DMVPN Network Performance Based on Dynamic Routing Protocols and Basic IPsec Encryption

摘要

DMVPN technology is a solution introduced by cisco to overcome the limitation of classical VPN service. DMVPN has three phases running with a combination of routing protocols, mGRE encapsulation, and NHRP protocol. For DMVPN security, a basic IPsec configuration must be implemented. In this paper, we implemented a small scale DMVPN network (Hub, Spoke1, Spoke2, LAN1, LAN2) in phase 1 and 2 only using GNS3 simulator and compare a some key performance indicators “KPI's” between different routing protocols (OSPF, EBGP, RIPv2, EIRGP) in different phases. The parameters we use in this paper are jitter, throughput, packet loss, and latency; we also implemented a basic security configuration in one lab in phase 2(OSPF + IPsec) to evaluate the impact of the security implementation in the network. This paper illustrates that phase 2 has better results compared with phase 1; in phase 2, OSPF protocol with no security implementation shows a higher performance and has the best throughput value of 7.04 Mbits/sec, with lowest jitter value of 18.243 ms and low latency value of 100.983 ms. Implementing IPsec in phase 2 decreases the throughput of OSPF up to 62.642 %. In phase 2, EIGRP shows the highest jitter of 26.775 ms, RIPv2 shows the highest latency of 120.741 ms.