cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
328
Views
0
Helpful
1
Replies

DMVPN spoke to spoke fail to connect

bymc
Level 1
Level 1

This is a closed network running DMVPN phase 2/3 with two hub routers/sites and multiple (100+) spoke sites. The issue the network is having is a couple of spoke sites fail to connect to a couple of other spoke sites but are able to connect to a majority of the spoke sites. 

What would cause this issue? I have compared the configurations, compared ip nhrp detailed on the spoke routers and the hub routers.

For some conversation clarity I will number the spoke routers 

The sho DMVPN command on the spoke routers in question showed that Spoke-1 router displayed a DX in the: Attrb field and the other spoke-2 did not have an entry for spoke-1 in the DMVPN table or the nhrp table.

The hub routers sho DMVPN and ip nhrp detailed output both sho all of the spoke routers information correctly.

I hope this is enough to enable some conversation that will lead to a resolution for this spoke to spoke issue.

 

Thanks

bymc

 

1 Reply 1

balaji.bandi
Hall of Fame
Hall of Fame

I will compare the config working vs not working, what is the commonlities issue - what kind of trasport working vs not working ?

 

here is attributes :

check DX

 

Legend: Attrb --> S - Static, D - Dynamic, I - Incomplete
        N - NATed, L - Local, X - No Socket
        T1 - Route Installed, T2 - Nexthop-override
        C - CTS Capable, I2 - Temporary
        # Ent --> Number of NHRP entries with same NBMA peer
        NHS Status: E --> Expecting Replies, R --> Responding, W --> Waiting
        UpDn Time --> Up or Down Time for a Tunnel

 

some troubleshoot steps :

 

https://www.cisco.com/c/en/us/support/docs/security-vpn/dynamic-multi-point-vpn-dmvpn/116957-technote-dmvpn-00.html

 

https://www.cisco.com/c/en/us/support/docs/security/dynamic-multipoint-vpn-dmvpn/111976-dmvpn-troubleshoot-00.html

 

https://community.cisco.com/t5/security-documents/dmvpn-on-spoke-troubleshooting-order-and-component/ta-p/3143396

 

post some configuration and some topology for us to understand and suggest better (including any Logs ?)

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: