cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
587
Views
0
Helpful
3
Replies

DMVPN configuration issues

wispkit
Level 1
Level 1

Traffic not going through the DMVPN tunnel

Some of our spoke traffic is not going through the tunnel to either hub. Our connection from the hub to spoke is over a point-to-point radios. We have an outside eigrp 100 network and an inside eigrp 60 network. Eigrp 100 handles the radio network and eigrp 60 handles the dmvpn. The hubs are not co-located. A spoke can have multiple spokes connected to it or a spoke can have multiple spokes daisy chained off it.

 

I know the reason that the traffic is not going through the tunnel and that is because the hubs are redistribute connected. So the routes at the spokes are being learned via external eigrp 100 instead of nhrp.

I have tried removing the redistribute connected from the hubs, this caused the spokes to flap. Some of the spokes have a distribute list that is only allowing the default route to be learned via eigrp 100. The spokes with the distribute list are passing traffic through the tunnel. I have tried adding a distribute list to the spokes not going through the tunnel only allowing 111.100.x.x and the default route to be learned but because Hub2 is downstream it did not learn the redistributed routes and this caused everything upstream to lose connection to all downstream devices. When I applied the distribute list to spokes that were not in the path to Hub2 traffic was going through the tunnel.

 

What other solutions may work for this network? Dual Hub - Dual DMVPN?

3 Replies 3

Hello,

 

this requires some major labbing in GNS3...

 

In the meantime, can you post the output of 'show ip route' from both the hub and spoke ?

a.alekseev
Level 7
Level 7
do not redistribute any routes in eigrp 100

in eigrp 60 do not redistribute static or connected routes, try to use "network" and passive-interface" instead.
If you really need redistribute something in eigrp 60 then do it with a help of "route-map".

another way - put all outside interfaces in vrf :) it will completely split your "inside" and "outside"

Hello

Eigrp 60 is the DMVPN network, Eigrp 100 is transit network for the vpn tunnels, so why are you advertsing the prefixes that need to be reached vai the DMVPN tunnels into the transit network?

res

Paul


Please rate and mark as an accepted solution if you have found any of the information provided useful.
This then could assist others on these forums to find a valuable answer and broadens the community’s global network.

Kind Regards
Paul
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: