cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
458
Views
0
Helpful
2
Replies

EIGRP Routing Issue over IPSec\GRE Tunnel

doliver
Level 1
Level 1

Hello All,

I have a PIX to PIX ipsec tunnel set up between sites and I want to route via EIGRP. I created the tunnels on the LAN routers behind the PIXes and can ping both tunnel interfaces (tunnels also show up up). I also created a static route for each /32 tunnel destination using the physical next hop IP (inside Interface of the PIXes) to avoid recursive routing. The problem is that the EIGRP routes are not being populated in the routing tables. I am probably missing something simple and another set of eyes would be a great help. Here are the router configs.

Router 1

version 12.2

service timestamps debug uptime

service timestamps log uptime

service password-encryption

!

hostname AM-LAN-RTR1

!

enable secret xxxxx

!

memory-size iomem 25

ip subnet-zero

ip name-server 10.11.10.25

no ip dhcp conflict logging

!

!

!

!

!

!

interface Loopback0

ip address 2.2.2.1 255.255.255.255

!

interface Tunnel0

ip address 1.1.1.1 255.255.255.0

tunnel source 10.11.20.1

tunnel destination 192.168.80.3

!

interface FastEthernet0

description To Ala Moana LAN

ip address 10.11.20.1 255.255.255.0

ip helper-address 10.0.50.109

no keepalive

speed 100

full-duplex

!

interface Serial0

description Point-to-Point to Ko'olani

ip address 10.248.200.70 255.255.255.252

no fair-queue

service-module t1 timeslots 1-24

service-module t1 remote-alarm-enable

!

router eigrp 100

network 2.2.2.1 0.0.0.0

network 10.0.0.0

no auto-summary

eigrp log-neighbor-changes

!

router rip

version 2

redistribute eigrp 100

passive-interface Serial0

network 10.0.0.0

default-metric 2

no auto-summary

!

ip classless

ip route 0.0.0.0 0.0.0.0 10.11.20.2

ip route 192.168.80.3 255.255.255.255 10.11.20.2

no ip http server

!

!

!

end

Router 2

version 12.2

service timestamps debug uptime

service timestamps log uptime

service password-encryption

!

hostname oh-lan-rtr1

!

enable secret xxxx

!

ip subnet-zero

!

!

no ip domain-lookup

!

!

!

!

interface Loopback0

ip address 3.3.3.1 255.255.255.255

!

interface Tunnel0

ip address 1.1.1.2 255.255.255.0

tunnel source 192.168.80.3

tunnel destination 10.11.20.1

!

interface Ethernet0/0

ip address 192.168.80.3 255.255.255.0

half-duplex

!

interface Serial0/0

no ip address

shutdown

!

interface Ethernet0/1

no ip address

shutdown

half-duplex

!

router eigrp 100

network 3.3.3.1 0.0.0.0

network 192.168.80.0

no auto-summary

eigrp log-neighbor-changes

!

router rip

version 2

redistribute eigrp 100

network 3.0.0.0

network 192.168.80.0

default-metric 2

no auto-summary

!

ip classless

ip route 0.0.0.0 0.0.0.0 192.168.80.1

ip route 10.11.20.1 255.255.255.255 192.168.80.1

ip http server

ip pim bidir-enable

!

!

Thanks,

Dean

2 Replies 2

dbellazetin
Level 4
Level 4

Dean,

You need to add the tunnel interface network to EIGRP on both routers.

router eigrp 100

network 1.0.0.0

Daniel

Thanks Daniel, You da man! Looking at the config in notepad I had it in there but never copied to the routers. I guess that teaches me to pay attention in the future.

Dean

Review Cisco Networking for a $25 gift card