So I moved everything to EIGRP and my endpoints still can't reach each other....
hostname Switch1
!
boot-start-marker
boot-end-marker
!
!
!
no aaa new-model
clock timezone EET 2 0
!
ip cef
!
ip dhcp pool SECRET
network 192.168.100.0 255.255.255.0
default-router 192.168.100.1
!
!
no ipv6 cef
ipv6 multicast rpf use-bgp
!
!
!
!
!
!
!
spanning-tree mode pvst
spanning-tree extend system-id
!
crypto ikev2 proposal MY-IKEv2-PROPOSAL
encryption aes-cbc-256
integrity sha512
group 24
!
crypto ikev2 policy MY-IKEv2-POLICY
match fvrf any
proposal MY-IKEv2-PROPOSAL
!
crypto ikev2 keyring MY-KEY
peer REMOTE-ROUTER
address 129.*.*.*
identity fqdn *
pre-shared-key local *
pre-shared-key remote *
!
!
!
crypto ikev2 profile MY-IKEv2-PROFILE
match identity remote fqdn *
identity local fqdn *
authentication local pre-share
authentication remote pre-share
keyring MY-KEY
!
!
vlan internal allocation policy ascending
!
!
!
!
crypto ipsec transform-set TFORM esp-aes 256 esp-sha512-hmac
crypto ipsec df-bit clear
!
crypto ipsec profile MY-IPSEC-PROFILE
set transform-set TFORM
set ikev2-profile MY-IKEv2-PROFILE
!
!
!
!
!
!
!
interface Loopback0
no shutdown
ip address 150.1.1.1 255.255.255.0
!
interface Tunnel1
no shutdown
ip address 172.0.100.2 255.255.255.252
tunnel source Ethernet0/0
tunnel mode ipsec ipv4
tunnel destination 129.*.*.*
tunnel protection ipsec profile MY-IPSEC-PROFILE
!
interface Ethernet0/0
no shutdown
no switchport
ip address 129.*.*.*
duplex auto
!
interface Ethernet0/1
no shutdown
switchport access vlan 10
switchport mode access
duplex auto
!
interface Ethernet0/2
no shutdown
switchport access vlan 10
switchport mode access
duplex auto
!
interface Ethernet0/3
no shutdown
switchport access vlan 10
switchport mode access
duplex auto
!
interface Vlan10
no shutdown
ip address 192.168.100.1 255.255.255.0
!
!
router eigrp 15
network 150.1.1.0 0.0.0.255
network 160.1.1.0 0.0.0.255
network 172.0.100.0 0.0.0.255
network 172.0.200.0 0.0.0.255
network 192.168.100.0
network 192.168.200.0
passive-interface Vlan10
!
!
no ip http server
!
ip route 129.*
!
!
!
!
control-plane
!
!
line con 0
logging synchronous
line aux 0
line vty 0 4
!
end
Switch#sh crypto ikev2 sa
IPv4 Crypto IKEv2 SA
Tunnel-id Local Remote fvrf/ivrf Status
1 129.*.*.*/500 129.*.*.*/500 none/none READY
Encr: AES-CBC, keysize: 256, Hash: SHA512, DH Grp:24, Auth sign: PSK, Auth verify: PSK
Life/Active Time: 86400/4039 sec
IPv6 Crypto IKEv2 SA
Switch#sh crypto ipsec sa
interface: Tunnel1
Crypto map tag: Tunnel1-head-0, local addr 129.*.*.*
protected vrf: (none)
local ident (addr/mask/prot/port): (0.0.0.0/0.0.0.0/0/0)
remote ident (addr/mask/prot/port): (0.0.0.0/0.0.0.0/0/0)
current_peer 129.*.*.* port 500
PERMIT, flags={origin_is_acl,}
#pkts encaps: 976, #pkts encrypt: 976, #pkts digest: 976
#pkts decaps: 980, #pkts decrypt: 980, #pkts verify: 980
#pkts compressed: 0, #pkts decompressed: 0
#pkts not compressed: 0, #pkts compr. failed: 0
#pkts not decompressed: 0, #pkts decompress failed: 0
#send errors 0, #recv errors 0
local crypto endpt.: 129.*.*.*, remote crypto endpt.: 129.*.*.*
path mtu 1500, ip mtu 1500, ip mtu idb Ethernet0/0
current outbound spi: 0x5C1BE410(1545331728)
PFS (Y/N): N, DH group: none
inbound esp sas:
spi: 0xCCEB0CC3(3437956291)
transform: esp-256-aes esp-sha512-hmac ,
in use settings ={Tunnel, }
conn id: 5, flow_id: 5, sibling_flags 80000040, crypto map: Tunnel1-head-0
sa timing: remaining key lifetime (k/sec): (4198614/2855)
IV size: 16 bytes
replay detection support: Y
Status: ACTIVE
inbound ah sas:
inbound pcp sas:
outbound esp sas:
spi: 0x5C1BE410(1545331728)
transform: esp-256-aes esp-sha512-hmac ,
in use settings ={Tunnel, }
conn id: 6, flow_id: 6, sibling_flags 80000040, crypto map: Tunnel1-head-0
sa timing: remaining key lifetime (k/sec): (4198615/2855)
IV size: 16 bytes
replay detection support: Y
Status: ACTIVE
outbound ah sas:
outbound pcp sas:
Switch#
Switch#
Switch#
Switch#
Switch#sh rou
Switch#sh ip ei
Switch#sh ip eigrp ne
Switch#sh ip eigrp neighbors
EIGRP-IPv4 Neighbors for AS(15)
H Address Interface Hold Uptime SRTT RTO Q Seq
(sec) (ms) Cnt Num
0 172.0.100.1 Tu1 11 00:03:53 26 1494 0 13
Switch#
Switch#sh ip eigrp topology
EIGRP-IPv4 Topology Table for AS(15)/ID(150.1.1.1)
Codes: P - Passive, A - Active, U - Update, Q - Query, R - Reply,
r - reply Status, s - sia Status
P 192.168.200.0/24, 1 successors, FD is 26880256
via 172.0.100.1 (26880256/2816), Tunnel1
P 192.168.100.0/24, 1 successors, FD is 2816
via Connected, Vlan10
P 160.1.1.0/24, 1 successors, FD is 27008000
via 172.0.100.1 (27008000/128256), Tunnel1
P 172.0.100.0/30, 1 successors, FD is 26880000
via Connected, Tunnel1
P 150.1.1.0/24, 1 successors, FD is 128256
via Connected, Loopback0
Switch#
Switch#
Switch#
Switch#
Switch#ping 192.168.200.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.200.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 4/4/5 ms
Switch#ping 192.168.200.2
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.200.2, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)
