About ciscosupportMBI

ciscosupportMBI · 03-24-2015

All:Here is my scenario: MainSite (DMVPN HUB)- Cisco 2901 - Internal IP - 10.10.20.2MainSite (Firewall) - Cisco ASA 5525x - Inside IP - 10.10.20.253Remote Site (DMVPN SPOKE)- Cisco 881 - Inside IP - 10.10.186.1 I want all traffic from the Remote site...

ciscosupportMBI · 03-26-2015

Ok.. The above config on the Spoke is the Correct Config. The problem was the default route on the Hub. It was leftover from when that router was still the core router for the organization and it had 0.0.0.0 0.0.0.0 pointing to the ISP router instead...

ciscosupportMBI · 03-25-2015

Also, If I remove the vrf default route, I can still ping it. I'm thinking because since the ASA participates in the eigrp neighborhood and has redistribute static it can see it's distributing the public subnet. And when i put the "global" parameter ...

ciscosupportMBI · 03-25-2015

Yup... Here's the catch, I couldn't get that far until i put in no ip source-routeIt was enabled in the original config. Once I removed that I could ping the ISP router, but still not past that.I've also opened a TAC case to see if they can determine...

ciscosupportMBI · 03-25-2015

Thanks for the assistance Jon,I got it a bit further with the article you shared. WIth some additional tweeking of the config in the example I now can ping the ISPs router. when doing a tracert from a client, I also see every hop along the way (exec...

Member Since	‎03-24-2015 03:26 PM
Date Last Visited	‎09-26-2018 08:44 AM
Posts	5

User Statistics

User Activity

Route all traffic over DMVPN from Spoke to Hub and out ASA FW

Ok.. The above config on the

Also, If I remove the vrf

Yup... Here's the catch, I

Thanks for the assistance Jon