I have a DMVPN network,currently I ran into a strange issue.For example
other network --HUB---(GRE+IPSec)----[Spoke1 router--primary router]
spoke and primary router are in the same site.All three run BGP,Hub in 65000,spoke and primary in 65001.Currently spoke and primary router have all the routing infor towards other network.I can go everywhere I want from spoke router.But from primary router I can't ping hub router's tunnnel ip,of couse I can't go to HUB site and other network from primary router.
In fact I have other spokes,and I can ping their tunnel IP from primary router.
The point is I can't ping hub's tunnel ip from it.
Who can help me solve this strange issue?Great thanks to all of you.
Note:I also confige the hub router as a DMVPN spoke of another DMVPN network.
The dynamic IP routing protocol running on the hub router can be configured to reflect the routes learned from one spoke back out the same interface to all of the other spokes, but the IP next-hop on these routes will usually be the hub router, not the spoke router from which the hub learned this route.
Note: The dynamic routing protocol only runs on the hub and spoke links, it does not run on the dynamic spoke-to-spoke links.
The dynamic routing protocols (RIP, OSPF and EIGRP) need to be configured on the hub router to advertise the routes back out the mGRE tunnel interface and to set the IP next-hop to the originating spoke router for routes learned from one spoke when the route is advertised back out to the other spokes.
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
Table of Contents Introduction:This document describes details on how
NAT-T works. Background: ESP encrypts all critical information,
encapsulating the entire inner TCP/UDP datagram within an ESP header.
ESP is an IP protocol in the same sense that TCP an...