DMVPN Hub redundancy

[martinbuffleo]

I have built a two hub single spoke trial lab. the hubs are then connected to a layer 3 switch.

I have configured DMVPN without tunnel protection

My hub has a single tunnel with two nrhp entries for the two hubs

I am running OSPF for dynamic routing.

The OSPF neighbour comes up and the routing tables look good. In some cases on the L3 switch the routes see two routes to the same subnet which is perfect.

However If I shut the tunnel interface on one of my hubs. The L3 switch deletes all routes to the branch office. After some time the routes will come back in for the single hub.

I was assuming that I would get sub second failover. Or at least keep the routes that I know are still live.

Does anyone have any ideas? I'm tempted to just configure them as two separate DMVPNs.

[paul driver]

Hello

Can you post the config for the NHS Hubs and NHC spoke please.

res

Paul

[martinbuffleo]

Hub1
---------
interface Tunnel61
 description DMVPN
 ip address 5.5.160.1 255.255.255.0
 no ip redirects
 ip mtu 1230
 ip nhrp authentication password
 ip nhrp map multicast dynamic
 ip nhrp map multicast 9.9.254.4
 ip nhrp map 5.5.160.2 9.9.254.4
 ip nhrp network-id 100000
 ip nhrp holdtime 120
 ip virtual-reassembly in
 ip ospf network broadcast
 tunnel source Port-channel1.160
 tunnel mode gre multipoint
 tunnel key 999

router ospf 10
 network 5.5.144.0 0.0.0.3 area 0
 network 5.5.145.0 0.0.0.3 area 0
 network 5.5.146.0 0.0.0.3 area 0
 network 5.5.147.0 0.0.0.3 area 0
 network 5.5.148.0 0.0.0.3 area 0
 network 5.5.160.0 0.0.0.255 area 0
 network 192.168.132.0 0.0.0.7 area 0

Hub2
--------
interface Tunnel61
 description DMVPN
 ip address 5.5.160.2 255.255.255.0
 no ip redirects
 ip mtu 1230
 ip nhrp authentication password
 ip nhrp map multicast dynamic
 ip nhrp map multicast 9.9.254.3
 ip nhrp map 5.5.160.1 9.9.254.3
 ip nhrp network-id 100000
 ip nhrp holdtime 120
 ip virtual-reassembly in
 ip ospf network broadcast
 tunnel source Port-channel1.160
 tunnel mode gre multipoint
 tunnel key 999

router ospf 10
 network 5.5.144.4 0.0.0.3 area 0
 network 5.5.145.4 0.0.0.3 area 0
 network 5.5.146.4 0.0.0.3 area 0
 network 5.5.147.4 0.0.0.3 area 0
 network 5.5.148.4 0.0.0.3 area 0
 network 5.5.160.0 0.0.0.255 area 0
 network 192.168.132.0 0.0.0.7 area 0

Spoke
--------
interface Tunnel61
 description DMVPN
 ip vrf forwarding VRF-INSIDE
 ip address 5.5.160.10 255.255.255.0
 no ip redirects
 ip mtu 1230
 ip nhrp authentication password
 ip nhrp map multicast dynamic
 ip nhrp map 5.5.160.1 9.9.254.3
 ip nhrp map multicast 9.9.254.3
 ip nhrp map 5.5.160.2 9.9.254.4
 ip nhrp map multicast 9.9.254.4
 ip nhrp network-id 100000
 ip nhrp holdtime 120
 ip nhrp nhs 5.5.160.1
 ip nhrp nhs 5.5.160.2
 zone-member security TUNNEL61
 ip ospf network broadcast
 ip ospf priority 0
 tunnel source FastEthernet4
 tunnel mode gre multipoint
 tunnel key 999

router ospf 10 vrf VRF-INSIDE
 router-id 5.5.160.10
 network 5.5.160.0 0.0.0.255 area 0
 network 192.168.160.0 0.0.0.255 area 0

[martinbuffleo]

Any Ideas?

[paul driver]

Hello

What  dont see is ospf DR/BDR defined - it looks like you have left it to negociate -

Try-
 

Hub1
int tun 61
bandwith 1000
ip ospf priority 3
 

Also can you post the following:

sh ip ospf route
sh ip ospf neighbours
sh dmvpn
sh ip nhrp


res

Paul