Having just spent my day playing with an acquired copy of 12.2T, all I can say is that for the sake of other CCIE candidates' sanity, I hope they change to another version of IOS soon. There are more bugs in 12.2T than I have ever seen in a version of IOS.
OK, here are my observations: Don't use an NHRP network id larger than 256. If you do, EIGRP will flap. The ip route-cache commands do indeed route packets straight to the appropriate spoke without touching the hub BUT the hub will remain the next hop in the routing table. To test use traceroute. Bear in mind that if the link between the spokes (i.e. NHRP link) isn't established, you may need to run trace twice. Don't mix versions of IOS when testing this. Not all of my routers have enough flash to support 12.2T, so I was using a mix of versions. This was, quite frankly, a recipe for hair loss. 12.2T speaks a very specific version of NHRP by the looks of things and it doesn't communicate properly with 12.3, 12.3T, or 12.4T. Hopefully, this will help someone avoid the very frustrating day I've just had :) Slainte Mhath, Neil On Sunday 19 August 2007 17:22, Scott Morris wrote: > Hehehe... The initial 12.2T releases are a touch on the buggy side. Later > releases are "somewhat" better. Newer mainline code certainly is the best > bet. > > 12.2T is still listed as the code on the lab (per web site) still, although > (IMHO) I would expect that to change soon. Security is the only one stuck > on these releases yet. > > Just my two cents. > > > Scott Morris, CCIE4 (R&S/ISP-Dial/Security/Service Provider) #4713, JNCIE > #153, CISSP, et al. > CCSI/JNCI-M/JNCI-J > VP - Technical Training - IPexpert, Inc. > IPexpert Sr. Technical Instructor > > A Cisco Learning Partner - We Accept Learning Credits! > > [EMAIL PROTECTED] > > Telephone: +1.810.326.1444 > Fax: +1.810.454.0130 > http://www.ipexpert.com > > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Tim > Hanekamp Sent: Sunday, August 19, 2007 11:39 AM > To: [email protected] > Subject: Re: [OSL | CCIE_Security] DMVPN with EIGRP next hop self > > Command definitely is not supported in 12.2. > > Disabling split horizon for the EIGRP AS and CEF switching on the tunnel > interface of the hub router should fix the issue. If you have this > configured and it's still not working, I would suggest rebooting all > routers involved as 12.2T is the most buggy code for DMVPN ever. > > -------------------------- > Tim Hanekamp, CCIE+S > CEH, MCSE+S, Security+ > Security Engineer > Tympani Inc. > -------------------------- > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Neil > Anderson > Sent: Sunday, August 19, 2007 10:26 AM > To: [email protected] > Subject: Re: [OSL | CCIE_Security] DMVPN with EIGRP next hop self > > Not according to CCO and UniverCD. I've tried it in 12.2 and it just comes > up as an unknown command. What version of 12.2 have you seen it in? > > Cheers, > Neil > > On Sunday 19 August 2007 14:15, Joshua Walton wrote: > > 12.2 uses the same commands: - no ip split-horizon eigrp 1 - no ip > > next-hop-self eigrp 1 > > > > > > Best Regards, > > > > - Joshua R. Walton > > Senior Network Engineer > > CCNP, CCSP, CCVP, INFOSEC > > > > > From: [EMAIL PROTECTED]> Subject: > > > CCIE_Security Digest, Vol 14, Issue 9> To: > > [email protected]> Date: > > > Sun, 19 Aug 2007 17:39:41 -0400> > Send CCIE_Security mailing list > > > submissions to> [email protected]> > To subscribe or > > > unsubscribe via the World Wide Web, visit> > > > http://onlinestudylist.com/mailman/listinfo/ccie_security> or, via > > > email, send a message with subject or body 'help' to> > > > [EMAIL PROTECTED]> > You can reach the > > > person managing the list at> > > > [EMAIL PROTECTED]> > When replying, please > > > edit > > your Subject line so it is more specific> than "Re: > > > Contents of CCIE_Security digest..."