I tried to implement eigrp leak-maps and did not work ..need your help
DMVPN Spoke router
interface Tunnel1 description XXXXX bandwidth 1024 ip address 10.13.0.212 255.255.0.0 no ip redirects ip mtu 1400 ip nhrp authentication 111 ip nhrp map multicast dynamic ip nhrp map 10.13.0.1 184.108.40.206 ip nhrp map multicast 220.127.116.11 ip nhrp network-id 101 ip nhrp nhs 10.13.0.1 ip summary-address eigrp 1 10.60.4.0 255.255.252.0 5 leak-map leak delay 10 cdp enable tunnel source FastEthernet4 tunnel mode gre multipoint tunnel key 111 tunnel protection ipsec profile ocbackupvpn end
apbjnwbr1#show run int vl 1 Building configuration...
Current configuration : 244 bytes ! interface Vlan1 description Beeijing-OCV Mangement VLAN 23_May_2009 ip address 10.60.4.61 255.255.255.192 standby 1 ip 10.60.4.62 standby 1 timers 1 3 standby 1 priority 101 standby 1 preempt standby 1 name hsrp_netw_mgmt_vlan_gw end
route-map leak permit 10
match ip address 10
access-list 10 permit 10.60.4.0 0.0.0.63
apbjnwbr1#show ip route 10.60.4.61 Routing entry for 10.60.4.0/26 Known via "connected", distance 0, metric 0 (connected, via interface) Redistributing via eigrp 1 Routing Descriptor Blocks: * directly connected, via Vlan1 Route metric is 0, traffic share count is 1
I checked on the hub router and could not find the specific routes...
HUB#show ip eigrp topology | b 10.60.4.0 P 10.60.4.0/22, 1 successors, FD is 58112, tag is 65000 via 18.104.22.168 (58112/55552), GigabitEthernet0/0 via 10.13.0.212 (1711616/28160), Tunnel2
HUB#show ip eigrp topology | i 10.60.4.0 P 10.60.4.0/22, 1 successors, FD is 58112, tag is 65000 GRVVPNCR2#
Did you see hits in 'sh access-lists 10'. To me, the config looks good for a leak to occur. Can you post the dmvpn hub tunnel's interface config and EIGRP config on the hub. Are we learning 10.60.4.0/26 on the hub via any other protocol?
Thanks for checking..this morning i re-implemented and it started working..
After applyig leak, i could see /26 along with /22..../26 is an external route because we have another routing source advertising the same prefix and an admin distance tweked on hub to prefer external over internal..
HUB#show ip route | i 10[.]60[.]4 D 10.60.48.0/26 [210/1709312] via 10.13.0.234, 08:05:54, Tunnel2 D EX 10.60.40.0/22 [171/58112] via 22.214.171.124, 1w4d, GigabitEthernet0/0 D 10.60.4.0/26 [210/1711616] via 10.13.0.212, 00:01:19, Tunnel2 D EX 10.60.4.0/22
After removing the leak-map
HUB#show ip route | i 10[.]60[.]4 D 10.60.48.0/26 [210/1709312] via 10.13.0.234, 08:06:07, Tunnel2 D EX 10.60.40.0/22 [171/58112] via 126.96.36.199, 1w4d, GigabitEthernet0/0 D EX 10.60.4.0/22
Question We run asr9001 with XR 6.1.3, and we have a very long delay to
login w/ SSH 1 or 2 to the device compare to IOS device. After
investigation, the there is 1s delay between the client KEXDH_INIT and
the server (XR) KEXDH_REPLY. After debug ssh serv...
Introduction The purpose of this document is to demonstrate the Open
Shortest Path First (OSPF) behavior when the V-bit (Virtual-link bit) is
present in a non-backbone area. The V-bit is signaled in Type-1 LSA only
if the router is the endpoint of one or ...
Hi, I am seeing quite a few issues with patch install and wanted to
share my experience and workaround to this. Login to admin via CLI, then
access root with the “shell” command Issue “df –h” and you’ll probably
see the following directory full or nearly ...