11-03-2004 02:29 PM - edited 03-02-2019 07:43 PM
Hello All,
I have a PIX to PIX ipsec tunnel set up between sites and I want to route via EIGRP. I created the tunnels on the LAN routers behind the PIXes and can ping both tunnel interfaces (tunnels also show up up). I also created a static route for each /32 tunnel destination using the physical next hop IP (inside Interface of the PIXes) to avoid recursive routing. The problem is that the EIGRP routes are not being populated in the routing tables. I am probably missing something simple and another set of eyes would be a great help. Here are the router configs.
Router 1
version 12.2
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname AM-LAN-RTR1
!
enable secret xxxxx
!
memory-size iomem 25
ip subnet-zero
ip name-server 10.11.10.25
no ip dhcp conflict logging
!
!
!
!
!
!
interface Loopback0
ip address 2.2.2.1 255.255.255.255
!
interface Tunnel0
ip address 1.1.1.1 255.255.255.0
tunnel source 10.11.20.1
tunnel destination 192.168.80.3
!
interface FastEthernet0
description To Ala Moana LAN
ip address 10.11.20.1 255.255.255.0
ip helper-address 10.0.50.109
no keepalive
speed 100
full-duplex
!
interface Serial0
description Point-to-Point to Ko'olani
ip address 10.248.200.70 255.255.255.252
no fair-queue
service-module t1 timeslots 1-24
service-module t1 remote-alarm-enable
!
router eigrp 100
network 2.2.2.1 0.0.0.0
network 10.0.0.0
no auto-summary
eigrp log-neighbor-changes
!
router rip
version 2
redistribute eigrp 100
passive-interface Serial0
network 10.0.0.0
default-metric 2
no auto-summary
!
ip classless
ip route 0.0.0.0 0.0.0.0 10.11.20.2
ip route 192.168.80.3 255.255.255.255 10.11.20.2
no ip http server
!
!
!
end
Router 2
version 12.2
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname oh-lan-rtr1
!
enable secret xxxx
!
ip subnet-zero
!
!
no ip domain-lookup
!
!
!
!
interface Loopback0
ip address 3.3.3.1 255.255.255.255
!
interface Tunnel0
ip address 1.1.1.2 255.255.255.0
tunnel source 192.168.80.3
tunnel destination 10.11.20.1
!
interface Ethernet0/0
ip address 192.168.80.3 255.255.255.0
half-duplex
!
interface Serial0/0
no ip address
shutdown
!
interface Ethernet0/1
no ip address
shutdown
half-duplex
!
router eigrp 100
network 3.3.3.1 0.0.0.0
network 192.168.80.0
no auto-summary
eigrp log-neighbor-changes
!
router rip
version 2
redistribute eigrp 100
network 3.0.0.0
network 192.168.80.0
default-metric 2
no auto-summary
!
ip classless
ip route 0.0.0.0 0.0.0.0 192.168.80.1
ip route 10.11.20.1 255.255.255.255 192.168.80.1
ip http server
ip pim bidir-enable
!
!
Thanks,
Dean
11-03-2004 02:37 PM
Dean,
You need to add the tunnel interface network to EIGRP on both routers.
router eigrp 100
network 1.0.0.0
Daniel
11-03-2004 02:44 PM
Thanks Daniel, You da man! Looking at the config in notepad I had it in there but never copied to the routers. I guess that teaches me to pay attention in the future.
Dean
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide