Posting the full configs on both ends might let us have a full view on what
is going on :-)
-- Warmest regards, Nickelby Thane Personal Blog : http://nthane.blogspot.com CCIE Blog : http://cciecisco.blogspot.com 2009/11/25 Nicolas Leiva <nicolasleiva_at_gmail.com> > Hmmm... I think the problem might be on the other end as you are receiving > hellos (that brings up the adjacency) but for some reason you get no > acknowledge of the UPDATES you are sending (16 retransmissions, round 80 > seconds). > > If possible, do a debug eigrp packets on the other end and check if you are > getting the updates from your neighbor and what's the source IP and whether > you can reach it. > > > Nicolas > http://ccie-en-espanol.blogspot.com/ > > 2009/11/24 olumayokun fowowe <olumayokun_at_gmail.com> > > > Hello Ncholas, > > > > Find below the crypto configs: > > > > crypto isakmp policy 100 > > hash md5 > > authentication pre-share > > crypto isakmp key ABCBCC02TUNNEL address 192.x.y.74 > > ! > > > > crypto ipsec transform-set BDQ1 esp-des esp-md5-hmac > > ! > > crypto map ABC_IPsec 1 ipsec-isakmp > > set peer 192.x.y.74 > > set security-association lifetime seconds 86400 > > set transform-set BDQ1 > > set pfs group1 > > match address BHQ-IPSec > > > > ip access-list extended BHQ-IPSec > > permit gre host 192.x.y.73 host 172.x.y.74 > > > > 2009/11/24 Nicolas Leiva <nicolasleiva_at_gmail.com> > > > > What does the crypto map say?.. Does it take care of Multicast traffic > for > >> eigrp? > >> > >> Nicolas > >> http://ccie-en-espanol.blogspot.com/ > >> > >> On Tue, Nov 24, 2009 at 12:14 PM, olumayokun fowowe < > olumayokun_at_gmail.com > >> > wrote: > >> > >>> Hello all, > >>> > >>> I have a challenge which I am trying to resolve. Below is the output of > >>> my > >>> 'show logg' and necessary config. What is the most likely cause for > this, > >>> and how do I resolve it. > >>> > >>> Nov 24 15:37:32: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 192.x.y.78 > >>> (Tunnel1) is down: retry limit exceeded > >>> Nov 24 15:37:35: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 192.x.y.78 > >>> (Tunnel1) is up: new adjacency > >>> Nov 24 15:38:54: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 192.x.y.78 > >>> (Tunnel1) is down: retry limit exceeded > >>> Nov 24 15:38:55: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 192.x.y.78 > >>> (Tunnel1) is up: new adjacency > >>> Nov 24 15:40:14: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 192.x.y.78 > >>> (Tunnel1) is down: retry limit exceeded > >>> Nov 24 15:40:18: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 192.x.y.78 > >>> (Tunnel1) is up: new adjacency > >>> Nov 24 15:41:38: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 192.x.y.78 > >>> (Tunnel1) is down: retry limit exceeded > >>> Nov 24 15:41:41: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor 192.x.y.78 > >>> (Tunnel1) is up: new adjacency > >>> > >>> interface Tunnel100 > >>> bandwidth 100000 > >>> ip address 192.x.y.77 255.255.255.252 > >>> ip mtu 1400 > >>> ip bandwidth-percent eigrp 10 5 > >>> load-interval 30 > >>> tunnel source 192.x.y.73 > >>> tunnel destination 172.x.y.74 > >>> crypto map ABC_IPsec > >>> > >>> router eigrp 100 > >>> net 192.x.0.0 > >>> no auto > >>> > >>> Regards, > >>> > >>> Mayokun > >>> > >>> > >>> Blogs and organic groups at http://www.ccie.net > >>> > >>> _______________________________________________________________________ > >>> Subscription information may be found at: > >>> http://www.groupstudy.com/list/CCIELab.html > > > Blogs and organic groups at http://www.ccie.net > > _______________________________________________________________________ > Subscription information may be found at: > http://www.groupstudy.com/list/CCIELab.html Blogs and organic groups at http://www.ccie.netReceived on Wed Nov 25 2009 - 08:37:10 ART
This archive was generated by hypermail 2.2.0 : Tue Dec 01 2009 - 06:36:29 ART