cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
423
Views
0
Helpful
1
Replies

DMVPN Single Tier Dual Head End

s.pate
Level 1
Level 1

I'm currently piloting a VPN solution given the above architecture. Everything seemed to work properly in a lab environment but once I turned up a single test site the following occurs:

When the two Head Ends and the single Remote are reloaded everything works flawlessly, but after about 24 hrs one of the tunnels will go down (can't ping tunnel int, eigrp goes down, nhrp stops responding etc.) but isakmp and ipsec sessions are fine. If left unattended the second tunnel will generally follow suite sometime within the next 24hrs. This has happened consistently (including the order in which they go down) for about the last 4 reloads.

Head Ends are 2851s running 12.3(8)T6 each with a AIM-VPN/EPII-PLUS module

Remote is a 2821 also running 12.3(8)T6 with no HW encryption mod

Anyone experienced similar issues.

1 Reply 1

Farrukh Haroon
VIP Alumni
VIP Alumni

You might be running a bug, try to check the Cisco Bug Toolkit for a bug (Or Cisco TAC).

Also try to capture the debug as the why the VPN is failing. Since EIGRP packets flow continuously the tunnel should not go down.

Regards

Farrukh

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: