11-30-2016 06:49 AM - edited 03-05-2019 07:35 AM
Hi - I need help in troubleshooting EIGRP flapping issues on HUB.
Hub = CISCO3945 ( with VPN Module )
Hub has over 40 spoke sites running EIGRP over tunnel. Some of the EIGRP neighbors are constantly flapping and some are up and running fine
There is no difference between sites confgs which are working fine VS which are flapping.
Users at sites connect to HUB to use Citrix Server and complain about Citrix application freezing and having a slow response.
I am not sure if there is MTU issue causing EIGRP flapping and Citrix application is freezing for users at sites ?
Can you please advise what I can do ?
please see log below from hub -
HUB#
Nov 30 08:13:01: %DUAL-5-NBRCHANGE: EIGRP-IPv4 90: Neighbor 172.30.10.2 (Tunnel101) is down: holding time expired
Nov 30 08:13:54: %DUAL-5-NBRCHANGE: EIGRP-IPv4 90: Neighbor 172.30.10.2 (Tunnel101) is up: new adjacency
Nov 30 01:05:44: %DUAL-5-NBRCHANGE: EIGRP-IPv4 90: Neighbor 172.30.9.127 (Tunnel101) is down: holding time expired
Nov 30 01:07:02: %DUAL-5-NBRCHANGE: EIGRP-IPv4 90: Neighbor 172.30.9.127 (Tunnel101) is up: new adjacency
Nov 30 13:22:36: %DUAL-5-NBRCHANGE: EIGRP-IPv4 90: Neighbor 172.30.10.202 (Tunnel101) is down: holding time expired
Nov 30 13:23:14: %DUAL-5-NBRCHANGE: EIGRP-IPv4 90: Neighbor 172.30.10.202 (Tunnel101) is up: new adjacency
Nov 30 06:51:07: %DUAL-5-NBRCHANGE: EIGRP-IPv4 90: Neighbor 172.30.10.150 (Tunnel101) is down: holding time expired
Nov 30 06:52:43: %DUAL-5-NBRCHANGE: EIGRP-IPv4 90: Neighbor 172.30.10.150 (Tunnel101) is up: new adjacency
--------------------------------------------------
HUB#sh run int tu101
--------------------------------------------------
!
interface Tunnel101
bandwidth 100000
ip vrf forwarding VPN_TO_SITES
ip address 172.30.8.1 255.255.252.0
no ip redirects
ip mtu 1392
ip hello-interval eigrp 90 30
ip hold-time eigrp 90 90
ip nhrp authentication 8d6eh5ba
ip nhrp map multicast dynamic
ip nhrp network-id 95
ip nhrp holdtime 30
ip nhrp registration no-unique
no ip split-horizon eigrp 90
ip summary-address eigrp 90 172.16.0.0 255.255.0.0
ip summary-address eigrp 90 172.24.0.0 255.255.0.0
delay 100
tunnel source GigabitEthernet0/2
tunnel mode gre multipoint
tunnel key 110011
tunnel vrf VPN_TO_SITES
tunnel protection ipsec profile VPN_TO_SITES
end
--------------------------------------------------
SITE CONFIGS which is having issues:
--------------------------------------------------
SITE#
interface Tunnel101
description Primary Tunnel over ADSL
bandwidth 2048
ip address 172.30.18.236 255.255.252.0
no ip redirects
ip mtu 1392
ip nhrp authentication 79!tdudh
ip nhrp map multicast dynamic
ip nhrp map multicast 194.75.173.101
ip nhrp map 172.30.16.1 194.75.173.101
ip nhrp network-id 146
ip nhrp holdtime 30
ip nhrp nhs 172.30.16.1
ip nhrp registration no-unique
delay 100
tunnel source Dialer1
tunnel mode gre multipoint
tunnel key 110197
tunnel path-mtu-discovery
tunnel protection ipsec profile VPN_TO_HUB
11-30-2016 07:35 AM
The message about holding time expired in an indication that some EIGRP hello packets are being dropped. This probably indicates that some of your sites are on connections that are not as reliable as others. I faced a similar situation with a customer with many remote sites where some sites were experiencing EIGRP flapping. We found that increasing the EIGRP hello timer and hold timer made significant improvement in the flapping issue. You might try increasing these timers and see if it helps your situation.
HTH
Rick
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide