Re: [OSL | CCIE_Security] DMVPN phase 3 , Three tough

Thanks Piotr and Joy.

On Fri, Nov 8, 2013 at 4:24 AM, Jay McMickle <jay.mcmickle_at_yahoo.com> wrote:

> Agree.
> sh ip nhrp detail
>
> Beware that the 2nd ping is what you are looking for as the first ping is
> building the table.
>
> I also made a way to remember what goes where. This will help with that.
>
> This is the best article that you should be able to locate during your lab.
>
> From page 7:
>
>
http://www.cisco.com/en/US/prod/collateral/iosswrel/ps6537/ps6586/ps6660/ps68
08/prod_white_paper0900aecd8055c34e.pdf
>
> To enable NHRP shortcut switching:
>
> -
>
> b All spokes need to have the commands ip nhrp shortcut and the ip
> nhrp redirect added to their tunnel interfaces. For the hubs use only ip
> nhrp redirect.
> -
>
> b For EIGRP, in the hub side only:Remove: no ip next-hop-self eigrp
> <as> from the hub tunnel configurationLeave: no ip split-horizon eigrp
> <as> in the hub tunnel configurationAdd as needed: ip summary-address
> eigrp <as> <summary-of-spokes-subnets> 5
>
>
> Regards,
> Jay McMickle- 2x CCIE #35355 (R/S,Sec)
> Sent from my iPhone 5
>
> On Nov 8, 2013, at 10:39 AM, Piotr Kaluzny <piotrk_at_ipexpert.com> wrote:
>
> Look at the NHRP table. You should see full prefixes (subnets) instead of
> /32 entries. Generally speaking NHRP table overrides CEF - so even that NH
> points to the Hub, when you trace you should see packets flowing directly
> between the Spokes.
>
> Regards,
> --
> Piotr Kaluzny
> CCIE #25665 (Security), CCSP, CCNP
> Sr. Technical Instructor - IPexpert, Inc.
> URL: http://www.IPexpert.com
>
> ***Want to win a free iPad mini? Just follow us on
> Twitter<http://www.twitter.com/ipexpert>or "Like" our
> Facebook <http://www.facebook.com/ipexpert> page and be entered into a
> weekly drawing!
> <http://www.IPexpert.com>
>
>
>
> On Fri, Nov 8, 2013 at 2:02 AM, jeremy co <jeremy.cool14_at_gmail.com> wrote:
>
> Pitor,
>
>
> How can I verify that DMVPN is working in pahse 3? and not pahse 2 ?
>
>
> Is there any way to check this via show commands ?
>
>
>
> On Thu, Nov 7, 2013 at 2:02 PM, Piotr Kaluzny <piotrk_at_ipexpert.com> wrote:
>
>
> Hi
>
>
> 1. No - In Phase III NH should point to the Hub so use
>
> Point-to-Multipoint OSPF Network Type
>
> 2. Additional mappings for the second Hub (Single Cloud) or additional
>
> Tunnel interface for a second Hub with a new subnet, NHRP network and
>
> tunnel key (Dual Cloud design)
>
> 3. You need both on Spokes
>
>
> Regards,
>
> --
>
> Piotr Kaluzny
>
> CCIE #25665 (Security), CCSP, CCNP
>
> Sr. Technical Instructor - IPexpert, Inc.
>
> URL: http://www.IPexpert.com
>
>
> ***Want to win a free iPad mini? Just follow us on Twitter<
> http://www.twitter.com/ipexpert>or "Like" our
>
> Facebook <http://www.facebook.com/ipexpert> page and be entered into a
>
> weekly drawing!
>
> <http://www.IPexpert.com>
>
>
>
> On Thu, Nov 7, 2013 at 10:27 PM, jeremy co <jeremy.cool14_at_gmail.com>wrote:
>
>
> Hi,
>
>
> Q1:
>
> For eigrp we dont needs no ip next-hop-self eigrp" for DMVPN phase 3.
>
>
> is that the same case for OSPF ? Does ip ospf broadcast command required
>
> for DMVPN phase 3 ?
>
>
> Q2:
>
>
> in Dual Hub Scenario, what needs to be done for connecting hubs together
>
> ?
>
> static NHRP pointing to the other hub is Enough ?
>
>
> Q3:
>
>
> On spoke should we have both nhrp "short cut" and "nhrp redirect" ? or
>
> just "nhrp shortcut "?
>
>
> BRKSEC-3006 2009 says different than
>
>
>
>
http://www.cisco.com/en/US/prod/collateral/iosswrel/ps6537/ps6586/ps6660/ps68
08/prod_white_paper0900aecd8055c34e_ps6658_Products_White_Paper.html
>
>
> _______________________________________________
>
> For more information regarding industry leading CCIE Lab training,
>
> please visit www.ipexpert.com
>
>
> Are you a CCNP or CCIE and looking for a job? Check out
>
> www.PlatinumPlacement.com
>
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html

Blogs and organic groups at http://www.ccie.net
Received on Mon Nov 11 2013 - 16:18:26 ART