Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About ittechk4u1
09-09-2019
Stats
Member since
01-14-2015
366
Posts
14
Helpful
2
Solutions
09-03-2019
04:14 AM
I have in total 5 spoke and these spoke must only communicate with Both HUBs. Thnaks
... View more
09-03-2019
12:44 AM
Hello experts, I am having below config on my HUB and spoke routers: HUB1: interface Tunnel5656 bandwidth 40000 ip address 10.13.198.4 255.255.255.0 no ip redirects no ip next-hop-self eigrp 1 no ip split-horizon eigrp 1 ip nhrp authentication HA18BJ56 ip nhrp map multicast dynamic ip nhrp network-id 4 ip nhrp holdtime 300 ip tcp adjust-mss 1360 delay 1000 tunnel source 195.243.205.120 tunnel mode gre multipoint tunnel key 4 tunnel protection ipsec profile DMVPN HUB2: interface Tunnel5656 bandwidth 40000 ip address 10.13.198.5 255.255.255.0 no ip redirects no ip next-hop-self eigrp 1 no ip split-horizon eigrp 1 ip nhrp authentication HA18BJ56 ip nhrp map 10.13.198.4 195.243.205.120 ip nhrp map multicast 195.243.205.120 ip nhrp network-id 4 ip nhrp holdtime 300 ip nhrp nhs 10.13.198.4 ip tcp adjust-mss 1360 delay 1500 tunnel source 212.185.41.204 tunnel mode gre multipoint tunnel key 4 tunnel protection ipsec profile DMVPN Spoke1(same for all other execpt ISP IP and tunnel IP): interface Tunnel5656 bandwidth 20000 ip address 10.13.198.50 255.255.255.0 no ip redirects ip mtu 1400 ip flow monitor NTAmonitor input ip nhrp authentication HA18BJ56 ip nhrp map 10.13.198.4 195.243.205.120 ip nhrp map multicast 195.243.205.120 ip nhrp map 10.13.198.5 212.185.41.204 ip nhrp map multicast 212.185.41.204 ip nhrp network-id 4 ip nhrp holdtime 300 ip nhrp nhs 10.13.198.4 priority 1 cluster 4 ip nhrp nhs 10.13.198.5 priority 2 cluster 4 ip nhrp nhs cluster 4 max-connections 2 ip nhrp server-only ip tcp adjust-mss 1360 tunnel source GigabitEthernet0/2 tunnel mode gre multipoint tunnel key 4 tunnel vrf ISP1 tunnel protection ipsec profile DMVPN spoke2: interface Tunnel5656 bandwidth 20000 ip flow monitor NTAmonitor input ip address 10.13.198.51 255.255.255.0 no ip redirects ip mtu 1400 ip nhrp authentication HA18BJ56 ip nhrp map 10.13.198.4 195.243.205.120 ip nhrp map multicast 195.243.205.120 ip nhrp map 10.13.198.5 212.185.41.204 ip nhrp map multicast 212.185.41.204 ip nhrp network-id 4 ip nhrp holdtime 300 ip nhrp nhs 10.13.198.5 priority 2 cluster 4 ip nhrp nhs 10.13.198.4 priority 1 cluster 4 ip nhrp nhs cluster 4 max-connections 2 ip tcp adjust-mss 1360 tunnel source GigabitEthernet0/0/0 tunnel mode gre multipoint tunnel key 4 tunnel vrf ISP1 tunnel protection ipsec profile DMVPN Could you please help to stop spoke to spoke communication via tunnel 5656 Thanks in advance
... View more
Labels:
08-25-2019
11:51 PM
Thanks guys, Now its working. I created a DMVPN tunnel . Issue was with NAT-T. I configured NAT on LTE router and it started working. Thanks
... View more
08-11-2019
06:16 AM
Sorry for not giving you the output of these commands. About how to make the new design for a long term solution: If you have GRE Tunnels protected by IPSec as primary and secondary path, you should think of using a p2p GRE tunnel protected by IPSec also for your tertiary path.--> Good Idea, Let me try to do it. I will update you. Thanks for valuable information.
... View more
08-10-2019
11:37 PM
Giuseppe, Thanks for your help. I used route-map to access the spoke route from HUB. (But i cant use these as permanent solution because LTE solution will be used as 3rd number:, first traffic will flow via GRE tunnels and if these tunnels are down then over LTE.) Check my cofnig attached: Now if i use route-map on HUB router ip access-list extended TEST permit ip 10.18.0.0 0.0.255.255 10.99.0.0 0.0.255.255 ! route-map GM_SAP permit 7 match ip address TEST set vrf ISP3 ! int gig0/1 ip policy route-map GM_SAP Then i can ping from 10.18.0.0/16 to 10.99.0.0/16 but cant ssh. I suspect its a issue with routing.
... View more
08-09-2019
10:48 AM
Rick , It is working now. It was issue with NAT on LTE router. But now new issue came... i can ping to all IP on spoke but cant do SSH. Thanks
... View more
08-09-2019
01:51 AM
No ping is not working. Spoke#ping 10.18.2.4 so loop0 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 10.18.2.4, timeout is 2 seconds: Packet sent with a source address of 10.99.0.1 ..... Success rate is 0 percent (0/5) ! Spoke#ping 10.18.2.4 so gig0/0/2 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 10.18.2.4, timeout is 2 seconds: Packet sent with a source address of 192.168.178.99 ..... Success rate is 0 percent (0/5) Thanks
... View more
08-09-2019
12:57 AM
Giuseppe, FYI: I have to change config on HUB router as it was creating issues with other plants so now i ma using VRF again only on HUB side. But i think issue is on HUB side..... 1. there are too MANY ipsec SAs...how to filter them 2. Spoke side i can see the counter is increasing on ACL but not on HUB side. Thanks
... View more
08-08-2019
09:50 PM
Thanks Giuseppe.. I correcte dthe Gateway IP but still facing the same issue. Cant ping from Plant A to B means no traffic in between. HUB#ping 10.99.0.1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 10.99.0.1, timeout is 2 seconds: ..... Success rate is 0 percent (0/5) HUB1# HUB#sh ip route 10.99.0.1 Routing entry for 10.99.0.0/16 Known via "static", distance 171, metric 0 Redistributing via eigrp 1, eigrp 26 Advertised by eigrp 1 metric 100000 100 255 1 1500 Routing Descriptor Blocks: * <ip> Route metric is 0, traffic share count is 1 HUB# From Spoke: SPOKE#sh ip route 10.18.35.7 % Subnet not in table Thanks
... View more
08-08-2019
09:43 AM
Thanks both of you for valuable input. Now i removed vrf on both side ...VPN is coming up but still no traffic flow. PlantA#sh cry isa sa IPv4 Crypto ISAKMP SA dst src state conn-id status <ip> 192.168.178.99 QM_IDLE 1001 ACTIVE
... View more
08-08-2019
04:16 AM
Hello Experts, Can i configure GRE(DMVPN) over IPsec where HQ(PLant B) have static Public IP and spoke(Plant A) has Private WAN address (Behind a LTE router provide private IP address) If yes then could you please provide me the steps. Thanks in advance
... View more
Labels:
08-08-2019
02:40 AM
here is the complete config attached form both routers (Hub and spoke). please check and let me know what needs to be changed to make it working.. Thanks in advance. I really appreciate your quick help.
... View more
08-07-2019
11:28 PM
Thanks Richards. SPoke side my Cisco router is connected with Vodafone router and lte router is NATing and giving us the private IP address. HUB side: I have direct public IP address on my interface on Cisco router. Now i also configured : Spoke: ip route 0.0.0.0 0.0.0.0 GigabitEthernet0/0/2 dhcp 171 Hub: ip route 10.99.0.0 255.255.0.0 gigabitEthernet 0/0/0 171 still the same issue. Thanks
... View more
09-03-2019
Hello experts, I am having below config on my HUB and spoke routers:
HUB1:interface Tunnel5656bandwi...
Created by
ittechk4u1
in Routing
08-25-2019
08-25-2019
Thanks guys, Now its working. I created a DMVPN tunnel . Issue was with
NAT-T. I configured NAT on L...
Created by
ittechk4u1
in Routing
08-11-2019
08-11-2019
Sorry for not giving you the output of these commands. About how to make
the new design for a long t...
Created by
ittechk4u1
in Routing
08-10-2019
08-10-2019
Giuseppe, Thanks for your help. I used route-map to access the spoke
route from HUB. (But i cant use...
Created by
ittechk4u1
in Routing
08-09-2019
08-09-2019
Rick , It is working now. It was issue with NAT on LTE router. But now
new issue came... i can ping ...
Created by
ittechk4u1
in Routing
08-09-2019
08-09-2019
No ping is not working. Spoke#ping 10.18.2.4 so loop0Type escape
sequence to abort.Sending 5, 100-by...
Created by
ittechk4u1
in Routing
08-09-2019
08-09-2019
Giuseppe, FYI: I have to change config on HUB router as it was creating
issues with other plants so ...
Created by
ittechk4u1
in Routing
08-08-2019
08-08-2019
Thanks Giuseppe.. I correcte dthe Gateway IP but still facing the same
issue.Cant ping from Plant A ...
Created by
ittechk4u1
in Routing
08-08-2019
08-08-2019
Thanks both of you for valuable input. Now i removed vrf on both side
...VPN is coming up but still ...
Created by
ittechk4u1
in Routing
08-08-2019
08-08-2019
Hello Experts, Can i configure GRE(DMVPN) over IPsec where HQ(PLant B)
have static Public IP and spo...
Created by
ittechk4u1
in Routing
08-08-2019
08-08-2019
here is the complete config attached form both routers (Hub and spoke).
please check and let me know...
Created by
ittechk4u1
in Routing
08-07-2019
08-07-2019
Thanks Richards. SPoke side my Cisco router is connected with Vodafone
router and lte router is NATi...
Public Statistics
| Date Registered | 01-14-2015 10:20 AM |
| Date Last Visited | 09-09-2019 01:34 AM |
| Total Messages Posted | 366 |
| Total Helpful Votes Received | 14 |
Helpful Votes Given To
| User | Helpful Count |
|---|---|
| 119 | |
| 15 | |
| 25 | |
| 5 | |
| 8 |
.jpg "VIP Mentor"){kind=icon}
.jpg "Hall of Fame Expert"){kind=icon}
