Trying to setup DMVPN with EIGRP
HUB and Spoke setup
Spokes get overloaded NAT to internet public IP 144.144.144.144 to reach the HUB across the internet that has another public IP 155.155.155.155
When I just have one spoke, the tunnel stays up
When I add another spoke, the tunnel flaps on the second spoke
On the trouble spoke, it shows it sending EIGRP packets but not receiving them.
# Ent Peer NBMA Addr Peer Tunnel Add State UpDn Tm Attrb
----- --------------- --------------- ----- -------- -----
2 144.144.144.144 142.158.63.3 UP 01:13:37 DN
142.158.63.4 UP 01:02:02 DN
Im assuming it cause the HUB doesn't know how to reply with EIGRP to the spoke that using the same IP? Is that correct? Is there something else that I need to setup here?
HUB
crypto isakmp policy 5
authentication pre-share
group 2
crypto isakmp key test address 0.0.0.0
!
!
crypto ipsec transform-set dmvpnset esp-3des esp-sha-hmac
mode transport
!
!
crypto ipsec profile dmvpnprof
set transform-set dmvpnset
!
!
!
!
!
!
interface Tunnel0
ip address 142.158.63.1 255.255.255.0
no ip redirects
ip mtu 1400
ip hold-time eigrp 10 35
no ip next-hop-self eigrp 10
no ip split-horizon eigrp 10
ip nhrp authentication test
ip nhrp map multicast dynamic
ip nhrp network-id 105600
ip nhrp holdtime 600
ip tcp adjust-mss 1360
tunnel source GigabitEthernet0/0
tunnel mode gre multipoint
tunnel key 10000
tunnel protection ipsec profile dmvpnprof
!
!
interface GigabitEthernet0/0
ip address 155.155.155.155 255.255.255.0
no ip redirects
no ip unreachables
no ip proxy-arp
duplex auto
speed auto
ntp disable
no cdp enable
!
interface GigabitEthernet0/1
ip address 142.158.39.42 255.255.255.224
no ip redirects
no ip unreachables
no ip proxy-arp
ip accounting output-packets
ip nbar protocol-discovery
ip flow ingress
ip flow egress
ip tcp adjust-mss 1300
load-interval 30
duplex auto
speed auto
!
!
interface Ethernet0/0/0
no ip address
shutdown
!
!
router eigrp 10
network 142.158.39.42 0.0.0.0
network 142.158.63.0 0.0.0.255
!
ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
ip route 0.0.0.0 0.0.0.0 155.155.155.155 name DEFAULT-ROUTE
Spoke
crypto isakmp policy 5
authentication pre-share
group 2
crypto isakmp key test address 155.155.155.155
!
!
crypto ipsec transform-set dmvpnset esp-3des esp-sha-hmac
mode transport
!
crypto ipsec profile dmvpnprof
set transform-set dmvpnset
!
!
archive
log config
hidekeys
!
!
ip ssh time-out 60
ip ssh authentication-retries 2
!
!
!
interface Tunnel0
ip address 142.158.63.4 255.255.255.0
no ip redirects
ip mtu 1400
ip hold-time eigrp 10 35
ip nhrp authentication test
ip nhrp map 142.158.63.1 155.155.155.155
ip nhrp map multicast 155.155.155.155
ip nhrp network-id 105600
ip nhrp holdtime 600
ip nhrp nhs 142.158.63.1
ip nhrp registration timeout 120
ip tcp adjust-mss 1360
tunnel source FastEthernet4
tunnel mode gre multipoint
tunnel key 10000
tunnel protection ipsec profile dmvpnprof
!
interface FastEthernet0
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
interface FastEthernet4
ip address dhcp
duplex auto
speed auto
!
interface Vlan1
no ip address
!
router eigrp 10
network 142.158.63.0 0.0.0.255
no auto-summary
eigrp stub connected
!
ip forward-protocol nd
ip route 155.155.155.155 255.255.255.255 dhcp
!
