ā10-08-2013 08:42 AM - edited ā03-04-2019 09:15 PM
- i created a tunnel and it is up
- i can ping the tunnel interface at remot site
-run eigrp routing between them and it's ok
but i can't ping my tunnel interface !!!
any help ?
ā10-08-2013 08:47 AM
Is it possible that there is an access list applied in the tunnel that might be blocking the ping? Is it possible that there is some mismatch in addressing within the tunnel? If you would post the tunnel configuration and the output of show interface then perhaps we might be better able to find the issue.
HTH
Rick
ā10-08-2013 08:51 AM
-there is no ACL
MASR_SOHAG(config)#interface Tunnel1
MASR_SOHAG(config-if)# description ***LINK Tunnel***
MASR_SOHAG(config-if)# bandwidth 2048
MASR_SOHAG(config-if)# ip address 172.88.0.228 255.255.255.0
MASR_SOHAG(config-if)# no ip redirects
MASR_SOHAG(config-if)# no ip unreachables
MASR_SOHAG(config-if)# no ip proxy-arp
MASR_SOHAG(config-if)# ip mtu 1476
MASR_SOHAG(config-if)# ip bandwidth-percent eigrp 19 100
MASR_SOHAG(config-if)# ip flow ingress
MASR_SOHAG(config-if)# ip flow egress
MASR_SOHAG(config-if)# ip nhrp authentication efinance
MASR_SOHAG(config-if)# ip nhrp map 172.88.0.1 172.10.47.10
MASR_SOHAG(config-if)# ip nhrp map multicast 172.10.47.10
MASR_SOHAG(config-if)# ip nhrp network-id 177
MASR_SOHAG(config-if)# ip nhrp holdtime 360
MASR_SOHAG(config-if)# ip nhrp nhs 172.88.0.1
MASR_SOHAG(config-if)# ip tcp adjust-mss 1360
MASR_SOHAG(config-if)# delay 50
MASR_SOHAG(config-if)# cdp enable
MASR_SOHAG(config-if)# tunnel source 10.208.16.114
MASR_SOHAG(config-if)# tunnel mode gre multipoint
MASR_SOHAG(config-if)# tunnel key 22
MASR_SOHAG(config-if)# tunnel protection ipsec profile VPN-site2site
MASR_SOHAG(config-if)#
MASR_SOHAG(config-if)#
MASR_SOHAG(config-if)#
MASR_SOHAG(config-if)#^Z
i can ping the remote tunnel
MASR_SOHAG#ping 172.88.0.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.88.0.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 52/60/72 ms
--but can't ping mine !!
MASR_SOHAG#ping 172.88.0.228
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.88.0.228, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)
ā10-08-2013 09:01 AM
Thank you for posting the configuration of the tunnel which is quite helpful. I suggest that you add this to your tunnel configuration and see if it works better:
ip nhrp map 172.88.0.228 172.10.47.10
HTH
Rick
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: