Re: DMVPN and Control Plane.

Looks like you are dropping icmp but not classifying anything else. You
haven't defined any bandwidth for the default class so it isn't getting
any.

David

> Guys,
>
> Could you please tell me why am I getting this error message in Yusuf's
> lab 1 - Q 6.1?
> I have done this lab multiple times but never saw this error message.
>
> Whey I apply the policy map on control-plane the DMVPN or eigrp drops
> between dmvpn nei. Is there a bug issue or am I doing something wrong
> today?
>
> Thanks.
>
> -----------
>
>
> !
> class-map match-any cm_icmp
> match access-group 112
> match not access-group 111
> !
> !
> policy-map pm_icmp
> class cm_icmp
> drop
> !
> access-list 111 permit icmp 10.0.0.0 0.255.255.255 any
> access-list 111 permit icmp 172.16.0.0 0.15.255.255 any
> access-list 111 permit icmp 192.168.0.0 0.0.255.255 any
> access-list 112 permit icmp any any
> !
> control-plane
> service-policy input pm_icmp
> !
>
> R2(config-cp)#service-policy input pm_icmp
> R2(config-cp)#end
> R2#
> *May 28 13:41:14.638: %CP-5-FEATURE: Control-plane Policing feature
> enabled on Control plane aggregate path
>
> *May 28 13:41:15.434: %SYS-5-CONFIG_I: Configured from console by console
> R2#
> *May 28 13:41:27.106: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 100: Neighbor
> 172.1.0.1 (Tunnel1) is down: holding time expired
> R2#
>
>
> Best Regards.
> ______________________
> Adil
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html

Blogs and organic groups at http://www.ccie.net
Received on Sat May 28 2011 - 15:45:36 ART