DMVPN Hub IP address change

I have a 2-Hub DMVPN setup with 10 spokes. One hub in NJ and one in Australia. I am migrating to NJ office to a new ISP and will obviously have an IP address change. What is involved in changing the IP of the NJ router?

Hello
On configuration front, only the following to be done
NJ Router:
tunnel source to be changed to new IP address
IP address of the physical interface towards the IP & Routing
All Spoke Routers: in the tunnel
no Ip nhrp map multicast <old Physical IP at NJ>
no ip nhrp map <NJ tunnel IP> <old Physical IP at NJ>
Ip nhrp map multicast <New Physical IP at NJ>
ip nhrp map <NJ tunnel IP> <New Physical IP at NJ>
From the migration point of view, What I would suggest is start from one of the Spoke router and remove its configuration related to NJ and make sure that it works with Australia Hub, then you can do the migration of NJ router ( All other spokes should fall back to Australia) and Join the previous Spoke to test . If that is successful, you can plan for the migration of the all other spokes
Hope this helps
Harish.

Similar Messages

Strange status of DMVPN HUB

Hi all,
I have 2 DMVPN HUBs and 20 spokes and on one of these have strange status of DMVPN - NHRP (what does it mean? i didn't find explanation what that status is bad or good, is it mean that spoke could'n get NBMA address of HUB through NHRP?). Could anyone explain what does it mean?
#show dmvpn
Interface: Tunnel4, IPv4 NHRP Details
Type:Spoke, NHRP Peers:2,
# Ent Peer NBMA Addr Peer Tunnel Add State UpDn Tm Attrb
1 7.#.#.3 10.5.5.1 UP 1d18h S
1 7.#.#.4 10.5.5.2 NHRP 1d18h S
Spoke's configuration.
interface Tunnel4
bandwidth 15000
ip address 10.5.5.20 255.255.255.0
no ip redirects
ip mtu 1416
ip nhrp map multicast dynamic
ip nhrp map multicast 7.#.#.3
ip nhrp map multicast 7.#.#.4
ip nhrp map 10.5.5.1 7.#.#.3
ip nhrp map 10.5.5.2 7.#.#.4
ip nhrp network-id 101
ip nhrp nhs 10.5.5.1
ip nhrp nhs 10.5.5.2
zone-member security outside
ip tcp adjust-mss 1380
delay 100
keepalive 10 3
tunnel source GigabitEthernet0/2
tunnel mode gre multipoint
tunnel key 111000
tunnel protection ipsec profile dmvpn

