Omakhelwane be-EIGRP abakhuphuki ku-DMVPN overlay

I-unicast kuyo yonke i-overlay iyasebenza kodwa ubuxhakaxhaka bezihlobo busahluleka, ngakho hlola ukuphindwa kwe-multicast kwe-NHRP, inqubomgomo ye-EIGRP yethumbu kanye ne-IPsec njengezingqimba ezintathu ezihlukene.

Ithumbu liphezulu, i-spoke eyodwa ingaphinga enye, kodwa i-EIGRP ayikabonisi sibhungane ku-hub. Le nhlanganisela ijwayelekile, ayisimanga: i-ping ikhombisa ukufinyeleleka kwe-unicast nge-NHRP, kanti ama-hello e-EIGRP yi-multicast. Ku-overlay ye-DMVPN imodeli yokulethwa yephrothokholi yomzila iyindawo yesibili yokuhlela, futhi yiyo leyo abantu abayigxumayo ngoba indawo yokuqala isivele ibonakala iphilile. Ingqimba ngayinye ngezansi ihlolwa ngomyalo wayo, ngakho ukwehluleka kwengqimba eyodwa akukubuyiseli phezulu kohlu.

Bhala phansi ubuxhakaxhaka bezihlobo obulindele

Ngaphambi kwanoma yimuphi umyalo we-show, yenza uhlu olufushane: iyiphi i-spoke okufanele i-peer neyiphi i-hub, ngayiphi i-interface yethumbu nakuphi uhlelo oluzimele lwe-EIGRP. Amadizayini anama-hub amaningi ehluleka ezikhaleni phakathi kwama-hub, futhi uhlu lushintsha «i-EIGRP iphukile» kube «i-spoke 3 ayibhalisi ku-hub 2». Faka ama-subnet ethumbu owalindele kuwo wonke umgexo, ngoba ukungafani kwamakheli phakathi kwezahluko ezimbili kubonakala kufana ncamashi nokwehluleka kwephrothokholi. Bhala uhlu etafuleni, ukuze isikhathi esilandelayo siqhathanise nedizayini hhayi nesithombe sesikrini sokugcina.

Hlola i-NHRP, bese hlola indlela ye-multicast

Qala ngesimo sokubhalisa kanye namamephu i-hub ewabambe ngempela. I-spoke engenaso isicelo esishintshayo ku-hub ayibhaliswanga, futhi ayikho iphrothokholi yomzila ezolungisa lokho. Bese uqinisekisa ukuthi i-spoke yamukela i-multicast ekhelini le-NBMA le-hub, okuwumugqa ohlukile kusicelo se-NHS.

show dmvpn
show ip nhrp
show ip nhrp nhs detail
interface Tunnel0
 ip nhrp network-id 1
 ip nhrp nhs 203.0.113.1 nbma 198.51.100.1
 ip nhrp map multicast 198.51.100.1
 tunnel mode gre multipoint
 tunnel key 100

Umgqa ip nhrp map multicast uwona ovumela i-spoke ukuthi ithumele ama-hello ayo ku-hub njenge-multicast ephindwayo phezu kwe-overlay, futhi ovumela i-multicast ye-hub ukuthi ifinyelele kuma-spoke abhalisiwe. Ngaphandle kwawo i-unicast nge-NHRP iyasebenza kanti i-multicast ayisebenzi, futhi ukuhlukaniswa yikho okwenza i-ping ibonakale njengobufakazi. Incwadi ka-Cisco IOS XE DMVPN ibhala ukuziphatha kwe-multicast kwe-hub nama-spoke esigabeni ngasinye, ngakho vumelanisa ukuhlela kwakho nesigaba owusebenzise ngempela esikhundleni sokukopisha ucezu olusuka kwenye i-topology.

Hlola inqubomgomo ye-interface ye-EIGRP uqobo

Ithumbu elingekho enqubweni ye-EIGRP noma eli-passive ngeke lakhe ubuxhakaxhaka bezihlobo, kungakhathaliseki ukuthi i-overlay iphilile kangakanani. Funda ukuhlanganyela kwe-interface kanye nethebula yomakhelwane ndawonye, ngoba okokuqala kuchaza okwesibili.

show ip eigrp interfaces detail Tunnel0
show ip eigrp neighbors detail
show run | section router eigrp
router eigrp 100
 network 10.10.0.0 0.0.0.255
 passive-interface default
 no passive-interface Tunnel0

Ukuqinisekisa kanye nezisindo ze-metric kufanele kuhambisane kuzo zombili izahluko. Ikhethini lokhiye elinesimo esingalungile, noma ukungafani kwenani le-K, kuwisa ama-hello ngaphandle komugqa ocacile we-syslog kumamukeli. Uma idizayini isebenzisa omakhelwane be-unicast abahlelwe ngokucacile, landela leyo modeli ngokuphelele esikhundleni sokuyibeka phezu kwezilungiselelo ze-multicast kuze kube khona okukhuphukayo.

Gcina ukuthwalwa kwe-GRE nokuvikelwa kwe-IPsec kuhlukene

I-DMVPN ithwala i-multicast ngaphakathi kwe-GRE, futhi i-IPsec ivikela amaphakethe e-GRE hhayi i-multicast yangaphakathi ngqo. Yingakho isitatimende esijwayelekile sokuthi i-IPsec ayikwazi ukuthwala i-multicast siyiphutha kule dizayini futhi asilutho njengokuxilonga. Hlola iphrofayela ye-IPsec ethumbwini, izinhlangano zokuphepha ze-peer ngayinye kanye nesimo se-interface yethumbu njengamaqiniso amathathu ahlukene.

show crypto ipsec sa peer 198.51.100.1
show interfaces Tunnel0 | include line protocol
show ip nhrp multicast

I-SA ephezulu enezibali eziyahambayo ngesikhathi i-EIGRP ihlala phansi ibuyisela uphenyo lwakho phezulu esiteki: amaphakethe ayavikelwa futhi ayahanjiswa, ngakho inkinga iwukuthi iyiphi imiphakethe iphrothokholi ekhetha ukuyithumela.

Qinisekisa imizila, hhayi inani lomakhelwane kuphela

Uma ubuxhakaxhaka bezihlobo sekwakhiwe, funda ukuthi kumemezela nokuthi kufaka ini. Ethumbwini elinamaphoyinti amaningi, i-split horizon nokuziphatha kwe-next-hop kunquma ukuthi i-spoke ingafinyelela kwenye i-spoke nge-hub yini, futhi ukufingqa kungafihla i-prefix ngisho lapho ubudlelwano bomakhelwane buphelele.

Qeda ngohlelo oluvunyelwe phakathi kwezindawo ezimbili futhi uqinisekise indlela eluyithathayo. Izinqamuleli eziqondile ze-spoke-kuya-spoke ziyisidingo sokudlulisela esinesimo sayo se-NHRP nokuphepha, futhi ukuzeneza ukuze inani lomakhelwane libonakale lingcono ngokuvamile kudala inkinga yesibili.

Bhala phansi idizayini yesigaba, imephu ye-multicast kanye nenqubomgomo ye-EIGRP endaweni eyodwa. Usonjiniya olandelayo uzodinga idizayini, hhayi umbhalo ogcadlisiwe.

Izihloko ezihlobene