Reliability of DMVPN as primary link

Hi,
We are planning to implement DMVPN (phase 3) through internet to connect 100 plus locations (including business critical locations) . These locations are located around the globe including embargoed countries. However , while browsing through various case studies of DMVPN implementation, we understand the solution is used a backup link and not primary link for many of companies. Would like to know from you anyone that if the solution is successful as primary link as well. Kindly advise..
Regards,
Jubair.S

Disclaimer
The Author of this posting offers the information contained within this posting without consideration and with the reader's understanding that there's no implied or expressed suitability or fitness for any purpose. Information provided is for informational purposes only and should not be construed as rendering professional advice of any kind. Usage of this posting's information is solely at reader's own risk.
Liability Disclaimer
In no event shall Author be liable for any damages whatsoever (including, without limitation, damages for loss of use, data or profit) arising out of the use or inability to use the posting's information even if Author has been advised of the possibility of such damage.
Posting
Case studies using DMVPN as a backup, are more due, I believe, to the question of reliability of the "Internet" rather than the DMVPN technology, itself.
I used to work within an international company with offices all over the world. Usually we had a private WAN link and Internet VPN link to each site. Although Internet VPN was "sold" to management as a lower cost backup/secondary, we usually treated the two links equally (as they had about the same bandwidths). I saw very little difference in performance between the two technologies. Regarding reliability, in 1st world countries, reliability was about the same. In 3rd work countries, VPN actually has a slight edge (because if was often newer infrastructure and a primary focus for the country's build outs [i.e. everyone wants Internet access]).

Similar Messages

When Primary link restore back route still learn via CE_HQ instead MPLS

Hi Sir,
Please refer my issue as below and attachment for log captured;
1) When primary link down at CE_Branch_1, it will triggered the ISDN to CE_HQ to communicate.
2) When the primary is up again at CE_Branch_1, the ISDN will be disconnected.
3) At CE_HQ, when show ip route the 10.106.15.0 network still appear in static route instead of OSPF route. Hence, LAN user at CE_Branch_1 will not able to access HQ anymore.
4) When sho ip route vrf COURTS at PEWBRF1, you can notice network 10.106.15.0 is still learned via 202.178.128.70 and not 178.28.0.20.
5) Have tried to manipulate the route-map with set local-preference = 50 and set weight = 0 for network 10.106.15.0 that being redistributed from OSPF into MPBGP at PEWBRF1 still doesnt help. Furthermore, I encounter the route have become RIB-Failure when show ip bgp vpnv4 vrf COURTS.
6) At CE_HQ, there is floating static route being configured to point to CE_Branch_1s LAN, ip route 10.106.15.0 255.255.255.0 128.1.1.15.
7) When show ip bgp vpnv4 vrf COURTS 10.106.15.0 and show ip route vrf COURTS 10.106.15.0 at PEWBRF1 the route 10.106.15.0 still prefer to come from CE_HQ. This is the problem, now the CE_HQ can not reach CE_Branch_1.
Please advise.

Folks, this is typical working when using OSPF. Using OSPF the down bit is set on LSA (not all of them but I dont need to go down that far). Because the router is redistributing the static routes into OSPF the PE router shall receive the routes via the mpls cloud from that redist point. It will then get them back from the original PE-CE but these will never come in. You have GOT to configure sham-links between any area (PE)s that have a backdoor between them. If the ISDN line is using OSPF then what happens is that the routes across the ISDN line appear as "O" routes and the routes from the PE-CE conenction appear as "IA" routes. Hence the ISDN line is the preferred path. Read up on sham-links as they go into the real detail of why this happens. Once you get used to what is happening it all rather makes sense. :-)

