100'
set vpn ipsec profile nhrvpn esp-group 'esp-spoke'
set vpn ipsec profile nhrvpn ike-group 'ike-spoke'