Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

2651 Tunnel Interfaces

4 tunnel interfaces configured (2) 7206VXR at each site, 2 for primary site and 2 for disaster site. Receiving errors in syslog that the tunnel interfaces @ primary site are dropping (usually several at a time and see to be geographically listed eastern, central & western) regions.

ISP cannot determine where the errors are coming from and we've enabled service-module t1 fdl att for them to check our CSU/DSU stats. The serial interfaces on both ends are clean.

Any assitance is greatly appreciated.

6 REPLIES
New Member

Re: 2651 Tunnel Interfaces

What kind of tunnels are those? GRE? IPSec? Other?

New Member

Re: 2651 Tunnel Interfaces

GRE IPSec

Re: 2651 Tunnel Interfaces

hi

i too faced the same problem with ordianary GRE tunnel ..

can u check the MTU size set on both the sides,tunnel mode ??

r u getting proper ping response while pinging to u r Primary site??is this happenin @ particular period of time or all the time ??

regds

prem

New Member

Re: 2651 Tunnel Interfaces

MTU is 1500 on both sides - and until recently we experienced the drops on a regular basis almost to the hour.

The ping response varies from 35ms to 80ms depending where you are in the country.

New Member

Re: 2651 Tunnel Interfaces

So I understand that it is GRE tunnel inside IPSec? Or visa versa? In any case, when it comes to GRE tunnels, they do not have a control plane, and therefore do not have keepalives. GRE tunnel will be shown DOWN if your router does not have a route to the remote end of the tunnel. Check your routing - it may be flapping.

New Member

Re: 2651 Tunnel Interfaces

IPSEC inside of a GRE Tunnel.

Example of tunnel drops

2003-06-13 05:11:13 Local7.Notice 10.52.1.1 105881: Jun 13 05:11:13: %DUAL-5-NBRCHANGE: IP-EIGRP 52: Neighbor 10.160.2.250 (Tunnel2) is down: holding time expired

2003-06-13 05:11:17 Local7.Notice 10.52.1.1 105882: Jun 13 05:11:16: %DUAL-5-NBRCHANGE: IP-EIGRP 52: Neighbor 10.160.2.250 (Tunnel2) is up: new adjacency

2003-06-13 05:16:50 Local7.Warning 10.52.99.81 2003 Jun 13 05:14:12 %SYS-4-P2_WARN: 1/Invalid crc, dropped packet, count = 99113

2003-06-13 05:17:29 Local7.Notice 10.52.1.1 105883: Jun 13 05:17:28: %DUAL-5-NBRCHANGE: IP-EIGRP 52: Neighbor 10.160.152.250 (Tunnel152) is down: holding time expired

2003-06-13 05:17:33 Local7.Notice 10.52.1.1 105884: Jun 13 05:17:32: %DUAL-5-NBRCHANGE: IP-EIGRP 52: Neighbor 10.160.152.250 (Tunnel152) is up: new adjacency

2003-06-13 05:18:15 Local7.Notice 10.52.1.1 105885: Jun 13 05:18:15: %DUAL-5-NBRCHANGE: IP-EIGRP 52: Neighbor 10.160.15.250 (Tunnel15) is down: holding time expired

2003-06-13 05:18:19 Local7.Notice 10.52.1.1 105886: Jun 13 05:18:18: %DUAL-5-NBRCHANGE: IP-EIGRP 52: Neighbor 10.160.15.250 (Tunnel15) is up: new adjacency

2003-06-13 05:18:56 Local7.Notice 10.52.1.1 105887: Jun 13 05:18:56: %DUAL-5-NBRCHANGE: IP-EIGRP 52: Neighbor 10.160.5.250 (Tunnel5) is down: holding time expired

2003-06-13 05:18:59 Local7.Notice 10.52.1.1 105888: Jun 13 05:18:59: %DUAL-5-NBRCHANGE: IP-EIGRP 52: Neighbor 10.160.5.250 (Tunnel5) is up: new adjacency

2003-06-13 05:19:41 Local7.Notice 10.52.1.1 105889: Jun 13 05:19:40: %DUAL-5-NBRCHANGE: IP-EIGRP 52: Neighbor 10.160.35.250 (Tunnel35) is down: holding time expired

2003-06-13 05:19:44 Local7.Notice 10.52.1.1 105890: Jun 13 05:19:44: %DUAL-5-NBRCHANGE: IP-EIGRP 52: Neighbor 10.160.35.250 (Tunnel35) is up: new adjacency

2003-06-13 05:21:49 Local7.Notice 10.52.1.1 105891: Jun 13 05:21:48: %DUAL-5-NBRCHANGE: IP-EIGRP 52: Neighbor 10.160.14.250 (Tunnel14) is down: holding time expired

2003-06-13 05:21:52 Local7.Notice 10.52.1.1 105892: Jun 13 05:21:51: %DUAL-5-NBRCHANGE: IP-EIGRP 52: Neighbor 10.160.14.250 (Tunnel14) is up: new adjacency

225
Views
0
Helpful
6
Replies
CreatePlease to create content