Re: DMVPN

thanks .it's work after add route for each loopback ip address

On Tue, Feb 9, 2010 at 5:03 PM, luan nguyen <luan_at_netcraftsmen.net> wrote:

> In other words, make sure your loopback on the hub is reachable from all
> the spokes not through the dmvpn tunnel (recursive)- static route from
> spokes pointing to hub subinterface would be fine. And put that loopback as
> tunnel destination from the spokes.
>
> -Luan
>
>
>
> -----Original Message-----
> From: Tyson Scott <tscott_at_ipexpert.com>
> Sent: February 09, 2010 9:01 AM
> To: 'NeT' <netmrt_at_gmail.com>; 'Cisco certification' <
> ccielab_at_groupstudy.com>
> Subject: RE: DMVPN
>
> I am not seeing a reason that you can't use the loopback as the source or
> one of the sub-interfaces. As long as you are not advertising your
> originating networks over the DMVPN neither scenario should be a problem
> for
> you. If you are then that is the reason you are having problems.
>
> Regards,
>
> Tyson Scott - CCIE #13513 R&S, Security, and SP
> Technical Instructor - IPexpert, Inc.
> Mailto: tscott_at_ipexpert.com
> Telephone: +1.810.326.1444, ext. 208
> Live Assistance, Please visit: www.ipexpert.com/chat
> eFax: +1.810.454.0130
>
>
>
> -----Original Message-----
> From: nobody_at_groupstudy.com [mailto:nobody_at_groupstudy.com] On Behalf Of
> NeT
> Sent: Tuesday, February 09, 2010 8:04 AM
> To: Cisco certification
> Subject: DMVPN
>
> I have problem with MGRE tunnel if use loopback as a source on hun router.
> I can't use any physical IP since having sub-interface for each branch. any
> idea to how to solve this problem?
>
>
>
> interface Tunnel0
> description HUB_Router
> bandwidth 1000000
> ip address 10.8.115.1 255.255.255.0
> no ip redirects
> ip mtu 1400
> ip nhrp authentication VNP_at_123
> ip nhrp map multicast dynamic
> ip nhrp network-id 105600
> ip nhrp holdtime 300
> ip ospf network broadcast
> ip ospf hello-interval 30
> ip ospf priority 200
> tunnel source Loopback0
> tunnel mode gre multipoint
> tunnel key 105600
> tunnel protection ipsec profile vpn-dmvpn
>
>
> crypto isakmp policy 1
> encr 3des
> authentication pre-share
> group 2
> crypto isakmp key dm!VPN@ address 0.0.0.0 0.0.0.0
>
> interface Loopback0
> description Connect_to_Spoke1
> ip address 172.17.0.97 255.255.255.255
>
> interface FastEthernet0/0.14
> encapsulation dot1Q 401
> ip address 10.8.14.1 255.255.255.0
> !
> interface FastEthernet0/0.15
> description Connect_to_Spoke2
> encapsulation dot1Q 501
> ip address 10.8.15.1 255.255.255.0
>
> _______________________________________
>
>
>
> interface Tunnel0
> description SPOKE1
> bandwidth 192
> ip address 10.8.115.4 255.255.255.0
> ip mtu 1400
> ip nhrp authentication VNP_at_123
> ip nhrp map multicast 172.17.0.97
> ip nhrp map 10.8.115.1 172.17.0.97
> ip nhrp network-id 105600
> ip nhrp holdtime 300
> ip nhrp nhs 10.8.115.1
> ip ospf network broadcast
> ip ospf hello-interval 30
> ip ospf priority 0
> tunnel source 10.8.14.4
> tunnel destination 10.8.14.1
> tunnel key 105600
> tunnel protection ipsec profile vpn-dmvpn
>
> crypto isakmp policy 1
> encr 3des
> authentication pre-share
> group 2
> crypto isakmp key dm!VPN@ address 0.0.0.0 0.0.0.0
>
> interface FastEthernet0/0
> ip address 10.8.14.4 255.255.255.0
>
>
> --
> Regards,
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
>
>
>
>
>
>
>
>

-- 
Regards,
looking toward (no.) CCIE
Blogs and organic groups at http://www.ccie.net