Marcin,
thank you again for quick reply)
It very strange because i follow yours tshooting steps and what i got bellow:
1.Spoke can ping NBMA address of two HUBs
2. Every HUB can reach NBMA address of spoke
3. I switch on debuging on spoke and HUBs and I see request packet of NHRP to every HUBs
Debug on spoke:
000332: May 23 10:47:53.408 MSK: NHRP: Attempting to send packet via DEST 10.5.5.1
000333: May 23 10:47:53.408 MSK: NHRP: NHRP successfully resolved 10.5.5.1 to NBMA 7.#.#.3
000334: May 23 10:47:53.408 MSK: NHRP: Encapsulation succeeded. Tunnel IP addr 7.#.#.3
000335: May 23 10:47:53.408 MSK: NHRP: Send Registration Request via Tunnel4 vrf 0, packet size: 92
000336: May 23 10:47:53.408 MSK: src: 10.5.5.20, dst: 10.5.5.1
000337: May 23 10:47:53.408 MSK: NHRP: 120 bytes out Tunnel4
000338: May 23 10:47:53.408 MSK: NHRP: Resetting retransmit due to hold-timer for 10.5.5.1
000339: May 23 10:47:53.408 MSK: NHRP: Attempting to send packet via DEST 10.5.5.2
000340: May 23 10:47:53.408 MSK: NHRP: NHRP successfully resolved 10.5.5.2 to NBMA 7.#.#.4
000341: May 23 10:47:53.408 MSK: NHRP: Encapsulation succeeded. Tunnel IP addr 7.#.#.4
000342: May 23 10:47:53.408 MSK: NHRP: Send Registration Request via Tunnel4 vrf 0, packet size: 92
000343: May 23 10:47:53.408 MSK: src: 10.5.5.20, dst: 10.5.5.2
000344: May 23 10:47:53.408 MSK: NHRP: 120 bytes out Tunnel4
000345: May 23 10:47:53.408 MSK: NHRP: Resetting retransmit due to hold-timer for 10.5.5.2
000346: May 23 10:47:53.412 MSK: %LINEPROTO-5-UPDOWN: Line protocol on Interface Tunnel4, changed state to up
000347: May 23 10:47:53.412 MSK: NHRP: Receive Registration Reply via Tunnel4 vrf 0, packet size: 112
000348: May 23 10:47:53.412 MSK: NHRP: netid_in = 0, to_us = 1
000349: May 23 10:47:53.412 MSK: NHRP: NHS 10.5.5.1 Tunnel4 vrf 0 Cluster 0 Priority 0 Transitioned to 'RE' from 'E'
000350: May 23 10:47:53.412 MSK: NHRP: NHS-UP: 10.5.5.1
000351: May 23 10:47:54.920 MSK: NHRP: Setting retrans delay to 4 for nhs dst 10.5.5.2
000352: May 23 10:47:54.920 MSK: NHRP: Attempting to send packet via DEST 10.5.5.2
000353: May 23 10:47:54.920 MSK: NHRP: NHRP successfully resolved 10.5.5.2 to NBMA 7.#.#.4
000354: May 23 10:47:54.920 MSK: NHRP: Encapsulation succeeded. Tunnel IP addr 7.#.#.4
000355: May 23 10:47:54.920 MSK: NHRP: Send Registration Request via Tunnel4 vrf 0, packet size: 92
000356: May 23 10:47:54.920 MSK: src: 10.5.5.20, dst: 10.5.5.2
and i don't see any logs related of this spoke on second HUB!
So... NHRP packet loss on the way to second HUB,but i can't guess about reason why is happend

IP address changing

I made the mistake of getting BT Infinity when it became available in my area on the 28th May this year.
After many dsconnections an openreach engineer came out in mid July and spent 4 hours checking everything before realising that the initial installation hadnt done correctly in theh cabinet and that they hadnt put the new master socket on.
After more disconnections, most of which are only brief and a few more longer ones I contacted BT again and a second engineer called on the 20th August saying I had complained about a lack of speed. I told him that the speed was fine when it was connected but it dropped the connection sometimes and the main problem was that the IP address frequently changed, even if I hadnt noticed the orange ligh being on the router or it had stoped me surfing the web.
As I wanted to set up a FTP server, as I had done with previous ISPs, for family and friends to share files, I needed a stable IP address and I knew I had a dynamic address but that should stay the same unless I switch off or reboot the router. He checed everythinghe could and eve chnaged the new B home Hub 5 in case that had a fault that wasnt showing and thought that it may be a problem between the BT servers and the exchange as it showed on the schematic that BTs own diagnostic test had identified on the track a fault page as the building housing the server were outlined in red.
Needless to say it is still dropping occassionally and the IP address is constantly changing. I think it did keep the same IP for 48 hours once but usually it will change at least 3 or 4 tmes per day. Between 00.34 and 22.40 yesterday, the 22nd September, it has changed 9 times and had the orange light on the Home Hub 5 at least twice for several minutes, when I could neither send and receive emails or surf the web.
I went to check what was happening on the track a fault page and saw that even though this was an ongoing fault from the initial installation, there were two closed faults even though I was still waiting for BT support to call me back as promised last Saturday afternoon, they did call but hung up on me as soon as I had said "Hello" so I was expectin them to call back or email me.
I then sent a message using the contact us form on the BT site.
I was called this afternoon and was on the phone for the best part of 4 hours either talking to many different people at BT, waiting for them to call back or on hold, explaining over and over again that my main problem apart from the line disconnecting was the frequent changes of the IP address and if they could not provide a stable one that only changed when I switched the router off then I wanted to cancel without any penalties for early termination as there was a fault that BT could not fix.
I was told by one "technical" support guy that the IP can change every 24 hours, which I agreed that if it was set for a 24 hour lease period and I switched the router off and the lease expired before I switched it back on that it would change but that if the router was left on then it should not change while I was using it. Bearing in mind I have had this discussion many times over many months with various BT support personnel I have given them long enough and asked to be trasnferred to someone who could tell me if I could terminate my contract as BT was in breach of their contract to supply me with a stable connection.
He said he was transferring me, after 30 minutes on hold I ended up in the sales department where a very nice chap told me that he would transfer me back to technical again as they needed to put a note on my file saying what they had told me about being unable to provide a stable iP address and to then transfer me to the correct department. On hold again then explain everything agan etc etc then transfer to customer options where I was told I could cancle if I paid over £300 in fees or I could take out a business package to get a static IP.
I was also told that it was in the T and Cs that they did not have to provide me with a stable IP address. I asked him to send me an email with the part that said that and he said he will do that tomorrow and will also call me back tomorrow afternoon.
I have had a look on the T and Cs from a link on this site and using the find next box in internet explorer, there is no mention of IP or address, so I do not know where he will find the part about not having to provide a stable IP address.
I have tried to keep this as short as possible but as I have summarised and condensed 3 months worth of discussions into these few paragrpahs, it does appea to ramble on a bit, sorry.
Can anyone tell me definitively if I am correct in expecting BT to provide me with a connection that doesnt drop more times in just over the 3 months that I have been with them than in the previous 12 years I have had an internet connection with varous ISPs and aslo are they correct in stating that they do no have to provide an IP address that doesnt change even if I do not switch off or reboot the router as I am on a residentia package with a dynamic IP.
Thanks for hopefully taking the time to read through this post and for any help you can give me

