From: Larry Roberts (groupstudy@american-hero.com)
Date: Wed Mar 15 2006 - 15:20:31 GMT-3
What do you mean when you say it doesn't work? Does the eigrp neighbor
not form? does the SA's not get created? Can you not ping across them?
Only thing that makes me scratch my head from your configuration is the
tunnel dest on the hub. the destination isn't needed and you do need to
define gre multipoint.
I would also try to build this without the encryption first. just to
make sure that this isn't causing the issue.
Chris Broadway wrote:
> I have a standard hub and spoke network trying to use DMVPN. My CE router
> hands off to a carrier network and the carrier network is using seperate L3
> VPNS and VRF's. CE to CE I am running EIGRP. When I configure my spoke as
> a point to point gre tunnel and the hub as a point to point gre tunnel, all
> works. When I change them both to a Mgre, it does not. If I change the
> spoke to MGRE and the hub as P2P, it works. Below are the tunnel
> configs...any clues to what is not working and why?
>
> CE "spoke"
> interface Tunnel0
> ip address 50.50.50.2 255.255.255.0
> no ip redirects
> ip mtu 1416
> ip nhrp authentication cisco
> ip nhrp map 50.50.50.1 10.10.5.2
> ip nhrp map multicast 10.10.5.2
> ip nhrp network-id 99
> ip nhrp nhs 50.50.50.1
> tunnel source FastEthernet0/0
> tunnel mode gre multipoint
> tunnel protection ipsec profile VPN
> end
>
> CE "hub"
> interface Tunnel0
> ip address 50.50.50.1 255.255.255.0
> ip mtu 1416
> ip nhrp authentication cisco
> ip nhrp map multicast dynamic
> ip nhrp network-id 99
> tunnel source GigabitEthernet0/1
> tunnel destination 10.10.8.2
> tunnel protection ipsec profile VPN
>
> -Chris
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
This archive was generated by hypermail 2.1.4 : Sat Apr 01 2006 - 10:07:38 GMT-3