Filter
Top Products
26-17
User Guide for Cisco Security Manager 4.4
OL-28826-01
Chapter 26 GRE and DM VPNs
Dynamic Multipoint VPNs (DMVPN)
After you create the Large Scale DMVPN topology, a Server Load Balance policy is configured on the
IPsec Terminators with all the required parameters, which you can edit if required. Initially, all hubs are
given the same priority and number of VPN connections. For information on configuring the Server Load
Balance policy, see Configuring Server Load Balancing in Large Scale DMVPN, page 26-17.
Note VRF-Aware IPsec cannot be configured in a Large Scale DMVPN.
Related Topics
• Understanding DMVPN, page 26-10
• Configuring DMVPN, page 26-12
Configuring Server Load Balancing in Large Scale DMVPN
Use the Server Load Balance page to view or edit the server load balance policy configured on the IPsec
Terminators in a large scale DMVPN. Server load balancing optimizes performance in multiple
hub-and-spoke VPN topologies by sharing the workload among a group of hubs. In large scale DMVPN
configurations, the IPsec Terminators perform the traffic load balancing. For more information, see
Configuring Large Scale DMVPNs, page 26-16.
A weighted round robin (WRR) scheduling algorithm is used to control the bandwidth allocated to
output transmission queues. Weighting is based on the amount of bandwidth used by each transmit queue
on an interface. Packets from queues with higher capacity are transmitted more often than those from
queues with less capacity.
To open the Server Load Balance policy, in the Site-to-Site VPN Manager Window, select an existing
Large Scale DMVPN topology, then select Server Load Balance from the Policies list.
The table displays the hubs in the VPN, the hub’s weight relative to other hubs connected to the same
IPsec Terminator, and the maximum number of active connections allowed for the hub. To change the
weight or maximum connections, select the hub and click the Edit (pencil) button beneath the table to
open the Edit Load Balancing Parameters Dialog Box, page 26-17.
Related Topics
• Configuring Large Scale DMVPNs, page 26-16
• Filtering Tables, page 1-45
Edit Load Balancing Parameters Dialog Box
Use the Edit Load Balancing Parameters dialog box to change the server load balance parameters
configured on a hub that is connected to an IPsec Terminator in a large scale DMVPN.
Navigation Path
From the Server Load Balance policy, select a hub and click the Edit (pencil) button below the table.
For information on opening the Server Load Balance policy, see Configuring Server Load Balancing in
Large Scale DMVPN, page 26-17.
Related Topics
• Configuring Large Scale DMVPNs, page 26-16