I am having a problem with Dynamic Multipoint VPN on a group of 2800 series routers.
The tunnels between the spokes and hub work fine, but the dynamic tunnels between the spokes do not come up with normal traffic. I can cause the tunnels to be created if I ping the tunnel interface from one spoke to the other.
Your help is appreaciated.
Andy
Hub
crypto isakmp policy 1
authentication pre-share
crypto isakmp key vpnr3mot3 address 0.0.0.0 0.0.0.0
!
!
crypto ipsec transform-set dmvpn esp-3des esp-sha-hmac
!
crypto ipsec profile vpnprofile
set security-association lifetime seconds 28800
set transform-set dmvpn
!
interface Tunnel0
description Multi-Point GRE
ip address 10.200.200.1 255.255.255.0
no ip redirects
ip mtu 1440
ip nhrp authentication r3mot3
ip nhrp map multicast dynamic
ip nhrp network-id 100
ip ospf network broadcast
tunnel source Multilink1
tunnel mode gre multipoint
tunnel key 0
tunnel protection ipsec profile vpnprofile
router eigrp 100
redistribute connected
redistribute static
network 172.21.0.0
network 192.168.100.0
network 0.0.0.0
no auto-summary
router ospf 1
log-adjacency-changes
network 10.200.200.0 0.0.0.255 area 0
network 192.168.100.0 0.0.0.255 area 1
Spoke 1
crypto isakmp policy 1
authentication pre-share
crypto isakmp key xxx address 0.x.x.x.0.0.0
!
crypto ipsec transform-set dmvpn esp-3des esp-sha-hmac
!
crypto ipsec profile vpnprofile
set security-association lifetime seconds 120
set transform-set dmvpn
!
interface Tunnel0
description Multi-Point GRE
ip address 10.200.200.4 255.255.255.0
no ip redirects
ip mtu 1440
ip nhrp authentication r3mot3
ip nhrp map multicast dynamic
ip nhrp map 10.200.200.1 172.21.11.10
ip nhrp map multicast 172.21.11.10
ip nhrp network-id 100
ip nhrp nhs 10.200.200.1
ip ospf network broadcast
ip ospf priority 0
tunnel source Multilink1
tunnel mode gre multipoint
tunnel key 0
tunnel protection ipsec profile vpnprofile
router eigrp 100
redistribute static
network 10.131.50.0 0.0.0.255
network 172.20.0.0
no auto-summary
!
router ospf 1
log-adjacency-changes
network 10.131.50.0 0.0.0.255 area 0
network 10.200.200.0 0.0.0.255 area 0
network 10.204.204.0 0.0.0.255 area 0
Spoke 2
crypto isakmp policy 1
authentication pre-share
crypto isakmp key vpnr3mot3 address 0.0.0.0 0.0.0.0
!
crypto ipsec transform-set dmvpn esp-3des esp-sha-hmac
!
crypto ipsec profile vpnprofile
set security-association lifetime seconds 120
set transform-set dmvpn
!
interface Tunnel0
description Multi-Point GRE
ip address 10.200.200.2 255.255.255.0
no ip redirects
ip mtu 1440
ip nhrp authentication r3mot3
ip nhrp map multicast dynamic
ip nhrp map 10.200.200.1 172.21.11.10
ip nhrp map multicast 172.21.11.10
ip nhrp network-id 100
ip nhrp nhs 10.200.200.1
ip ospf network broadcast
ip ospf priority 0
tunnel source Multilink1
tunnel mode gre multipoint
tunnel key 0
tunnel protection ipsec profile vpnprofile
!
router eigrp 100
network 172.20.0.0
network 192.168.103.0
no auto-summary
!
router ospf 1
log-adjacency-changes
network 10.200.200.0 0.0.0.255 area 0
network 192.168.103.0 0.0.0.255 area 0
