cancel
Showing results for 
Search instead for 
Did you mean: 
cancel

Who Me Too'd this topic

DMVPN duplicate NBMA address

Peter Lisseveld
Level 1
Level 1

Hello,

 

We've running into an issue where a DMVPN spoke is not setting up an NHRP session with the HUB.

The situation: our spoke router (R1) get its internet connection from an average DSL router. This router has a common 192.168.1.0/24 subnet with DHCP on it. So our Spoke router gets 192.168.1.2 from the DHCP server. Next it sets up ISAKMP and a NHRP session with the hub and all is working well.

Next up is the second spoke (R2). Different location but same DSL router with the same 192.168.1.0/24 with DHCP on the inside. The spoke router connects to the LAN, gets 192.168.1.2, sets up an ISAKMP tunnel and next it wants to set up the NHRP session. Then we hit the following error:
 

Interface: Tunnel1, IPv4 NHRP Details
Type:Hub, NHRP Peers:7,

 # Ent  Peer NBMA Addr Peer Tunnel Add State  UpDn Tm Attrb
 ----- --------------- --------------- ----- -------- -----
     2 UNKNOWN             10.255.11.2  NHRP    never    IX
     0 UNKNOWN             10.255.11.7  NHRP    never    IX
     1 192.168.1.2         10.255.11.4    UP    1d06h     D
     1 192.168.2.100       10.255.11.5    UP    2d22h     D


The session will not establish because the hub already has an association with a peer that has 192.168.1.2 as its NBMA address. A workaround is to set a different fixed IP or use a different MAC to get another IP.

This is a different problem than the one that "ip nhrp registration no-unique" fixes. That happens when the same spoke connects to the hub but with a different IP address than before. In this case we have two spokes with identical NBMA addresses (allthough they are behind different public IP's).

Who Me Too'd this topic