12-01-2021 06:40 AM
Scenerio: There are 3 routers [2 hub (HQ-R1 & HQ-R2), 1 spoke router(B2)]. I had configured dmVPN and used EIGRP on all three routers for communication. But it is only showing neighbour with HQ-R1 and B2 only.
i want all three routers to be a neighbour.
here's my config:
HQ-R1
-----------
interface Tunnel1
description ***** TUNNEL-1 (PRIMARY) *****
ip address 172.16.10.1 255.255.255.0
no ip redirects
ip nhrp map multicast dynamic
ip nhrp network-id 1
delay 1000
tunnel source FastEthernet0/0
tunnel mode gre multipoint
tunnel key 1111
!
!
interface Tunnel2
description ***** TUNNEL-2 (SECONDARY) *****
ip address 3.3.3.3 255.255.255.0
no ip redirects
ip nhrp map multicast dynamic
ip nhrp network-id 2
delay 2000
tunnel source FastEthernet1/1
tunnel mode gre multipoint
tunnel key 2222
!
!
interface FastEthernet0/0
description ***** ISP-1 (PRIMARY) *****
ip address 1.1.1.3 255.255.255.0
duplex auto
speed auto
crypto map ISP1MAP
!
!
interface FastEthernet0/1
description ***** LAN-INTERFACE *****
ip address 192.168.10.1 255.255.255.0
duplex auto
speed auto
!
!
interface FastEthernet1/1
description ***** ISP-2 (SECONDARY) *****
ip address 2.2.2.3 255.255.255.0
duplex auto
speed auto
crypto map ISP2MAP
!
!
!
router eigrp 2
network 3.3.3.0 0.0.0.255
network 172.16.10.0 0.0.0.255
network 192.168.10.0
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
HQ-R2
---------------
interface Tunnel3
description ***** TUNNEL-3 (PRIMARY) *****
ip address 200.200.200.1 255.255.255.0
no ip redirects
ip nhrp map multicast dynamic
ip nhrp network-id 1
delay 3000
tunnel source FastEthernet0/0
tunnel mode gre multipoint
tunnel key 3333
!
!
interface Tunnel4
description ***** TUNNEL-4 (SECONDARY) *****
ip address 50.50.50.1 255.255.255.0
no ip redirects
ip nhrp map multicast dynamic
ip nhrp network-id 2
delay 4000
tunnel source FastEthernet1/1
tunnel mode gre multipoint
tunnel key 4444
!
!
interface FastEthernet0/0
description ***** ISP-1 (PRIMARY) *****
ip address 1.1.1.4 255.255.255.0
duplex auto
speed auto
crypto map ISP1MAP
!
!
interface FastEthernet0/1
description ***** LAN - INTERFACE *****
ip address 192.168.20.1 255.255.255.0
duplex auto
speed auto
!
!
!
interface FastEthernet1/1
description ***** ISP-2 (SECONDARY) *****
ip address 2.2.2.4 255.255.255.0
duplex auto
speed auto
crypto map ISP2MAP
!
!
!
router eigrp 2
network 3.3.3.0 0.0.0.255
network 172.16.10.0 0.0.0.255
network 192.168.20.0
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
B2
------------
interface Tunnel1
description ***** TUNNEL-1 (PRIMARY) *****
ip address 172.16.10.2 255.255.255.0
no ip redirects
ip nhrp map multicast 1.1.1.3
ip nhrp map 172.16.10.1 1.1.1.3
ip nhrp network-id 1
ip nhrp nhs 172.16.10.1
delay 1000
tunnel source FastEthernet0/0
tunnel mode gre multipoint
tunnel key 1111
!
!
interface Tunnel2
description ***** TUNNEL-2 (SECONDARY) *****
ip address 3.3.3.4 255.255.255.0
no ip redirects
ip nhrp map multicast 2.2.2.3
ip nhrp map 3.3.3.3 2.2.2.3
ip nhrp network-id 2
ip nhrp nhs 3.3.3.3
delay 2000
tunnel source FastEthernet1/1
tunnel mode gre multipoint
tunnel key 2222
!
!
interface Tunnel3
description ***** TUNNEL-3 (PRIMARY) *****
ip address 200.200.200.2 255.255.255.0
no ip redirects
ip nhrp map multicast 1.1.1.4
ip nhrp map 200.200.200.1 1.1.1.4
ip nhrp network-id 1
ip nhrp nhs 200.200.200.1
delay 3000
tunnel source FastEthernet0/0
tunnel mode gre multipoint
tunnel key 3333
!
