Multiple DMVPNs within separate VRF's using crypto keyring

Hi All,
I have deployed ASR's within a service provider environment acting as the DMVPN hubs for multiple customers networks contained within their own VRFs.
In each case from the tunnel perspective the iVRF and fVRF are the same for a specific customer and crypto key rings are used to associate pre-shared-keys.
When the box was first deployed a test network was built without using keyrings, but still using the VRF's as shown in the snippet. However I cannot get the configuration to work using keyrings, hence cannot add additional customers. It would appear that IKE phase 2 is not completing.
An initial bug scrub has come up clear so I'm guessing i must be missing something.
Current firmware: Cisco IOS Software, IOS-XE Software (PPC_LINUX_IOSD-ADVENTERPRISEK9-M), Version 15.0(1)S)
-- snippet of test configuration --
crypto keyring CUST1 vrf CUST1
  pre-shared-key address 10.10.10.0 255.255.255.0 key **CRYPTOKEY_CUST1**
crypto isakmp profile CUST1_PROFILE
   vrf CUST1
   keyring CUST1
   match identity address 0.0.0.0
crypto ipsec transform-set CUST1 esp-aes 256 esp-sha-hmac
mode transport
interface Tunnel1
bandwidth 1000
ip vrf forwarding CUST1
ip address 10.10.10.1 255.255.255.0
no ip redirects
ip nhrp authentication CUST1
ip nhrp map multicast dynamic
ip nhrp network-id 10101010
ip nhrp holdtime 450
ip nhrp registration no-unique
no ip split-horizon
delay 1000
tunnel source GigabitEthernet0/0/0.1010
tunnel mode gre multipoint
tunnel key 1010
tunnel vrf CUST1
tunnel protection ipsec profile CUST1_PROFILE shared
Any help would be great.
Best regards
Mick

Config wise, you do not need "vrf CUST1" inside the profile, GRE will do handoff for you.
Hard to say where the problem is without more debugs ;-)
M.

Similar Messages

  • HT1206 Lots of info about one user using multiple computers. What about multiple users with separate Apple IDs using same computer? Having problems getting my wifes new iPhone talking to her apple account on the computer we share (2 users)

    Lots of info about one user using multiple computers. What about multiple users with separate Apple IDs using same computer? Having problems getting my wifes new iPhone talking to her apple account on the computer we share (2 users)

    You need to create a user account for your wife (or yourself depending on who has the current user account). When syncing, each of you should sign in as a separate user, login to iTunes and then sync. I had this problem when my sister got an iPhone. When we did her initial sync, everything on my iPhone showed up on hers. Apple gave me this solution.

  • Configuring multiple dmvpn on single cisco router using sdm or ccp.

    Hello Expert,
    Is there any plans in near future by cisco to allow the configuration of multiple DMVPN tunnel on single router using SDM or Cisco Configuration Professional ?
    Regards
    Jomo               

    I would recommend the best method is CLI to configure something as complicated as DMVPN.

  • I am getting a error IO when trying to upload multiple images within wordpress using the flash uploader. I do not get the error when uploading using explorer. The error only appears if I try uploading using firefox....any ideas?

    I am getting a error IO when trying to upload multiple images within wordpress using the flash uploader. I do not get the error when uploading using explorer. The error only appears if I try uploading using firefox....any ideas?

    Logged the call with SAP who directed me to 'Define settings for attachments' in IMG and setting the 'Deactivate Java Applet' & 'Deactivate Attachment versioning' checkboxes - problem solved.

  • When I copy and paste from one source material to another  within adobe reader, all the words are in one sentence. I have to take extra time to separate  the words using the space bar. Can this be fix?

    When I copy and paste from one source material to another  within adobe reader, all the words are in one sentence. I have to take extra time to separate  the words using the space bar. Can this be fix?

    Hi Bernie,
    Are you trying to copy and paste from a pdf to another pdf?
    Regards,
    Rave

  • Multiple DMVPN Instances on Same WAN Interface

    Hi Folks,
    Is it possible to run Multiple DMVPN Instances on a single WAN Interface ? Can we for example configure 3 Tunnels on a Router using one same WAN Interface but running separate EIGRP Instances for each Tunnel ? Kindly let me know , Alioune