DMVPN as Backup link to MPLS

Hi,
i want to implement DMVPN to one of our branch as a fail over link if the MPLS point to point is down.
The MPLS VPN is working fine but due to SP faults we are experiencing frequent link downs.so i want to place a dsl router at branch and configure DMVPN to our existing HUB router.
i am configuring branch router as a spoke to HUB router R3 with rip so when the MPLS which using eigrp goes down , then DMVPN link should be up depending upon AD but, my doubt is if again MPLS link gets up, will it switchover to MPLS from DMVPN.
here is the topology
Here is the configurations for HO,HUB and Branch Routers
******** HO ********
interface Tunnel102
description " Tunnel HO-Br3"
bandwidth 2048
ip address 10.10.0.10 255.255.255.252
tunnel source 172.33.1.18
tunnel destination 172.33.33.18
interface FastEthernet0/0
description "HO-LAN"
ip address 192.168.1.10 255.255.255.0
duplex auto
speed auto
interface FastEthernet0/1
description " Connection MPLS SP"
ip address 172.33.1.18 255.255.255.252
duplex full
speed 100
router eigrp 200
redistribute ospf 10 metric 512 600 100 100 1500
network 10.10.0.8 0.0.0.3
no auto-summary
router ospf 10
log-adjacency-changes
redistribute eigrp 200 subnets
redistribute bgp 65350 subnets
network 192.168.12.0 0.0.0.255 area 0
router bgp 65350
no synchronization
bgp log-neighbor-changes
bgp redistribute-internal
network 10.10.10.0 mask 255.255.255.0
neighbor 172.31.3.17 remote-as 65400
no auto-summary
******** HUB *********
(Router R3 Config)
crypto isakmp policy 10
encr 3des
authentication pre-share
group 2
lifetime 3600
crypto isakmp key welc0me address 0.0.0.0 0.0.0.0
crypto ipsec transform-set strong esp-3des
crypto ipsec profile cisco
set security-association lifetime seconds 7200
set transform-set strong
interface Tunnel10
ip address 172.20.20.1 255.255.255.0
no ip redirects
ip mtu 1400
ip nhrp authentication welc0me
ip nhrp map multicast dynamic
ip nhrp network-id 250
ip tcp adjust-mss 1360
no ip split-horizon
delay 100
tunnel source GigabitEthernet0/1
tunnel mode gre multipoint
tunnel key 100
tunnel protection ipsec profile cisco
interface GigabitEthernet0/1
ip address 74.99.128.25 255.255.255.240
ip flow ingress
ip flow egress
duplex auto
speed auto
router rip
version 2
redistribute ospf 10 metric 5
network 172.20.0.0
no auto-summary
ip route 0.0.0.0 0.0.0.0 74.99.128.17
(Fail over DMVPN with RIP )
crypto isakmp policy 1
encr 3des
authentication pre-share
group 2
lifetime 3600
crypto isakmp key welc0me address 74.99.128.25
crypto ipsec transform-set strong esp-3des
crypto ipsec profile cisco
set security-association lifetime seconds 7200
set transform-set strong
interface Tunnel10
bandwidth 1024
ip address 172.20.20.2 255.255.255.0
no ip redirects
ip mtu 1400
ip nhrp authentication
ip nhrp map multicast 74.99.128.25
ip nhrp map 172.20.20.1 74.99.128.25
ip nhrp network-id 250
ip nhrp holdtime 300
ip nhrp nhs 172.20.20.1
ip nhrp registration no-unique
ip tcp adjust-mss 1360
no ip split-horizon
delay 1000
tunnel source FastEthernet4
tunnel destination 74.99.128.25
tunnel key 100
tunnel protection ipsec profile cisco
interface vlan 1
description " HWIC-DSL Link"
ip addresss dhcp
ip virtual-reassembly in
duplex auto
speed auto
router rip
version 2
network 172.20.0.0
network 192.168.50.0
no auto-summary
ip route 74.99.128.25 255.255.255.255 192.168.1.1
interface Tunnel102
description " Tunnel BR-HO "
bandwidth 2048
ip address 10.10.0.9 255.255.255.252
tunnel source 172.33.33.18
tunnel destination 172.33.1.18
interface FastEthernet0/0
description "BR LAN"
ip address 192.168.50.5 255.255.255.0
duplex auto
speed auto
interface FastEthernet0/1
bandwidth 2048
ip address 172.33.33.18 255.255.255.252
duplex auto
speed auto
router eigrp 200
network 10.10.0.8 0.0.0.3
network 192.168.50.0
no auto-summary
router bgp 65350
no synchronization
bgp log-neighbor-changes
neighbor 172.33.33.17 remote-as 65400
no auto-summary

Hi,
i am running eigrp over MPLS and i want the dmvpn as failover, so configured rip as it's AD is higher and it will be preferred only when the primary is down, but i want to make sure , it switches over to primary as soon as MPLS comes up.
if not DMVPN then canyou please suggest me anyother way to get over it...

Link Redundancy Mpls primary on ethernet & point to point secoundary leaseline on serial

hi i am having one link mpls with internet (primary) (e0/0)-10.1.1.1 and secound link point to point serial (s0/0) i want to do redundancy between two links
but problem is mpls link never shows down . so if mpls fails then my point to point should be up please Find Attach file.
can i get confuration according to my e.g. drawing
as per my knowledge ip sla track command is thier but i dont know exact command.