> > > Today's Topics:> > 1. Re: > > > CCIE_Security Digest, Vol 14, Issue 8 (Ahmed Abro)> 2. Re: > > > CCIE_Security Digest, Vol 14, Issue 8 (Ahmed Abro)> 3. Re: > > > CCIE_Security Digest, Vol 14, Issue 8 (Neil Anderson)> > > > > > ----------------------------------------------------------------------> > > > > > > Message: 1> Date: Sun, 19 Aug 2007 06:34:33 +0100 (BST)> From: Ahmed > > > Abro <[EMAIL PROTECTED]>> Subject: Re: [OSL | CCIE_Security] > > > CCIE_Security Digest, Vol 14, Issue> 8> To: > > > [email protected]> > > > Message-ID: <[EMAIL PROTECTED]>> > > > Content-Type: text/plain; charset="iso-8859-1"> > Dear Neil,> > I tried > > > the given commands too but seems no change in the eigrp next hope > > > address learnt on spokes. I had to use the route-map on spokes to > > > manually route the traffic to the spokes directly.> > > > > [EMAIL PROTECTED] wrote:> Send CCIE_Security > > > mailing list submissions to> [email protected]> > To > > > subscribe or unsubscribe via the World Wide Web, visit> > > > http://onlinestudylist.com/mailman/listinfo/ccie_security> or, via > > > email, send a message with subject or body 'help' to> > > > [EMAIL PROTECTED]> > You can reach the > > > person managing the list at> > > > [EMAIL PROTECTED]> > When replying, please > > > edit > > your Subject line so it is more specific> than "Re: > > > Contents of CCIE_Security digest..."> > > Today's Topics:> > 1. > > > DMVPN with EIGRP next hope self (Ahmed Abro)> 2. Re: DMVPN with > > > EIGRP next hope self (Neil Anderson)> > > > > > ----------------------------------------------------------------------> > > > > > > Message: 1> Date: Sat, 18 Aug 2007 16:31:16 +0100 (BST)> From: Ahmed > > > Abro > > > > > > > Subject: [OSL | CCIE_Security] DMVPN with EIGRP next hope self> To: > > > > > > [email protected]> Message-ID: > > > <[EMAIL PROTECTED]>> Content-Type: > > > text/plain; charset="iso-8859-1"> > Reference : IPExpert Workbook > > > v4.0> Section: 17 Task 7.1> > I have configured the task 7.1 for > > > DMVPN with R2 as Hub and R5, R6 as spokes. I am using IOS > > > 12.2(15)T11. I am not able to configure the command no ip > > > next-hop-self eigrp 10 in tunnel interface. I believe its 12.3 > > > command. What is the alternate way to make spokes direct to direct > > > communication in 12.2 IOS using eigrp.> > > > > Many Thanks,> > > > > > > > > > Ahmed Abro> Senior Network & Security Engineer, MDS Computers, > > > > PO.7899, > > > > > > Abu Dhabi, UAE.> > > > Contact Details: [EMAIL PROTECTED]> (t) > > >+971 2 > > > 6274 000 Ext:284 | (m) +971 50 269 67 88 | (f) +971 2 6271 114> > > > >Send instant messages to your online friends > > >http://uk.messenger.yahoo.com > > > > -------------- next part --------------> An HTML attachment was > > >scrubbed...> URL: > > > > > >http://onlinestudylist.com/pipermail/ccie_security/attachments/200708 > > >18/4 ac94944/attachment-0001.html> > ------------------------------> > > > > > >> Message: > > > > > > 2> Date: Sat, 18 Aug 2007 18:03:09 +0100> From: Neil Anderson > > > > Subject: Re: [OSL | CCIE_Security] DMVPN with EIGRP next hope self> To: > > > [email protected]> Message-ID: > > > <[EMAIL PROTECTED]>> Content-Type: > > > text/plain; charset="iso-8859-15"> > I've had this problem as well. > > > Instead use the following commands on the hub:> > no ip route-cache> > > > no ip route-cache cef> no ip mroute-cache.> > Cheers,> Neil> > On > > > Saturday > > > 18 August 2007 16:31, Ahmed Abro wrote:> > Reference : IPExpert > > > Workbook v4.0> > Section: 17 Task 7.1> >> > I have configured the > > > task 7.1 for DMVPN with R2 as Hub and R5, R6 as> > spokes. I am > > > using > > IOS 12.2(15)T11. > > > > I am not able to configure the command> > no ip next-hop-self eigrp > > > 10 in tunnel interface. I believe its 12.3> > command. What is the > > > alternate way to make spokes direct to direct> > communication in > > > 12.2 IOS using eigrp.> >> >> >> >> > Many Thanks,> >> >> >> > Ahmed > > > Abro> > Senior Network & Security Engineer, MDS Computers, PO.7899, > > > Abu Dhabi, UAE.