On Tue May 20 2014 11:12:12 PM EEST, Rusty Dekema <rdek...@gmail.com> wrote:

> Tunnel0 interface configuration:
>         ip address 10.1.1.10 255.255.255.252
>         no ip redirects
>         ip mtu 1472
>         ip nhrp authentication test
>         ip nhrp map multicast 75.144.x.x

IIRC. The above should be the private ip.

>         ip nhrp map 10.1.1.9 75.144.x.x
>         ip nhrp network-id 123456
>         ip nhrp holdtime 360
>         ip nhrp nhs 75.144.x.x

And nhs is definitely configured by using the private ip. Should read 10.1.1.9.

>         ip nhrp registration no-unique
>         cdp enable
>         tunnel source FastEthernet0/0
>         tunnel destination 75.144.x.x
>         tunnel key 123456

> I then type 'no shutdown' on the Cisco tunnel interface and receive the
> following output on the opennhrp console:
> 
> opennhrp[3866]: Forwarding packet from nbma src 24.247.x.x, proto src
> 10.1.1.10 to proto dst 75.144.x.x, hop count 255

Yeah. NHS needs to be config'd by private ip.

> opennhrp[3866]: No peer entry for protocol address 75.144.x.x
> opennhrp[3866]: No peer entry for protocol address 10.1.1.10
> opennhrp[3866]: Multicast from 10.1.1.9 to 224.0.0.5


> I realize that to actually have the unencrypted link work, I would need
> to remove the racoonctl lines from opennhrp-script, but it appears that
> the peer-up section of that script is not even being called (judging
> from the lack of error messages, and the fact that when I ran opennhrp
> under strace in an attempt to troubleshoot, I didn't see it open the
> opennhrp-script file).

Yeah. The registration is never handled due to the nhs ip mismatch.

> It occurred to me that there was no matching line in the OpenNHRP config
> to the "ip nhrp network-id 123456" line on the Cisco side, so I tried
> removing that line from the Cisco config. This gives the same result,
> except that I no longer see the:

network-id is internal to system and not transmitted over wire. 

-Timo

------------------------------------------------------------------------------
"Accelerate Dev Cycles with Automated Cross-Browser Testing - For FREE
Instantly run your Selenium tests across 300+ browser/OS combos.
Get unparalleled scalability from the best Selenium testing platform available
Simple to use. Nothing to install. Get started now for free."
http://p.sf.net/sfu/SauceLabs
_______________________________________________
opennhrp-devel mailing list
opennhrp-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/opennhrp-devel

Reply via email to