Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

DMVPN - enduser complains

Hi,

We managed to deployed a Dual HUB and SPOKE dmvpn environment with Cisco ISR routers

Problem Statement

However; end user is complaning that they are experiencing time-out and also connection errors from their application at random times.

They would like to know if there is a idle timing(idle timeout) being set on our DMVPN ISR routers.

Looking at my dmvpn config.

i have the "crypto isakmp keepalive 10" configured.

and in my tunnel i have "ip mtu 1400"

Question

1. Would re-configuring the isakmp keepalive to "crypto isakmp keepalive 10 3" potentially solve this issue?

2. They would like to know if dmvpn tunnel is actually keep UP 100% of the time.

Please advise

Regards: Jocelyn

1 REPLY
Cisco Employee

DMVPN - enduser complains

Jocelyn,

By default routers are L3 devices, they forward packets, they don't keep session information for passthrough packets.

I doubt the problem you're experiencing is related to DPD settings.

I would first look into adjusting MSS to coform to MTU settings too.

Assuming there are no IP options, MSS = MTU - 40.

After that I would first have a look at what is happening with the application, compare application logs to sniffer trace to understand what you're dealing with.

M.

316
Views
0
Helpful
1
Replies
CreatePlease to create content