Its not essentail that I have a static IP as its for personal use only not for a business but as you have stated it can take a while for the updated IP address to propogate and even if it instantly updated the new IP address I dont think anything would propogate quickly enough to be of any use when the IP can change as often as 9 times in less than 24 hours, as it did yesterday.
All I am asking for is an IP addresss that doesnt change unless I switch the router off or have a power cut. Surley that should be a simple enough thing to arrange.
I can even put up with the temporary connection drops, as long as they only last for a few minutes a few times a week and not as regularly as they are doing at the moment.
Could a mod please merge this thread with the other one in the Infinity section and place them both in the Infinity section as I would like to know if other Infinity users are having frequent I address changes and there is more chance of them seeing this thread and replying to it if it is in that section.
Thank you.

DMVPN: HUB's behind a LoadBalancer and Spoke-Spoke communication

Hallo,
we are planning a scaling DMVPN network for around 2000 spokes.
Is it possible to install the HUB's behind a Load Balancer so that they are reachable only through 1 VIP address and ALSO the possibility of a direkt spoke-spoke communication when needed?
I only found Phase 2 and SLB for HUBs but
without a spoke-spoke communication.
http://www.cisco.com/application/pdf/en/us/guest/products/ps6658/c1161/cdccont_0900aecd80313ca3.pdf
see page 13 there is what we like to have but with the extension of spoke-spoke communication.
regards
Karlheinz

I have been waiting for Cisco to get the spoke-spoke functionality working for this DMVPN HUBs behind load balancer environment. The traditional DMVPN with multiple HUBs does not really scale well, plus it is not very stable routing and NHRP wise.
Would you care to tell more about your solution. As far as I know on a HUB you cannot have one tunnel for spoke to HUB connections and the other just for HUB-HUB, the NHRP requests from the spokes to find out about the other spoke public IP will not be forwarded between the tunnel interfaces on the HUB

DMVPN Hub and Spoke behind NAT device

Hi All,
I have seen many documents stating about DMVPN Hub behind NAT or DMVPN Spoke behind NAT.
But My case i involve in both situation.
1) HUB have a Load Balancer (2 WAN Link) ISP A & B
2) Spoke have Load Balancer (2 WAN Link) ISP A & B
Now the requirement is Spoke ISP A Tunnel to HUB ISP A. Spoke ISP B tunnel to HUB ISP B
So total of two DMVPN tunnel from spoke to hub, and i will use EIGRP and PBR to select path.
As I know at HUB site, LB must do Static NAT for HUB router IP, so spoke will point to it as tunnel destination address. At spoke LB, i will do policy route to reach HUB ISP A IP via Spoke ISP A link, HUB ISP B IP via Spoke ISP B link.
HUB and Spoke have to create 2 tunnel with two different network ID but using same source interface.
The Tunnel destination IP at spoke router is not directly belongs to HUB router. Its hold by HUB LB , and forwarded to HUB router by Static NAT.
Any problem will face with this setup? Any guide?
Sample config at HUB.
interface Tunnel0
bandwidth 1000
ip address 172.16.1.1 255.255.255.0
ip mtu 1440
ip nhrp authentication cisco123
ip nhrp map multicast dynamic
ip nhrp network-id 1
ip nhrp holdtime 600
delay 1000
tunnel source FastEthernet0/0
tunnel mode gre multipoint
tunnel key 0
tunnel protection ipsec profile cisco
interface Tunnel1
bandwidth 1000
ip address 172.17.1.1 255.255.255.0
ip mtu 1440
ip nhrp authentication cisco123
ip nhrp map multicast dynamic
ip nhrp network-id 2
ip nhrp holdtime 600
delay 1000
tunnel source FastEthernet0/0
tunnel mode gre multipoint
tunnel key 1
tunnel protection ipsec profile cisco
Spoke Config
interface Tunnel0
bandwidth 1000
ip address 172.16.1.2 255.255.255.0
ip mtu 1440
ip nhrp authentication cisco123
ip nhrp map 172.16.1.1 199.1.1.1
ip nhrp network-id 1
ip nhrp holdtime 300
ip nhrp nhs 172.16.1.1
delay 1000
tunnel source FastEthernet0/0
tunnel destination 199.1.1.1
tunnel key 0
tunnel protection ipsec profile cisco
interface Tunnel1
bandwidth 1000
ip address 172.17.1.2 255.255.255.0
ip mtu 1440
ip nhrp authentication cisco123
ip nhrp map 172.17.1.1 200.1.1.1
ip nhrp network-id 2
ip nhrp holdtime 300
ip nhrp nhs 172.17.1.1
delay 1500
tunnel source FastEthernet0/0
tunnel destination 200.1.1.1
tunnel key 1
tunnel protection ipsec profile cisco

Hi Marcin,
thanks for your reply. The NAT was set up in a way it was/is just to simulate the spoke to be behind NAT device.
About AH and ESP, you are correct there... this was actually my issue. I should have used pure ESP. At the end, TAC actually assisted me with this. Before I called TAC, i did notice the following. ISAKMP traffic was NATed to 3.3.3.3, as expected. Anything after that, did not work and it has to with NAT and AH. Traffic was no longer NATed so the hub, saw the traffic come from 2.2.2.2 rather than 3.3.3.3, you can also see that in the error message you have pointed out. I also saw it in my packet captures. That caught my eye and i started troubleshooting it. I did not understand that AH can't be NATed, Below is TAC's explanation. All is good now. Thanks
. Essentially, it comes down to the fact that AH will encapsulate the entire IP packet (hence why it is the outermost header) with the exception of a few mutable fields, including the DSCP/ToS, ECN, flags, fragment offset, TTL, and the header checksum. Since the source/destination IP addresses & port numbers are actually protected by the AH integrity checking, this means that a device performing a NAT operation on the packet will alter these IP header fields and effectively cause the hub router to drop the packet due to AH failure.
Conversely, ESP traffic is able to properly traverse NAT because it doesn't include the IP header addresses & ports in its integrity check. In addition, ESP doesn't need to be the outermost header of the packet in order to work, which is why devices will attach an outer UDP/4500 header on the traffic going over NAT."

