Re: [OSL | CCIE_Security] DMVPN phase 3 , Three tough

Agree.
sh ip nhrp detail

Beware that the 2nd ping is what you are looking for as the first ping is
building the table.

I also made a way to remember what goes where. This will help with that.

This is the best article that you should be able to locate during your lab.

From page 7:
http://www.cisco.com/en/US/prod/collateral/iosswrel/ps6537/ps6586/ps6660/ps68
08/prod_white_paper0900aecd8055c34e.pdf

To enable NHRP shortcut switching:
b All spokes need to have the commands ip nhrp shortcut and the ip nhrp
redirect added to their tunnel interfaces. For the hubs use only ip nhrp
redirect.

b For EIGRP, in the hub side only:Remove: no ip next-hop-self eigrp <as>
from the hub tunnel configurationLeave: no ip split-horizon eigrp <as> in the
hub tunnel configurationAdd as needed: ip summary-address eigrp <as>
<summary-of-spokes-subnets> 5

Regards,
Jay McMickle- 2x CCIE #35355 (R/S,Sec)
Sent from my iPhone 5

> On Nov 8, 2013, at 10:39 AM, Piotr Kaluzny <piotrk_at_ipexpert.com> wrote:
>
> Look at the NHRP table. You should see full prefixes (subnets) instead of
> /32 entries. Generally speaking NHRP table overrides CEF - so even that NH
> points to the Hub, when you trace you should see packets flowing directly
> between the Spokes.
>
> Regards,
> --
> Piotr Kaluzny
> CCIE #25665 (Security), CCSP, CCNP
> Sr. Technical Instructor - IPexpert, Inc.
> URL: http://www.IPexpert.com
>
> ***Want to win a free iPad mini? Just follow us on
> Twitter<http://www.twitter.com/ipexpert>or "Like" our
> Facebook <http://www.facebook.com/ipexpert> page and be entered into a
> weekly drawing!
> <http://www.IPexpert.com>
>
>
>> On Fri, Nov 8, 2013 at 2:02 AM, jeremy co <jeremy.cool14_at_gmail.com> wrote:
>>
>> Pitor,
>>
>> How can I verify that DMVPN is working in pahse 3? and not pahse 2 ?
>>
>> Is there any way to check this via show commands ?
>>
>>
>>> On Thu, Nov 7, 2013 at 2:02 PM, Piotr Kaluzny <piotrk_at_ipexpert.com>
wrote:
>>>
>>> Hi
>>>
>>> 1. No - In Phase III NH should point to the Hub so use
>>> Point-to-Multipoint OSPF Network Type
>>> 2. Additional mappings for the second Hub (Single Cloud) or additional
>>> Tunnel interface for a second Hub with a new subnet, NHRP network and
>>> tunnel key (Dual Cloud design)
>>> 3. You need both on Spokes
>>>
>>> Regards,
>>> --
>>> Piotr Kaluzny
>>> CCIE #25665 (Security), CCSP, CCNP
>>> Sr. Technical Instructor - IPexpert, Inc.
>>> URL: http://www.IPexpert.com
>>>
>>> ***Want to win a free iPad mini? Just follow us on
Twitter<http://www.twitter.com/ipexpert>or "Like" our
>>> Facebook <http://www.facebook.com/ipexpert> page and be entered into a
>>> weekly drawing!
>>> <http://www.IPexpert.com>
>>>
>>>
>>> On Thu, Nov 7, 2013 at 10:27 PM, jeremy co
<jeremy.cool14_at_gmail.com>wrote:
>>>
>>>> Hi,
>>>>
>>>> Q1:
>>>> For eigrp we dont needs no ip next-hop-self eigrp" for DMVPN phase 3.
>>>>
>>>> is that the same case for OSPF ? Does ip ospf broadcast command required
>>>> for DMVPN phase 3 ?
>>>>
>>>> Q2:
>>>>
>>>> in Dual Hub Scenario, what needs to be done for connecting hubs together
>>>> ?
>>>> static NHRP pointing to the other hub is Enough ?
>>>>
>>>> Q3:
>>>>
>>>> On spoke should we have both nhrp "short cut" and "nhrp redirect" ? or
>>>> just "nhrp shortcut "?
>>>>
>>>> BRKSEC-3006 2009 says different than
>>>>
>>>>
http://www.cisco.com/en/US/prod/collateral/iosswrel/ps6537/ps6586/ps6660/ps68
08/prod_white_paper0900aecd8055c34e_ps6658_Products_White_Paper.html
>>>>
>>>> _______________________________________________
>>>> For more information regarding industry leading CCIE Lab training,
>>>> please visit www.ipexpert.com
>>>>
>>>> Are you a CCNP or CCIE and looking for a job? Check out
>>>> www.PlatinumPlacement.com
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html

Blogs and organic groups at http://www.ccie.net
Received on Fri Nov 08 2013 - 12:24:47 ART