Default-gateway question

[bythespy]

OK, I am missing something really simple here and I am going to feel stupid when you tell me what it is!

I am trying to build a GRE tunnel across the WAN.

On the Remote end the interface show up and up, the sub interface shows up and up AND the tunnel interface shows up and up. I can ping the IP address of the sub interface, but not the IP address of the tunnel interface.

When I do a show IP route, the gateway of last resort is not set?

When I do Show ARP the entry for the tunnel is "Incomplete"


If you need more info or want to see configs I will post them.

What is really ticking me off is that I have 6 oterh remote sites running this solution and I have compared EVERY entry on the other remote routers to this one and I cannot find the difference.



Mspivey
CCNP

 

[fmonteiro]

Hi Mspivey,
Would you, please, post your config files?

 

[bythespy]

Yes, later today.



Mspivey
CCNP

 

[bythespy]

Here is the config for the host end:
All of the Tunnel Interfaces work except Tunnel 10

interface Loopback0
description IP Multicast Primary Auto-RP
ip address 10.1.254.255 255.255.255.255
ip pim sparse-dense-mode
!
interface Tunnel10
description PMKTPLC - TEST
bandwidth 100000
ip address 10.1.255.202 255.255.255.252
ip authentication mode eigrp 27 md5
ip authentication key-chain eigrp 27 PBTC-Keys
ip pim sparse-dense-mode
ip summary-address eigrp 27 10.0.0.0 255.0.0.0 5
tunnel source 192.168.28.37
tunnel destination 192.168.28.45
!
interface Tunnel32
description Selma Mall
bandwidth 100000
ip address 10.1.255.5 255.255.255.252
ip authentication mode eigrp 27 md5
ip authentication key-chain eigrp 27 PBTC-Keys
ip pim sparse-dense-mode
ip summary-address eigrp 27 10.0.0.0 255.0.0.0 5
ipx network 2732
tunnel source 192.168.28.37
tunnel destination 192.168.28.42
!
interface Tunnel34
description Satterfield
bandwidth 100000
ip address 10.1.255.9 255.255.255.252
ip authentication mode eigrp 27 md5
ip authentication key-chain eigrp 27 PBTC-Keys
ip pim sparse-dense-mode
ip summary-address eigrp 27 10.0.0.0 255.0.0.0 5
ipx network 2734
tunnel source 192.168.28.37
tunnel destination 192.168.28.44
!
interface Tunnel44
description Montevallo
bandwidth 100000
ip address 10.1.255.21 255.255.255.252
ip authentication mode eigrp 27 md5
ip authentication key-chain eigrp 27 PBTC-Keys
ip pim sparse-dense-mode
ip summary-address eigrp 27 10.0.0.0 255.0.0.0 5
ipx network 2744
tunnel source 192.168.28.37
tunnel destination 192.168.28.36
!
interface Tunnel46
description Helena
bandwidth 100000
ip address 10.1.255.25 255.255.255.252
ip authentication mode eigrp 27 md5
ip authentication key-chain eigrp 27 PBTC-Keys
ip pim sparse-dense-mode
ip summary-address eigrp 27 10.0.0.0 255.0.0.0 5
ipx network 2746
tunnel source 192.168.28.37
tunnel destination 192.168.28.38
!
interface Tunnel61
description Prattville Main
bandwidth 100000
ip address 10.1.255.45 255.255.255.252
ip authentication mode eigrp 27 md5
ip authentication key-chain eigrp 27 PBTC-Keys
ip pim sparse-dense-mode
ip summary-address eigrp 27 10.0.0.0 255.0.0.0 5
ipx network 2761
tunnel source 192.168.28.37
tunnel destination 192.168.28.46
!
interface Tunnel62
description Prattville East
bandwidth 100000
ip address 10.1.255.49 255.255.255.252
ip authentication mode eigrp 27 md5
ip authentication key-chain eigrp 27 PBTC-Keys
ip pim sparse-dense-mode
ip summary-address eigrp 27 10.0.0.0 255.0.0.0 5
ipx network 2762
tunnel source 192.168.28.37
tunnel destination 192.168.28.43
!
interface Tunnel75
description Opelika
bandwidth 100000
ip address 10.1.255.61 255.255.255.252
ip authentication mode eigrp 27 md5
ip authentication key-chain eigrp 27 PBTC-Keys
ip pim sparse-dense-mode
ip summary-address eigrp 27 10.0.0.0 255.0.0.0 5
ipx network 2775
tunnel source 192.168.28.37
tunnel destination 192.168.28.35
!
interface Tunnel76
description Auburn
bandwidth 100000
ip address 10.1.255.65 255.255.255.252
ip authentication mode eigrp 27 md5
ip authentication key-chain eigrp 27 PBTC-Keys
ip pim sparse-dense-mode
ip summary-address eigrp 27 10.0.0.0 255.0.0.0 5
ipx network 2776
tunnel source 192.168.28.37
tunnel destination 192.168.28.34
!
interface FastEthernet0/0
description WAN-Backbone VLAN
ip address 10.0.255.3 255.255.255.248
no ip redirects
ip pim sparse-dense-mode
ip summary-address eigrp 27 10.1.255.0 255.255.255.0 5
ip summary-address eigrp 27 10.1.254.0 255.255.255.0 5
duplex full
speed 100
ipx network 27255
!
interface FastEthernet0/1
no ip address
duplex full
speed 100
no cdp enable
!
interface FastEthernet0/1.1
description Charter Network Native VLAN
encapsulation dot1Q 400 native
!
interface FastEthernet0/1.2
description Charter Network Tagged VLAN
encapsulation dot1Q 278
ip address 192.168.28.37 255.255.255.224
ip authentication mode eigrp 1902 md5
ip authentication key-chain eigrp 1902 Charter-Keys
service-policy output ToS-CoS

