EIGRP Unaware of VRFs in DMVPN solution

[Gilles van Heyst]

Hi,

We are building a Multiple DMVPN Clouds. These are 2 single hub DMVPN clouds and 1 dual hub DMVPN cloud. The dual hub VPN cloud is in a seperate VRF as the other 2 singles.

For both single- and the dual- hub DMVPN cloud we use EIGRP as our routing protocol. We have first configured the 2 single DMVPN Clouds with EIGRP and the work fine. All routes are displayed correctly.

When we use the "address-family ipv4 vrf DUALHUB" command within EIGRP to configure the networks for the VRF, we see the adjaceny popup but no hello's are exchanged. Finally the Spoke drops the adjencency and immediately builds one up again.

Why the 'normal' non VRF DMVPN tunnels work fine and the Dual Hub Tunnel does not, is beyond me. Does anyone have similar problems.

We are running on 4x2851 - 12.4.24T2(ED) for the Hubs and 12.4.24T2(ED) on a 1841.

[Giuseppe Larosa]

Hello Gilles,

you are probably hitting a bug.

if you haven't already done try to use a 12.4(20)T image on hub routers.

It may be wise to open a Cisco TAC service request

Hope to help

Giuseppe

[Michael Sullenberger]

I recommend using 12.4(15)T(latest (14)) or 12.4(24)T(latest (T4)) for DMVPN. There were various problems

with other versions around these.

When you say the the dual VPN cloud is in a separate VRF, do you mean an fVRF

     "tunnel vrf ..."  on tunnel interface

     "ip vrf forwarding ..." on WAN interface

or iVRF

     "ip vrf forwarding ..." on tunnel interface

     "ip vrf forwarding ..." on LAN interface

?

In the seconds case you would have to configure EIGRP to use address-family in the VRF.

Mike.