> >> > > > > > > >> >> > Contact Details: [EMAIL PROTECTED]> > (t) +971 2 6274 000 > > > > > > Ext:284 | (m) +971 50 269 67 88 | (f) +971 2 6271 114> >> > Send > > >instant messages to your online friends > > >http://uk.messenger.yahoo.com> > > > -------------- next part --------------> A non-text attachment was > > >scrubbed...> Name: not available> Type: application/pgp-signature> Size: > > > 481 bytes> Desc: not available> Url : > > > > > >http://onlinestudylist.com/pipermail/ccie_security/attachments/200708 > > >19/c ae38059/attachment-0001.pgp> > End of CCIE_Security Digest, Vol > > >14, Issue > > > 8> ********************************************> > > > > Many > > > 8> Thanks,> > > > > > > > > > Ahmed Abro> Senior Network & Security Engineer, MDS Computers, > > > > > > PO.7899, Abu Dhabi, UAE.> > > > Contact Details: > > > [EMAIL PROTECTED]> (t) > > > +971 2 6274 000 Ext:284 | (m) +971 50 269 67 88 | (f) +971 2 6271 > > > +114> > > > > Send instant messages to your online friends > > >http://uk.messenger.yahoo.com > -------------- next part > > >--------------> An HTML attachment was scrubbed...> URL: > > > > > >http://onlinestudylist.com/pipermail/ccie_security/attachments/200708 > > >19/f a59abf5/attachment-0001.html> > ------------------------------> > > > > > >> Message: > > > > > > 2> Date: Sun, 19 Aug 2007 06:34:33 +0100 (BST)> From: Ahmed Abro > > > <[EMAIL PROTECTED]>> Subject: Re: [OSL | CCIE_Security] > > > CCIE_Security Digest, Vol 14, Issue> 8> To: > > > [email protected]> > > > Message-ID: <[EMAIL PROTECTED]>> > > > Content-Type: text/plain; charset="iso-8859-1"> > Dear Neil,> > I tried > > > the given commands too but seems no change in the eigrp next hope > > > address learnt on spokes. I had to use the route-map on spokes to > > > manually route the traffic to the spokes directly.> > > > > [EMAIL PROTECTED] wrote:> Send CCIE_Security > > > mailing list submissions to> [email protected]> > To > > > subscribe or unsubscribe via the World Wide Web, visit> > > > http://onlinestudylist.com/mailman/listinfo/ccie_security> or, via > > > email, send a message with subject or body 'help' to> > > > [EMAIL PROTECTED]> > You can reach the > > > person managing the list at> > > > [EMAIL PROTECTED]> > When replying, please > > > edit > > your Subject line so it is more specific> than "Re: > > > Contents of CCIE_Security digest..."> > > Today's Topics:> > 1. > > > DMVPN with EIGRP next hope self (Ahmed Abro)> 2. Re: DMVPN with > > > EIGRP next hope self (Neil Anderson)> > > > > > ----------------------------------------------------------------------> > > > > > > Message: 1> Date: Sat, 18 Aug 2007 16:31:16 +0100 (BST)> From: Ahmed > > > Abro > > > > > > > Subject: [OSL | CCIE_Security] DMVPN with EIGRP next hope self> To: > > > > > > [email protected]> Message-ID: > > > <[EMAIL PROTECTED]>> Content-Type: > > > text/plain; charset="iso-8859-1"> > Reference : IPExpert Workbook > > > v4.0> Section: 17 Task 7.1> > I have configured the task 7.1 for > > > DMVPN with R2 as Hub and R5, R6 as spokes. I am using IOS > > > 12.2(15)T11. I am not able to configure the command no ip > > > next-hop-self eigrp 10 in tunnel interface. I believe its 12.3 > > > command. What is the alternate way to make spokes direct to direct > > > communication in 12.2 IOS using eigrp.> > > > > Many Thanks,> > > > > > > > > > Ahmed Abro> Senior Network & Security Engineer, MDS Computers, > > > > PO.7899, > > > > > > Abu Dhabi, UAE.> > > > Contact Details: [EMAIL PROTECTED]> (t) > > >+971 2 > > > 6274 000 Ext:284 | (m) +971 50 269 67 88 | (f) +971 2 6271 114> > > > >Send instant messages to your online friends > > >http://uk.messenger.yahoo.com > > > > -------------- next part --------------> An HTML attachment was > > >scrubbed...> URL: > > > > > >http://onlinestudylist.com/pipermail/ccie_security/attachments/200708 > > >18/4 ac94944/attachment-0001.html> > ------------------------------> > > > > > >> Message: > > > > > > 2> Date: Sat, 18 Aug 2007 18:03:09 +0100> From: Neil Anderson > > > > Subject: Re: [OSL | CCIE_Security] DMVPN with EIGRP next hope self> To: > > > [email protected]> Message-ID: > > > <[EMAIL PROTECTED]>> Content-Type: > > > text/plain; charset="iso-8859-15"> > I've had this problem as well. > > > Instead use the following commands on the hub:> > no ip route-cache> > > > no ip route-cache cef> no ip mroute-cache.> > Cheers,> Neil> > On > > > Saturday > > > 18 August 2007 16:31, Ahmed Abro wrote:> > Reference : IPExpert > > > Workbook v4.0> > Section: 17 Task 7.1> >> > I have configured the > > > task 7.1 for DMVPN with R2 as Hub and R5, R6 as> > spokes. I am > > > using > > IOS 12.2(15)T11. > > > > I am not able to configure the command> > no ip next-hop-self eigrp > > > 10 in tunnel interface. I believe its 12.3> > command. What is the > > > alternate way to make spokes direct to direct> > communication in > > > 12.2 IOS using eigrp.> >> >> >> >> > Many Thanks,> >> >> >> > Ahmed > > > Abro> > Senior Network & Security Engineer, MDS Computers, PO.7899, > > > Abu Dhabi, UAE.> >> > > > > > > >> >> > Contact Details: [EMAIL PROTECTED]> > (t) +971 2 6274 000 > > > > > > Ext:284 | (m) +971 50 269 67 88 | (f) +971 2 6271 114> >> > Send > > >instant messages to your online friends > > >http://uk.messenger.yahoo.com> > > > -------------- next part --------------> A non-text attachment was > > >scrubbed...> Name: not available> Type: application/pgp-signature> Size: > > > 481 bytes> Desc: not available> Url : > > > > > >http://onlinestudylist.com/pipermail/ccie_security/attachments/200708 > > >19/c ae38059/attachment-0001.pgp> > End of CCIE_Security Digest, Vol > > >14, Issue > > > 8> ********************************************> > > > > Many > > > 8> Thanks,> > > > > > > > > > Ahmed Abro> Senior Network & Security Engineer, MDS Computers, > > > > > > PO.7899, Abu Dhabi, UAE.> > > > Contact Details: > > > [EMAIL PROTECTED]> (t) > > > +971 2 6274 000 Ext:284 | (m) +971 50 269 67 88 | (f) +971 2 6271 > > > +114> > > > > Send instant messages to your online friends > > >http://uk.messenger.yahoo.com > -------------- next part > > >--------------> An HTML attachment was scrubbed...> URL: > > > > > >http://onlinestudylist.com/pipermail/ccie_security/attachments/200708 > > >19/f 5d2036d/attachment-0001.html> > ------------------------------> > > > > > >> Message: > > > > > > 3> Date: Sun, 19 Aug 2007 11:30:02 +0100> From: Neil Anderson > > > <[EMAIL PROTECTED]>> Subject: Re: [OSL | CCIE_Security] > > > CCIE_Security Digest, Vol 14, Issue> 8> To: > > > [email protected]> Message-ID: > > > <[EMAIL PROTECTED]>> Content-Type: > > > text/plain; charset="iso-8859-15"> > Strange, it works for me ok. > > > Try a shut no shut on the tunnel interface to > re-initialse it or a > > > clear ip route *.> > On Sunday 19 August 2007 06:34, Ahmed Abro > > > wrote:> > Dear Neil,> >> > I tried the given commands too but seems > > > no change in the eigrp next hope> > address learnt on spokes. I had > > > to use the route-map on spokes to manually> > route the traffic to > > > the spokes directly.> >> > [EMAIL PROTECTED] > > > wrote:> > Send CCIE_Security mailing list submissions to> > > > > [email protected]> >> > To subscribe or unsubscribe > > > via the World Wide Web, visit> > > > > http://onlinestudylist.com/mailman/listinfo/ccie_security> > or, via > > > email, send a message with subject or body 'help' to> > > > > [EMAIL PROTECTED]> >> > You can reach the > > > person managing the list at> > > > > [EMAIL PROTECTED]> >> > When replying, please > > > edit your Subject line so it is more specific> > than "Re: Contents > > > of CCIE_Security digest..."