[c-nsp] Mysterious GRE tunnel flap
Quinn Kuzmich
lostinmoscow at gmail.com
Thu Jul 22 12:08:02 EDT 2010
Ok, here's the config for one of the two routers - they have the same basic
HSRP config so if one is wrong, so is the other. Remember, the other end of
the tunnel is NOT exhibiting the problem at all.
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname rem16-miramar-r2
!
boot-start-marker
boot-end-marker
!
logging count
logging message-counter syslog
logging buffered 51200
no logging console
!
no aaa new-model
ip source-route
!
!
!
!
no ip cef
ip domain lookup source-interface FastEthernet0/0
ip domain name cell2.psap.bc.local
ip multicast-routing
no ipv6 cef
ntp server 10.3.0.1
multilink bundle-name authenticated
!
!
archive
log config
hidekeys
!
!
ip tftp source-interface FastEthernet0/0
!
track 1 interface Serial0/1/0 ip routing
!
!
!
!
interface Tunnel16
description *** TUNNEL FOR VSS 16 (Multicast only) ***
ip address 10.250.16.1 255.255.255.252
ip pim query-interval 1
ip pim state-refresh origination-interval 4
ip pim dense-mode
ip tcp adjust-mss 1436
no ip mroute-cache
keepalive 1 1
tunnel source 10.16.15.254
tunnel destination 10.3.15.254
!
interface FastEthernet0/0
description *** BACKROOM ***
ip address 10.16.15.252 255.255.240.0
ip access-group 100 out
ip helper-address 10.3.0.1
ip pim dr-priority 255
ip pim query-interval 1
ip pim state-refresh origination-interval 4
ip pim dense-mode
no ip mroute-cache
speed 100
full-duplex
keepalive 1
standby delay minimum 45 reload 60
standby 1 ip 10.16.15.254
standby 1 timers 1 3
standby 1 preempt delay minimum 15 reload 15 sync 15
standby 1 track Serial0/1/0
!
interface FastEthernet0/1
description *** CROSSOVER R2 R1 ***
ip address 10.252.216.2 255.255.255.0
ip hello-interval eigrp 2604 1
ip hold-time eigrp 2604 2
speed 100
full-duplex
keepalive 1
!
interface Serial0/1/0
ip address 10.252.16.2 255.255.255.252
ip hello-interval eigrp 2604 1
ip hold-time eigrp 2604 3
keepalive 4
no fair-queue
service-module t1 timeslots 1-24
!
router eigrp 2604
passive-interface FastEthernet0/0
network 10.16.0.0 0.0.15.255
network 10.252.0.0 0.0.255.255
no auto-summary
eigrp stub connected
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 10.252.216.1 240
!
!
no ip http server
ip dns server
ip mroute 10.0.0.0 255.0.0.0 10.250.16.2
!
ip access-list standard AllSites
permit 10.0.0.0
ip access-list standard MyRemoteSite
permit 10.16.0.0 0.0.15.255
!
logging source-interface FastEthernet0/0
logging server-arp
logging 10.4.0.1
access-list 100 deny udp 10.4.0.0 0.0.15.255 any gt 5000
access-list 100 permit ip any any
access-list 101 deny udp 10.3.0.0 0.0.15.255 any gt 5000
access-list 101 permit ip any any
!
route-map REM-LEAK-LIST permit 10
match ip address AllSites
match interface FastEthernet0/1
!
route-map REM-LEAK-LIST permit 20
match ip address MyRemoteSite
match interface Serial0/1/0
!
!
!
control-plane
!
!
!
line con 0
login local
line aux 0
line vty 0 4
exec-timeout 0 0
login local
transport input telnet
line vty 5 15
exec-timeout 0 0
login
transport input telnet
More information about the cisco-nsp
mailing list