SCENERIO: i have configured dmvpn from HUB-ACTIVE, HUB-STANDBY to SPOKE2.
I have configured 2 tunnels on HUB-ACTIVE & HUB-STANDBY pointing towards SPOKE2, while SPOKE2 has 4 tunnels, 2 for HUB-ACTIVE & 2 for HUB-STANDBY.
[ Note: on each HUB 2 tunnels were created as it has 2 isp connected to it's LAN. ]
>>>>>ping from HQ-PC to B2-pc are not successfull.<<<<<<
From HQ-PC, it is able to ping 1.1.1.2 but not 1.1.1.3 and hence 192.168.20.1.
Topology is attached below.
Here's configuration :
HUB-ACTIVE:
!
!
!
redundancy
!
!
ip tcp synwait-time 5
!
!
crypto isakmp policy 1
encr 3des
hash md5
authentication pre-share
!
crypto isakmp policy 2
encr 3des
hash md5
authentication pre-share
group 2
crypto isakmp key FORISP1 address 1.1.1.4
crypto isakmp key FORISP2 address 2.2.2.4
!
!
crypto ipsec transform-set ISP1SET esp-3des esp-md5-hmac
crypto ipsec transform-set ISP2SET esp-3des esp-md5-hmac
!
crypto map ISP1MAP 1 ipsec-isakmp
set peer 1.1.1.4
set transform-set ISP1SET
match address 100
!
crypto map ISP2MAP 2 ipsec-isakmp
set peer 2.2.2.4
set transform-set ISP2SET
match address 100
!
!
!
!
!
!
interface Tunnel1
description ***ACTIVE-PATH-1-****
ip address 172.16.10.1 255.255.255.0
no ip redirects
ip nhrp map multicast dynamic
ip nhrp network-id 1
tunnel source FastEthernet0/0
tunnel mode gre multipoint
tunnel key 1111
!
!
interface Tunnel2
description ***ACTIVE-PATH-2-****
ip address 90.90.90.1 255.255.255.0
no ip redirects
ip nhrp map multicast dynamic
ip nhrp network-id 2
delay 6000
tunnel source FastEthernet1/1
tunnel mode gre multipoint
tunnel key 2222
!
!
interface FastEthernet0/0
description ***ISP-1-PRIMARY***
ip address 1.1.1.2 255.255.255.0
duplex auto
speed auto
standby 2 ip 1.1.1.5
standby 2 priority 110
standby 2 preempt
standby 2 name wlanisp1
crypto map ISP1MAP
!
!
interface FastEthernet0/1
description ***LAN-INTERFACE***
ip address 192.168.10.2 255.255.255.0
duplex auto
speed auto
standby 1 ip 192.168.10.5
standby 1 priority 110
standby 1 preempt
standby 1 name inlan
!
!
interface FastEthernet1/0
no ip address
shutdown
duplex auto
speed auto
!
!
interface FastEthernet1/1
description ***ISP-2-SECONDARY***
ip address 2.2.2.2 255.255.255.0
duplex auto
speed auto
standby 3 ip 2.2.2.5
standby 3 priority 110
standby 3 preempt
standby 3 name wanisp2
crypto map ISP2MAP
!
!
!
router eigrp 1
network 90.90.90.0 0.0.0.255
network 172.16.10.0 0.0.0.255
network 192.168.10.0
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
ip route 192.168.30.0 255.255.255.0 1.1.1.4
ip route 192.168.30.0 255.255.255.0 2.2.2.4 10
ip route 192.168.50.0 255.255.255.0 192.168.10.4
!
access-list 100 permit ip 192.168.50.0 0.0.0.255 192.168.30.0 0.0.0.255
nls resp-timeout 1
cpd cr-id 1
no cdp log mismatch duplex
!
!
!
!
!
!
control-plane
!
!
!
mgcp fax t38 ecm
mgcp behavior g729-variants static-pt
!
!
!
gatekeeper
shutdown
!
!
HUB-STANDBY:
!
!
!
redundancy
!
!
ip tcp synwait-time 5
!
!
crypto isakmp policy 1
encr 3des
hash md5
authentication pre-share
!
crypto isakmp policy 2
encr 3des
hash md5
authentication pre-share
group 2
crypto isakmp key FORISP1 address 1.1.1.4
crypto isakmp key FORISP2 address 2.2.2.4
!
!
crypto ipsec transform-set ISP1SET esp-3des esp-md5-hmac
crypto ipsec transform-set ISP2SET esp-3des esp-md5-hmac
!
crypto map ISP1MAP 1 ipsec-isakmp
set peer 1.1.1.4
set transform-set ISP1SET
match address 100
!
crypto map ISP2MAP 2 ipsec-isakmp
set peer 2.2.2.4
set transform-set ISP2SET
match address 100
!
!
!
!
!
!
interface Tunnel3
description ***STANDBY-PATH-1-***
ip address 200.200.200.1 255.255.255.0
no ip redirects
ip nhrp map multicast dynamic
ip nhrp network-id 3
delay 7000
tunnel source FastEthernet0/0
tunnel mode gre multipoint
tunnel key 3333
!
