{"id":233,"date":"2017-08-13T16:43:47","date_gmt":"2017-08-13T20:43:47","guid":{"rendered":"http:\/\/puluka.com\/home\/?p=233"},"modified":"2017-08-13T16:43:47","modified_gmt":"2017-08-13T20:43:47","slug":"configuration-of-auto-complete-vpn-with-ospf","status":"publish","type":"post","link":"http:\/\/puluka.com\/home\/networking\/screenos\/configuration-of-auto-complete-vpn-with-ospf\/","title":{"rendered":"Configuration of Auto-Complete VPN with OSPF"},"content":{"rendered":"

Product<\/strong>: ScreenOS SSG Series
\nVersion<\/strong>: 6.2<\/p>\n

Network Topology:<\/h2>\n

Network diagram:<\/strong><\/p>\n

\"\"<\/a>
\nHub and spoke VPN with multiple sites using point to multipoint
\nUsing OSPF for route distribution
\nUsing Auto-complete VPN for spoke to spoke traffic<\/p>\n

Description:<\/h2>\n

The combines two of the convenience vpn features on the ScreenOS platform, dynamic routing protocol vpn and the on demand auto-complete vpn between spokes on a hub and spoke network.\u00a0 This allows a relatively standard spoke configuration process where only a few parameters are changed in the creation of a new spoke.\u00a0 But when the new site is added to the network full routing is established and efficient direct tunnels are created as needed.<\/p>\n

The process relies on these basic technologies:<\/p>\n

\u2022 IPSEC VPN in route mode
\n\u2022 Point to multipoint tunnel interface
\n\u2022 OSPF dynamic protocol configuration to distribute routes
\n\u2022 AutoComplete-VPN to create the on demand tunnels to avoid looping all traffic through the hub<\/p>\n

The configuration requires a base setup on the hub location where primary services are connected.\u00a0 Each spoke then has a configuration set to connect and provide these services to the hub.\u00a0 While the hub adds a section for each new spoke that is created in the system.<\/p>\n

1. Configure base services on the hub location.\u00a0 This occurs only once and remains the same no matter how many spokes are added to the system.
\n2. For each spoke there are two sets of configuration<\/p>\n

A-Hub configuration for VPN access to the spoke
\nB-Spoke configuration settting up basic services and the VPN to the hub<\/p><\/blockquote>\n

Zone Layout<\/strong><\/p>\n

untrust interface is ethernet0\/0
\ntrust interface is bgroup0
\ntunnel.1 interface is in trust zone<\/p>\n

This zone layout puts all sites and tunnels into the same security zone.\u00a0 No policies need to be created on any device for full communications across the entire hub and spoke network.\u00a0 This is assuming that intra zone blocking is NOT enabled on any of the firewalls for the trust zone.\u00a0 This is the default behavior for the trust zone.<\/p>\n

1. Hub location base configuration:<\/p>\n

This sets up and configures all needed services on the hub shared by all tunnels
\nCreate VPN tunnel interface<\/strong>
\nset interface tunnel.1 zone Trust
\nset interface tunnel.1 ip 10.0.0.1\/24
\nCreate AC-VPN gateway profile<\/strong>
\nset ike gateway ac-spoke-gw acvpn-profile sec-level standard
\nCreate AC-VPN profile<\/strong>
\nset vpn ac-vpn acvpn-profile ac-spoke-gw no-replay tunnel idletime 0 sec-level standard
\nEnable & Configure NHRP for VPN usage<\/strong>
\nset vrouter trust-vr
\nset protocol nhrp
\nset protocol nhrp acvpn-profile ac-vpn
\nexit
\nset interface tunnel.1 protocol nhrp enable
\nEnable & Configure OSPF<\/strong>
\nset vr trust protocol ospf
\nset vr trust protocol ospf enable
\nset vr trust protocol ospf area 1
\nset interface bgroup0 protocol ospf area 1
\nset interface bgroup0 protocol ospf enable
\nset interface tunnel.1 protocol ospf area 0
\nset interface tunnel.1 protocol ospf link-type p2mp
\nset interface tunnel.1 protocol ospf enable<\/p><\/blockquote>\n

2. A. Hub location per spoke configuration:<\/p>\n

Repeat only these commands for additional spoke sites
\nCreate VPN Gateway to spoke
\nset ike gateway SpokeA-GW address 2.2.2.2 Main outgoing-interface “ethernet0\/0” preshare Juniper== sec-level standard
\nset ike gateway SpokeB-GW address 3.3.3.3 Main outgoing-interface “ethernet0\/0” preshare Juniper== sec-level standard
\nset ike gateway SpokeC-GW address 4.4.4.4 Main outgoing-interface “ethernet0\/0” preshare Juniper== sec-level standard
\nset ike gateway SpokeD-GW address 5.5.5.5 Main outgoing-interface “ethernet0\/0” preshare Juniper== sec-level standard
\nCreate VPN tunnel bound to tunnel interface
\nset vpn SpokeA gateway SpokeA-GW no-replay tunnel idletime 0 sec-level standard
\nset vpn SpokeA bind interface tunnel.1
\nset vpn SpokeB gateway SpokeB-GW no-replay tunnel idletime 0 sec-level standard
\nset vpn SpokeB bind interface tunnel.1
\nset vpn SpokeC gateway SpokeC-GW no-replay tunnel idletime 0 sec-level standard
\nset vpn SpokeC bind interface tunnel.1
\nset vpn SpokeD gateway SpokeD-GW no-replay tunnel idletime 0 sec-level standard
\nset vpn SpokeD bind interface tunnel.1<\/p><\/blockquote>\n

2. B. Spoke location:<\/p>\n

All steps on spokes are identical with exceptions noted below.\u00a0 Change the indicated parameters to match the spoke location on the network as each new spoke is added.
\nCreate VPN tunnel interface
\nset interface tunnel.1 zone Trust
\nset interface tunnel.1 ip 10.0.0.2\/24
\n**Change the ip address to match the spoke location
\nCreate VPN Gateway to hub
\nset ike gateway Hub-gw address 1.1.1.1 Main outgoing-interface ethernet0\/0 preshare juniper== sec-level standard
\nCreate VPN tunnel bound to tunnel interface
\nset vpn Hub gateway Hub-GW no-replay tunnel idletime 0 sec-level standard
\nset vpn Hub bind interface tunnel.1
\nCreate AC-VPN Dynamic gateway
\nset ike gateway ac-hub-gw acvpn-dynamic<\/p>\n

Create ACVPN Dynamic VPN
\nset vpn ac-hub-vpn acvpn-dynamic ac-hub-gw hub
\nEnable & Configure NHRP on router
\nset vrouter trust-vr
\nset protocol nhrp
\nset protocol nhrp nhs 10.0.0.1
\nset protocol nhrp cache 10.0.2.0\/24
\n**Change the ip address to match the bgroup0 LAN on spoke
\nexit
\nset interface tunnel.1 protocol nhrp enable
\nEnable & Configure OSPF
\nset vr trust protocol ospf
\nset vr trust protocol ospf enable
\nset vr trust protocol ospf area 2
\n**Change area to match Spoke LAN assignment
\nset interface bgroup0 protocol ospf area 2
\n**Change area to match Spoke LAN assignment
\nset interface bgroup0 protocol ospf enable
\nset interface tunnel.1 protocol ospf area 0
\nset interface tunnel.1 protocol ospf enable<\/p><\/blockquote>\n

