Hi there
problem should be simple to resolve. However, i could not succeed. I have a FlexVPN setup with hub & spoke design. I had to change the configuration from a nonVRF Design into a fullVRF (all interfaces belong to a vrf) design. Since then, the default route is not advertised to spoke routers anymore. Here are some outputs:
roRZ201#show ip interface brief
Interface IP-Address OK? Method Status Protocol
GigabitEthernet0/0/0 unassigned YES NVRAM up up
Gi0/0/0.300 172.27.1.9 YES TFTP up up
GigabitEthernet0/0/1 unassigned YES NVRAM administratively down down
GigabitEthernet0/0/2 unassigned YES NVRAM up up
Gi0/0/2.11 unassigned YES unset up up
GigabitEthernet0/0/3 unassigned YES NVRAM administratively down down
GigabitEthernet0 unassigned YES NVRAM administratively down down
Dialer1 212.25.66.107 YES IPCP up up
Loopback2 172.19.0.1 YES manual up up
Virtual-Access1 unassigned YES unset up up
Virtual-Access2 unassigned YES manual up up
Virtual-Access5 172.19.0.1 YES unset up up
Virtual-Template2 172.19.0.1 YES unset up down
roRZ201#show ip eigrp vrf LAN neighbors
EIGRP-IPv4 VR(LAN) Address-Family Neighbors for AS(1)
VRF(LAN)
H Address Interface Hold Uptime SRTT RTO Q Seq
(sec) (ms) Cnt Num
0 172.19.0.66 Vi5 14 00:39:34 35 1398 0 36
roRZ201#show ip eigrp vrf LAN topology
EIGRP-IPv4 VR(LAN) Topology Table for AS(1)/ID(172.27.1.9)
Topology(base) TID(0) VRF(LAN)
Codes: P - Passive, A - Active, U - Update, Q - Query, R - Reply,
r - reply Status, s - sia Status
P 172.19.0.1/32, 0 successors, FD is Infinity
via 172.19.0.66 (13107200000/9830400000), Virtual-Access5
P 172.19.0.0/24, 1 successors, FD is 163840
via Connected, Loopback2
P 172.16.220.0/24, 1 successors, FD is 9831055360, tag is 20
via 172.19.0.66 (9831055360/1310720), Virtual-Access5
P 172.19.0.66/32, 1 successors, FD is 9830400000
via Rstatic (9830400000/0)
P 172.27.1.0/28, 1 successors, FD is 1310720
via Connected, GigabitEthernet0/0/0.300
roRZ201#show running-config | include ip rout
ip route vrf LAN 0.0.0.0 0.0.0.0 172.27.1.1
ip route vrf LAN 172.16.0.0 255.240.0.0 172.27.1.1
roRZ201#show ip route vrf LAN | begin Gate
Gateway of last resort is 172.27.1.1 to network 0.0.0.0
S* 0.0.0.0/0 [1/0] via 172.27.1.1
S 172.16.0.0/12 [1/0] via 172.27.1.1
172.16.0.0/24 is subnetted, 1 subnets
D 172.16.220.0 [90/76805120] via 172.19.0.66, 00:11:22, Virtual-Access5
172.19.0.0/16 is variably subnetted, 3 subnets, 2 masks
C 172.19.0.0/24 is directly connected, Loopback2
L 172.19.0.1/32 is directly connected, Loopback2
S 172.19.0.66/32 is directly connected, Virtual-Access5
172.27.0.0/16 is variably subnetted, 2 subnets, 2 masks
C 172.27.1.0/28 is directly connected, GigabitEthernet0/0/0.300
L 172.27.1.9/32 is directly connected, GigabitEthernet0/0/0.300
roRZ201#show running-config | begin eigrp
router eigrp LAN
!
address-family ipv4 unicast vrf LAN autonomous-system 1
!
topology base
redistribute static
exit-af-topology
network 172.16.0.0 0.15.255.255
exit-address-family
I tried a whole class B range (as all our devices reside within) as well, but it didnt help. On the spoke side:
roTST01#show ip eigrp vrf LAN topology
EIGRP-IPv4 VR(LAN) Topology Table for AS(1)/ID(172.16.220.3)
Topology(base) TID(0) VRF(LAN)
Codes: P - Passive, A - Active, U - Update, Q - Query, R - Reply,
r - reply Status, s - sia Status
P 172.19.0.1/32, 1 successors, FD is 9830400000
via Rstatic (9830400000/0)
P 172.19.0.0/24, 1 successors, FD is 9830481920
via 172.19.0.1 (9830481920/163840), Tunnel2
P 172.16.220.0/24, 1 successors, FD is 1310720, tag is 20
via Connected, Vlan10
P 172.19.0.66/32, 1 successors, FD is 9830400000, tag is 20
via Connected, Tunnel2
P 172.27.1.0/28, 1 successors, FD is 9831055360
via 172.19.0.1 (9831055360/1310720), Tunnel2
roTST01#show ip route vrf LAN | begin Gate
Gateway of last resort is not set
172.16.0.0/16 is variably subnetted, 2 subnets, 2 masks
C 172.16.220.0/24 is directly connected, Vlan10
L 172.16.220.3/32 is directly connected, Vlan10
172.19.0.0/16 is variably subnetted, 3 subnets, 2 masks
D 172.19.0.0/24 [90/76800640] via 172.19.0.1, 00:12:32
S 172.19.0.1/32 is directly connected, Tunnel2
C 172.19.0.66/32 is directly connected, Tunnel2
172.27.0.0/28 is subnetted, 1 subnets
D 172.27.1.0 [90/76805120] via 172.19.0.1, 00:12:32
The thing is, it worked before is VRF'ed the hub router. But in my understanding i did everything correct. I hope someone else is spotting my mistake quickly. If you need more output, pls advise.
Help is much appreciated.
