Re: Issue on NHRP Mapping

From: Olaniyi Sonubi <sonubi02_at_gmail.com>
Date: Mon, 25 Jan 2010 17:14:32 +0100

Gavin,

I am not considering spoke-to-spoke tunneling so obviously the configs
should be fine.

Tolulope,

I have traffic on my network that should initiate the NHRP mapping. My debug
output has a lot of
*NHRP: No node found*. messages on the hub. Also I have messages with
*%NHRP-3-PAKREPLY:
Receive Resolution Reply packet with error - insufficient resources(5).
*
I agree with what Tyson said. I have these same configs and scenario for
another set of routers with 3800 as hub and about 70 spokes. Everything
seems to be working fine.

If a 3800 cannot handle up to 170 spokes. What do you think should be the
way around this situation?

Thanks.
'Niyi

On Mon, Jan 25, 2010 at 3:30 PM, Tolulope Ogunsina <togunsina_at_gmail.com>wrote:

> Hi,
> If you are not considering spoke-to-spoke tunneling, point-to-point
> tunneling should be fine at the spokes.
>
> Niyi,
> Have you initiated traffic that should trigger Next Hop Resolution?
> The NHRP entries time out when not in use.
> What messages do you have when you turn on nhrp debugs?
>
>
>
> On 1/25/10, Gavin Schokman <Gavin.Schokman_at_nscglobal.com> wrote:
> > Hi Niyi,
> >
> > Looks like your spoke config is setup for normal point-to-point GRE, not
> > mGRE.
> > Suggest you update the spoke config as follows:
> >
> > Tunnel at the spoke
> > -----------------------------
> > interface Tunnel10
> > no tunnel destination 10.10.10.10
> > tunnel mode gre multuipoint
> >
> > Kind regards,
> > Gavin
> >
> >
> > -----Original Message-----
> > From: nobody_at_groupstudy.com [mailto:nobody_at_groupstudy.com] On Behalf Of
> > Olaniyi Sonubi
> > Sent: 25 January 2010 11:46
> > To: groupstudy
> > Subject: Issue on NHRP Mapping
> >
> > Hello all,
> >
> > I am running DMVPN on my network with a 3800 router as the hub and about
> > 170 spokes connecting to the hub. The NHRP mapping for some of the spoke
> > sites is usually not completed. From the spoke side it resolves well as
> > shown int the output of 'show ip nhrp'. But from the hub, the output of
> > 'show ip nhrp'
> > for those sites is usually blank. Below is some of my configs
> >
> > Tunnel at the hub
> > -----------------------------
> > interface Tunnel10
> > description HQ DMVPN tunnel to branches bandwidth 2000000 ip address
> > 10.204.10.1 255.255.255.0 no ip redirects ip mtu 1400 ip nhrp
> > authentication xyz ip nhrp map multicast dynamic ip nhrp network-id 10
> > ip tcp adjust-mss 1360 ip summary-address eigrp 10 172.31.0.0
> > 255.255.0.0 5 ip summary-address eigrp 10 172.29.0.0 255.255.0.0 5 ip
> > summary-address eigrp 10 172.28.0.0 255.255.0.0 5 ip summary-address
> > eigrp 10 172.22.0.0 255.255.0.0 5 tunnel source 10.10.10.10 tunnel
> > mode gre multipoint tunnel key 10 tunnel protection ipsec profile
> > scpcprof end
> >
> > Tunnel at the spoke
> > -----------------------------
> > interface Tunnel10
> > description DMVPN tunnel
> > bandwidth 500
> > ip address 10.204.10.91 255.255.255.0
> > no ip redirects
> > ip mtu 1400
> > ip nhrp authentication xyz
> > ip nhrp map multicast 10.10.10.10
> > ip nhrp map 10.204.10.1 10.10.10.10
> > ip nhrp network-id 10
> > ip nhrp holdtime 60
> > ip nhrp nhs 10.204.10.1
> > ip nhrp registration timeout 30
> > ip tcp adjust-mss 1360
> > tunnel source 10.25.2.205
> > tunnel destination 10.10.10.10
> > tunnel key 10
> > tunnel protection ipsec profile scpcprof end
> >
> > Spoke
> > -----
> > Spoke_Router#sh ip nh
> > 10.204.10.1/32 via 10.204.10.1, Tunnel10 created 00:00:52, never expire
> > Type: static, Flags: authoritative
> > NBMA address: 10.10.10.10
> >
> > Hub
> > ------
> > Hub_Router#sh ip nh 10.204.10.91
> > (Blank Output)
> >
> >
> > What could be the problem?
> >
> > Thanks.
> > 'Niyi
> >
> >
> > Blogs and organic groups at http://www.ccie.net
> >
> > _______________________________________________________________________
> > Subscription information may be found at:
> > http://www.groupstudy.com/list/CCIELab.html
> >
> >
> >
> >
> >
> >
> >
> >
> > _____________________________________________________________________
> > This e-mail has been scanned for viruses
> >
> >
> > Blogs and organic groups at http://www.ccie.net
> >
> > _______________________________________________________________________
> > Subscription information may be found at:
> > http://www.groupstudy.com/list/CCIELab.html
> >
> >
> >
> >
> >
> >
> >
> >
>
>
> --
> Best Regards,
>
> Tolulope.

Blogs and organic groups at http://www.ccie.net
Received on Mon Jan 25 2010 - 17:14:32 ART

This archive was generated by hypermail 2.2.0 : Thu Feb 04 2010 - 20:28:42 ART