RE: DMVPN Spokes

From: David Prall <dcp_at_dcptech.com>
Date: Tue, 4 Jan 2011 13:44:57 -0500

Can't tell you without knowing more. At this point - Upgrade to the latest
code and if you continue to have the issue send "sh tech"'s and drawing of
the network.

--
http://dcp.dcptech.com
> -----Original Message-----
> From: sameer inam [mailto:i_sameer_at_hotmail.com]
> Sent: Tuesday, January 04, 2011 1:32 PM
> To: dcp_at_dcptech.com; amsoares_at_netcabo.pt; ccielab_at_groupstudy.com
> Subject: RE: DMVPN Spokes
> 
> I m using OSPF routing protocol.its looke like there is no routing loop
> .  the issue which I seen is packet  has be lost after some time to
> there destination .I can see when the One ping to DMVPN hub stopped and
> other one working fine at that crypto keep up . NHRP stable but ping
> repsoned stopped with one hub and other one worked fine ...
> 
> if you could advice me how we can fix  this issue it will be much
> appreciated.
> 
> Sameer
> 
> 
> 
> 
> 
> 
> 
> > From: dcp_at_dcptech.com
> > To: i_sameer_at_hotmail.com; amsoares_at_netcabo.pt; ccielab_at_groupstudy.com
> > Subject: RE: DMVPN Spokes
> > Date: Tue, 4 Jan 2011 10:36:51 -0500
> >
> > Fails after 30 minutes, 30 minutes exactly? What timer is kicking off
> at 30
> > Minutes, ISAKMP is 24 Hours by default, IPSec is 1 hour by default,
> Routing
> > Protocols are nowhere near 30 minutes (15 seconds EIGRP, 40 seconds
> OSPF),
> > NHRP Holdtime is 2 hours by default.
> >
> > What routing protocol are you using?
> > What do your configs actually look like?
> > What does your routing table look like, are you creating a routing
> loop that
> > is causing other issues?
> >
> > David
> >
> > --
> > http://dcp.dcptech.com
> >
> >
> > > -----Original Message-----
> > > From: nobody_at_groupstudy.com [mailto:nobody_at_groupstudy.com] On
> Behalf Of
> > > sameer inam
> > > Sent: Tuesday, January 04, 2011 8:23 AM
> > > To: amsoares_at_netcabo.pt; dcp_at_dcptech.com; ccielab_at_groupstudy.com
> > > Subject: RE: DMVPN Spokes
> > >
> > > have one spoke router two different hub ...no i havent try vrf ...
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> > > > From: amsoares_at_netcabo.pt
> > > > To: i_sameer_at_hotmail.com; dcp_at_dcptech.com; ccielab_at_groupstudy.com
> > > > Subject: RE: DMVPN Spokes
> > > > Date: Tue, 4 Jan 2011 13:19:24 +0000
> > > >
> > > > So you want to simulate several spokes on a single router ? Have
> you
> > > tried
> > > > using VRF's ?
> > > >
> > > >
> > > > Regards,
> > > >
> > > > Antonio Soares, CCIE #18473 (R&S/SP)
> > > > amsoares_at_netcabo.pt
> > > >
> > > >
> > > > -----Original Message-----
> > > > From: nobody_at_groupstudy.com [mailto:nobody_at_groupstudy.com] On
> Behalf
> > > Of
> > > > sameer inam
> > > > Sent: terga-feira, 4 de Janeiro de 2011 12:34
> > > > To: dcp_at_dcptech.com; ccielab_at_groupstudy.com
> > > > Subject: RE: DMVPN Spokes
> > > >
> > > > I tried all the option which you told me .. its worked for 30 min
> and
> > > then
> > > > one
> > > > of the tunnel drops. any advice
> > > >
> > > >
> > > >
> > > >
> > > >
> > > >
> > > >
> > > > > From: dcp_at_dcptech.com
> > > > > To: i_sameer_at_hotmail.com
> > > > > Subject: RE: DMVPN Spokes
> > > > > Date: Sat, 1 Jan 2011 16:25:31 -0500
> > > > >
> > > > > You'll need different nhrp id's and tunnel key's if they are
> using
> > > the
> > > > same
> > > > > source address/interface. If using tunnel protection you will
> need
> > > the
> > > > > shared keyword. You should be able to look at the DMVPN SRND on
> > > dual
> > > > tunnel
> > > > > dual dmvpn designs.
