RE: OT: Flapping eigrp interface

Do you really have a 100Mbps tunnel path, and your only giving it 5% of the
bandwidth for EIGRP updates. With 100Mbps, which doesn't account for the
additional GRE Overhead, and only 5Mbps for the EIGRP updates. It isn't
complaining about SIA's. What does "sh ip eigrp nei" display. What is the
bandwidth on the remote side. Interfaces under 1500 will increase the hello
and hold timers, your missing hellos most likely. Hold time should always be
between 10 and 15 seconds, otherwise you are missing hellos.

David

--
http://dcp.dcptech.com
 
> -----Original Message-----
> From: nobody_at_groupstudy.com [mailto:nobody_at_groupstudy.com] On Behalf Of
> Nickelby Thane
> Sent: Tuesday, November 24, 2009 7:37 PM
> To: Nicolas Leiva
> Cc: olumayokun fowowe; Cisco certification
> Subject: Re: OT: Flapping eigrp interface
> 
> Posting the full configs on both ends might let us have a full view on
> what
> is going on :-)
> 
> --
> Warmest regards,
> Nickelby Thane
> Personal Blog : http://nthane.blogspot.com
> CCIE Blog : http://cciecisco.blogspot.com
> 
> 
> 2009/11/25 Nicolas Leiva <nicolasleiva_at_gmail.com>
> 
> > Hmmm... I think the problem might be on the other end as you are
> receiving
> > hellos (that brings up the adjacency) but for some reason you get no
> > acknowledge of the UPDATES you are sending (16 retransmissions, round
> 80
> > seconds).
> >
> > If possible, do a debug eigrp packets on the other end and check if
> you are
> > getting the updates from your neighbor and what's the source IP and
> whether
> > you can reach it.
> >
> >
> > Nicolas
> > http://ccie-en-espanol.blogspot.com/
> >
> > 2009/11/24 olumayokun fowowe <olumayokun_at_gmail.com>
> >
> > > Hello Ncholas,
> > >
> > > Find below the crypto configs:
> > >
> > > crypto isakmp policy 100
> > >  hash md5
> > >  authentication pre-share
> > > crypto isakmp key ABCBCC02TUNNEL address 192.x.y.74
> > > !
> > >
> > > crypto ipsec transform-set BDQ1 esp-des esp-md5-hmac
> > > !
> > > crypto map ABC_IPsec 1 ipsec-isakmp
> > >  set peer 192.x.y.74
> > >  set security-association lifetime seconds 86400
> > >  set transform-set BDQ1
> > >  set pfs group1
> > >  match address BHQ-IPSec
> > >
> > > ip access-list extended BHQ-IPSec
> > >  permit gre host 192.x.y.73 host 172.x.y.74
> > >
> > > 2009/11/24 Nicolas Leiva <nicolasleiva_at_gmail.com>
> > >
> > > What does the crypto map say?.. Does it take care of Multicast
> traffic
> > for
> > >> eigrp?
> > >>
> > >> Nicolas
> > >> http://ccie-en-espanol.blogspot.com/
> > >>
> > >> On Tue, Nov 24, 2009 at 12:14 PM, olumayokun fowowe <
> > olumayokun_at_gmail.com
> > >> > wrote:
> > >>
> > >>> Hello all,
> > >>>
> > >>> I have a challenge which I am trying to resolve. Below is the
> output of
> > >>> my
> > >>> 'show logg' and necessary config. What is the most likely cause
> for
> > this,
> > >>> and how do I resolve it.
> > >>>
> > >>> Nov 24 15:37:32: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor
> 192.x.y.78
> > >>> (Tunnel1) is down: retry limit exceeded
> > >>> Nov 24 15:37:35: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor
> 192.x.y.78
> > >>> (Tunnel1) is up: new adjacency
> > >>> Nov 24 15:38:54: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor
> 192.x.y.78
> > >>> (Tunnel1) is down: retry limit exceeded
> > >>> Nov 24 15:38:55: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor
> 192.x.y.78
> > >>> (Tunnel1) is up: new adjacency
> > >>> Nov 24 15:40:14: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor
> 192.x.y.78
> > >>> (Tunnel1) is down: retry limit exceeded
> > >>> Nov 24 15:40:18: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor
> 192.x.y.78
> > >>> (Tunnel1) is up: new adjacency
> > >>> Nov 24 15:41:38: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor
> 192.x.y.78
> > >>> (Tunnel1) is down: retry limit exceeded
> > >>> Nov 24 15:41:41: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10: Neighbor
> 192.x.y.78
> > >>> (Tunnel1) is up: new adjacency
> > >>>
> > >>> interface Tunnel100
> > >>>  bandwidth 100000
> > >>>  ip address 192.x.y.77 255.255.255.252
> > >>>  ip mtu 1400
> > >>>  ip bandwidth-percent eigrp 10 5
> > >>>  load-interval 30
> > >>>  tunnel source 192.x.y.73
> > >>>  tunnel destination 172.x.y.74
> > >>>  crypto map ABC_IPsec
> > >>>
> > >>> router eigrp 100
> > >>> net 192.x.0.0
> > >>> no auto
> > >>>
> > >>> Regards,
> > >>>
> > >>> Mayokun
> > >>>
> > >>>
> > >>> Blogs and organic groups at http://www.ccie.net
> > >>>
> > >>>
> _______________________________________________________________________
> > >>> Subscription information may be found at:
> > >>> http://www.groupstudy.com/list/CCIELab.html
> >
> >
> > Blogs and organic groups at http://www.ccie.net
> >
> >
> _______________________________________________________________________
> > Subscription information may be found at:
> > http://www.groupstudy.com/list/CCIELab.html
> 
> 
> Blogs and organic groups at http://www.ccie.net
> 
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
Blogs and organic groups at http://www.ccie.net