DMVPN Spoke to Spoke traffic

[Joshuabowers]

My DMVPN spokes are not creating tunnels to other spokes when I ping the local lans on eth1/7.  It seems like site 5 is handling all the traffic that is spoke to spoke. should DMVPN allow spoke to spoke traffic?

I attached my router configs.

Site_5#sh dmvpn
Legend: Attrb --> S - Static, D - Dynamic, I - Incomplete
N - NATed, L - Local, X - No Socket
# Ent --> Number of NHRP entries with same NBMA peer
NHS Status: E --> Expecting Replies, R --> Responding, W --> Waiting
UpDn Time --> Up or Down Time for a Tunnel
==========================================================================

Interface: Tunnel0, IPv4 NHRP Details
Type:Hub, NHRP Peers:3,

# Ent Peer NBMA Addr Peer Tunnel Add State UpDn Tm Attrb
----- --------------- --------------- ----- -------- -----
1 2.2.2.2 192.168.0.2 UP 00:57:16 D
1 3.3.3.6 192.168.0.3 UP 00:57:17 D
1 3.3.3.10 192.168.0.4 UP 00:57:12 D

Site_7#sh dmvpn
Legend: Attrb --> S - Static, D - Dynamic, I - Incomplete
N - NATed, L - Local, X - No Socket
# Ent --> Number of NHRP entries with same NBMA peer
NHS Status: E --> Expecting Replies, R --> Responding, W --> Waiting
UpDn Time --> Up or Down Time for a Tunnel
==========================================================================

Interface: Tunnel0, IPv4 NHRP Details
Type:Spoke, NHRP Peers:1,

# Ent Peer NBMA Addr Peer Tunnel Add State UpDn Tm Attrb
----- --------------- --------------- ----- -------- -----
1 1.1.1.2 192.168.0.1 UP 00:56:53 S

[Rob Ingram · Accepted solution]

Hi, Yes DMVPN should allow dynamic spoke-to-spoke creation. I am not that familar with using ospf on DMVPN but you should use ospf network type broadcast instead of point-to-multipoint, as traffic would still be routed via the hub. Check out DMVPN Phase 2 or 3 for further information.

You should also modify your ipsec transform set and use transport mode instead of tunnel mode (which is default).

[Joshuabowers]

Thank you.

I googled the broadcast command and this config seemed to work.

I did a ping and the other spoke router showed up in the other spoke router sh dmvpn command.