IPv6 WAN Adresses on DMVPN Hubs and Spokes

Hi,
I have one question about IPv6 and DMVPN. Let's assume we have a DMVPN Hub Site running IPv6 IP addresses on the WAN Interfaces and Spoke Sites running either IPv4 or IPv6 IP adresses on their WAN Interfaces.
In IPv4 only Networks, the Tunnel Konfiguration looked like that:
interface Tunnel 1
<...>
ip nhrp map multicast <IPv4 NMBA>
ip nhrp map 10.0.10.1 <IPv4 NMBA>
There are IPv6 nhrp commands as well, but they can only map an IPv6 Address to an IPv4 NMBA:
interface Tunnel1
<...>
ipv6 nhrp map multicast <IPv4 NMBA>
ipv6 nhrp map <IPv6 Tunnel Adress> <IPv4 NMBA>
I'm wondering how you would configure DMVPN for a network using IPv6 on their WAN Interfaces ??
Best regards,
Thomas

Thomas,
VTI1(config-if)#ip nhrp map 1.2.3.4 ? A.B.C.D IP NBMA address A.B.C.D IP mask of destination X:X:X:X::X IPv6 NBMA address
and
VTI1(config-if)#ipv6 nhrp map 2001:db8::1/128 ? A.B.C.D IPv4 NBMA address X:X:X:X::X IPv6 NBMA address
I _seem_to_remember_ this was added in 15.2T but can't find it back.
M.

Replacing the DMVPN hub router

We are replacing our current 2921 router, Version 15.2(4)M2, with a 3925 Version 15.2(4)M6. It is the DMVPN hub router for 6 spoke routers. We cut and pasted the configuration from the old router to the new. We confirmed internet connectivity from clients on the inside. But none of the DMVPN tunnels will set up. As we were in a very short maintenance window we did not have a lot of time to troubleshoot and had to revert to the old router. Is there some procedure we need to implement to force the tunnels to come up?

Because you are changing the Hardware and copy past the config. Spokes will not re register themselves at HUB until you reset them again. Then they will register themselves again in the NHRP table at the new HUB..

Connected dynamic VPN wan address change

I have a hub and spoke VPN. The spoke is dynamic.
If once the tunnel is established the WAN address changes the router doesn't know to start a new session and the VPN TAKES ages to come up as it still thinks it has an active tunnel.
Any idea how I can reduce the time for the tunnel to re-establish?

Hello Martin,
You got to change the security-association lifetime:
set security-association lifetime #
Give it a try and let us know.
Regards,
Julio

Email address change not showing on ipad after sync

iTunes email address change not showing on ipad after sync

So change it.
Open iTunes, scroll to the bottom of the main page, tap your account name, log out then sign in with the correct name.

HP LaserJet Pro P1606dn ip address change automatic

i have a HP LaserJet Pro P1606dn, there is problem with IP Address, ip address change automatic in this reason i am not able to use the printer, pls solve my problem....

Hi @Naksain,
I see by your post that the printer's IP address changed automatically and you can't use the printer now. I can help you with this.
From the Configuration page, get the printer's IPV4 address, try and access the Embedded Web Server for the printer.
Type the IP address into your web browser's address bar. (Internet Explorer)
Printing a Configuration Page.
If you can still access the printer's Embedded Web Server, then create a new port with the new IPV4 address.
Go to start, devices and printers, right click the printer, go to printer properties, select the ports tab.
Click Add Port, select Standard TCP/IP Port, then select New Port and follow the wizard.
Type in the proper IP address for the printer.
Make sure the printer is online.
Test the printer.
Setup a Static IP address for the printer, this way the printer will keep the assigned port.
Printer Does Not Maintain Wireless Connection.
Disregard the title. Under Windows, go to Solution four: Assign your printer a static IP address.
Just use the IPV4 address already assigned to the printer.
If you need further assistance, just let me know.
Have a nice day!
Thank You.
Please click “Accept as Solution ” if you feel my post solved your issue, it will help others find the solution.
Click the “Kudos Thumbs Up" on the right to say “Thanks” for helping!
Gemini02
I work on behalf of HP

In Blackberry Z 10 "HUB MANAGEMENTS", automatically changes the items that are included in my main View of the Hub Managements.

In Blackberry Z 10 “HUB MANAGEMENTS”, automatically changes the items that are included in my main View of the Hub Managements.
I really don’t know how it happens, “Off or On” thing, without knowing me. When any Email hits to my device and not shows in my “HUB MANAGEMENTS”, at that point of time I come to know, it’s Off again.
Then whole process again, I go in “HUB MANAGEMENTS” and switch it on again and again.
I need Blackberry Z10 OS developers focus on this issue…

I can confirm this behaviour and it defeats the purpose of having a hub.
Could a BBTA confirm that this has been filed or even solved internally?
Olivier - interfaSys ltd
Developing for BlackBerry 10 devices using the Sencha Touch framework.

