Deriska EIGRP kama soo baxaan dahaarka DMVPN

Tunnel-ku wuu sarreeyaa, hal spoke wuu ping geyn karaa mid kale, EIGRP-na wali ma muujinayo deris hub-ka. Isku-darkaasi waa caadi ma aha si qari ah: ping wuxuu caddeeyaa helitaanka unicast iyada oo loo marayo NHRP, hello-yada EIGRP-na waa multicast. Dahaarka DMVPN, qaabka keenista borotokoolka dariiqa waa dushiisa labaad ee konfigaraashanka, waana tan dadku dhaafaan sababtoo ah dushiisa koowaad horey ayay ugu muuqataa mid caafimaad qaba. Lakab kasta oo hoose waxaa lagu hubiyaa amarkiisa, marka fashilka hal lakab kuma celiyo bogga sare ee liiska.

Qor derisnimada aad filanayso

Ka hor amarka show kasta, samee liis gaaban: spoke kee ayaa la peer noqonaya hub kee, interface-ka tunnel kee, iyo nidaamka madaxbanaan ee EIGRP kee. Nashqadaha hub badan waxay ku fashilmaan bannaanada u dhexeeya hub-yada, liistuna waxay «EIGRP wuu xumaaday» u beddelaa «spoke 3 kama diiwaangashana hub 2». Ku dar subnet-yada tunnel-ka ee aad filanayso xiriir kasta, sababtoo ah isku-dhac la'aanta cinwaannada labada daraf waxay u ekaataa si sax ah fashilka borotokoolka. Ku qor liiska tikit-ka, si shaqada xigta ay ula barbardhigto nashqada ee aanay ula barbardhigin sawirka shaashadda ugu dambeeyay.

Hubi NHRP, ka dibna hubi wadada multicast

Ku bilow xaaladda diiwaangelinta iyo khariidadaha hub-ku runtii haysto. Spoke aan lahayn gelitaan firfircoon hub-ka lama diiwaangelin, borotokool dariiq keliya ma saxayo taas. Ka dibna xaqiiji in spoke-ku uu aqbalo multicast cinwaanka NBMA ee hub-ka, taas oo ah sadar gooni ah oo ka duwan gelitaanka NHS.

show dmvpn
show ip nhrp
show ip nhrp nhs detail
interface Tunnel0
 ip nhrp network-id 1
 ip nhrp nhs 203.0.113.1 nbma 198.51.100.1
 ip nhrp map multicast 198.51.100.1
 tunnel mode gre multipoint
 tunnel key 100

Sadarka ip nhrp map multicast ayaa u ogolaanaya spoke-ka inuu hello-yadiisa u diro hub-ka sida multicast la nuqulay dahaarka, oo u ogolaanaya multicast-ka hub-ka inuu gaaro spoke-yada uu diiwaangeliyay. La'aantiis unicast NHRP ayaa shaqeeya multicast-na maya, waana kala-goyntaas taas oo ping-ka u muujisa sida caddayn. Hagaha Cisco IOS XE DMVPN wuxuu diiwaangelinayaa dabeecadda multicast ee hub-ka iyo spoke-yada weji kasta, marka u waafaji konfigaraashankaaga wejiga aad runtii geynayso halkii aad ka nuquli lahayd qayb ka mid ah topooloji kale.

Hubi siyaasadda interface-ka EIGRP laftiisa

Tunnel aan ku jirin habka EIGRP ama passive ah marnaba ma sameynayo derisnimo, si kasta oo dahaarku caafimaad qabo. Akhri ka-qaybgalka interface-ka iyo shaxda deriska wada, sababtoo ah tan koowaad ayaa sharraxaysa tan labaad.

show ip eigrp interfaces detail Tunnel0
show ip eigrp neighbors detail
show run | section router eigrp
router eigrp 100
 network 10.10.0.0 0.0.0.255
 passive-interface default
 no passive-interface Tunnel0

Xaqiijinta iyo miisaanka mitirka waa in ay ku beegmaadaan labada daraf. Silsilad fure oo qaab khaldan, ama isku-dhac qiimaha K, waxay tuftaa hello-yada iyada oo aan lahayn sadar syslog cad oo qaataha agtiisa ah. Haddii nashqadu isticmaasho derisyo unicast si cad loo habeeyay, si buuxda u raac qaabkaas halkii aad ku kor dhejin lahayd dejinta multicast ilaa wax soo baxo.

Kala sooc gaadiidka GRE iyo ilaalinta IPsec

DMVPN waxay multicast ku qaaddaa gudaha GRE, IPsec-na wuxuu ilaaliyaa baakadaha GRE ee aan toos u ahayn multicast-ka gudaha. Taas ayaa ah sababta sheegashada guud ee ah in IPsec uusan qaadi karin multicast ay khalad u tahay nashqadan oo aan faa'iido lahayn sida ogaanshaha cudurka. Hubi borofaylka IPsec ee tunnel-ka, ururada amniga ee peer kasta iyo xaaladda interface-ka tunnel-ka sida saddex xaqiiqo oo gooni ah.

show crypto ipsec sa peer 198.51.100.1
show interfaces Tunnel0 | include line protocol
show ip nhrp multicast

SA kor taagan oo tirakoobkiisu dhaqaaqayo halka EIGRP hoos u sii jiro wuxuu baaritaankaada dib ugu celiyaa xagga sare ee stack-ka: baakadaha waa la ilaalinayaa oo la gaarsiinayaa, marka dhibaatadu waa baakadaha ay borotokoolku doorato inuu diro.

Xaqiiji waddooyinka, ma aha kaliya tirada deriska

Marka derisnimadu samaysmo, akhri waxa ay ku dhawaaqayso oo ay rakibayso. Tunnel dhibco badan leh, split horizon iyo dabeecadda next-hop ayaa go'aamisa in spoke-ku uu hub-ka uga gaari karo spoke kale, soo-koobidna waxay qarin kartaa prefix xitaa marka xiriirka deriska uu qumman yahay.

Ku dhammee codsi la ogolaaday oo u dhexeeya laba goobood oo xaqiiji wadada uu qaato. Dariiqooyinka tooska ah ee spoke-ka-ilaa-spoke waa shuruud gudbin oo leh xaalad NHRP iyo ammaan u gaar ah, ku daristoodana si tirada deriska ugu ekaato mid wanaagsan ayaa caadi ahaan abuura dhibaato labaad.

Diiwaangeli nashqada wejiga, khariidadda multicast iyo siyaasadda EIGRP hal meel. Injineerka xiga wuxuu u baahan doonaa nashqada, ma aha nuqulka.