11-15-2010 10:14 AM - edited 03-06-2019 02:03 PM
Hello Expert,
I have a hub and spoke environment.
I have two connections from hub to spoke via (1) ip dsl and (2) wireless
I am trying to simulate a seemless failover if either the ip_dsl link or the
wireless link fail.
Between the the hub and spoke I am using a vpn tunnel configure using
Dmvpn. ( see hub configuration as per attactment)
When both ip dsl and wireless link is up I able to ping all interface
from the hub or vice versa spoke.
It should be mention I am using the ip dsl(interface GigabitEthernet0/1)
as my primary link.
When I simulate a drop on my ip dsl link and try pinging the respective
Interfaces no connection.
If I reconnect the ip dsl link and drop the wireless link I can ping all
Interface.
I suspect a route is missing from the configuration can anyone assist.
Regards
Jomo
Solved! Go to Solution.
11-16-2010 02:20 AM
rbglusers wrote:
hello Jon,
>> ip route 0.0.0.0 0.0.0.0 GigabitEthernet0/0 250
the above will be add to the hub.
.
what about the spoke should any routes be added?
It should be mention on the spoke i have a static route ( see below)
ip route 0.0.0.0 0.0.0.0 tunnel0
Is the above route neccessary to ensure all packets use the tunnel?
Regards
Edit - actually just reread original post and it's more complicated than i thought.
If you are using DMVPN then if you want to switch between the 2 links you will need to use dynamic routing and not static routing. If you used something like EIGRP you could exchange routes down the DSL tunnel and then if the DSL conenction was lost at either end you could have a floating static pointing to the wireless link.
So basically you need to -
1) turn on EIGRP on your routers
2) exchange EIGRP routes via the DSL link
3) on hub and spoke add a floating static, as provided before, pointing to the wireless link
Jon
11-15-2010 12:16 PM
Jomo
Try adding this to your config -
ip route 0.0.0.0 0.0.0.0 GigabitEthernet0/0 250
this is a floating static and will only be used if your DSl interface drops. If the DSL interface comes back up then it shouldbe removed and the original default-route used again.
Jon
11-15-2010 06:34 PM
hello Jon,
>> ip route 0.0.0.0 0.0.0.0 GigabitEthernet0/0 250
the above will be add to the hub.
.
what about the spoke should any routes be added?
It should be mention on the spoke i have a static route ( see below)
ip route 0.0.0.0 0.0.0.0 tunnel0
Is the above route neccessary to ensure all packets use the tunnel?
Regards
11-16-2010 02:20 AM
rbglusers wrote:
hello Jon,
>> ip route 0.0.0.0 0.0.0.0 GigabitEthernet0/0 250
the above will be add to the hub.
.
what about the spoke should any routes be added?
It should be mention on the spoke i have a static route ( see below)
ip route 0.0.0.0 0.0.0.0 tunnel0
Is the above route neccessary to ensure all packets use the tunnel?
Regards
Edit - actually just reread original post and it's more complicated than i thought.
If you are using DMVPN then if you want to switch between the 2 links you will need to use dynamic routing and not static routing. If you used something like EIGRP you could exchange routes down the DSL tunnel and then if the DSL conenction was lost at either end you could have a floating static pointing to the wireless link.
So basically you need to -
1) turn on EIGRP on your routers
2) exchange EIGRP routes via the DSL link
3) on hub and spoke add a floating static, as provided before, pointing to the wireless link
Jon
11-17-2010 08:02 PM
Hello Jon,
Sorry for the late response holiday in my country.
I implemented the three steps as outlined in your post and the failover from dsl to
wireless worked.
I even configure and add three more spokes. And the failover work seemless.
I need clarification before I decide to drop this new configuration into production.
Currently in production I have a similar topology but I am only using dsl link
No wireless link.
On all of my spokes I have a default route ip route 0.0.0.0 0.0.0.0 tunnel0
which ensures that all traffic forward to the hub pass thru the tunnel
eigrp is also enabled on all routers both hub and spokes.
I am a bit confuse and need clarification—I notice that for the testing
I am only adding
>> ip route 0.0.0.0 0.0.0.0 GigabitEthernet0/0 250 hence the resp spoke and hub routes will be
spoke
ip route 0.0.0.0 0.0.0.0 GigabitEthernet0/1
ip route 0.0.0.0 0.0.0.0 GigabitEthernet0/0 250
Hub
ip route 0.0.0.0 0.0.0.0 GigabitEthernet0/0 250
Will the traffic from hub to spoke vice versa be encrypted since none of the default routes points to a tunnel ?
Regards
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: