Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Tunneling Problem.

Hello All,

This is Jay Kishan. I work in Pakistan Petroleum Limited as a Network Associate. There is a little problem that i am facing recently. We have a Head Office in Karachi and a Remote Location is Islamabad. We are connecting them with a Primary DXX Link with an active VSAT Backup Link. As soon as the DXX Link goes down the VSAT Link comes up automatically. But the DXX Provider has introduced a few more non-cisco devices in the middle and now we have to create a tunnel from our ISB 2610 Router to KHI 3661 Router. The reason for creating the tunnel is that we dont want the DXX provider to know our network. But the problem that we have at our hand is that the tunnel never goes down as the interfaces on both the routers are connected to devices that wont go down. But there can be a problem in some other middle device because of which the link may not work. So the situation is that even the DXX Link isnt working the tunnel is still up and the VSAT Backup link doesnt come up. So how can i make sure that if the DXX Link stops working the tunnel could sense it and the VSAT Backup link comes up automatically. I will be very much thankful for any sort of help. Thanks in advance.

Regards,

Jay Kishan

PPL

7 REPLIES
New Member

Re: Tunneling Problem.

Hello Jay,

This is a quick response but may be worth investigating.

What about creating the two tunnels permanently,having dynamic routing through the primary and static routing (with a higher cost) through the second one ?

jF

New Member

Re: Tunneling Problem.

Hello Jay,

You can use Keepalive command on Tunnel interface at both side.

and route your traffic with higher metric towards VSAT.

This will help you as with this command keepalive messages with be sent between both ends and as soon as connectivity goes down due to any reason, Tunnel will go down.

But remember Please don't use Tunnel Mode ipip commands on both end tunnel configuration as with this command tunnel never goes down. This keepalive feature is avilable in only cisco GRE Tunnel Configuration.

Thanks & Regards,

Rahul Verma

New Member

Re: Tunneling Problem.

Hey Rahul,

Thanks for the reply. It was very helpful indeed. But one thing that i couldnt find is that there is not command such as KEEPALIVE on the tunnel interface. So, i just needed to know that whether this is a subcommand of another command cause i cant find the stand alone KEEPALIVE.

Thanks in Advance.

Regards,

Jay Kishan

Hall of Fame Super Silver

Re: Tunneling Problem.

Jay

The GRE keepalive is a very nice feature and it does sound like it would solve your problem. It was introduced somewhat recently (I just looked at the notes and it indicates that it was introduced on some platforms in 12.2(8)T and a bit later on other platforms). What platform are you running this on and what version of code?

The configuration is pretty straightforward:

interface tunnel n

keepalive

and it has optional parameters on the keepalive to specify how many seconds and how many retries.

If you router does not have keepalive as a command under the tunnel interface, then that is a good indication that the version of code that you are running does not have this feature. Would it be worth upgrading code to get this feature?

HTH

Rick

New Member

Re: Tunneling Problem.

Hi Jay,

I suggest you to just once go through the below link and you will find solution to all your queries. I am very much sure that your problem will be resolved after this but Provided your Router version support this feature.

http://www.cisco.com/en/US/products/sw/iosswrel/ps1839/products_feature_guide09186a0080087cec.html

Let me the know the final result.

Awaiting your feedback.

Thanks & Regards,

Rahul Verma..

New Member

Re: Tunneling Problem.

Hey Rahul and Rick,

Thanks for your help guys. I am using 3661 with IOS 12.2.2T. It doesnt have the Keep Alive command. Anyways, i will definetly get the latest IOS and use the Keep Alive command. I will also look into this matter, but i will be very much thankful that if you tell me the hardware requirements for this IOS Release for 3661. Thanks in advance

Regards,

Jay Kishan

PPL

Hall of Fame Super Silver

Re: Tunneling Problem.

Jay

There are some options about which release and which feature set you want to do the functions that you need. I looked at the Feature Navigator in CCO and for 3600 using the 12.4(17) release and the IP PLUS IPSEC 3DES feature set it requires 128 MB of RAM and 64 MB of flash.

HTH

Rick

149
Views
0
Helpful
7
Replies