11-10-2006 06:35 AM - edited 03-03-2019 02:39 PM
I have a large network with thousands of static GRE/IPSec tunnels across an MPLS WAN. I have to tune the EIGRP hello and hold-down timers on the tunnels due to some problems we are having. When I tune these timers, should I take into account the GRE keepalive times at the same time? Is there a relationship or best practice regarding these two sets of timers (EIGRP and GRE keeps) and their relationships to each other?
Thanks, -Bob
11-16-2006 09:49 AM
Keepalives of GRE is independent of Eigrp Hello and Hold down timers.Thus, the traffic sent from the tunnel is black-holed, and it cannot follow alternative paths because the tunnel always stays up.Refer the following URL
http://www.cisco.com/en/US/tech/tk827/tk369/technologies_tech_note09186a008040a17c.shtml#topic2
11-16-2006 11:05 AM
Hi
GRE and EIGRP timer has no relationsheep each other.
other friend alreay attach documents , who GRE keeping works.
-Minu
11-16-2006 07:38 PM
Bob
I saw your post when it first came out and I thought it was interesting. I have done lots of GRE tunnels with EIGRP as the routing protocol but I did not respond because I do not have much factual data about the relationship between the timers. But I must respond given the two other postings which seem to have mostly missed the point.
There was a weakness in the traditional implementation of GRE tunnels in which the router would mark the tunel as up/up if the router had a viable route to the tunnel destination. And this seems to be what both of the other responses are emphasizing.
Cisco introduced a recent feature of GRE keepalive to specifically address this weakness. With GRE keepalive the router does actually test for end to end connectivity and if the GRE keepalive does fail the router will mark the interface as up/down.
In my implementations I have not chosen to use GRE keepalive because I believe that I get much the same functionality with EIGRP. The EIGRP hellos also test for end to end connectivity and if that connectivity is lost the EIGRP neighbor relationship is lost. And that is usually enough for me.
But if you have reason to use both GRE keepalive and EIGRP hello (keepalive) my opinion is that the EIGRP timers are shorter than the GRE timers by default and if I were going to tune the timers I would keep the EIGRP timers shorter than the GRE timers.
HTH
Rick
11-17-2006 07:35 AM
Rick,
Thanks for the response.
The reason we like GRE keeps is mostly to eliminate confusion regarding the up/down status of a tunnel and as a 'warm fuzzy' for the NCC operators.
I was starting to come to the conclusion that the both timers should be either the same, or (as you said) the GRE timers should be a little longer. Your input has confirmed that way of thinking.
Thanks again.
Bob
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide