#####HQ1######

ipsec proposal 10

ike proposal 10

ike peer dsvpn v2 pre-shared-key simple huawei@123 ike-proposal 10

ipsec profile dsvpnprofile ike-peer dsvpn proposal 10

interface GigabitEthernet0/0/0 ip address 202.100.1.10 255.255.255.0

interface GigabitEthernet0/0/1 ip address 192.168.3.1 255.255.255.0

interface LoopBack0 ip address 10.10.10.10 255.255.255.255

interface Tunnel0/0/1 ip address 172.16.1.10 255.255.255.0 tunnel-protocol gre p2mp source GigabitEthernet0/0/0 ospf network-type broadcast ipsec profile dsvpnprofile nhrp entry multicast dynamic nhrp network-id 123

ospf 1 router-id 10.10.10.10 area 0.0.0.0 network 172.16.1.0 0.0.0.255 network 192.168.3.0 0.0.0.255

####SPOK2#####

ipsec proposal 10

ike proposal 10

ike peer dsvpn_peer v2 pre-shared-key simple huawei@123 ike-proposal 10

ipsec profile dsvpnprofile ike-peer dsvpn_peer proposal 10

interface GigabitEthernet0/0/0 ip address 202.100.1.1 255.255.255.0

interface GigabitEthernet0/0/1 ip address 192.168.1.1 255.255.255.0

interface Tunnel0/0/1 ip address 172.16.1.1 255.255.255.0 tunnel-protocol gre p2mp source GigabitEthernet0/0/0 ospf network-type broadcast ospf dr-priority 0 ipsec profile dsvpnprofile nhrp entry multicast dynamic nhrp network-id 123 nhrp entry 172.16.1.10 202.100.1.10 register

ospf 1 router-id 1.1.1.1 area 0.0.0.0 network 172.16.1.0 0.0.0.255 network 192.168.1.0 0.0.0.255

##SPOKE3### SAME AS SPOKE 2

HQ查看路由条目:

192.168.1.0/24  OSPF    10   1563        D   172.16.1.1      Tunnel0/0/1
192.168.2.0/24  OSPF    10   1563        D   172.16.1.2      Tunnel0/0/1

spoke2查看路由条目 192.168.2.0/24 OSPF 10 1563 D 172.16.1.2 Tunnel0/0/1 192.168.3.0/24 OSPF 10 1563 D 172.16.1.10 Tunnel0/0/1