Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About adamtodd16
09-13-2019
Stats
Member since
11-29-2010
199
Posts
24
Helpful
12
Solutions
05-30-2017
03:59 PM
Hi All,
I've read just about every resource and tried everything I've found, but still facing performance issue on DMVPN.
I've tried tunnel mtu-path-discovery and it makes things worse (especially for video calls), so I have moved away from it entirely.
Hoping someone can review config and spot something I've missed.
Specific issues - Internal web-based applications are sluggish and file transfer are slow.
Hub - 2951
Spoke - 4331
--------Hub----------
crypto isakmp policy 50 encr aes 256 authentication pre-share group 14 crypto isakmp key MYPASSWORD address 0.0.0.0 crypto isakmp invalid-spi-recovery crypto isakmp keepalive 126 5 periodic crypto isakmp xauth timeout 60
! crypto ipsec security-association replay window-size 1024 ! crypto ipsec transform-set TUNNEL esp-aes 256 esp-sha-hmac mode transport crypto ipsec df-bit set ! crypto ipsec profile TUNNEL set security-association lifetime seconds 86400 set transform-set TUNNEL !
! interface Tunnel1 description DMVPN Tunnel ip address 172.16.1.1 255.255.255.0 no ip redirects ip mtu 1400 no ip next-hop-self eigrp 1 no ip split-horizon eigrp 1 ip nhrp authentication firewall ip nhrp map multicast dynamic ip nhrp network-id 1 ip tcp adjust-mss 1360 tunnel source 1.1.1.1 tunnel mode gre multipoint tunnel key 1 tunnel protection ipsec profile TUNNEL
-----Spoke-----
crypto isakmp policy 50 encr aes 256 authentication pre-share group 14 crypto isakmp key MYPASSWORD address 0.0.0.0 crypto isakmp invalid-spi-recovery crypto isakmp keepalive 126 5 periodic crypto isakmp xauth timeout 60
! crypto ipsec security-association replay window-size 1024 ! crypto ipsec transform-set TUNNEL esp-aes 256 esp-sha-hmac mode transport crypto ipsec df-bit set ! crypto ipsec profile TUNNEL set security-association lifetime seconds 86400 set transform-set TUNNEL ! ! ! interface Tunnel1 description DMVPN Tunnel bandwidth 50000 ip address 172.16.1.60 255.255.255.0 no ip redirects ip mtu 1400 ip nhrp authentication firewall ip nhrp map multicast dynamic ip nhrp map multicast 1.1.1.1 ip nhrp map 172.16.1.1 1.1.1.1 ip nhrp network-id 1 ip nhrp nhs 172.16.1.1 ip tcp adjust-mss 1360 tunnel source GigabitEthernet0/0/0 tunnel mode gre multipoint tunnel key 1 tunnel protection ipsec profile TUNNEL shared
... View more
Labels:
Created by
adamtodd16
in Wireless Security and Network Management
in Wireless Security and Network Management
03-30-2016
07:33 AM
03-30-2016
07:33 AM
So you are getting stats on other items?
Are you using Local or Central switching?
... View more
03-30-2016
07:30 AM
Are there any IP overlaps? Any option for you to change your IP scheme?
... View more
07-10-2015
08:52 AM
Mine is apparently due to having the DC Technology pack installed on the server. No way to remove it, so HAVE to do a fresh install. It's not supported on 2.2 I don't recall installing the pack and if I did, it was through the software update page within prime.
... View more
07-09-2015
08:59 AM
We were running the basics and then upgraded, imported some devices and BOOM, things stopped working. Can't create virtual domains, delete devices, added devices, etc. etc. Dead in the water for now.
... View more
02-17-2015
03:37 PM
Sometimes that all it takes to trigger some common sense :) hope the match got more enjoyable!
... View more
02-17-2015
03:23 PM
Ha! No problem Jon, I know that feeling well! Thanks for helping me get my head on straight today. Simply added distance EIGRP 90 90 to force the distance the same for internal / external and metrics started working as required.
... View more
02-17-2015
12:12 PM
It's the Internet GW for the sites using EIGRP10 and receiving route updates, but not handling EIGRP/Static Routers for EIGRP 10.
... View more
02-17-2015
11:50 AM
Looking for some assistance with EIGRP backup routing. Here is the scenario: CAMPUS setup with multiple sites tied together via layer 2 (fiber, wireless, etc.) with layer 3 routing. Routes advertised with EIGRP 10 Some of these sites have a router as the HSRP backup device. These routers connect back to the HUB via DMVPN with routes being advertised via EIGRP 40. The HUB has both EIGRP 40 and 10 and is advertising the 10 routes across 40. When I add EIGRP 40 to the backup router, the hub drops the EIGRP 10 routes and uses the 40 routers. Hope the above makes sense - look forward to hearing your suggestions. Thanks!
... View more
Labels:
12-09-2014
10:35 AM
Thanks Rick - a good reminder is that sometimes typing 172.20 instead of 172.16 can cause all kinds of pain! :)
... View more
12-09-2014
10:13 AM
I'm currently in the process of a mass DMVPN deployment. Right now, we have a single HUB and a few sites are slated to have DUAL SPOKE. HUB Cisco 2951 Spoke R1 - Cisco 2911 R2 - Cisco 2911 HSRP w/ IP SLA Tracking between R1 and R2 I have tunnels on each of the above Spoke Routers pointing to the Tunnel interface at the HUB. Traffic and EIGRP are working as expected on R1. When R1 is rebooted, R2 takes over the virutal IP and becomes the active HSRP router; however, routes are removed from the HUB and R2 never learns about them / passes traffic. HUB Config: interface Tunnel0 description DMVPN Tunnel ip address 172.16.1.1 255.255.255.0 no ip redirects no ip next-hop-self eigrp 50 no ip split-horizon eigrp 50 ip nhrp authentication firewall ip nhrp map multicast dynamic ip nhrp network-id 1 tunnel source 1.1.1.1 tunnel mode gre multipoint tunnel protection ipsec profile protect-gre router eigrp 50 network 10.0.0.0 network 172.16.0.0 network 172.16.1.1 0.0.0.0 network 192.168.0.0 redistribute eigrp 11 SPOKE R1 Config interface Tunnel0 description DMVPN Tunnel ip address 172.16.1.17 255.255.255.0 no ip redirects ip nhrp authentication firewall ip nhrp map multicast dynamic ip nhrp map multicast 1.1.1.1 ip nhrp map 172.16.1.1 1.1.1.1 ip nhrp network-id 1 ip nhrp nhs 172.16.1.1 ip virtual-reassembly in tunnel source GigabitEthernet0/0 tunnel mode gre multipoint tunnel protection ipsec profile protect-gre interface GigabitEthernet0/1.17 description LAN encapsulation dot1Q 17 ip address 10.96.17.253 255.255.255.0 ip access-group OUTBOUND in ip flow ingress ip flow egress ip nat inside ip virtual-reassembly in standby 0 ip 10.96.17.254 standby 0 priority 110 standby 0 preempt standby 0 track 1 decrement 20 router eigrp 50 network 10.96.17.0 0.0.0.255 network 172.16.1.17 0.0.0.0 network 192.168.17.0 redistribute static route-map STATICS SPOKE R2 Config interface Tunnel0 description DMVPN Tunnel ip address 172.16.1.16 255.255.255.0 no ip redirects ip nhrp authentication firewall ip nhrp map multicast dynamic ip nhrp map multicast 1.1.1.1 ip nhrp map 172.16.1.1 1.1.1.1 ip nhrp network-id 1 ip nhrp nhs 172.16.1.1 ip virtual-reassembly in tunnel source GigabitEthernet0/0 tunnel mode gre multipoint tunnel protection ipsec profile protect-gre interface GigabitEthernet0/1.17 description LAN encapsulation dot1Q 17 ip address 10.96.17.252 255.255.255.0 ip access-group OUTBOUND in ip flow ingress ip flow egress ip nat inside ip virtual-reassembly in standby 0 ip 10.96.17.254 standby 0 preempt standby 0 track 1 decrement 20 router eigrp 50 network 10.96.17.0 0.0.0.255 network 172.20.1.16 0.0.0.0
... View more
Labels:
10-09-2014
10:05 AM
Assume you have been able to access it in the past? Try clearing your browser cache, close browser and attempt to hit the site again.
... View more
05-30-2017
Hi All, I've read just about every resource and tried everything I've
found, but still facing perfor...
Created by
adamtodd16
in Wireless Security and Network Management
03-30-2016
03-30-2016
So you are getting stats on other items? Are you using Local or Central
switching?
Created by
adamtodd16
in TelePresence and Video Infrastructure
03-28-2016
03-28-2016
Quick note - if I set "MTP Required" on the device configuration in
CUCM, then the DTMF tones work; ...
Created by
adamtodd16
in TelePresence and Video Infrastructure
03-28-2016
03-28-2016
Hi All, When attempting to call into an outside audio only bridge from
an SX20, DTMF tones are not u...
Created by
adamtodd16
in TelePresence and Video Infrastructure
03-28-2016
03-28-2016
Don't mean to HiJack, but is this the only want to properly send DTMF
from an SX20? Doesn't seem to ...
Created by
adamtodd16
in TelePresence and Video Infrastructure
10-29-2015
10-29-2015
I had a dedicated Expressway C and E deployment to use with Cisco Jabber
Guest. Where do I download ...
07-10-2015
Mine is apparently due to having the DC Technology pack installed on the
server. No way to remove it...
07-09-2015
We were running the basics and then upgraded, imported some devices and
BOOM, things stopped working...
Created by
adamtodd16
in TelePresence and Video Infrastructure
03-06-2015
03-06-2015
We create a conference in TMS - it adds the appropriate infrastructure,
creates a conference ID, etc...
02-19-2015
Would like create a basic, text based confirmation / booking email.
Would like this to be the defaul...
Created by
adamtodd16
in TelePresence and Video Infrastructure
02-19-2015
02-19-2015
We can make phone calls form internal to external, but external callers
cannot call into our VCSe to...
Public Statistics
| Date Registered | 11-29-2010 06:49 AM |
| Date Last Visited | 09-13-2019 12:01 AM |
| Total Messages Posted | 199 |
| Total Helpful Votes Received | 24 |
Helpful Votes From
