cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
490
Views
0
Helpful
1
Replies

EIGRP neighbors constantly flapping on VPN HUB

Bali Khan
Level 1
Level 1

Hi - I need help in troubleshooting EIGRP flapping issues on HUB.

Hub = CISCO3945 ( with VPN Module )

Hub has over 40 spoke sites running EIGRP over tunnel. Some of the EIGRP neighbors are constantly flapping and some are up and running fine

There is no difference between sites confgs which are working fine VS which are flapping.

Users at sites connect to HUB to use Citrix Server and complain about Citrix application freezing and having a slow response.

I am not sure if there is MTU issue causing EIGRP flapping and Citrix application is freezing for users at sites ?

Can you please advise what I can do ?

please see log below from hub -

HUB#

Nov 30 08:13:01: %DUAL-5-NBRCHANGE: EIGRP-IPv4 90: Neighbor 172.30.10.2 (Tunnel101) is down: holding time expired
Nov 30 08:13:54: %DUAL-5-NBRCHANGE: EIGRP-IPv4 90: Neighbor 172.30.10.2 (Tunnel101) is up: new adjacency

Nov 30 01:05:44: %DUAL-5-NBRCHANGE: EIGRP-IPv4 90: Neighbor 172.30.9.127 (Tunnel101) is down: holding time expired
Nov 30 01:07:02: %DUAL-5-NBRCHANGE: EIGRP-IPv4 90: Neighbor 172.30.9.127 (Tunnel101) is up: new adjacency

Nov 30 13:22:36: %DUAL-5-NBRCHANGE: EIGRP-IPv4 90: Neighbor 172.30.10.202 (Tunnel101) is down: holding time expired
Nov 30 13:23:14: %DUAL-5-NBRCHANGE: EIGRP-IPv4 90: Neighbor 172.30.10.202 (Tunnel101) is up: new adjacency

Nov 30 06:51:07: %DUAL-5-NBRCHANGE: EIGRP-IPv4 90: Neighbor 172.30.10.150 (Tunnel101) is down: holding time expired
Nov 30 06:52:43: %DUAL-5-NBRCHANGE: EIGRP-IPv4 90: Neighbor 172.30.10.150 (Tunnel101) is up: new adjacency

--------------------------------------------------

HUB#sh run int tu101

--------------------------------------------------


!
interface Tunnel101
 bandwidth 100000
 ip vrf forwarding VPN_TO_SITES
 ip address 172.30.8.1 255.255.252.0
 no ip redirects
 ip mtu 1392
 ip hello-interval eigrp 90 30
 ip hold-time eigrp 90 90
 ip nhrp authentication 8d6eh5ba
 ip nhrp map multicast dynamic
 ip nhrp network-id 95
 ip nhrp holdtime 30
 ip nhrp registration no-unique
 no ip split-horizon eigrp 90
 ip summary-address eigrp 90 172.16.0.0 255.255.0.0
 ip summary-address eigrp 90 172.24.0.0 255.255.0.0
 delay 100
 tunnel source GigabitEthernet0/2
 tunnel mode gre multipoint
 tunnel key 110011
 tunnel vrf VPN_TO_SITES
 tunnel protection ipsec profile VPN_TO_SITES
end

--------------------------------------------------

SITE CONFIGS which is having issues:

--------------------------------------------------

SITE#

interface Tunnel101
description Primary Tunnel over ADSL
bandwidth 2048
ip address 172.30.18.236 255.255.252.0
no ip redirects
ip mtu 1392
ip nhrp authentication 79!tdudh
ip nhrp map multicast dynamic
ip nhrp map multicast 194.75.173.101
ip nhrp map 172.30.16.1 194.75.173.101
ip nhrp network-id 146
ip nhrp holdtime 30
ip nhrp nhs 172.30.16.1
ip nhrp registration no-unique
delay 100
tunnel source Dialer1
tunnel mode gre multipoint
tunnel key 110197
tunnel path-mtu-discovery
tunnel protection ipsec profile VPN_TO_HUB

 

1 Reply 1

Richard Burts
Hall of Fame
Hall of Fame

The message about holding time expired in an indication that some EIGRP hello packets are being dropped. This probably indicates that some of your sites are on connections that are not as reliable as others. I faced a similar situation with a customer with many remote sites where some sites were experiencing EIGRP flapping. We found that increasing the EIGRP hello timer and hold timer made significant improvement in the flapping issue. You might try increasing these timers and see if it helps your situation.

HTH

Rick

HTH

Rick