×

Предупреждение

  • Cisco Support Forums is in Read Only mode while the site is being migrated.
  • Cisco Support Forums is in Read Only mode while the site is being migrated.

DMVPN+EIGRP - HUB can ping spokes, spokes cannot ping each other, but can ping HUB.

Неотвеченый вопрос
Май 25th, 2016
User Badges:

DMVPN+EIGRP - HUB can ping spokes, spokes cannot ping each other, but can ping HUB.


Возникла необходимость, что бы Alabama Spokes Office общалась с Alabama Spokes Product на прямую, не через HUB.

Ранее Alabama Spokes Office и Alabama Spokes Product были настроены как GRE+IPsec - следовательно общались через HUB

Настроил Alabama Spokes Office/Product - mGRE+IPsec.

Alabama Spokes Office пингует все кроме Alabama Spokes Product, так же и в обратном направлении. Alabama Spokes Product пингует все но не Alabama Spokes Office.

Они так же пингуют других Spokes, которые настроены как (GRE+IPsec).

В таблицах маршрутизации есть маршруты.


Помогите решить проблему

Прикрепленные файлы: 
I have this problem too.
0 голоса
Loading.
JassonAXE ср, 05/25/2016 - 02:06
User Badges:

HUB:

interface Tunnel1
 ip address 10.38.254.101 255.255.255.0
 no ip redirects
 no ip proxy-arp
 ip mtu 1400
 ip authentication mode eigrp 1 md5
 ip authentication key-chain eigrp 1 KEIGRP1
 ip nat inside
 ip nhrp authentication NHRP1
 ip nhrp map multicast dynamic
 ip nhrp network-id 1
 ip nhrp holdtime 600
 ip virtual-reassembly in
 ip tcp adjust-mss 1360
 no ip split-horizon eigrp 1
 tunnel source GigabitEthernet0/1.12
 tunnel mode gre multipoint
 tunnel key 3801
 tunnel protection ipsec profile IPSEC_PROF_DMVPN_1


Alabama Spoke Office:

interface Tunnel1
 bandwidth 10
 ip address 10.38.254.113 255.255.255.0
 no ip redirects
 no ip proxy-arp
 ip mtu 1400
 ip authentication mode eigrp 1 md5
 ip authentication key-chain eigrp 1 KEIGRP38
 ip nhrp authentication NHRP1
 ip nhrp map 10.38.254.101 2*3.1*0.14*.2*2
 ip nhrp map multicast 2*3.1*0.14*.2*2
 ip nhrp network-id 1
 ip nhrp holdtime 600
 ip nhrp nhs 10.38.254.101
 ip tcp adjust-mss 1360
 no ip mroute-cache
 tunnel source FastEthernet0/0
 tunnel mode gre multipoint
 tunnel key 1
 tunnel protection ipsec profile IPSEC_PROF_DMVPN_1


Alabama Spoke Product:


interface Tunnel1
 bandwidth 10
 ip address 10.38.254.213 255.255.255.0
 no ip redirects
 no ip proxy-arp
 ip mtu 1400
 ip authentication mode eigrp 1 md5
 ip authentication key-chain eigrp 1 KEIGRP38
 ip nhrp authentication NHRP1
 ip nhrp map 10.38.254.101 101 2*3.1*0.14*.2*2
 ip nhrp map multicast 2*3.1*0.14*.2*2
 ip nhrp network-id 1
 ip nhrp holdtime 600
 ip nhrp nhs 10.38.254.101
 ip nhrp registration no-unique
 ip route-cache flow
 ip tcp adjust-mss 1360
 no ip mroute-cache
 tunnel source FastEthernet0/1
 tunnel mode gre multipoint
 tunnel key 1
 tunnel protection ipsec profile IPSEC_PROF_DMVPN_1


HUB:

show dmvpn

 1  1*4.54.1*1.2*6   10.38.254.113    UP 01:45:39     D

1  1*4.54.1*2.1*3   10.38.254.213    UP 01:48:25     D


HUB#ping 10.38.254.113 source 10.38.254.101
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.38.254.113, timeout is 2 seconds:
Packet sent with a source address of 10.38.254.101
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 12/21/32 ms
HUB#ping 10.38.254.213 source 10.38.254.101
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.38.254.213, timeout is 2 seconds:
Packet sent with a source address of 10.38.254.101
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 12/12/16 ms


show ip route eigrp

D        10.38.113.0/24 [90/26882560] via 10.38.254.113, 01:47:16, Tunnel1

D        10.38.213.0/24 [90/26882560] via 10.38.254.213, 01:50:02, Tunnel1


Office:

show ip eigrp neighbors

0   10.38.254.101           Tu1               10 01:48:48  292  5000  0  12130

show ip route eigrp

D       10.38.213.0/24 [90/270082560] via 10.38.254.101, 01:49:15, Tunnel1


Office#ping 10.38.254.101 source 10.38.254.113

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.38.254.101, timeout is 2 seconds:
Packet sent with a source address of 10.38.254.113
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 12/12/12 ms
Office#ping 10.38.254.213 source 10.38.254.113

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.38.254.213, timeout is 2 seconds:
Packet sent with a source address of 10.38.254.113
!....
Success rate is 20 percent (1/5), round-trip min/avg/max = 24/24/24 ms


Product:

show ip eigrp neighbors

0   10.38.254.101           Tu1               12 01:55:27  390  5000  0  12130

show ip route eigrp

D       10.38.113.0/24 [90/270082560] via 10.38.254.101, 01:52:55, Tunnel1

Product#ping 10.38.254.101 source 10.38.254.213

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.38.254.101, timeout is 2 seconds:
Packet sent with a source address of 10.38.254.213
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 12/12/16 ms
Product#ping 10.38.254.113 source 10.38.254.213

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.38.254.113, timeout is 2 seconds:
Packet sent with a source address of 10.38.254.213
.....
Success rate is 0 percent (0/5)


Действия

Информация о дискуссии