[c-nsp] Tunnel shutting down when I "ip route"

Jorge Evangelista netsecuredata at gmail.com
Fri Feb 2 20:03:43 EST 2007


Try add these comands in tunnel interface for both routers

 ip tcp adjust-mss 1436
 keepalive 25 3

and then enter interface tunnel 0 and type

no shut



On 2/2/07, Hay Kan Sugeng <haykan at qalacom.com> wrote:
> For default route 0/0 it's not recommended to put like:
>
> ip route 0.0.0.0 0.0.0.0 Ethernet0/0
>
> it can work but will make your router got problem (memory leak) and crashing.
> but for this fellow case, i believe this config:
>
> ip route 192.168.3.1 255.255.255.255 Ethernet0/0
>
> is safe because 192.168.3.1 it's only a hop away (ipsec tunnel)
>
> but yeah, i agree with gert, don't point route to ethernet, my mistake and i apologize for it. :)
>
>
>
> Gert Doering wrote:
> > Hi,
> >
> > On Fri, Feb 02, 2007 at 11:44:32AM +0800, Hay Kan Sugeng wrote:
> >
> >> ip route 192.168.3.1 255.255.255.255 Ethernet0/0
> >>
> >
> > Don't do that - that is, don't point routes to Ethernet interfaces (as
> > opposed to a gateway IP) unless you *want* the router to send ARP requests
> > for each IP address routed that way towards the Ethernet interface.
> >
> > Normally, such a the destination is not local, and it just works by chance
> > because some other Cisco device has proxy-arp turned on.  (Which definitely
> > must go from the default settings!).
> >
> > gert
> >
> >
> >
>
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
>


-- 
"The network is the computer"


More information about the cisco-nsp mailing list