Hi,
You are right...You should use IP SLA to track the primary link (ISP side IP)....
Try these...
track 125 ip sla 10 reachability
delay down 15 up 10
ip sla 10
icmp-echo 4.2.2.2 (change this with the exact IP) source-interface Dialer1
threshold 40
If it doesn't work, just tewak some parameters..Some the methodilogy remain same..
Good Luck !!!!

DMVPN - improve network performance

Hi All,
We have a dual hub dual dmvpn cloud network running EIGRP or about 50 and 100 sites in the coming future.
I have configured it in a way for 25 spokes to designate hub1 as primary and the other 25 spokes to designate hub2 as its primary link.
To load balance.
I need some help on sugguestion or recommendations on how to improve its network performance.
This is to anticipate queries by customer running systems&apps complaining why is the link too slow after implementing dmvpn
Is there any parameters that can be fine tuned to help increase its performance?
Please advise.
Thanks

Hello, I know this thread is old but it is exactly relevant to what i have now. We have implemented the dual hub dual dmvpn solution over the last year on our remote sites. The head ends are 7200s w/C7200P-ADVSECURITYK9-M, Version 12.4(24)T3 and the remotes are 1700s (slowly being replaced with 1800s) and 1800 series routers. there are about 60 sites, most of them riding over Comcast cable (preferred) or Verizon DSL. Many of our sites have both, where comcast is primary and DSL is secondary, so on these sites there are 4 tunnels. Our connections are getting very slow. For instance, at one site they have paid for 50mb cable connection, which, when plugged directly into the cable modem, reaches those speeds. When going through the tunnel back to our core, where we have mutiple GB ISP connections out to the internet, they are getting 2mb download speeds. Actually, they don't even have to be going out to the internet, just hitting our internal servers in the core is slow for them. We started testing multiple sites and it seems all of them are getting very slow compared to the service they have. In looking at the troubleshooting options available you listed above, I am very curious about making sure none of the devices are oversubscribed. Since we have no spoke to spoke connections I am assuming that this troublshooting should be done on the 7200s. What commands would be good to run to check for oversubscription on the 7200s regarding CPU and crypto accelerator? Also, when you mention QoS, where does this get applied? I am familar with manual QoS config for voice and video, but how does it relate to VPN? Is there anything else i can look at/modify that will help alleviate the slowness of these tunnels? Any help would be greatly appreciated!!
Thank you,
Noel

BRI and Serial link are up at the same time

Hello,
Got a question about BRI interface
Is there any way to disable BRI interface manually when primary link is up?
I had a situation where both BRI and Serial link were up and running
i reset the primary BRI0/1/0 and now BRI sub-interfaces are showing down..but still primary bri int showing up up (spoofing).
what does spoofing means?
RouterA(config-if)#do sh int BRI0/1/0
BRI0/1/0 is up, line protocol is up (spoofing) >>>>>>>>>>>
Hardware is GT96K BRI with U interface (3086)
Description: circuit id 50.ibsd.515307
MTU 1500 bytes, BW 64 Kbit, DLY 20000 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation PPP, loopback not set
Keepalive set (10 sec)
Last input 00:00:28, output never, output hang never
Last clearing of "show interface" counters 6w3d
Input queue: 0/75/115/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: weighted fair
Output queue: 0/1000/64/0 (size/max total/threshold/drops)
Conversations 0/1/16 (active/max active/max total)
Reserved Conversations 0/0 (allocated/max allocated)
Available Bandwidth 48 kilobits/sec
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
296542 packets input, 1320737 bytes, 0 no buffer
Received 0 broadcasts, 0 runts, 0 giants, 0 throttles
115 input errors, 113 CRC, 0 frame, 0 overrun, 0 ignored, 104 abort
329534 packets output, 1582923 bytes, 0 underruns
0 output errors, 0 collisions, 2 interface resets
0 output buffer failures, 0 output buffers swapped out
RouterA(config-if)#do sh ip int brie
Interface IP-Address OK? Method Status Protocol
GigabitEthernet0/0 10.X.160.1 YES NVRAM up up
GigabitEthernet0/1 unassigned YES NVRAM administratively down down
Serial0/0/0 unassigned YES NVRAM up up
Serial0/0/0.1 10.X.252.21 YES NVRAM up up
BRI0/1/0 unassigned YES NVRAM up up
BRI0/1/0:1 unassigned YES unset down down >>> >>>
BRI0/1/0:2 unassigned YES unset down down >>>>>>
Dialer0 unassigned YES IPCP up up
Loopback0 10.X.3.169 YES NVRAM up up
RouterA(config-if)#
Really appreaciate anyone's explanation.
Thanks in advance
SiraJ

To begin with the last question: The status as observed is in fact normal behaviour.
Spoofing is in other words "faked up". An interface that's inactive normally goes down which also causes all routes running over it to be dropped from the routing table. This status was implemented to allow dialers to keep their static routes also when the dialer was inactive. Check with the command "show dialer" to see if there is any undesired calling action.
Use an access-list to allow traffic to activate the dialer.
regards,
Leo

How can i change traffic form one link to other link automatic !!!

I am providing two links to my client, one link has bandwidth 15 Mpbs and other link has 10 Mpbs (through same router but ports are different) via BGP. My client want that if his primary link goes down then his backup link become 25 Mpbs, vice versa.
I have studied Cisco event manger, but want to know that there is any other way to do this task. can it be done by route-map ???
Many thanks in advance !!!

Hi there's a few ways to do this ,your using BGP so you could set the primary link to have a better local preference than the backup link , you can also use a route-map to specify which subnets to allow all traffic or just some subnets or alter 1 of BGPs other attributes as well , you could send them a less preferred(higher) MED for the backup link
or
you could use ip sla with tracking of specific routes across the primary and the use a route-map to set the ip next-hop if the route becomes unavailable and add the verify-availability on it to make sure the link you move too can definitely send traffic across the backup and reach the new verified route
EEM can be difficult to setup i would avoid it for something like this when there are easier options available
If this helps please mark as correct
Mark

How can I create a working link from the home page to other pages?

Using iWeb, I created links on the Home page directed to other pages within my web site. The links are located in the main body of the Home page (on the right side) and are not included in the Navigation Menu. The links function correctly when I test them in iWeb, however, the links do not function at all after publishing to the internet.
Within the inspector, I have chosen, Link To: "One of my pages" and the appropriate page is selected.
The links within the gray rectangles do not function. The same links below the gray rectangle links go to a "Page Not Found" page.
See the home page at http://www.daleenstrom.com
How can I make these links function correctly?

Welcome to the Apple Discussions. I've found that using the "One of my pages" often doesn't work. Since you've published the site go to each page, copy its URL and use it for the hyperlink. I've found that to me more reliable.
Are those two links inside the shapes or just on top? Both of those items are one large image file. If you inserted the link in the shape be sure you've selected the text (might take a few clicks to get inside and select it) to use for the hyperlink. Also make sure there are no other objects overlapping each of the shaped with the hyperlinked text.
Also it appears that the entire text box is an image. Turn on iWeb's preferences to display the text image indicator:
Click to view full size
and then you'll see the following on any object that will be converted to text once published:
Click to view full size
The two links below work for me. Be sure to clear your browsers cache (CommandOptionE for Safari) and reload the page.
OT

Reroute some vrf traffic between 2 sites over redundant link

hey guys,
We have a single client (in vrf) with 2 sites in different states and running over our mpls core.. Our primary link in our core is experiencing degredation of service and want to route this client over our redundant link while keeping all other clients going over our primary link - is this possible?
The client in question has its own vrf (L3VPN) at both sites and is running over mpls between both sites. We want to re-route this particular client to take our backup path, while keeping everyone else between both sites going over the primary. We are not using TE, instead LDP to build MPLS.
I don't believe this is possible to only re-route one client, however I thought I would ask the question.
We cannot failover to secondary link for everyone between both sites because the link doesn't have the capacity.
Thanks in advance.

Hi,
Using MPLS TE would certainly be an option. You would need to setup an MPLS TE LSP over the backup. You would also need to configure a separate lookback interface on each PE and use this loopback interface address as the next hop for the specific VRF
ip vrf X
bgp next-hop loopback 999
ip route 255.255.255.255 Tu1
This way you would make sure that only the traffic for this specific VRF would travel over the TE tunnel.
Regards