> > > > >
> > > > > --
> > > > > http://dcp.dcptech.com
> > > > >
> > > > >
> > > > > > -----Original Message-----
> > > > > > From: sameer inam [mailto:i_sameer_at_hotmail.com]
> > > > > > Sent: Saturday, January 01, 2011 3:45 PM
> > > > > > To: dcp_at_dcptech.com
> > > > > > Subject: RE: DMVPN Spokes
> > > > > >
> > > > > > ok , I tried to use different Key , different profile
> protection
> > > (but
> > > > > > Not with Shared) different Netwrk ID on both tunnels .but
> source
> > > > > > tunnel is same ,, I will try to use different Source and also
> > > shared
> > > > > > key wordward with profile protection , Do you have any
> document
> > > for
> > > > > > that ? I really appreaicte your kind help
> > > > > >
> > > > > > Sameer
> > > > > >
> > > > > >
> > > > > >
> > > > > >
> > > > > >
> > > > > >
> > > > > >
> > > > > > > From: dcp_at_dcptech.com
> > > > > > > To: ron.wilkerson_at_gmail.com; i_sameer_at_hotmail.com;
> > > > > > ccielab_at_groupstudy.com
> > > > > > > Subject: RE: DMVPN Spokes
> > > > > > > Date: Sat, 1 Jan 2011 15:38:03 -0500
> > > > > > >
> > > > > > > If they are using the same source address/inteface then you
> > > will have
> > > > > > to use
> > > > > > > the shared keyword on tunnel protection. You will also need
> to
> > > use
> > > > > > tunnel
> > > > > > > keys on both interfaces so that packets are dropped off on
> the
> > > > > > correct
> > > > > > > tunnel. Otherwise you need to use dedicated source
> interfaces
> > > for
> > > > > > each
> > > > > > > tunnel interface, such as a loopback for each.
> > > > > > >
> > > > > > > David
> > > > > > >
> > > > > > > --
> > > > > > > http://dcp.dcptech.com
> > > > > > >
> > > > > > >
> > > > > > > > -----Original Message-----
> > > > > > > > From: nobody_at_groupstudy.com
> [mailto:nobody_at_groupstudy.com] On
> > > > > > Behalf Of
> > > > > > > > ron.wilkerson_at_gmail.com
> > > > > > > > Sent: Saturday, January 01, 2011 3:29 PM
> > > > > > > > To: sameer inam; ccielab_at_groupstudy.com
> > > > > > > > Subject: Re: DMVPN Spokes
> > > > > > > >
> > > > > > > > Google for cisco's dmvpn srnd
> > > > > > > > Sent from my Verizon Wireless BlackBerry
> > > > > > > >
> > > > > > > > -----Original Message-----
> > > > > > > > From: sameer inam <i_sameer_at_hotmail.com>
> > > > > > > > Date: Sat, 1 Jan 2011 20:16:33
> > > > > > > > To: <ron.wilkerson_at_gmail.com>; <ccielab_at_groupstudy.com>
> > > > > > > > Subject: RE: DMVPN Spokes
> > > > > > > >
> > > > > > > >
> > > > > > > > I tried with different DMVPN domain , Network-ID and Key
> and
> > > also
> > > > > > > > different profile but issue Tunnel was up for while and
> then
> > > > > > droped.
> > > > > > > > could you please advice any document ?
