RE: Issue on NHRP Mapping

From: Gavin Schokman <Gavin.Schokman_at_nscglobal.com>
Date: Mon, 25 Jan 2010 14:08:52 -0000

Hi Niyi,

Looks like your spoke config is setup for normal point-to-point GRE, not
mGRE.
Suggest you update the spoke config as follows:

Tunnel at the spoke
-----------------------------
interface Tunnel10
 no tunnel destination 10.10.10.10
 tunnel mode gre multuipoint

Kind regards,
Gavin

-----Original Message-----
From: nobody_at_groupstudy.com [mailto:nobody_at_groupstudy.com] On Behalf Of
Olaniyi Sonubi
Sent: 25 January 2010 11:46
To: groupstudy
Subject: Issue on NHRP Mapping

Hello all,

I am running DMVPN on my network with a 3800 router as the hub and about
170 spokes connecting to the hub. The NHRP mapping for some of the spoke
sites is usually not completed. From the spoke side it resolves well as
shown int the output of 'show ip nhrp'. But from the hub, the output of
'show ip nhrp'
for those sites is usually blank. Below is some of my configs

Tunnel at the hub
-----------------------------
interface Tunnel10
 description HQ DMVPN tunnel to branches bandwidth 2000000 ip address
10.204.10.1 255.255.255.0 no ip redirects ip mtu 1400 ip nhrp
authentication xyz ip nhrp map multicast dynamic ip nhrp network-id 10
ip tcp adjust-mss 1360 ip summary-address eigrp 10 172.31.0.0
255.255.0.0 5 ip summary-address eigrp 10 172.29.0.0 255.255.0.0 5 ip
summary-address eigrp 10 172.28.0.0 255.255.0.0 5 ip summary-address
eigrp 10 172.22.0.0 255.255.0.0 5 tunnel source 10.10.10.10 tunnel
mode gre multipoint tunnel key 10 tunnel protection ipsec profile
scpcprof end

Tunnel at the spoke
-----------------------------
interface Tunnel10
 description DMVPN tunnel
 bandwidth 500
 ip address 10.204.10.91 255.255.255.0
 no ip redirects
 ip mtu 1400
 ip nhrp authentication xyz
 ip nhrp map multicast 10.10.10.10
 ip nhrp map 10.204.10.1 10.10.10.10
 ip nhrp network-id 10
 ip nhrp holdtime 60
 ip nhrp nhs 10.204.10.1
 ip nhrp registration timeout 30
 ip tcp adjust-mss 1360
 tunnel source 10.25.2.205
 tunnel destination 10.10.10.10
 tunnel key 10
 tunnel protection ipsec profile scpcprof end

Spoke
-----
Spoke_Router#sh ip nh
10.204.10.1/32 via 10.204.10.1, Tunnel10 created 00:00:52, never expire
  Type: static, Flags: authoritative
  NBMA address: 10.10.10.10

Hub
------
Hub_Router#sh ip nh 10.204.10.91
(Blank Output)

What could be the problem?

Thanks.
'Niyi

Blogs and organic groups at http://www.ccie.net
Received on Mon Jan 25 2010 - 14:08:52 ART

This archive was generated by hypermail 2.2.0 : Thu Feb 04 2010 - 20:28:42 ART