dual-hub(?), cluster
設定
tunnel ip addressだけ変えてるだけなので、hub・spokeそれぞれ1台ずつ。
iosv-2#trace 1.1.1.1
Type escape sequence to abort.
Tracing the route to 1.1.1.1
VRF info: (vrf in name/id, vrf out name/id)
1 10.0.0.4 7 msec
10.0.0.10 8 msec
10.0.0.4 8 msec
2 10.0.0.1 13 msec 9 msec *
iosv-2#trace 1.1.1.1
Type escape sequence to abort.
Tracing the route to 1.1.1.1
VRF info: (vrf in name/id, vrf out name/id)
1 10.0.0.1 17 msec 9 msec *
2回目にはSpoke-to-Spokeになっている。
iosv-2#sh dmvpn
Legend: Attrb --> S - Static, D - Dynamic, I - Incomplete
N - NATed, L - Local, X - No Socket
T1 - Route Installed, T2 - Nexthop-override
C - CTS Capable, I2 - Temporary
# Ent --> Number of NHRP entries with same NBMA peer
NHS Status: E --> Expecting Replies, R --> Responding, W --> Waiting
UpDn Time --> Up or Down Time for a Tunnel
======================================================================
Interface: Tunnel0, IPv4 NHRP Details
Type:Spoke, NHRP Peers:2,
Ent Peer NBMA Addr Peer Tunnel Add State UpDn Tm Attrb
1 192.168.1.4 10.0.0.4 UP 00:21:18 S
1 192.168.1.10 10.0.0.10 UP 00:21:18 S
iosv-2#sh ip nhrp nhs
Legend: E=Expecting replies, R=Responding, W=Waiting
Tunnel0:
10.0.0.10 RE priority = 1 cluster = 0
10.0.0.4 RE priority = 2 cluster = 0
iosv-2#sh ip nhrp nhs redundancy
Legend: E=Expecting replies, R=Responding, W=Waiting
No. Interface Cluster NHS Priority Cur-State Cur-Queue Prev-State Prev-Queue
1 Tunnel0 0 10.0.0.4 2 RE Running E Running
2 Tunnel0 0 10.0.0.10 1 RE Running E Running
No. Interface Cluster Status Max-Con Total-NHS Registering/UP Expecting Waiting Fallback
1 Tunnel0 0 Enable 2 2 2 0 0 15
iosv-2#sh ip ro | b Gate
Gateway of last resort is not set
1.0.0.0/32 is subnetted, 1 subnets
O 1.1.1.1 [110/2001] via 10.0.0.10, 00:33:01, Tunnel0
[110/2001] via 10.0.0.4, 00:33:01, Tunnel0
2.0.0.0/32 is subnetted, 1 subnets
C 2.2.2.2 is directly connected, Loopback0
3.0.0.0/32 is subnetted, 1 subnets
O 3.3.3.3 [110/2001] via 10.0.0.10, 00:00:31, Tunnel0
[110/2001] via 10.0.0.4, 00:00:31, Tunnel0
4.0.0.0/32 is subnetted, 1 subnets
O 4.4.4.4 [110/1001] via 10.0.0.4, 00:33:01, Tunnel0
10.0.0.0/8 is variably subnetted, 7 subnets, 2 masks
C 10.0.0.0/24 is directly connected, Tunnel0
O 10.0.0.1/32 [110/2000] via 10.0.0.10, 00:33:01, Tunnel0
[110/2000] via 10.0.0.4, 00:33:01, Tunnel0
L 10.0.0.2/32 is directly connected, Tunnel0
O 10.0.0.3/32 [110/2000] via 10.0.0.10, 00:00:41, Tunnel0
[110/2000] via 10.0.0.4, 00:00:41, Tunnel0
O 10.0.0.4/32 [110/1000] via 10.0.0.4, 00:33:01, Tunnel0
O 10.0.0.10/32 [110/1000] via 10.0.0.10, 00:33:01, Tunnel0
O 10.10.10.10/32 [110/1001] via 10.0.0.10, 00:33:01, Tunnel0
192.168.1.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.1.0/24 is directly connected, GigabitEthernet0/0
L 192.168.1.2/32 is directly connected, GigabitEthernet0/0
clusterをわけるやりかた
iosv-3#sh run | sec Tunnel0
interface Tunnel0
ip address 10.0.0.3 255.255.255.0
[略]
ip nhrp nhs 10.0.0.10 priority 1 cluster 1
ip nhrp nhs 10.0.0.4 priority 2 cluster 2
ip nhrp nhs cluster 1 max-connections 1
ip nhrp nhs cluster 2 max-connections 1
ip nhrp nhs fallback 15
[略]
iosv-3#sh ip nhrp nhs
Legend: E=Expecting replies, R=Responding, W=Waiting
Tunnel0:
10.0.0.10 RE priority = 1 cluster = 1
10.0.0.4 RE priority = 2 cluster = 2
iosv-3#sh ip nhrp nhs redundancy
Legend: E=Expecting replies, R=Responding, W=Waiting
No. Interface Cluster NHS Priority Cur-State Cur-Queue Prev-State Prev-Queue
1 Tunnel0 1 10.0.0.10 1 RE Running E Running
2 Tunnel0 2 10.0.0.4 2 RE Running E Running
No. Interface Cluster Status Max-Con Total-NHS Registering/UP Expecting Waiting Fallback
1 Tunnel0 1 Enable 1 1 1 0 0 15
2 Tunnel0 2 Enable 1 1 1 0 0 15
fallbackについて
[2023-08-01 22:16:10.966]
[2023-08-01 22:16:10.966] iosv-1#
[2023-08-01 22:16:11.169] iosv-1#ping 2.2.2.2 repeat 2000
[2023-08-01 22:16:54.404] Type escape sequence to abort.