    Hi Alioune,
    Yes you can create DMVPN as you said with one WAN interface that is possible..... you can have multiple tunnel interfaces pointed to a WAN interface as the source interface which resides in public zone..... with different public ip's as the destination tunnel...
    interface Tunnel1
    description ** A-VPN Tunnel **
    bandwidth 100000
    ip vrf forwarding red
    ip address 10.0.252.2 255.255.255.252
    no ip redirects
    no ip unreachables
    no ip proxy-arp
    ip mtu 1500
    load-interval 60
    tunnel source GigabitEthernet0/0 (WAN Interface)
    tunnel destination  1.1.1.1
    tunnel protection ipsec profile dmvpn
    interface Tunnel1
    description ** B-VPN Tunnel **
    bandwidth 100000
    ip vrf forwarding red
    ip address 10.0.252.5 255.255.255.252
    no ip redirects
    no ip unreachables
    no ip proxy-arp
    ip mtu 1500
    load-interval 60
    tunnel source GigabitEthernet0/0 (WAN Interface)
    tunnel destination  2.1.1.1
    tunnel protection ipsec profile dmvpn
    like the above..... shown sample...
    Please rate if the given information helps!!!

  • Join multiple tables across separate databases

    I needed to perform a join on multiple tables in two separate databases. I am using Sybase ASE 12.5 and jConnect 5.5 JDBC driver.
    Table A is in DB1 and Table B is in DB2. Both DB1 and DB2 reside on the same database server.
    I have set up JNDI bound datasources DS1 for DB1 and DS2 for DB2.
    If the queries involved single tables or multiple tables within the same database, it is simple. But I am not seeing any way where I can perform a join between Tables A and B, which reside in separate databases. The datasources DS1 and DS2 are associated with DB1 and DB2 respectively, so I am not sure if there is anything like performing joins using two data sources.
    One alternative I am facing is using a stored procedure in one database refer the table in the other database, for the join. But I may not be allowed to modify the database; currently, I am allowed to perform READ-ONLY queries.
    So I am looking for any and all options. Please advice.
    Thanks!

    Two choices..
    One find the syntax in DB2 that allows you to do what you want in there. That would often be somelike...
    select a.myfield
    from database1.table1 a, database2.table2 b
    where a.id = b.id
    Obviously the database itself must support this. If it doesn't then you have choice two.
    You extract the data from database1 using java for table1.
    You extract the data from database2 using java for table2.
    You write java code that merges the data from both sources.

  • Is there a way to create an email button to multiple addresses within a PDF?

    I have to regularly update a list of committee members and their email addresses which is then sent to all of the members. 
    Does anyone know if there a way of creating a button for each of the committees in the list which, when clicked, creates an email to all the  members contained within that committee?  I will need to add up to 14 email addresses to the one button. I need to know this because the various members in the committees are  fed up of copying and pasting all the email addresses into their email messages.
    I am now using Acrobat XI but I still can't figure out if this is even possible. If not a button, is there some other way of being able to launch an email to multiple addresses within a PDF?
    Thanks in advance for any help.

    Not really. But you can combine the data from multiple forms into a single (new) spreadsheet via Tools - Forms - More Form Options - Merge Data Files into Spreadsheet...

  • Can I have multiple iPhones with unique back ups using one icloud account?

    Hello forum users,
    Can I have multiple iPhones with unique back ups using one icloud account?
    I would like to back up and restore 4 different iPhones, 1 iPad, a MacBook and 1 MacBook Pro using the same single iCloud account.
    If so, how is this done?
    Many thanks

    Sharing an iCloud account between two devices can be done without causing issues with iMessage and FaceTime, just go into Settings for each of these functions and designate separate points of contact (i.e. phone number only, or phone number and unique email address).  While that works, you'll then face the problem where a phone call to one iPhone will ring both if on the same Wi-Fi network -- but again, that can be avoided by changing each phone's settings.
    Rather than do all that, don't fight it -- use separate IDs for iCloud.  You can still use a common ID for iTunes purchases (the ID for purchases and iCloud do not have to be the same) or you can use Family Sharing to share purchases from a primary Apple account.

  • HT2542 Can we have two separate itunes accounts using the same mac?

    I am wanting to download music to my Thunderbolt smart phone (i know, no iphone yet, next upgrade) and I want to use itunes to do it. My partner has an itunes account and I thought I opened my own itunes account, but apparently I didn't. I don't like the same music and only want to download music I like to my phone. Can we just have one account and be able to download checked music from the itunes to multiple devices?

    I'm confused
    Can we have two separate itunes accounts using the same mac?
    Can we just have one account and be able to download checked music from the itunes to multiple devices?
    Do you want one or two?
    By the way, and iTunes account is really the thing you use online to purchase music, not what you have on a computer.  You have user accounts on a computer, and you have iTunes libraries or collections of media.  You can have multiple user accounts on a computer.  You can have a single or multiple user accounts use a single or multiple libraries.  We need to know exactly what it is you have/want.

  • Can we share music/apps within a family while using different iTunes accounts?

    Can we share music/apps within a family while using different iTunes accounts?
    Recently purchased iPhone 5 for my wife and I + my daugther has an iPod.  I'd like for us all to have separate iTunes accounts so we can each use iCloud without getting each other's notifications, but would like to have one central repository for mucsic and apps.  I'm afraid if I set up iTunes accoutn for the tow of them, I'll have to re-purchase the music and apps (way too many!)

    It can be done, but you will have to sign in to your account on her itunes to updated the apps. Try these instructions:
    http://support.apple.com/kb/HT1848

  • Process multiple documents in zip file without using ccBPM in PI

    Hi,
    Is it possible for PI to handle multiple documents within a zipped source file without the use of ccBPM?
    For example, I have an incoming source zip file containing 0.pdf, a,xml, z.pdf respectively,  After having the sender communication channel uncompress the zip file, each pdf file should be pushed to a directory on a file server, and the xml file should go through a message mapping.
    Is this possible to process all of the files without the use of ccBPM?
    Regards,
    Jim

    Hi Michal,
    Thank you for your response.  The example I provided is just one potential case.  In general, the zip file will always contain 1 xml file and 0-n PDFs, Word docs, or other types of documents.  Also, the first file in the zip may not always be the xml file, which is what I was trying to portray by my example.  Since I am not sure how many non-xml files will be included, I did not know if I could handle all of them directly, without ccBPM.
    At this point, I am leaning towards using a script preprocessor to uncompress the zip, then for each file found, push the xml file to an NFS channel which will process/map the xml, and push every other file type to another NFS channel to copy these documents to a predetermined directory on a predetermined server.
    What are your thoughts on this approach?
    Thanks and Regards,
    Jim

  • Add a watermark to multiple files within a PDF Portfolio in Acrobat X Pro?

    Can I add a watermark to multiple files within a PDF Portfolio in Acrobat X Pro? If so, how?  It appears as though it is a removed option.

    I've figured this out. (kind of) not using PDF Portfolio; where you could apply watermark to multiple files in Acrobat 9.
    I'm answering my own question in case there are others looking to add a watermark to multiple files.
    Step 1: Open a single file
    Step 2: Tools>Pages>Watermark>Add Watermark
    Step 3: In bottom of Watermark Edit Box, Select "Apply to Multiple"
    Step 4: Select "Add Files
    etc etc.

  • How do I created multiple folders within folders in "Photo"

    How do I created multiple folders within folders (subfolders) in "Photo".  It happens in the first level when I use the Albums folder, but thereafter it doesn't allow me to create another folder within the folder.  I can also not drag a folder into another, after the first level of folders.  Please help.

    Yes you can.  Click once on the top folder and use the File ➙ Create Folder menu option.  A new folder will be created inside the selected folder:

  • Multiple forms in multiple windows within application

    hi,
    our user wants to be able to open more than one form in multiple windows within the application and have them within the application window at the same time. we are planning to use open_form instead of call_form to do this. however open_form does not let me specify the query mode, so i guess will have to do that manually? what does Oracle recommend as a best practice for applications - to support mutliple windows or not? if yes, as call_form or open_form?
    thanks.

    Yes using open form you will have to manually (in code) switch into Query Mode.
    We recommend Open Form over call form as it is more memory efficient, of course there are situations when the behaviour of Call Form is useful but generally I'd encorage the use of open.

Maybe you are looking for

  • Macbook Pro + DVI to HDMI cable + HDTV = only 1080i?

    Hi all, I connected my MBP to my TV via a DVI to HDMI conversion cable ($24 from Fry's), but the highest resolution I am getting is 1080i (confirmed on the computer, and the system readout on the TV). Are there other settings that I missed (in the co

  • Reformat help!

    Hi, i desperately need help over here! something is wrong with my library files. anyway, i decided to reformat my mac. before i go ahead, i have a few qn i must clarify. 1. will reformatting my mac delete away my bootcamp partition (windows xp profes

  • Difficulty in querying a form

    hii all i have a form on which i have a customer_name field it is a non database field i am getting the value of the customer_name field from customer id . but the customer _id field is not on the form i want to query the form based on the customer n

  • How to salvage an iPhone 5 backup?

    I backed up my iPhone 5 on iTunes before going to get my phone replaced at my nearby Apple Store. However, upon my return, when I try restoring the backup onto the new phone, I get an error message after a few minutes saying the file is either corrup

  • PO based invoice

    Hi gurus When we receive a discount for early payment, we can only take it on the base invoice amount.  Taxes still apply on the full amount. This is the case of the non-po (exception) invoices. However, on PO invoices the discount is currently calcu