On Tue May 20 2014 11:12:12 PM EEST, Rusty Dekema <rdek...@gmail.com> wrote:
> Tunnel0 interface configuration: > ip address 10.1.1.10 255.255.255.252 > no ip redirects > ip mtu 1472 > ip nhrp authentication test > ip nhrp map multicast 75.144.x.x IIRC. The above should be the private ip. > ip nhrp map 10.1.1.9 75.144.x.x > ip nhrp network-id 123456 > ip nhrp holdtime 360 > ip nhrp nhs 75.144.x.x And nhs is definitely configured by using the private ip. Should read 10.1.1.9. > ip nhrp registration no-unique > cdp enable > tunnel source FastEthernet0/0 > tunnel destination 75.144.x.x > tunnel key 123456 > I then type 'no shutdown' on the Cisco tunnel interface and receive the > following output on the opennhrp console: > > opennhrp[3866]: Forwarding packet from nbma src 24.247.x.x, proto src > 10.1.1.10 to proto dst 75.144.x.x, hop count 255 Yeah. NHS needs to be config'd by private ip. > opennhrp[3866]: No peer entry for protocol address 75.144.x.x > opennhrp[3866]: No peer entry for protocol address 10.1.1.10 > opennhrp[3866]: Multicast from 10.1.1.9 to 224.0.0.5 > I realize that to actually have the unencrypted link work, I would need > to remove the racoonctl lines from opennhrp-script, but it appears that > the peer-up section of that script is not even being called (judging > from the lack of error messages, and the fact that when I ran opennhrp > under strace in an attempt to troubleshoot, I didn't see it open the > opennhrp-script file). Yeah. The registration is never handled due to the nhs ip mismatch. > It occurred to me that there was no matching line in the OpenNHRP config > to the "ip nhrp network-id 123456" line on the Cisco side, so I tried > removing that line from the Cisco config. This gives the same result, > except that I no longer see the: network-id is internal to system and not transmitted over wire. -Timo ------------------------------------------------------------------------------ "Accelerate Dev Cycles with Automated Cross-Browser Testing - For FREE Instantly run your Selenium tests across 300+ browser/OS combos. Get unparalleled scalability from the best Selenium testing platform available Simple to use. Nothing to install. Get started now for free." http://p.sf.net/sfu/SauceLabs _______________________________________________ opennhrp-devel mailing list opennhrp-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/opennhrp-devel