Failover of a link

I have a 7204 core router with two uplinks. Initially, the one uplink was a singular uplink via PPPoE so we built our outbound NAT translations on it as well as our VPN sessions.
As of today, we have two links. The second link has much less bandwidth and is only setup as a backup link. What we have setup is as follows:
ip sla monitor 100
type echo protocol ipIcmpEcho <**HOST ON END OF PPPoE LINK**> source-interface Dialer1
timeout 1000
threshold 100
frequency 30
ip sla monitor schedule 100 life forever start-time now
track 100 rtr 100 reachability
interface FastEthernet1/0.110
description Link to BackupLink
encapsulation dot1Q 110
ip address <**STATIC_IP_ISSUED_BY_UPSTREAM**> 255.255.255.0
ip nat outside
ip virtual-reassembly
interface Dialer1
bandwidth 30000
ip address negotiated
ip access-group WAN-InboundACL in
no ip redirects
ip mtu 1492
ip flow ingress
ip flow egress
ip nat outside
ip virtual-reassembly
encapsulation ppp
load-interval 30
dialer pool 1
dialer-group 1
no cdp enable
ppp authentication pap callin
ppp pap sent-username <**PPPoE_USERNAME**> password 7 <**PPPoE_PASSWORD**>
crypto map RemoteAccessVPN
max-reserved-bandwidth 90
service-policy output QoS_Outbound
ip route 0.0.0.0 0.0.0.0 Dialer1 track 100
ip route 0.0.0.0 0.0.0.0 FastEthernet1/0.110 100
ip nat inside source route-map OutboundNatBackup interface FastEthernet1/0.110 overload
ip nat inside source route-map OutboundNat interface Dialer1 overload
ip access-list extended VPN_Selector
remark ACL for VPN
permit ip 192.168.80.0 0.0.3.255 192.168.5.0 0.0.0.255
ip access-list extended OutBoundACL
permit ip 192.168.80.0 0.0.15.255 any
route-map OutboundNatBackup deny 20
match ip address VPN_Selector
route-map OutboundNatBackup permit 990
match ip address OutBoundACL
match interface FastEthernet1/0.110
route-map OutboundNat deny 20
match ip address VPN_Selector
route-map OutboundNat permit 990
match ip address OutBoundACL
As you can see we have the primary link monitored and it will flip the default route if the primary link's monitoring goes down to the far end (I know i can do this with an "event manager applet" however I am looking to just get the simple things working). I am wondering if, since I have the second link, do I need to match on the dialer interface on the old route-map OutboundNAT for each entry? Also, any ideas as to what to do to make the VPNs come up across the new link. I am guessing I setup a second crypto peer on the far end but how do I set this end to only have the VPN up on the primary path unless the primary path is down?

I have a 7204 core router with two uplinks. Initially, the one uplink was a singular uplink via PPPoE so we built our outbound NAT translations on it as well as our VPN sessions.
As of today, we have two links. The second link has much less bandwidth and is only setup as a backup link. What we have setup is as follows:
ip sla monitor 100
type echo protocol ipIcmpEcho <**HOST ON END OF PPPoE LINK**> source-interface Dialer1
timeout 1000
threshold 100
frequency 30
ip sla monitor schedule 100 life forever start-time now
track 100 rtr 100 reachability
interface FastEthernet1/0.110
description Link to BackupLink
encapsulation dot1Q 110
ip address <**STATIC_IP_ISSUED_BY_UPSTREAM**> 255.255.255.0
ip nat outside
ip virtual-reassembly
interface Dialer1
bandwidth 30000
ip address negotiated
ip access-group WAN-InboundACL in
no ip redirects
ip mtu 1492
ip flow ingress
ip flow egress
ip nat outside
ip virtual-reassembly
encapsulation ppp
load-interval 30
dialer pool 1
dialer-group 1
no cdp enable
ppp authentication pap callin
ppp pap sent-username <**PPPoE_USERNAME**> password 7 <**PPPoE_PASSWORD**>
crypto map RemoteAccessVPN
max-reserved-bandwidth 90
service-policy output QoS_Outbound
ip route 0.0.0.0 0.0.0.0 Dialer1 track 100
ip route 0.0.0.0 0.0.0.0 FastEthernet1/0.110 100
ip nat inside source route-map OutboundNatBackup interface FastEthernet1/0.110 overload
ip nat inside source route-map OutboundNat interface Dialer1 overload
ip access-list extended VPN_Selector
remark ACL for VPN
permit ip 192.168.80.0 0.0.3.255 192.168.5.0 0.0.0.255
ip access-list extended OutBoundACL
permit ip 192.168.80.0 0.0.15.255 any
route-map OutboundNatBackup deny 20
match ip address VPN_Selector
route-map OutboundNatBackup permit 990
match ip address OutBoundACL
match interface FastEthernet1/0.110
route-map OutboundNat deny 20
match ip address VPN_Selector
route-map OutboundNat permit 990
match ip address OutBoundACL
As you can see we have the primary link monitored and it will flip the default route if the primary link's monitoring goes down to the far end (I know i can do this with an "event manager applet" however I am looking to just get the simple things working). I am wondering if, since I have the second link, do I need to match on the dialer interface on the old route-map OutboundNAT for each entry? Also, any ideas as to what to do to make the VPNs come up across the new link. I am guessing I setup a second crypto peer on the far end but how do I set this end to only have the VPN up on the primary path unless the primary path is down?

