06-16-2014 12:21 PM - edited 02-21-2020 07:41 PM
HI,
I have an issue whereby The VPN tunnel between hub and spoke is up, but unable to pass data traffic. Can somebody assist me on how to troubleshoot the issue.
Dealer>sh dmvpn
Legend: Attrb --> S - Static, D - Dynamic, I - Incompletea
N - NATed, L - Local, X - No Socket
# Ent --> Number of NHRP entries with same NBMA peer
Tunnel0, Type:Spoke, NHRP Peers:1,
# Ent Peer NBMA Addr Peer Tunnel Add State UpDn Tm Attrb
----- --------------- --------------- ----- -------- -----
1 68.115.224.22 10.209.252.1 UP 00:18:49 S
Tunnel1, Type:Spoke, NHRP Peers:1,
# Ent Peer NBMA Addr Peer Tunnel Add State UpDn Tm Attrb
----- --------------- --------------- ----- -------- -----
1 68.115.224.23 10.209.248.1 UP 00:18:41 S
#show ip eigrp neighbors
IP-EIGRP neighbors for process 777
H Address Interface Hold Uptime SRTT RTO Q Seq
(sec) (ms) Cnt Num
1 10.209.252.1 Tu0 91 00:01:05 1 5000 2 0
06-18-2014 03:27 AM
Make sure you have disabled eigrp split-horizon on your Hub router.
06-18-2014 06:54 AM
HI Rahul,
I do not see the option to disable this on the Hub router. Any other Suggestions how i can troubleshoot this issue,
Thanks,
Anil
06-18-2014 06:58 AM
Can you share me your Hub router's configuration for tunnel interface, physical interface and eigrp. Split-horizon is an interface subcommand.
interface name/number
no IP Split-Horizon EIGRP
06-18-2014 07:01 AM
Hi Anil,
Can you share me diagram for same so that I can simulate the same and help you.
06-18-2014 07:27 AM
Hi Anil,
Please run the following command on Hub router-
interface tunnel 0
no ip split-horizon eigrp 777
06-18-2014 07:51 PM
HI Rahul,
What are the consequences of applying this command, could this drop all the Other connections over the Tunnel. Also do you have a number where you can be reached to discuss my issue further,
Thanks,
Anil
06-19-2014 12:25 AM
Hi Anil,
this will not drop other connections which are already going however spoke routers will receives routes of other spoke router if you enable this.
my number 01243065034
06-19-2014 06:20 AM
Hi Rahul,
Where are you located and if you are overseas do you have Viber or Tango so that i can call you,
Thanks,
Anil
06-19-2014 08:50 AM
Please make the change and let me know the result.
06-19-2014 09:23 AM
06-20-2014 12:30 AM
My email is rahul61185@gmail.com
06-20-2014 12:37 AM
Also as per logs there is timers difference on both Hub and spoke router. Please correct the timers which should be common for each routers. Also on hub router under tunnel interface configuration "tunnel mode gre multipoint" command is missing. Can you please fine tune all configuration mismatches?
06-18-2014 10:05 AM
Here's the config for the Tunnel interface on the Hub Router
interface Tunnel0
description DMVPN Hub Primary Cloud
bandwidth 10000
ip vrf forwarding vpn
ip address 10.209.252.1 255.255.252.0
no ip redirects
ip mtu 1400
ip flow ingress
ip bandwidth-percent eigrp 777 200
ip hello-interval eigrp 777 20
ip hold-time eigrp 777 100
ip nhrp authentication bUq6Sgio
ip nhrp map multicast dynamic
ip nhrp network-id 1292170322
ip nhrp holdtime 600
ip nhrp max-send 1100 every 10
ip tcp adjust-mss 1360
tunnel source 68.115.224.22
tunnel mode gre multipoint
tunnel key 2350873894
tunnel protection ipsec profile P1
!
interface Tunnel1
no ip address
hold-queue 4000 in
hold-queue 1000 out
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide