Re: OT: Flapping eigrp interface

Hello Ncholas,

Find below the crypto configs:

crypto isakmp policy 100
 hash md5
 authentication pre-share
crypto isakmp key ABCBCC02TUNNEL address 192.x.y.74
!

crypto ipsec transform-set BDQ1 esp-des esp-md5-hmac
!
crypto map ABC_IPsec 1 ipsec-isakmp
 set peer 192.x.y.74
 set security-association lifetime seconds 86400
 set transform-set BDQ1
 set pfs group1
 match address BHQ-IPSec

ip access-list extended BHQ-IPSec
 permit gre host 192.x.y.73 host 172.x.y.74

2009/11/24 Nicolas Leiva <nicolasleiva_at_gmail.com>

> What does the crypto map say?.. Does it take care of Multicast traffic for
> eigrp?
>
> Nicolas
> http://ccie-en-espanol.blogspot.com/
>
> On Tue, Nov 24, 2009 at 12:14 PM, olumayokun fowowe
<olumayokun_at_gmail.com>wrote:
>
>> Hello all,
>>
>> I have a challenge which I am trying to resolve. Below is the output of my
>> 'show logg' and necessary config. What is the most likely cause for this,
>> and how do I resolve it.
>>
>> Nov 24 15:37:32: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 192.x.y.78
>> (Tunnel1) is down: retry limit exceeded
>> Nov 24 15:37:35: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 192.x.y.78
>> (Tunnel1) is up: new adjacency
>> Nov 24 15:38:54: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 192.x.y.78
>> (Tunnel1) is down: retry limit exceeded
>> Nov 24 15:38:55: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 192.x.y.78
>> (Tunnel1) is up: new adjacency
>> Nov 24 15:40:14: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 192.x.y.78
>> (Tunnel1) is down: retry limit exceeded
>> Nov 24 15:40:18: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 192.x.y.78
>> (Tunnel1) is up: new adjacency
>> Nov 24 15:41:38: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 192.x.y.78
>> (Tunnel1) is down: retry limit exceeded
>> Nov 24 15:41:41: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 192.x.y.78
>> (Tunnel1) is up: new adjacency
>>
>> interface Tunnel100
>> bandwidth 100000
>> ip address 192.x.y.77 255.255.255.252
>> ip mtu 1400
>> ip bandwidth-percent eigrp 10 5
>> load-interval 30
>> tunnel source 192.x.y.73
>> tunnel destination 172.x.y.74
>> crypto map ABC_IPsec
>>
>> router eigrp 100
>> net 192.x.0.0
>> no auto
>>
>> Regards,
>>
>> Mayokun
>>
>>
>> Blogs and organic groups at http://www.ccie.net
>>
>> _______________________________________________________________________
>> Subscription information may be found at:
>> http://www.groupstudy.com/list/CCIELab.html

Blogs and organic groups at http://www.ccie.net
Received on Tue Nov 24 2009 - 16:39:36 ART