!
interface Tunnel4
description ***** TUNNEL-4 (SECONDARY) *****
ip address 50.50.50.2 255.255.255.0
no ip redirects
ip nhrp map multicast 2.2.2.4
ip nhrp map 50.50.50.1 2.2.2.4
ip nhrp network-id 2
ip nhrp nhs 50.50.50.1
delay 4000
tunnel source FastEthernet1/1
tunnel mode gre multipoint
tunnel key 4444
!
!
interface FastEthernet0/0
description ***** ISP-1 (PRIMARY) *****
ip address 1.1.1.2 255.255.255.0
duplex auto
speed auto
!
!
interface FastEthernet0/1
description ***** LAN - INTERFACE *****
ip address 192.168.70.1 255.255.255.0
duplex auto
speed auto
!
interface FastEthernet1/1
description ***** ISP-2 (SECONDARY) *****
ip address 2.2.2.2 255.255.255.0
duplex auto
speed auto
!
!
!
router eigrp 2
network 3.3.3.0 0.0.0.255
network 50.50.50.0 0.0.0.255
network 172.16.10.0 0.0.0.255
network 192.168.70.0
network 200.200.200.0
!
12-01-2021 11:02 AM
Hub1 have IP 2.2.2.3 but the Spoke is direct to 2.2.2.4, change the ip and try again.
12-01-2021 09:11 PM
I didn't get it , what u want to say.?
dmvpn is all OK,
Problem is with EIGRP neighbour, they are not forming neighbourhood.
12-02-2021 02:13 AM - edited 12-02-2021 03:14 AM
show dmvpn in Hub 1 and Hub 2,
can you share it
12-03-2021 12:25 AM
old problem is solved but new arrived.
When i try to broadcast connected network on a router it shows, not on common subnet error on STANDBY AND SPOKE2
ERROR_MESSAGE : *Dec 3 12:43:47.675: EIGRP-IPv4(1): Neighbor 2.2.2.3 not on common subnet for FastEthernet0/0 no ip next-hop-self eigrp 1
HUB-STANDBY:
redundancy
!
!
ip tcp synwait-time 5
!
!
crypto isakmp policy 1
encr 3des
hash md5
authentication pre-share
!
crypto isakmp policy 2
encr 3des
hash md5
authentication pre-share
group 2
crypto isakmp key FORISP1 address 1.1.1.4
crypto isakmp key FORISP2 address 2.2.2.4
!
!
crypto ipsec transform-set ISP1SET esp-3des esp-md5-hmac
crypto ipsec transform-set ISP2SET esp-3des esp-md5-hmac
!
crypto map ISP1MAP 1 ipsec-isakmp
set peer 1.1.1.4
set transform-set ISP1SET
match address 100
!
crypto map ISP2MAP 2 ipsec-isakmp
set peer 2.2.2.4
set transform-set ISP2SET
match address 100
!
!
!
!
!
!
interface Tunnel3
description ***STANDBY-PATH-1-***
ip address 200.200.200.1 255.255.255.0
no ip redirects
no ip next-hop-self eigrp 1
ip nhrp map multicast dynamic
ip nhrp network-id 3
no ip split-horizon eigrp 1
delay 7000
tunnel source FastEthernet0/0
tunnel mode gre multipoint
tunnel key 3333
!
!
interface Tunnel4
description ***STANDBY-PATH-2-***
ip address 50.50.50.1 255.255.255.0
no ip redirects
no ip next-hop-self eigrp 1
ip nhrp map multicast dynamic
ip nhrp network-id 4
no ip split-horizon eigrp 1
delay 8000
tunnel source FastEthernet1/1
tunnel mode gre multipoint
tunnel key 4444
!
!
interface FastEthernet0/0
description ***ISP-1-PRIMARY***
ip address 1.1.1.1 255.255.255.0
duplex auto
speed auto
standby 2 ip 1.1.1.5
standby 2 preempt
standby 2 name wanisp1
crypto map ISP1MAP
!
!
interface FastEthernet0/1
description ***LAN-INTERFACE***
ip address 192.168.10.1 255.255.255.0
duplex auto
speed auto
standby 1 ip 192.168.10.5
standby 1 preempt
standby 1 name inlan
!
