cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1300
Views
0
Helpful
3
Replies

Tunnel11: adjacency fixup,..

rburkholder
Level 1
Level 1

I have a T1 frame-relay connection to the internet on one router. On a second router, I have an HDLC T1 connection to the the internet. I form a ipsec protected tunnel between the two sites. When the tunnel comes up, and OSPF performs its adjacency, I start to get a tonne of 'adjacency fixup' messages, and my router cpu goes high. Any ideas as to why I get the messages? I have to 'shut' the tunnel to stop the messages.

interface Serial0/0/0:0

no ip address

encapsulation frame-relay IETF

load-interval 30

frame-relay lmi-type ansi

max-reserved-bandwidth 100

!

interface Serial0/0/0:0.1 point-to-point

ip address x.x.x.x 255.255.255.252

ip access-group aclBlockInbound in

ip access-group aclBlockOutbound out

no ip redirects

no ip unreachables

no ip proxy-arp

no cdp enable

frame-relay interface-dlci 16 IETF

interface Tunnel11

bandwidth 1024

ip address 172.20.x.x 255.255.255.252

ip ospf authentication message-digest

ip ospf message-digest-key 1 md5 7 xxxxx

ip ospf mtu-ignore

load-interval 30

qos pre-classify

keepalive 10 3

tunnel source Serial0/0/0:0.1

tunnel destination 64.x.x.x

tunnel mode ipsec ipv4

tunnel protection ipsec profile profForTun10

max-reserved-bandwidth 100

service-policy output pmShapeTun11

!

3 Replies 3

Hi,

Are you running CEF in that box?

Sundar

Yes, CEF is running on a 2821 with 12.4.7.

I did a 'clear ip ospf process' and the problem appears to have disappeared. I'm not sure if it will re-appear. I had been fooling with the bandwidth parameters on the tunnel (the bandwidth on the serial interface had been upgraded). Now that I have those configured, will it remain stable?

Ray

To be able to answer that question we would need to have a little more information. In particular if you could post the OSPF configuration and the output of show ip ospf interface would be helpful.

Without knowing many details of what you are running I would make my first guess that the issue you were running into may have been a recursive routing issue with the tunnel. Recursive routing is a likely issue especially if the same dynamic routing protocol advertises the subnet of the tunnel address and announces the subnet of the tunnel destination.

HTH

Rick

HTH

Rick
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: