Re: DMVPN and Control Plane.

what does it show if you put 'log' in the policy-map:

policy-map ICMP_PM
 class ICMP_CM
   drop
    log
 class class-default
    log
R1#
*Mar 1 00:06:16.527: %CP-6-IP: PERMIT 1.1.1.2 -> 224.0.0.10 eigrp
R1#
*Mar 1 00:06:19.647: %CP-6-IP: DROP Control-plane Policing 1.1.1.2 ->
1.1.1.1 icmp

 --
Garry L. Baker

"With sufficient thrust, pigs fly just fine..." - RFC 1925

On Sat, May 28, 2011 at 9:17 PM, Adil Pasha <aspasha_at_gmail.com> wrote:

> Guys,
>
> Could you please tell me why am I getting this error message in Yusuf's lab
> 1 - Q 6.1?
> I have done this lab multiple times but never saw this error message.
>
> Whey I apply the policy map on control-plane the DMVPN or eigrp drops
> between dmvpn nei. Is there a bug issue or am I doing something wrong today?
>
> Thanks.
>
> -----------
>
>
> !
> class-map match-any cm_icmp
> match access-group 112
> match not access-group 111
> !
> !
> policy-map pm_icmp
> class cm_icmp
> drop
> !
> access-list 111 permit icmp 10.0.0.0 0.255.255.255 any
> access-list 111 permit icmp 172.16.0.0 0.15.255.255 any
> access-list 111 permit icmp 192.168.0.0 0.0.255.255 any
> access-list 112 permit icmp any any
> !
> control-plane
> service-policy input pm_icmp
> !
>
> R2(config-cp)#service-policy input pm_icmp
> R2(config-cp)#end
> R2#
> *May 28 13:41:14.638: %CP-5-FEATURE: Control-plane Policing feature enabled
> on Control plane aggregate path
>
> *May 28 13:41:15.434: %SYS-5-CONFIG_I: Configured from console by console
> R2#
> *May 28 13:41:27.106: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 100: Neighbor
> 172.1.0.1 (Tunnel1) is down: holding time expired
> R2#
>
>
> Best Regards.
> ______________________
> Adil
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html

Blogs and organic groups at http://www.ccie.net
Received on Sat May 28 2011 - 22:59:38 ART