> > > > > > > >
> > > > > > > > Thanks for your help
> > > > > > > >
> > > > > > > > Sameer
> > > > > > > >
> > > > > > > >
> > > > > > > >
> > > > > > > >
> > > > > > > >
> > > > > > > >
> > > > > > > >
> > > > > > > > > Subject: Re: DMVPN Spokes
> > > > > > > > > To: i_sameer_at_hotmail.com; ccielab_at_groupstudy.com
> > > > > > > > > From: ron.wilkerson_at_gmail.com
> > > > > > > > > Date: Sat, 1 Jan 2011 20:18:58 +0000
> > > > > > > > >
> > > > > > > > > Yes. Each tunnel will be in a different dmvpn domain.
> > > > > > > > > ------Original Message------
> > > > > > > > > From: sameer inam
> > > > > > > > > Sender: nobody_at_groupstudy.com
> > > > > > > > > To: ccielab_at_groupstudy.com
> > > > > > > > > ReplyTo: sameer inam
> > > > > > > > > Subject: DMVPN Spokes
> > > > > > > > > Sent: Jan 1, 2011 15:09
> > > > > > > > >
> > > > > > > > > Dear Experts,
> > > > > > > > >
> > > > > > > > > I have one router whichis on Spoke end , and I have two
> > > different
> > > > > > > > DMVPN Hubs
> > > > > > > > > , can I configure two spokes configuration on one
> single
> > > router ?
> > > > > > > > please
> > > > > > > > > advice ?
> > > > > > > > >
> > > > > > > > > Kind regards,
> > > > > > > > >
> > > > > > > > > Sameer
> > > > > > > > >
> > > > > > > > >
> > > > > > > > > Blogs and organic groups at http://www.ccie.net
> > > > > > > > >
> > > > > > > >
> > > > > >
> > >
> >______________________________________________________________________
> > > > > > > > _
> > > > > > > > > Subscription information may be found at:
> > > > > > > > > http://www.groupstudy.com/list/CCIELab.html
> > > > > > > > >
> > > > > > > > >
> > > > > > > > >
> > > > > > > > >
> > > > > > > > >
> > > > > > > > >
> > > > > > > > >
> > > > > > > > >
> > > > > > > > >
> > > > > > > > > Sent from my Verizon Wireless BlackBerry
> > > > > > > > >
> > > > > > > > >
> > > > > > > > > Blogs and organic groups at http://www.ccie.net
> > > > > > > > >
> > > > > > > >
> > > > > >
> > >
> >______________________________________________________________________
> > > > > > > > _
> > > > > > > > > Subscription information may be found at:
> > > > > > > > > http://www.groupstudy.com/list/CCIELab.html
> > > > > > > >
> > > > > > > >
> > > > > > > > Blogs and organic groups at http://www.ccie.net
> > > > > > > >
> > > > > > > >
> > > > > >
> > >
> _______________________________________________________________________
> > > > > > > > Subscription information may be found at:
> > > > > > > > http://www.groupstudy.com/list/CCIELab.html
> > > >
> > > >
> > > > Blogs and organic groups at http://www.ccie.net
> > > >
> > > >
> > >
> _______________________________________________________________________
> > > > Subscription information may be found at:
> > > > http://www.groupstudy.com/list/CCIELab.html
> > >
> > >
> > > Blogs and organic groups at http://www.ccie.net
> > >
> > >
> _______________________________________________________________________
> > > Subscription information may be found at:
> > > http://www.groupstudy.com/list/CCIELab.html
> >
> >
> > Blogs and organic groups at http://www.ccie.net
> >
> >
> _______________________________________________________________________
> > Subscription information may be found at:
> > http://www.groupstudy.com/list/CCIELab.html
Blogs and organic groups at http://www.ccie.net
Received on Tue Jan 04 2011 - 13:44:57 ART

This archive was generated by hypermail 2.2.0 : Tue Feb 01 2011 - 07:39:17 ART