Maƙwabtan EIGRP ba sa hawa a kan murfin DMVPN

Ramin yana sama, spoke ɗaya na iya ping wani, amma EIGRP har yanzu ba ya nuna wani maƙwabci a hub. Wannan haɗin abu ne na al’ada ba asiri ba: ping yana tabbatar da isar unicast ta NHRP, kuma hello na EIGRP multicast ne. A kan murfin DMVPN, tsarin isar da ka’idar tuƙi wani fanni ne na biyu na saiti, kuma shi ne mutane ke tsallakewa saboda fannin farko ya riga ya yi kama da lafiya. Kowace yadi da ke ƙasa ana duba ta da nata umarnin, don haka gazawar yadi ɗaya ba ta mayar da kai saman jerin ba.

Rubuta dangantakar maƙwabta da kake tsammani

Kafin kowace umarnin show, yi ɗan gajeren jeri: wane spoke zai yi peer da wane hub, ta wace fuskar rami, a wace tsarin mulkin kai na EIGRP. Tsare-tsare na hub da yawa suna kasa a cikin giɓin da ke tsakanin hub-bu, kuma jeri yana mai da «EIGRP ya lalace» zuwa «spoke 3 ba ya yin rijista a hub 2». Ka haɗa da rukunin yanar gizo na rami da kake tsammani a kowace hanyar haɗi, domin rashin daidaituwar adireshi tsakanin ƙarshen biyu yana kama da gazawar ka’ida daidai. Rubuta jerin a kan tikit, domin tsarin da ke gaba ya kwatanta da tsari ba da hoton allo na ƙarshe ba.

Duba NHRP, sannan duba hanyar multicast

Fara da yanayin rijista da taswirorin da hub ɗin yake riƙe da gaske. Spoke da ba shi da shigarwar mai motsi a hub bai yi rijista ba, kuma babu ka’idar tuƙi da za ta gyara hakan. Sannan tabbatar spoke ɗin yana karɓar multicast daga adireshin NBMA na hub, wanda wani layi ne dabam da shigarwar NHS.

show dmvpn
show ip nhrp
show ip nhrp nhs detail
interface Tunnel0
 ip nhrp network-id 1
 ip nhrp nhs 203.0.113.1 nbma 198.51.100.1
 ip nhrp map multicast 198.51.100.1
 tunnel mode gre multipoint
 tunnel key 100

Layin ip nhrp map multicast shi ne ke barin spoke ɗin ya aika hello ɗinsa zuwa hub a matsayin multicast da aka maimaita a kan murfin, kuma ke barin multicast na hub ya isa spokun da ya yi rijista. Idan babu shi, unicast ta NHRP yana aiki amma multicast ba ya aiki, kuma wannan rabuwa ce ta musamman da ke sa ping ya yi kama da hujja. Jagorar Cisco IOS XE DMVPN tana bayanin halin multicast na hub da spokun ga kowane mataki, don haka daidaita saitinka da matakin da ka tura da gaske maimakon kwafin wani yanki daga wata topoloji.

Duba manufar fuska ta EIGRP da kanta

Ramin da ba ya cikin tsarin EIGRP, ko kuma passive ne, ba zai taɓa ƙirƙirar dangantakar maƙwabta ba, komai lafiyar murfin. Karanta shigar fuska da teburin maƙwabta tare, domin na farko yana bayanin na biyu.

show ip eigrp interfaces detail Tunnel0
show ip eigrp neighbors detail
show run | section router eigrp
router eigrp 100
 network 10.10.0.0 0.0.0.255
 passive-interface default
 no passive-interface Tunnel0

Tabbatarwa da ma’aunin awo dole su yi daidai a ƙarshen biyu. Sarkar maɓalli da ba ta dace ba, ko rashin daidaituwar ƙimar K, tana zubar da hello ba tare da bayyanannen layin syslog a wurin mai karɓa ba. Idan tsarin yana amfani da maƙwabtan unicast da aka saita a fili, bi wannan tsarin gaba ɗaya maimakon saka shi a kan saitunan multicast har wani abu ya tashi.

Ka raba jigilar GRE da kariyar IPsec

DMVPN yana ɗaukar multicast a cikin GRE, kuma IPsec yana kare fakitin GRE ba multicast na ciki kai tsaye ba. Shi ya sa wannan magana gama gari cewa IPsec ba zai iya ɗaukar multicast ba ta yi kuskure ga wannan tsari kuma ba ta da amfani a matsayin ganewar asali. Duba bayanin IPsec a kan rami, ƙungiyoyin tsaro na kowane peer da yanayin fuskar rami a matsayin gaskiya uku daban-daban.

show crypto ipsec sa peer 198.51.100.1
show interfaces Tunnel0 | include line protocol
show ip nhrp multicast

SA da ke sama kuma masu ƙididdiga suna motsi yayin da EIGRP ya tsaya ƙasa yana mayar da bincikenka zuwa saman tarin: ana kare fakitin kuma ana isar da su, don haka matsalar ita ce waɗanne fakitin ka’idar ke zaɓar aika.

Tabbatar da hanyoyi, ba kawai adadin maƙwabta ba

Da zarar dangantakar maƙwabta ta kafu, karanta abin da take sanar da shi da kuma shigarwa. A kan ramin maki da yawa, split horizon da halin next-hop suna yanke shawara ko spoke zai iya isa wani spoke ta hub, kuma taƙaitawa na iya ɓoye prefix ko da dangantakar maƙwabta ta cika.

Kammala da ingantaccen aikace-aikace tsakanin rukunin yanar gizo biyu kuma tabbatar da hanyar da yake bi. Gajerun hanyoyin spoke-zuwa-spoke kai tsaye buƙatar turawa ce da nata yanayin NHRP da tsaro, kuma ƙara su don adadin maƙwabta ya yi kyau yawanci yana haifar da matsala ta biyu.

Rubuta tsarin mataki-mataki, taswirar multicast da manufar EIGRP a wuri ɗaya. Injiniyan na gaba zai buƙaci tsarin, ba rubutun ba.