!
interface FastEthernet1/0
no ip address
shutdown
duplex auto
speed auto
!
!
interface FastEthernet1/1
description ***ISP-2-SECONDARY***
ip address 2.2.2.1 255.255.255.0
duplex auto
speed auto
standby 3 ip 2.2.2.5
standby 3 preempt
standby 3 name wanisp2
crypto map ISP2MAP
!
!
!
router eigrp 1
network 1.1.1.0 0.0.0.255
network 50.50.50.0 0.0.0.255
network 192.168.10.0
network 200.200.200.0
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
ip route 192.168.30.0 255.255.255.0 1.1.1.4
ip route 192.168.30.0 255.255.255.0 2.2.2.4 10
ip route 192.168.50.0 255.255.255.0 192.168.10.4
!
access-list 100 permit ip 192.168.50.0 0.0.0.255 192.168.30.0 0.0.0.255
nls resp-timeout 1
cpd cr-id 1
no cdp log mismatch duplex
!
!
!
!
!
!
control-plane
!
HUB-ACTIVE:
ip tcp synwait-time 5
!
!
crypto isakmp policy 1
encr 3des
hash md5
authentication pre-share
!
crypto isakmp policy 2
encr 3des
hash md5
authentication pre-share
group 2
crypto isakmp key FORISP1 address 1.1.1.4
crypto isakmp key FORISP2 address 2.2.2.4
!
!
crypto ipsec transform-set ISP1SET esp-3des esp-md5-hmac
crypto ipsec transform-set ISP2SET esp-3des esp-md5-hmac
!
crypto map ISP1MAP 1 ipsec-isakmp
set peer 1.1.1.4
set transform-set ISP1SET
match address 100
!
crypto map ISP2MAP 2 ipsec-isakmp
set peer 2.2.2.4
set transform-set ISP2SET
match address 100
!
!
!
!
!
!
interface Tunnel1
description ***ACTIVE-PATH-1-****
ip address 172.16.10.1 255.255.255.0
no ip redirects
ip nhrp map multicast dynamic
ip nhrp network-id 1
tunnel source FastEthernet0/0
tunnel mode gre multipoint
tunnel key 1111
!
!
interface Tunnel2
description ***ACTIVE-PATH-2-****
ip address 90.90.90.1 255.255.255.0
no ip redirects
ip nhrp map multicast dynamic
ip nhrp network-id 2
delay 6000
tunnel source FastEthernet1/1
tunnel mode gre multipoint
tunnel key 2222
!
!
interface FastEthernet0/0
description ***ISP-1-PRIMARY***
ip address 1.1.1.2 255.255.255.0
duplex auto
speed auto
standby 2 ip 1.1.1.5
standby 2 priority 110
standby 2 preempt
standby 2 name wlanisp1
crypto map ISP1MAP
!
!
interface FastEthernet0/1
description ***LAN-INTERFACE***
ip address 192.168.10.2 255.255.255.0
duplex auto
speed auto
standby 1 ip 192.168.10.5
standby 1 priority 110
standby 1 preempt
standby 1 name inlan
!
!
interface FastEthernet1/0
no ip address
shutdown
duplex auto
speed auto
!
!
interface FastEthernet1/1
description ***ISP-2-SECONDARY***
ip address 2.2.2.2 255.255.255.0
duplex auto
speed auto
standby 3 ip 2.2.2.5
standby 3 priority 110
standby 3 preempt
standby 3 name wanisp2
crypto map ISP2MAP
!
!
!
router eigrp 1
network 90.90.90.0 0.0.0.255
network 172.16.10.0 0.0.0.255
network 192.168.10.0
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
ip route 192.168.30.0 255.255.255.0 1.1.1.4
ip route 192.168.30.0 255.255.255.0 2.2.2.4 10
ip route 192.168.50.0 255.255.255.0 192.168.10.4
!
access-list 100 permit ip 192.168.50.0 0.0.0.255 192.168.30.0 0.0.0.255
nls resp-timeout 1
cpd cr-id 1
no cdp log mismatch duplex
!
!
!
!
!
!
control-plane
!
!
!
SPOKE2:
!
redundancy
!
!
ip tcp synwait-time 5
!
!
!
!
!
!
!
!
interface Tunnel1
description ***ACTIVE-PATH-1-****
ip address 172.16.10.2 255.255.255.0
no ip redirects
ip nhrp map 172.16.10.1 1.1.1.2
ip nhrp map multicast 1.1.1.2
ip nhrp network-id 1
ip nhrp nhs 172.16.10.1
tunnel source FastEthernet0/0
tunnel mode gre multipoint
tunnel key 1111
!