Verification:<\/h2>\n

routing table checks<\/strong><\/p>\n

Running “get route protocol ospf” on a spoke should show the routes to all other spokes and the hub as learned from OSPF the capital “O” label below.\u00a0\u00a0 This should contain all the connected spokes and the hub if routes are fully distributed properly.
\nThis output is from spoke C
\nget route protocol ospf
\nIPv4 Dest-Routes for <untrust-vr> (0 entries)
\n————————————————————————————–
\nH: Host C: Connected S: Static A: Auto-Exported
\nI: Imported R: RIP P: Permanent D: Auto-Discovered
\nN: NHRP
\niB: IBGP eB: EBGP O: OSPF E1: OSPF external type 1
\nE2: OSPF external type 2 trailing B: backup routeIPv4 Dest-Routes for <trust-vr> (14 entries)
\n————————————————————————————–
\nID\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 IP-Prefix\u00a0\u00a0\u00a0\u00a0\u00a0 Interface\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Gateway\u00a0\u00a0 P Pref\u00a0\u00a0\u00a0 Mtr\u00a0\u00a0\u00a0\u00a0 Vsys
\n————————————————————————————–
\n*\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 10\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 10.0.0.1\/32\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 tun.1\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 10.0.0.1\u00a0\u00a0 O\u00a0\u00a0 60\u00a0\u00a0\u00a0\u00a0 10\u00a0\u00a0\u00a0\u00a0 Root
\n*\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 13\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 10.0.1.0\/24\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 tun.1\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 10.0.0.1\u00a0\u00a0 O\u00a0\u00a0 60\u00a0\u00a0\u00a0\u00a0 21\u00a0\u00a0\u00a0\u00a0 Root
\n*\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 12\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 10.0.2.0\/24\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 tun.1\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 10.0.0.1\u00a0\u00a0 O\u00a0\u00a0 60\u00a0\u00a0\u00a0\u00a0 11\u00a0\u00a0\u00a0\u00a0 Root
\n*\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 11\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 10.0.3.0\/24\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 tun.1\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 10.0.0.1\u00a0\u00a0 O\u00a0\u00a0 60\u00a0\u00a0\u00a0\u00a0 21\u00a0\u00a0\u00a0\u00a0 Root
\n*\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 14\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 10.0.5.0\/24\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 tun.1\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 10.0.0.1\u00a0\u00a0 O\u00a0\u00a0 60\u00a0\u00a0\u00a0\u00a0 21\u00a0\u00a0\u00a0\u00a0 Root
\nTotal number of ospf routes: 5
\nOn the hub verify NHRP full connectivity
\nget route protocol nhrpIPv4 Dest-Routes for <untrust-vr> (0 entries)
\n————————————————————————————–
\nH: Host C: Connected S: Static A: Auto-Exported
\nI: Imported R: RIP P: Permanent D: Auto-Discovered
\nN: NHRP
\niB: IBGP eB: EBGP O: OSPF E1: OSPF external type 1
\nE2: OSPF external type 2 trailing B: backup routeIPv4 Dest-Routes for <trust-vr> (19 entries)
\n————————————————————————————–
\nID\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 IP-Prefix\u00a0\u00a0\u00a0\u00a0\u00a0 Interface\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Gateway\u00a0\u00a0 P Pref\u00a0\u00a0\u00a0 Mtr\u00a0\u00a0\u00a0\u00a0 Vsys
\n————————————————————————————–
\n*\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 19\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 10.0.0.2\/32\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 tun.1\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 10.0.0.2\u00a0\u00a0 N\u00a0\u00a0 35\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0\u00a0\u00a0\u00a0 Root
\n*\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 16\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 10.0.0.3\/32\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 tun.1\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 10.0.0.3\u00a0\u00a0 N\u00a0\u00a0 35\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0\u00a0\u00a0\u00a0 Root
\n*\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 17\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 10.0.0.4\/32\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 tun.1\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 10.0.0.3\u00a0\u00a0 N\u00a0\u00a0 35\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0\u00a0\u00a0\u00a0 Root
\n*\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 17\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 10.0.0.5\/32\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 tun.1\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 10.0.0.3\u00a0\u00a0 N\u00a0\u00a0 35\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0\u00a0\u00a0\u00a0 Root
\n*\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 19\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 10.0.2.0\/24\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 tun.1\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 10.0.0.3\u00a0\u00a0 N\u00a0\u00a0 35\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0\u00a0\u00a0\u00a0 Root
\n*\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 21\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 10.0.3.0\/24\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 tun.1\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 10.0.0.4\u00a0\u00a0 N\u00a0\u00a0 35\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0\u00a0\u00a0\u00a0 Root
\n*\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 20\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 10.0.4.0\/24\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 tun.1\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 10.0.0.2\u00a0\u00a0 N\u00a0\u00a0 35\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0\u00a0\u00a0\u00a0 Root
\n*\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 23\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 10.0.5.0\/24\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 tun.1\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 10.0.0.5\u00a0\u00a0 N\u00a0\u00a0 35\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0\u00a0\u00a0\u00a0 Root
\nTotal number of nhrp routes: 8
\nget vrouter trust protocol nhrp cache
\n——————————————————————————–
\nflags: R-registered, C-cached, L-replied, P-pushed, S-static, I-imported,
\nF-in FIB, D-being deleted.
\n——————————————————————————–
\nPrefix\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 nhop-public-IP nhop-private-IP Pref\u00a0\u00a0\u00a0 Flags Expire(in sec)
\n——————————————————————————–
\n10.0.0.4\/32\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 4.4.4.4\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 10.0.0.4\u00a0 128\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 C 257
\n10.0.3.0\/24\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 3.3.3.3\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 10.0.0.3\u00a0 128\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 RF 283
\n10.0.0.2\/32\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 2.2.2.2\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 10.0.0.2\u00a0 128\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 CF 283
\n10.0.0.2\/32\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 5.5.5.5\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 10.0.0.5\u00a0 128\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 CF 283
\n10.0.0.3\/32\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 3.3.3.3\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 10.0.0.3\u00a0 128\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 CF 283
\n10.0.2.0\/24\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 2.2.2.2\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 10.0.0.2\u00a0 128\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 RF 283
\n10.0.5.0\/24\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 5.5.5.5\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 10.0.0.2\u00a0 128\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 RF 283
\n10.0.4.0\/24\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 4.4.4.4\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 10.0.0.4\u00a0 128\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 RF 257<\/p>\n

Confirm setup of ac-vpn<\/p>\n

On spoke look for the sa configuration for the AC-VPN
\nget sa
\nsa: 2
\nHEX ID\u00a0\u00a0\u00a0 Gateway\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Port Algorithm\u00a0\u00a0\u00a0\u00a0 SPI\u00a0\u00a0\u00a0\u00a0\u00a0 Life:sec kb Sta\u00a0\u00a0 PID vsys
\n00000006<\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 1.1.1.1\u00a0 500 esp:3des\/sha1 677cddab\u00a0 1987 unlim A\/-\u00a0\u00a0\u00a0 -1 0
\n00000006>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 1.1.1.1\u00a0 500 esp:3des\/sha1 8e6fb985\u00a0 1987 unlim A\/-\u00a0\u00a0\u00a0 -1 0
\n00000007<\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0.0.0.0\u00a0 500 esp:3des\/sha1 00000000 expir unlim I\/I\u00a0\u00a0\u00a0 -1 0
\n00000007>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0.0.0.0\u00a0 500 esp:3des\/sha1 00000000 expir unlim I\/I\u00a0\u00a0\u00a0 -1 0<\/p>\n

References:<\/h2>\n

ScreenOS Concepts & Examples Guides<\/strong>
\nhttp:\/\/www.juniper.net\/techpubs\/software\/screenos\/screenos6.2.0\/index.html<\/a><\/p>\n

Route based VPN tunnels<\/strong><\/em>
\nConcepts & Examples Guide
\nVolume 5 Virtual Private Networks
\nChapter 3 VPN Guidelines
\nChapter 4 VPN: Sit-to-site VPN Configurations
\nPoint to multi-point tunnels to share tunnel interfaces<\/strong><\/em>
\nConcepts & Examples Guide
\nVolume 5 Virtual Private Networks
\nChapter 7 Advanced VPN Features: Multple Tunnels per Tunnel Interface
\nOSPF
\nConcepts & Examples Guide
\nVolume 7 Routing
\nChapter 3
\nAutoConnect-VPN<\/strong><\/em>
\nConcepts & Examples Guide
\nVolume 5 Virtual Private Networks
\nChapter 8<\/p>\n

Originally Posted October 16, 2010
\nLast Revised on May 22, 2011<\/p>\n","protected":false},"excerpt":{"rendered":"

Product: ScreenOS SSG Series Version: 6.2 Network Topology: Network diagram: Hub and spoke VPN with multiple sites using point to multipoint Using OSPF for route distribution Using Auto-complete VPN for spoke to spoke traffic Description: […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[10],"tags":[],"class_list":["post-233","post","type-post","status-publish","format-standard","hentry","category-screenos"],"_links":{"self":[{"href":"http:\/\/puluka.com\/home\/wp-json\/wp\/v2\/posts\/233","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/puluka.com\/home\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/puluka.com\/home\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/puluka.com\/home\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/puluka.com\/home\/wp-json\/wp\/v2\/comments?post=233"}],"version-history":[{"count":1,"href":"http:\/\/puluka.com\/home\/wp-json\/wp\/v2\/posts\/233\/revisions"}],"predecessor-version":[{"id":235,"href":"http:\/\/puluka.com\/home\/wp-json\/wp\/v2\/posts\/233\/revisions\/235"}],"wp:attachment":[{"href":"http:\/\/puluka.com\/home\/wp-json\/wp\/v2\/media?parent=233"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/puluka.com\/home\/wp-json\/wp\/v2\/categories?post=233"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/puluka.com\/home\/wp-json\/wp\/v2\/tags?post=233"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}