Not able to access object after server IP address changes

I have an Activatable object that gets registered with the RMIDs registry.
If my servers IP address changes, then when I look up the remote object, I can retrieve it from the registry, but as soon as I make a method call I get an access denied to xx.xx.xx.xx, where xx.xx.xx.xx is the old IP address - and not the new one.
I've tried rebinding the object to the registry after the IP address has changed but with no success.
I've also tried settings -Dnetworkaddress.cache.ttl=0. All my lookups are done by hostname.
Any ideas?
TIA
Ian

If the server changes its IP address all stubs which have already been exported become invalid and must be reacquired. For an Activatable this also means that you must re-register the object as an Activatable as well as rebinding it.

How to deal with dynamic IP address changes

I have installed Fodero C3 and Oracle 10g successfully. Oracle 10g use web OEM console to manage database. However, my internet provider only provided me a dynamic IP address. When I installed Fedora C3, Linux server automatically picked a Hostname like " ip12-345-678-90.dc.dc.cox.net". After I created database, all database files also used this hostname. Then Oracle web OEM console worked fine. Due to the dynamic IP address assigned by ISP, their DHCP server changed the first part of IP address(ip12-345-678-90)frequently to another one. After IP address changed, I couldn't start up web OEM console and listener because they couldn't find correct hostname (IP address). I have talked to my ISP. It seems that it can not be solved. Anyone knows how to deal with this problem through 10g and OEM console themseleves. I also think about to configure Linux server to solve the problem. I really need your help. Thanks in advance

Thank all of you so much to respond my questions. I think I have solved the problem. Since the key point was that Oracle 10g OEM console could not work with the frequent changes of IP address made by my ISP. I just bought a 54G wireless router. Then connecting router to cable modem. The cable modem still gets the dynamic IP from ISP, but the router automatically assigned a static IP address to my Linux system with the range from 192.168.0.0 - 192.168.255.255. This IP was control by my router. It is nothing to do with ISP. So I re-created Oracle database with this new static IP. Then OEM console and listener can startup and connect to database without problem. I do think other guru's methods also will work. I just have no time to try them one by one. Thanks again. Your inputs make me learn many things.

Ship-to address changes on customer master not updating orders

We have recently noticed that ship-to address changes on the customer master made with XD02 no longer show up on existing standard orders. Similar changes to the sold-to addresses do show up but no tthe ship-to addresses. Does anyone know how we can resolve this problem?

hi jeff,
the adresses of a partner is
- with reference to the master-data ( if unchanges in the Order )
- of copied in the order and then changed and saved onlyy for the order.
in the first case, a change of the main data will effect a change in the order.
in the second case, the change of the main data will not change the order, data - they are separate.
you can see this in se16 / table vbpa.
look at the adressnumber.
Adressnumbers of 9++++ are of the 2nd - manual type.
I guess, in the ship to partner, there is done a manual change in the order.
in solt to data normally you don't need such a change. therfor the sold-to partner will get the changes of masterdata -- the ship to partner has manual adress of the orden.
hans

Login to Java Desktop fails after IP address change

If the IP address (or networking type DHCP vs. static address) changes, users can no longer log in to their accounts and use the Java Desktop environment. I can get around this by using the Solaris Management Console from CDE to remove the user(s) without removing their respective home directories, then recreating the users with the respective home dirs. This, however, seems to be an extreme hack to me. Is there a better way? Thanks.

Hi Glenn,
The issue could be caused by unfinished AD replication. It may be intermittent and resolve itself automatically.
For more detailed information, please refer to the thread below:
File Replication and 2008 R2 standard
http://social.technet.microsoft.com/Forums/windowsserver/en-US/583182b6-49e8-4836-970b-a881c2d52773/file-replication-and-2008-r2-standard?forum=winserverfiles
Best Regards,
Mandy
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

DMVPN Hub IP address change

Similar Messages

Maybe you are looking for