!
interface Tunnel2
ip address 90.90.90.2 255.255.255.0
no ip redirects
ip nhrp map 90.90.90.1 2.2.2.2
ip nhrp map multicast 2.2.2.2
ip nhrp network-id 2
ip nhrp nhs 90.90.90.1
delay 6000
tunnel source FastEthernet1/1
tunnel mode gre multipoint
tunnel key 2222
!
!
interface Tunnel3
description ***STANDBY-PATH-1-***
ip address 200.200.200.2 255.255.255.0
no ip redirects
ip nhrp map 200.200.200.1 1.1.1.1
ip nhrp map multicast 1.1.1.1
ip nhrp network-id 3
ip nhrp nhs 200.200.200.1
delay 7000
tunnel source FastEthernet0/0
tunnel mode gre multipoint
tunnel key 3333
!
!
interface Tunnel4
description ***STANDBY-PATH-2-***
ip address 50.50.50.2 255.255.255.0
no ip redirects
ip nhrp map 50.50.50.1 2.2.2.1
ip nhrp map multicast 2.2.2.1
ip nhrp network-id 4
ip nhrp nhs 50.50.50.1
delay 8000
tunnel source FastEthernet1/1
tunnel mode gre multipoint
tunnel key 4444
!
!
interface FastEthernet0/0
description ***ISP-1-PRIMARY***
ip address 1.1.1.3 255.255.255.0
no ip next-hop-self eigrp 1
no ip split-horizon eigrp 1
duplex auto
speed auto
!
!
interface FastEthernet0/1
description ***LAN-INTERFACE***
ip address 192.168.20.1 255.255.255.0
duplex auto
speed auto
!
!
interface FastEthernet1/0
no ip address
shutdown
duplex auto
speed auto
!
!
interface FastEthernet1/1
description ***ISP-2-SECONDARY***
ip address 2.2.2.3 255.255.255.0
duplex auto
speed auto
!
!
!
router eigrp 1
network 1.1.1.0 0.0.0.255
network 2.2.2.0 0.0.0.255
network 50.50.50.0 0.0.0.255
network 90.90.90.0 0.0.0.255
network 172.16.10.0 0.0.0.255
network 192.168.20.0
network 200.200.200.0
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
!
nls resp-timeout 1
cpd cr-id 1
no cdp log mismatch duplex
!
!
!
!
!
!
control-plane
!
12-03-2021 02:14 AM
can I know what was the solution for first Issue?
in Hub 2 "no next-hop-self" is not enter.
12-03-2021 02:41 AM
Hello,
I was looking at the 'first' problem, it looks like on the HQ-R2 router, your EIGRP announced networks were incorrect. Using the EIGRP config below should work:
HQ-R2
router eigrp 2
--> no network 3.3.3.0 0.0.0.255
--> network 172.16.10.0 0.0.0.255
network 192.168.20.0
--> network 200.200.200.0
--> network 50.50.50.0 0.0.0.25
I guess you fixed that ?
12-03-2021 02:43 AM
Hello sir,
Will you look for "second" problem ?
12-03-2021 02:52 AM
Hello,
I guess this is a lab and not a real network.
Check the interface connections:
interface FastEthernet0/0
description ***ISP-1-PRIMARY***
ip address 1.1.1.1 255.255.255.0
duplex auto
speed auto
standby 2 ip 1.1.1.5
standby 2 preempt
standby 2 name wanisp1
crypto map ISP1MAP
FastEthernet0/0 is apparently expecting to see a 2.2.2.0/24 address configured. You must have reversed/swapped one of the interfaces.
12-03-2021 02:56 AM
Nope, i have shared the config,
Everything is correct from my side.
Now,
What willl be the solution ?
12-04-2021 02:11 PM
Hi friend
normally DMVPN with dual Hub have two approach
1- two hub two DMVPN cloud
2- two hub one DMVPN cloud
you use the first approach but friend two DMVPN cloud in spoke NOT in Hub
i.e.
Spoke have two tunnel (two DMVPN cloud) one for each Hub
and each hub has one tunnel (one DMVPN cloud).
there is case we have
one Hub with two DMVPN <- this case use when the Spoke use two ISP link for redundancy.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide