Hi All, We have dmvpn configured to multi nodes from our Office interface Tunnel2 description MULTI-POINT GRE TUNNEL for BRANCHES ip address 172.26.3.1 255.255.255.0 no ip redirects ip mtu 1400 ip nhrp authentication dmvpn ip nhrp map multicast dynamic ip nhrp network-id 2 ip nhrp holdtime 600 ip ospf network broadcast ip ospf cost 130 delay 1000 tunnel source GigabitEthernet0/0 tunnel mode gre multipoint & we have crypto map applied on source interface interface GigabitEthernet0/0 ip address x.128.4.94 255.255.255.192 no ip redirects load-interval 30 duplex full speed 1000 crypto map ITC<< but we are not using this crypto map anywhere ITC-COLO-VPN-02#sh crypto map tag ITC | i peer (missing peer or access-list definitions) Current peer: x.70.241.91 (missing peer or access-list definitions) Current peer: y.241.165.66 (missing peer or access-list definitions) Current peer: z.241.165.78 (missing peer or access-list definitions) Current peer: w.41.155.150 (missing peer or access-list definitions) Current peer: v.241.165.74 ITC-COLO-VPN-02#sh crypto session Crypto session current status Interface: Tunnel2 Session status: UP-ACTIVE Peer: x.203.170.98 port 7479 Session ID: 0 IKEv1 SA: local x.128.4.94/4500 remote x.203.170.98/7479 Active IPSEC FLOW: permit 47 host x.128.4.94 host x.203.170.98 Active SAs: 2, origin: crypto map Can we remove that crypto map ITC from gig0/0, which isnt useful. ... View more

Hi All, Can we check with below capture there is no issue from ASA side. 87: 19:43:11.918363 802.1Q vlan#161 P0 10.160.21.212.49219 > 10.143.227.2.389: SWE 3625561743:3625561743(0) win 8192 <mss 1460,nop,wscale 8,nop,nop,sackOK> 88: 19:43:11.963664 802.1Q vlan#161 P0 10.143.227.2.389 > 10.160.21.212.49219: R 1780451825:1780451825(0) ack 3625561744 win 8192 89: 19:43:12.472006 802.1Q vlan#161 P0 10.160.21.212.49219 > 10.143.227.2.389: S 3625561743:3625561743(0) win 8192 <mss 1460,nop,wscale 8,nop,nop,sackOK> 90: 19:43:12.516315 802.1Q vlan#161 P0 10.143.227.2.389 > 10.160.21.212.49219: R 2485435093:2485435093(0) ack 3625561744 win 8192 93: 19:43:13.018889 802.1Q vlan#161 P0 10.160.21.212.49219 > 10.143.227.2.389: S 3625561743:3625561743(0) win 8192 <mss 1460,nop,nop,sackOK> 94: 19:43:13.063244 802.1Q vlan#161 P0 10.143.227.2.389 > 10.160.21.212.49219: R 670494809:670494809(0) ack 3625561744 win 8192 111: 19:43:29.796437 802.1Q vlan#161 P0 10.160.21.212.49220 > 10.143.227.2.389: SWE 2954279120:2954279120(0) win 8192 <mss 1460,nop,wscale 8,nop,nop,sackOK> 112: 19:43:29.840837 802.1Q vlan#161 P0 10.143.227.2.389 > 10.160.21.212.49220: R 2240365577:2240365577(0) ack 2954279121 win 8192 113: 19:43:30.347485 802.1Q vlan#161 P0 10.160.21.212.49220 > 10.143.227.2.389: S 2954279120:2954279120(0) win 8192 <mss 1460,nop,wscale 8,nop,nop,sackOK> 114: 19:43:30.391840 802.1Q vlan#161 P0 10.143.227.2.389 > 10.160.21.212.49220: R 3381956147:3381956147(0) ack 2954279121 win 8192 115: 19:43:30.894362 802.1Q vlan#161 P0 10.160.21.212.49220 > 10.143.227.2.389: S 2954279120:2954279120(0) win 8192 <mss 1460,nop,nop,sackOK> 116: 19:43:30.938717 802.1Q vlan#161 P0 10.143.227.2.389 > 10.160.21.212.49220: R 1783798289:1783798289(0) ack 2954279121 win 8192 116 packets shown ... View more

Hi All,   Can we create inner vlan as an outer vlan of the qinq vlan for customer internet services,   we have core -huawe & access cisco as the below configd Huawei>di cu int gi 0/0/0.3005 [V200R003C00] # interface GigabitEthernet0/0/0.3005  qinq termination pe-vid 3005 ce-vid 2000  mpls l2vc 10.50.2.2 3005 # return <Huawei>di cu int gi 0/0/1.3005                      ^ Error: Wrong parameter found at '^' position. <Huawei>di cu int gi 0/0/1.2000 [V200R003C00] # interface GigabitEthernet0/0/1.2000  qinq termination pe-vid 2000 ce-vid 1000  mpls l2vc 10.50.2.2 2000   Will it work on , can there be any documentation for the concepts ... View more

Hi All, I have cisco 36xx connected to l2 node, we have the servcies on the bridge domain, but not on the evc of mpls; Please find the below config of bridgedomain & EVC.  (Internet )BRAS -> Huawei DX(57xx)-> Cisco 36xx->CTS(3rd party)   EVC CONFIGURATION: interface Port-channel4 switchport trunk allowed vlan none switchport mode trunk no keepalive service instance 1 ethernet   encapsulation dot1q 201-300   xconnect 10.50.7.201 3841 encapsulation mpls BRiDGE DOMAIN(service instance/EFP): interface Port-channel4 switchport trunk allowed vlan none switchport mode trunk no keepalive service instance 1 ethernet   encapsulation dot1q 201-300 bridge-domain 3841   Please help me out.   Thanks Kumar   ... View more

Hi all,   I have the issue of mgmt  vlan forward from l2 lacp to l3 lacp ( from cisco to other l2 device) Lab Setup: We can able to configure LACP between the CTS & Cisco ME 3600X. We can able to get the VC up with the below configuration on “LACP mode on” configured on Cisco “LACP mode active” on CTS Live Setup: With same above configuration we are facing L2 management (CTS) loop in the network which is affecting the user services   We tried the below scenarios Without LACP between the Cisco ME 3600X and CTS, We can able to get the VC up. Please suggest  on. Thnx ANand   ... View more

Hi All,   While i m doing for the remote ldp formation between this devices of cisco 3600 & huawei 5700, attached the configs of these 2 nodes.what could be the possible reason for this.. witch(config-router)#do sh mpls l2 vc Local intf     Local circuit              Dest address    VC ID      Status -------------  -------------------------- --------------- ---------- ---------- Vl2292         Eth VLAN 2292              10.50.1.1       2292       DOWN VFI 2293       vfi                        10.50.1.1       2293       DOWN Switch(config-router)#do sh mpls l2 vc det Local interface: Vl2292 down, line protocol down, Eth VLAN 2292 down   Destination address: 10.50.1.1, VC ID: 2292, VC status: down     Last error: Local peer access circuit is down     Output interface: none, imposed label stack {}     Preferred path: not configured     Default path: no route     No adjacency   Create time: 04:16:50, last status change time: 04:20:09     Last label FSM state change time: 04:16:49   Signaling protocol: LDP, peer unknown     Targeted Hello: 10.50.2.2(LDP Id) -> 10.50.1.1, LDP is DOWN, no binding     Graceful restart: not configured and not enabled     Non stop routing: not configured and not enabled     Status TLV support (local/remote)   : enabled/None (no remote binding) Thanks anand ... View more