!
interface Tunnel4
description ***STANDBY-PATH-2-***
ip address 50.50.50.1 255.255.255.0
no ip redirects
ip nhrp map multicast dynamic
ip nhrp network-id 4
delay 8000
tunnel source FastEthernet1/1
tunnel mode gre multipoint
tunnel key 4444
!
!
interface FastEthernet0/0
description ***ISP-1-PRIMARY***
ip address 1.1.1.1 255.255.255.0
duplex auto
speed auto
standby 2 ip 1.1.1.5
standby 2 preempt
standby 2 name wanisp1
crypto map ISP1MAP
!
!
interface FastEthernet0/1
description ***LAN-INTERFACE***
ip address 192.168.10.1 255.255.255.0
duplex auto
speed auto
standby 1 ip 192.168.10.5
standby 1 preempt
standby 1 name inlan
!
!
interface FastEthernet1/0
no ip address
shutdown
duplex auto
speed auto
!
!
interface FastEthernet1/1
description ***ISP-2-SECONDARY***
ip address 2.2.2.1 255.255.255.0
duplex auto
speed auto
standby 3 ip 2.2.2.5
standby 3 preempt
standby 3 name wanisp2
crypto map ISP2MAP
!
!
!
router eigrp 1
network 50.50.50.0 0.0.0.255
network 192.168.10.0
network 200.200.200.0
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
ip route 192.168.30.0 255.255.255.0 1.1.1.4
ip route 192.168.30.0 255.255.255.0 2.2.2.4 10
ip route 192.168.50.0 255.255.255.0 192.168.10.4
!
access-list 100 permit ip 192.168.50.0 0.0.0.255 192.168.30.0 0.0.0.255
nls resp-timeout 1
cpd cr-id 1
no cdp log mismatch duplex
!
!
!
!
!
!
control-plane
!
!
!
mgcp fax t38 ecm
mgcp behavior g729-variants static-pt
!
!
!
gatekeeper
shutdown
!
SPOKE2:
!
!
!
redundancy
!
!
ip tcp synwait-time 5
!
!
!
!
!
!
!
!
interface Tunnel1
description ***ACTIVE-PATH-1-****
ip address 172.16.10.2 255.255.255.0
no ip redirects
ip nhrp map 172.16.10.1 1.1.1.2
ip nhrp map multicast 1.1.1.2
ip nhrp network-id 1
ip nhrp nhs 172.16.10.1
tunnel source FastEthernet0/0
tunnel mode gre multipoint
tunnel key 1111
!
!
interface Tunnel2
description ***ACTIVE-PATH-2-****
ip address 90.90.90.2 255.255.255.0
no ip redirects
ip nhrp map multicast 2.2.2.2
ip nhrp map 90.90.90.1 2.2.2.2
ip nhrp network-id 2
ip nhrp nhs 90.90.90.1
delay 6000
tunnel source FastEthernet1/1
tunnel mode gre multipoint
tunnel key 2222
!
!
interface Tunnel3
description ***STANDBY-PATH-1-***
ip address 200.200.200.2 255.255.255.0
no ip redirects
ip nhrp map 200.200.200.1 1.1.1.1
ip nhrp map multicast 1.1.1.1
ip nhrp network-id 3
ip nhrp nhs 200.200.200.1
delay 7000
tunnel source FastEthernet0/0
tunnel mode gre multipoint
tunnel key 3333
!
!
interface Tunnel4
description ***STANDBY-PATH-1-***
ip address 50.50.50.2 255.255.255.0
no ip redirects
ip nhrp map multicast 2.2.2.1
ip nhrp map 50.50.50.1 2.2.2.1
ip nhrp network-id 4
ip nhrp nhs 50.50.50.1
delay 8000
tunnel source FastEthernet1/1
tunnel mode gre multipoint
tunnel key 4444
!
!
interface FastEthernet0/0
description ***ISP-1-PRIMARY***
ip address 1.1.1.3 255.255.255.0
duplex auto
speed auto
!
!
interface FastEthernet0/1
description ***LAN-INTERFACE***
ip address 192.168.20.1 255.255.255.0
duplex auto
speed auto
!
!
interface FastEthernet1/0
no ip address
shutdown
duplex auto
speed auto
!
!
interface FastEthernet1/1
description ***ISP-2-SECONDARY***
ip address 2.2.2.3 255.255.255.0
duplex auto
speed auto
!
!
!
router eigrp 1
network 50.50.50.0 0.0.0.255
network 90.90.90.0 0.0.0.255
network 172.16.10.0 0.0.0.255
network 192.168.20.0
network 200.200.200.0
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
!
nls resp-timeout 1
cpd cr-id 1
no cdp log mismatch duplex
!
!
!
!
!
!
control-plane
!
!
!
mgcp fax t38 ecm
mgcp behavior g729-variants static-pt
!
!
!
gatekeeper
shutdown
!
