From: Chris Broadway (midatlanticnet@gmail.com)
Date: Mon Mar 20 2006 - 10:19:36 GMT-3
All,
I switched the hub location in the DMVPN topology and I am still seeing the
same issue.  The spokes see the hub as an EIGRP neighbor that is up but the
hub doesn't see the spokes as an EIGRP neighbor at all.  How are the spokes
seeing the hub up but not vice versa:
*Spokes*
2821_CE_A#sh ip eigrp neighbors
IP-EIGRP neighbors for process 1
H   Address                 Interface       Hold Uptime   SRTT   RTO  Q  Seq
                                            (sec)         (ms)       Cnt Num
0   50.50.50.2              Tu0               12 00:00:40    1  5000  1  0
2610XM_CE_C#sh ip eigrp neighbors
IP-EIGRP neighbors for process 1
H   Address                 Interface       Hold Uptime   SRTT   RTO  Q  Seq
                                            (sec)         (ms)       Cnt Num
0   50.50.50.2              Tu0               14 00:00:42    1  5000  1  0
*Hub*
2610XM_CE_B#sh ip eigrp neighbors
IP-EIGRP neighbors for process 1
2610XM_CE_B#
Also, The spokes are bouncing the EIGRP adjacencies still.Any clue?  Here
is one spoke and the hub partial configs:
*Spoke*
crypto isakmp policy 1
 authentication pre-share
crypto isakmp key cisco47 address 0.0.0.0 0.0.0.0
!
!
crypto ipsec transform-set trans2 esp-des esp-md5-hmac
!
crypto ipsec profile vpnprof
 set transform-set trans2
!
!
!
!
!
interface Tunnel0
 bandwidth 1000
 ip address 50.50.50.1 255.255.255.0
 no ip redirects
 ip mtu 1416
 ip nhrp authentication donttell
 ip nhrp map 50.50.50.2 10.10.8.2
 ip nhrp network-id 99
 ip nhrp holdtime 300
 ip nhrp nhs 50.50.50.2
 delay 1000
 tunnel source GigabitEthernet0/1
 tunnel mode gre multipoint
 tunnel key 100000
 tunnel protection ipsec profile vpnprof
2821_CE_A#sh run | b router eigrp
router eigrp 1
 network 9.9.9.9 0.0.0.0
 network 50.50.50.0 0.0.0.255
 no auto-summary
!
ip classless
ip route 10.10.0.0 255.255.0.0 10.10.5.1
*Hub*
!
crypto isakmp policy 1
 authentication pre-share
crypto isakmp key cisco47 address 0.0.0.0 0.0.0.0
!
!
crypto ipsec transform-set trans2 esp-des esp-md5-hmac
!
crypto ipsec profile vpnprof
 set transform-set trans2
!
!
!
!
!
interface Tunnel0
 bandwidth 1000
 ip address 50.50.50.2 255.255.255.0
 no ip redirects
 ip mtu 1416
 no ip next-hop-self eigrp 1
 ip nhrp authentication donttell
 ip nhrp map multicast dynamic
 ip nhrp network-id 99
 ip nhrp holdtime 300
 no ip split-horizon eigrp 1
 delay 1000
 tunnel source FastEthernet0/0
 tunnel mode gre multipoint
 tunnel key 100000
 tunnel protection ipsec profile vpnprof
2610XM_CE_B#sh run | b router eigrp 1
router eigrp 1
 network 12.12.12.12 0.0.0.0
 network 50.50.50.0 0.0.0.255
 no auto-summary
!
ip classless
ip route 10.10.0.0 255.255.0.0 10.10.8.1
 -Chris
This archive was generated by hypermail 2.1.4 : Sat Apr 01 2006 - 10:07:39 GMT-3