> >> >> > Today's Topics:> > > > > > > >> > 1. DMVPN with EIGRP next hope self (Ahmed Abro)> > 2. Re: DMVPN > > > >> > with > > > > > > EIGRP next hope self (Neil Anderson)> >> >> > > > > ----------------------------------------------------------------------> > > > > > > >> > Message: 1> > Date: Sat, 18 Aug 2007 16:31:16 +0100 (BST)> > From: > > > > > > Ahmed Abro> > Subject: [OSL | CCIE_Security] DMVPN with EIGRP next > > > hope > > > self> > To: [email protected]> > Message-ID: > > > <[EMAIL PROTECTED]>> > Content-Type: > > > text/plain; charset="iso-8859-1"> >> > Reference : IPExpert Workbook > > > v4.0> > Section: 17 Task 7.1> >> > I have configured the task 7.1 > > > for DMVPN with R2 as Hub and R5, R6 as> > spokes. I am using IOS > > 12.2(15)T11. > > > > I am not able to configure the command> > no ip next-hop-self eigrp > > > 10 in tunnel interface. I believe its 12.3> > command. What is the > > > alternate way to make spokes direct to direct> > communication in > > > 12.2 IOS using eigrp.> >> >> >> >> > Many Thanks,> >> >> >> > Ahmed > > > Abro> > Senior Network & Security Engineer, MDS Computers, PO.7899, > > > Abu Dhabi, UAE.> >> > > > > > > >> >> > Contact Details: [EMAIL PROTECTED]> > (t) +971 2 6274 000 > > > > > > Ext:284 | (m) +971 50 269 67 88 | (f) +971 2 6271 114> >> > Send > > > instant messages to your online friends > > > http://uk.messenger.yahoo.com> > > > > -------------- next part --------------> > An HTML attachment was > > > scrubbed...> > URL:> > > > > http://onlinestudylist.com/pipermail/ccie_security/attachments/20070 > > > 818/4 > > >ac> >94944/attachment-0001.html> >> > ------------------------------> > > >ac> >>> > > > > Message: 2> > Date: Sat, 18 Aug 2007 18:03:09 +0100> > From: Neil > > > Anderson> > Subject: Re: [OSL | CCIE_Security] DMVPN with EIGRP next > > > Anderson> > hope > > > self> > To: [email protected]> > Message-ID: > > > <[EMAIL PROTECTED]>> > Content-Type: > > > text/plain; charset="iso-8859-15"> >> > I've had this problem as well. > > > Instead use the following commands on the> > hub:> >> > no ip > > > route-cache> > no ip route-cache cef> > no ip mroute-cache.> >> > > > > Cheers,> > Neil> >> > On Saturday 18 August 2007 16:31, Ahmed Abro > > > wrote:> > > Reference : IPExpert Workbook v4.0> > > Section: 17 Task > > > 7.1> > > > > > > > >> > > I have configured the task 7.1 for DMVPN with R2 as Hub and > > > > >> > > R5, > > > > > > R6 as> > > spokes. I am using IOS 12.2(15)T11. I am not able to > > > configure > > > the> > > command no ip next-hop-self eigrp 10 in tunnel interface. I > > > believe its> > > 12.3 command. What is the alternate way to make > > > spokes direct to direct> > > communication in 12.2 IOS using eigrp.> > > > > > > >> > >> > > Many Thanks,> > >> > >> > >> > > Ahmed Abro> > > Senior > > > > > > Network & Security Engineer, MDS Computers, PO.7899, Abu Dhabi,> > > > > > UAE.> > >> > >> > >> > > Contact Details: [EMAIL PROTECTED]> > > > > > (t) > > > +971 2 6274 000 Ext:284 | (m) +971 50 269 67 88 | (f) +971 2 6271 > > > +114> > > > > > > > >> > > Send instant messages to your online friends> > > > > > > > > http://uk.messenger.yahoo.com> >> > -------------- next part > > > --------------> > A non-text attachment was scrubbed...> > Name: not > > > available> > Type: application/pgp-signature> > Size: 481 bytes> > > > > Desc: not available> > Url :> > > > > http://onlinestudylist.com/pipermail/ccie_security/attachments/20070 > > > 819/c > > >ae> >38059/attachment-0001.pgp> >> > End of CCIE_Security Digest, Vol > > >ae> >14, > > > Issue 8> > ********************************************> >> >> >> >> > > > > > > > Many Thanks,> >> >> >> > Ahmed Abro> > Senior Network & Security > > > > > > Engineer, MDS Computers, PO.7899, Abu Dhabi, UAE.> >> >> >> > > > > Contact > > > Details: [EMAIL PROTECTED]> > (t) +971 2 6274 000 Ext:284 | (m) > > > +971 50 > > > 269 67 88 | (f) +971 2 6271 114> >> > Send instant messages to your > > > online friends http://uk.messenger.yahoo.com> -------------- next > > > part > > > --------------> A non-text attachment was scrubbed...> Name: not > > > available> Type: application/pgp-signature> Size: 481 bytes> Desc: > > > available> not Url : > > > > > >http://onlinestudylist.com/pipermail/ccie_security/attachments/200708 > > >19/e 88ee802/attachment.pgp> > End of CCIE_Security Digest, Vol 14, > > >Issue 9> > > > ********************************************
pgpaxVPrwSPSu.pgp
Description: PGP signature