[2023-08-01 22:16:54.404] Sending 2000, 100-byte ICMP Echos to 2.2.2.2, timeout is 2 seconds:
[2023-08-01 22:16:54.504] !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
[2023-08-01 22:16:55.210] !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
[2023-08-01 22:16:56.016] !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!............................
[2023-08-01 22:17:56.302] ..............................
[2023-08-01 22:18:57.282] *Aug 1 12:42:52.716: %OSPF-5-ADJCHG: Process 1, Nbr 10.10.10.10 on Tunnel0 from FULL to DOWN, Neighbor Down: Dead timer expired..!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
[2023-08-01 22:19:00.811] !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
[略]
[2023-08-01 22:19:56.912] !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
[2023-08-01 22:19:58.396] Success rate is 97 percent (1940/2000), round-trip min/avg/max = 1/13/107 ms
[2023-08-01 22:19:58.616] iosv-1#
fallback Xの時間で切り替わると思っていたけど、どうやらtunnel I/Fのholdtimeに準拠してそうな感じがする。
iosv-1#sh ip nhrp nhs re
Legend: E=Expecting replies, R=Responding, W=Waiting
No. Interface Cluster NHS Priority Cur-State Cur-Queue Prev-State Prev-Queue
1 Tunnel0 0 10.0.0.4 2 RE Running E Running
2 Tunnel0 0 10.0.0.10 1 E Running RE Running
No. Interface Cluster Status Max-Con Total-NHS Registering/UP Expecting Waiting Fallback
1 Tunnel0 0 Enable 2 2 1 1 0 15
Cur-Stateから10.0.0.10が消えたことがわかる。
ip nhrp holdtime 5にしてみる
[2023-08-01 22:29:12.599] iosv-1#ping 2.2.2.2 repeat 2000
[2023-08-01 22:29:33.552] Type escape sequence to abort.
[2023-08-01 22:29:33.650] Sending 2000, 100-byte ICMP Echos to 2.2.2.2, timeout is 2 seconds:
[2023-08-01 22:29:33.751] !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
[2023-08-01 22:29:34.661] !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
[略]
[2023-08-01 22:30:43.015] !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
[2023-08-01 22:30:44.748] Success rate is 100 percent (2000/2000), round-trip min/avg/max = 1/14/85 ms
[2023-08-01 22:32:25.511] iosv-1#sh ip nhrp nhs re
[2023-08-01 22:32:31.464]
[2023-08-01 22:32:31.464] Legend: E=Expecting replies, R=Responding, W=Waiting
[2023-08-01 22:32:31.464] No. Interface Cluster NHS Priority Cur-State Cur-Queue Prev-State Prev-Queue
[2023-08-01 22:32:31.670] 1 Tunnel0 0 10.0.0.4 2 RE Running E Running
[2023-08-01 22:32:31.764] 2 Tunnel0 0 10.0.0.10 1 RE Running E Running
[2023-08-01 22:32:31.869]
[2023-08-01 22:32:31.869] No. Interface Cluster Status Max-Con Total-NHS Registering/UP Expecting Waiting Fallback
[2023-08-01 22:32:31.965] 1 Tunnel0 0 Enable 2 2 2 0 0 15
[2023-08-01 22:32:32.165]
[2023-08-01 22:32:32.165] iosv-1#ping 10.0.0.10
[2023-08-01 22:32:40.517] Type escape sequence to abort.
[2023-08-01 22:32:40.627] Sending 5, 100-byte ICMP Echos to 10.0.0.10, timeout is 2 seconds:
[2023-08-01 22:32:42.643] .....
[2023-08-01 22:32:50.923] Success rate is 0 percent (0/5)
[2023-08-01 22:32:51.027] iosv-1#trace 2.2.2.2
[2023-08-01 22:33:02.217] Type escape sequence to abort.
[2023-08-01 22:33:02.318] Tracing the route to 2.2.2.2
[2023-08-01 22:33:11.599] VRF info: (vrf in name/id, vrf out name/id)
[2023-08-01 22:33:11.599] 1 10.0.0.4 7 msec 6 msec 8 msec
[2023-08-01 22:33:20.874] 2 10.0.0.2 14 msec 17 msec *
[2023-08-01 22:33:33.274] iosv-1#
まさかの通信断なし。そんなことある?
でもtracerouteしたりsh ip nhrp re見る限りちゃんとiosv-0は消えてるっぽい。