Re: [OSL | CCIE_Security] DMVPN phase 3 , Three tough

Or Jay, yeah, I like Jay better. ;)

Cheers.

Regards,
Jay McMickle- 2x CCIE #35355 (R/S,Sec)
Sent from my iPhone 5

> On Nov 11, 2013, at 6:18 PM, jeremy co <jeremy.cool14_at_gmail.com> wrote:
>
> Thanks Piotr and Joy.
>
>
>> On Fri, Nov 8, 2013 at 4:24 AM, Jay McMickle <jay.mcmickle_at_yahoo.com>
wrote:
>> Agree.
>> sh ip nhrp detail
>>
>> Beware that the 2nd ping is what you are looking for as the first ping is
building the table.
>>
>> I also made a way to remember what goes where. This will help with that.
>>
>> This is the best article that you should be able to locate during your
lab.
>>
>> From page 7:
>>
http://www.cisco.com/en/US/prod/collateral/iosswrel/ps6537/ps6586/ps6660/ps68
08/prod_white_paper0900aecd8055c34e.pdf
>>
>> To enable NHRP shortcut switching:
>> b All spokes need to have the commands ip nhrp shortcut and the ip nhrp
redirect added to their tunnel interfaces. For the hubs use only ip nhrp
redirect.
>>
>> b For EIGRP, in the hub side only:Remove: no ip next-hop-self eigrp <as>
from the hub tunnel configurationLeave: no ip split-horizon eigrp <as> in the
hub tunnel configurationAdd as needed: ip summary-address eigrp <as>
<summary-of-spokes-subnets> 5
>>
>>
>> Regards,
>> Jay McMickle- 2x CCIE #35355 (R/S,Sec)
>> Sent from my iPhone 5
>>
>>> On Nov 8, 2013, at 10:39 AM, Piotr Kaluzny <piotrk_at_ipexpert.com> wrote:
>>>
>>> Look at the NHRP table. You should see full prefixes (subnets) instead of
>>> /32 entries. Generally speaking NHRP table overrides CEF - so even that
NH
>>> points to the Hub, when you trace you should see packets flowing directly
>>> between the Spokes.
>>>
>>> Regards,
>>> --
>>> Piotr Kaluzny
>>> CCIE #25665 (Security), CCSP, CCNP
>>> Sr. Technical Instructor - IPexpert, Inc.
>>> URL: http://www.IPexpert.com
>>>
>>> ***Want to win a free iPad mini? Just follow us on
>>> Twitter<http://www.twitter.com/ipexpert>or "Like" our
>>> Facebook <http://www.facebook.com/ipexpert> page and be entered into a
>>> weekly drawing!
>>> <http://www.IPexpert.com>
>>>
>>>
>>>
>>>> On Fri, Nov 8, 2013 at 2:02 AM, jeremy co <jeremy.cool14_at_gmail.com>
wrote:
>>>>
>>>> Pitor,
>>>>
>>>> How can I verify that DMVPN is working in pahse 3? and not pahse 2 ?
>>>>
>>>> Is there any way to check this via show commands ?
>>>>
>>>> On Thu, Nov 7, 2013 at 2:02 PM, Piotr Kaluzny <piotrk_at_ipexpert.com>
wrote:
>>>>
>>>>> Hi
>>>>>
>>>>> 1. No - In Phase III NH should point to the Hub so use
>>>>> Point-to-Multipoint OSPF Network Type
>>>>> 2. Additional mappings for the second Hub (Single Cloud) or additional
>>>>> Tunnel interface for a second Hub with a new subnet, NHRP network and
>>>>> tunnel key (Dual Cloud design)
>>>>> 3. You need both on Spokes
>>>>> Regards,
>>>>> --
>>>>> Piotr Kaluzny
>>>>> CCIE #25665 (Security), CCSP, CCNP
>>>>> Sr. Technical Instructor - IPexpert, Inc.
>>>>> URL: http://www.IPexpert.com
>>>>>
>>>>> ***Want to win a free iPad mini? Just follow us on
Twitter<http://www.twitter.com/ipexpert>or "Like" our
>>>>> Facebook <http://www.facebook.com/ipexpert> page and be entered into a
>>>>> weekly drawing!
>>>>> <http://www.IPexpert.com>
>>>>> On Thu, Nov 7, 2013 at 10:27 PM, jeremy co
<jeremy.cool14_at_gmail.com>wrote:
>>>>>
>>>>>> Hi,
>>>>>>
>>>>>> Q1:
>>>>>> For eigrp we dont needs no ip next-hop-self eigrp" for DMVPN phase 3.
>>>>>>
>>>>>> is that the same case for OSPF ? Does ip ospf broadcast command
required
>>>>>> for DMVPN phase 3 ?
>>>>>>
>>>>>> Q2:
>>>>>>
>>>>>> in Dual Hub Scenario, what needs to be done for connecting hubs
together
>>>>>> ?
>>>>>> static NHRP pointing to the other hub is Enough ?
>>>>>> Q3:
>>>>>> On spoke should we have both nhrp "short cut" and "nhrp redirect" ?
or
>>>>>> just "nhrp shortcut "?
>>>>>>
>>>>>> BRKSEC-3006 2009 says different than
>>>>>>
>>>>>>
http://www.cisco.com/en/US/prod/collateral/iosswrel/ps6537/ps6586/ps6660/ps68
08/prod_white_paper0900aecd8055c34e_ps6658_Products_White_Paper.html
>>>>>>
>>>>>> _______________________________________________
>>>>>> For more information regarding industry leading CCIE Lab training,
>>>>>> please visit www.ipexpert.com
>>>>>>
>>>>>> Are you a CCNP or CCIE and looking for a job? Check out
>>>>>> www.PlatinumPlacement.com
>>>
>>>
>>> Blogs and organic groups at http://www.ccie.net
>>>
>>> _______________________________________________________________________
>>> Subscription information may be found at:
>>> http://www.groupstudy.com/list/CCIELab.html

Blogs and organic groups at http://www.ccie.net
Received on Mon Nov 11 2013 - 19:40:17 ART