Hi Everyone:
HUB
interface Tunnel0
 bandwidth 1000
 ip address 172.16.1.1 255.255.255.0
 no ip redirects
 ip mtu 1400
 no ip next-hop-self eigrp 2
 ip nhrp authentication cisco
 ip nhrp map multicast dynamic
 ip nhrp network-id 2
 ip tcp adjust-mss 1360
 no ip split-horizon eigrp 2
 tunnel source Loopback0
 tunnel mode gre multipoint
 tunnel key 2
 tunnel path-mtu-discovery
SPOKES
interface Tunnel0
 bandwidth 1000
 ip address 172.16.1.5 255.255.255.0
 no ip redirects
 ip mtu 1400
 ip nhrp authentication cisco
 ip nhrp map 172.16.1.1 10.1.1.1
 ip nhrp network-id 2
 ip nhrp nhs 172.16.1.1
 ip tcp adjust-mss 1360
 no ip split-horizon eigrp 2
 tunnel source Loopback0
 tunnel mode gre multipoint
 tunnel key 2
 tunnel path-mtu-discovery

From: Brandon Carroll [mailto:[email protected]]
Sent: Wednesday, May 05, 2010 5:23 PM
To: Michael Davis
Cc: Sumit Mahla; [email protected]
Subject: Re: [OSL | CCIE_Security] Yusuf Lab 2

Things that have worked for me:

Try to disable CEF on the tunnel interface
Make sure you modified the MTU in the tunnel interface
Change the Bandwidth in the tunnel interface to 1000.  I've seen packet pacing 
problems with EIGRP on tunnel interfaces.

There are other things that could cause that issue, but maybe you haven't tried 
these.

Like Sumit said, paste your configs here and maybe someone can spot an issue.


Regards,

Brandon Carroll - CCIE #23837
Senior Technical Instructor - IPexpert
Mailto: [email protected]<mailto:[email protected]>
Telephone: +1.810.326.1444
Live Assistance, Please visit: 
www.ipexpert.com/chat<http://www.ipexpert.com/chat>
eFax: +1.810.454.0130

IPexpert is a premier provider of Self-Study Workbooks, Video on Demand, Audio 
Tools, Online Hardware Rental and Classroom Training for the Cisco CCIE (R&S, 
Voice, Security & Service Provider) certification(s) with training locations 
throughout the United States, Europe, South Asia and Australia. Be sure to 
visit our online communities at 
www.ipexpert.com/communities<http://www.ipexpert.com/communities> and our 
public website at www.ipexpert.com<http://www.ipexpert.com>



On May 5, 2010, at 12:11 AM, Michael Davis wrote:


Thanks Sumit - I have tried all these things thanks.  Any other ideas?

From: Sumit Mahla [mailto:[email protected]]
Sent: Wednesday, May 05, 2010 5:09 PM
To: Michael Davis; 
[email protected]<mailto:[email protected]>
Subject: RE: [OSL | CCIE_Security] Yusuf Lab 2



Michael,

Please check the nhs defined in spokes... it should be Tunnel ip not the NBMA 
IP... and nhrp mapping.... be carefull in the mapping... it can escape your 
eyes very easily

and also check the network advertised in the routing protocol... only advertise 
the tunnel ip network and the loopback network





________________________________
From: [email protected]<mailto:[email protected]>
To: [email protected]<mailto:[email protected]>
Date: Wed, 5 May 2010 16:27:54 +1000
Subject: [OSL | CCIE_Security] Yusuf Lab 2
Hi Everyone - I have got the DMVPN going on Yusuf lab 2.  The tunnels work, but 
both R3 and R5 are losing the DMVPN adjacencies, then they come straight up 
again:
*May  5 06:24:49.271: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 2: Neighbor 172.16.1.1 
(Tunnel0) is down: retry limit exceeded
*May  5 06:24:52.451: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 2: Neighbor 172.16.1.1 
(Tunnel0) is up: new adjacency
Does anyone know what would cause this?
Thanks
Michael

________________________________
Invest your money wisely post Budget Sign up 
now.<http://news.in.msn.com/moneyspecial/>
_______________________________________________
For more information regarding industry leading CCIE Lab training, please visit 
www.ipexpert.com<http://www.ipexpert.com>

_______________________________________________
For more information regarding industry leading CCIE Lab training, please visit 
www.ipexpert.com

Reply via email to