On Sat, Oct 01, 2016 at 10:44:02PM +0000, Jens Sauer wrote: > Hi OpenBSD community, > > i'm looking for an OpenSource implementation of DMVPN (Dynamic Multipoint > Virtual private network). > > Currently i just found the draft (from 2013) : > https://tools.ietf.org/html/draft-detienne-dmvpn-00 > > Comming from Cisco and would be pleased to see it under OpenBSD. > http://www.cisco.com/c/dam/en/us/products/collateral/security/dynamic-multipoint-vpn-dmvpn/DMVPN_Overview.pdf > > Hope i could get an advice in how to implement (use) it under OpenDSD.
OpenBSD does not have support for mGRE and NHRP. If you're not having hundreds of sites you want to connect you could set up tunnels (gif or gre), protect it with ipsec and run a routing protocol over that. It scales best if you automate it (I use ansible for this). Remi