Mspivey
CCNP

 

[bythespy]

Here is a working config for the Remote end of Tunnel 75
(((THIS TUNNEL WORKS)))

interface Loopback0
ip address 10.1.254.153 255.255.255.255
ip pim sparse-dense-mode
!
interface Tunnel75
description Selma Main Office
ip address 10.1.255.62 255.255.255.252
ip authentication mode eigrp 27 md5
ip authentication key-chain eigrp 27 PBTC-Keys
ip pim sparse-dense-mode
backup delay 120 120
backup interface Dialer1
ip summary-address eigrp 27 10.1.254.152 255.255.255.248 5
ip summary-address eigrp 27 10.1.75.0 255.255.255.0 5
ipx network 2775
tunnel source 192.168.28.35
tunnel destination 192.168.28.37
!
interface FastEthernet0/0
no ip address
speed 100
full-duplex
!
interface FastEthernet0/0.1
description Opelika-Data
encapsulation dot1Q 1 native
ip address 10.1.75.1 255.255.255.128
ip helper-address 10.0.127.4
no ip redirects
ip pim sparse-dense-mode
ip cgmp
ipx encapsulation NOVELL-ETHER
ipx network 7500
!
interface FastEthernet0/0.21
description Opelika-Voice
encapsulation dot1Q 21
ip address 10.1.75.129 255.255.255.128
ip helper-address 10.0.127.58
ip helper-address 10.0.127.59
no ip redirects
ip pim sparse-dense-mode
ip cgmp
!
interface Serial0/0
no ip address
service-module t1 timeslots 1-4
!
interface FastEthernet0/1
no ip address
no ip redirects
speed 100
full-duplex
no cdp enable
!
interface FastEthernet0/1.1
description Charter Network Native VLAN
encapsulation dot1Q 400 native
no ip redirects
!
interface FastEthernet0/1.2
description Charter Network Tagged VLAN
encapsulation dot1Q 278
ip address 192.168.28.35 255.255.255.240
no ip redirects
ip authentication mode eigrp 1902 md5
ip authentication key-chain eigrp 1902 Charter-Keys
service-policy output ToS-CoS

Mspivey
CCNP

 

[bythespy]

Here is the config from the tunnel that does not work!!

interface Loopback0
ip address 10.1.254.200 255.255.255.252
ip pim sparse-dense-mode

interface Tunnel10
description Selma Main Office
ip address 10.1.255.201 255.255.255.252
ip authentication mode eigrp 27 md5
ip authentication key-chain eigrp 27 PBTC-Keys
ip pim sparse-dense-mode
backup delay 120 120
backup interface Dialer1
ip summary-address eigrp 27 10.1.254.200 255.255.255.252 5
ip summary-address eigrp 27 10.1.64.0 255.255.255.0 5
ipx network 2764
tunnel source 192.168.28.45
tunnel destination 192.168.28.37

interface FastEthernet0/0
no ip address
speed 100
full-duplex

interface FastEthernet0/0.1
description MarketPlace-Data
encapsulation isl 1
ip address 10.1.64.1 255.255.255.128
ip helper-address 10.0.127.4
no ip redirects
ip pim sparse-dense-mode
ip cgmp
ipx encapsulation NOVELL-ETHER
ipx network 6400

interface FastEthernet0/0.21
description MarketPlace-Voice
encapsulation isl 21
ip address 10.1.64.129 255.255.255.128
ip helper-address 10.0.128.4
no ip redirects
ip pim sparse-dense-mode
ip cgmp

interface Serial0/0
no ip address
shutdown
no fair-queue

interface FastEthernet0/1
no ip address
no ip redirects
duplex auto
speed auto
no cdp enable

interface FastEthernet0/1.1
description Charter Network Native VLAN
encapsulation dot1Q 400 native
no ip redirects

interface FastEthernet0/1.2
description Charter Network Tagged VLAN
encapsulation dot1Q 278
ip address 192.168.28.45 255.255.255.240
no ip redirects
ip authentication mode eigrp 1902 md5
ip authentication key-chain eigrp 1902 Charter-Keys
service-policy output ToS-CoS

Mspivey
CCNP

 

[fmonteiro]

Hi Mspivey,
Your configuration does not looks fine for me. Excuse me if I am wrong.
Every tunnel, including the Tunnel10, have the tunnel source and the tunnel destination in the same subnetwork:
Interface Tunnel10
tunnel source 192.168.28.37 255.255.255.224 -> subnet 192.168.28.32
tunnel destination 192.168.28.45 255.255.255.240 -> subnet 192.168.28.32
Also, note that the mask for the tunnel source is 255.255.255.224.
To tell you the true I am very curious why the other tunnels are working!
Would you double check your configuration?

 

[bythespy]

You are right, thanks. Too many hours looking at too many numbers.

It should be on a /27 mask (.224), the reason they are working on the /28 mask is that I have do not have an IP address in use greater than .46 which is the last host address in the .32 network on the /28 mask.

We designed this solution almost a year ago and I looked ack in my notes and saw where the orginal mask was the /28, but we changed it for growth to the /28. It looks like we did not go back and change it everywhere.

Thanks!!


Mspivey
CCNP

 

[bythespy]

After all that, it looks like it is going to be a VLAN issue in the Service Providers network!@!!!@#@@!!@##.

BTW. only two of the tunnels had the wrong mask and they were the first two we did!


Mspivey
CCNP