DMVPN High Available

Dear All,
I have a DMVPN scenario, and it works very fine. Now I would like to put a new Hub router, as backup, and between HUB1 and HUB2, I have configured HSRP and the spokes routers connect in the Virtual IP Address.
After this configuration, the vpn goes down.
So I need help to solve this issue in this scenario, DMVPN with primary and secondary HUB.
Best Regards,
CLRGomes

Hello Cassio,
Do you need HSRP on the outside interfaces?
And do you insist to keep them to use this?
What if you try to implement this:
Dynamic Multipoint IPsec VPNs (Using Multipoint GRE/NHRP to Scale IPsec VPNs)
http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml#dualhubsingle
HTH
// Roland

How to implement app. with language link (1 source 2 xlf file)

Dear firends,
I know about translation steps, but It covers two different apps.
I would like to implement one apps with language options?
how do I implement it?
regards
siyavuş
Edited by: sak on Feb 11, 2010 11:10 AM

Hi Mr jianqu,
Because of our customer now has 2 main central offices, and all other sub branches are now connected to each of these main central office via one primary full-meshed MPLS VPN of 1st Service Provider, so If I use the float static routes, and when there is a failure at one link at a CENTRAL CE Router to primary link to primary MPLS VPN Service Provider, but still there is no failure at the other site from a router CE sub branch with the the PE of the primary full-meshed MPLS VPN Layer 3 Service Provider,so It cannot cause a failover to a second redundant link of the 2nd Service Provider?
So with our system, do we only have one solution like this:
-Configure BGP as the routing protocol between the CE and the PE routers.
-Use local preference and Multi Exit Discriminator (MED) when running BGP inside a our customer VPN to select the primary and backup links.
-Use AS-override feature to support overlapping AS numbers between customer sites

Convention for placing links in footer?

What is the convention for placing links in the footer? Should all the primary links be placed there? I have noticed some sites placing all the primary links there and some sites place other links there.
Thanks.

Not saying it doesn't happen but must admit that I've yet to observe an "average" user go for links in the footer.
If the main nav doesn't work, they seem to assume that it's a broken site and hit the Back button and move to the next result on the Google top 10 page.

HT1918 How do I make one of my alternate email addresses my primary address?

How do I make one of my alternate email addresses my primary address? Apple won't let the primary address be the same as one of the alternates and I haven't found a way to delete an alternate address.
Thanks

For some ridiculous reason, Apple won't let you use an existing alternate email address.
You have to first delete the alternate email address you want to use, then edit the primary address and enter the address you want. You'll then have to re-verify the address you just deleted and when it asks you to enter your AppleID, you use the new address.
I'm sure there used to be a 'Make primary' link next to your alternate email addresses. I guess that was too easy.

How many airports can i link in tandem?

No problem with setting up wireless network; everything seamless and coverage is good in core area. however, want to expand coverage. but when i attempt to add another airport (extreme or express) to the network and link the new device in tandem with with an airport extreme that, itself, is already linked to the primary airport extreme at the modem, i run into trouble. airport utility allows me to select the tandem device as the primary link, but hangs after that at "configuring your existing wireless network devices to allow it to be joined". doesnt matter where the tandem device is located or whether it's an express or extreme. All devices are latest generation. So, the question is: is it possible to make more than one tandem link with airport? if so, i'm missing?

I'm not quite sure what you are asking, (maybe a "relay" function?) but perhaps an explanation of how the "extend a wireless network" setup operates will answer it for it you, to let you know what can and cannot be done.
The "extend" setup works like the hub and spokes of a wheel.
Your "main" router is the "hub" and each device that "extends" is located at the end of a "spoke".
You can have multiple spokes, but the device at the end of each spoke communicates directly to the "hub"....not to another device at the end of another "spoke".

Reliability of DMVPN as primary link

Similar Messages

Maybe you are looking for