dual-hub(?), cluster


設定

tunnel ip addressだけ変えてるだけなので、hub・spokeそれぞれ1台ずつ。

iosv-2#trace 1.1.1.1
Type escape sequence to abort.
Tracing the route to 1.1.1.1
VRF info: (vrf in name/id, vrf out name/id)
1 10.0.0.4 7 msec
10.0.0.10 8 msec
10.0.0.4 8 msec
2 10.0.0.1 13 msec 9 msec *
iosv-2#trace 1.1.1.1
Type escape sequence to abort.
Tracing the route to 1.1.1.1
VRF info: (vrf in name/id, vrf out name/id)
1 10.0.0.1 17 msec 9 msec * 

2回目にはSpoke-to-Spokeになっている。

iosv-2#sh dmvpn
Legend: Attrb --> S - Static, D - Dynamic, I - Incomplete
N - NATed, L - Local, X - No Socket
T1 - Route Installed, T2 - Nexthop-override
C - CTS Capable, I2 - Temporary
# Ent --> Number of NHRP entries with same NBMA peer
NHS Status: E --> Expecting Replies, R --> Responding, W --> Waiting
UpDn Time --> Up or Down Time for a Tunnel
======================================================================

Interface: Tunnel0, IPv4 NHRP Details
Type:Spoke, NHRP Peers:2, 

Ent  Peer NBMA Addr Peer Tunnel Add State  UpDn Tm Attrb

 1 192.168.1.4            10.0.0.4    UP 00:21:18     S
 1 192.168.1.10          10.0.0.10    UP 00:21:18     S
iosv-2#sh ip nhrp nhs
Legend: E=Expecting replies, R=Responding, W=Waiting
Tunnel0:
10.0.0.10  RE priority = 1 cluster = 0
10.0.0.4  RE priority = 2 cluster = 0
iosv-2#sh ip nhrp nhs redundancy

Legend: E=Expecting replies, R=Responding, W=Waiting
No.  Interface  Cluster             NHS Priority  Cur-State  Cur-Queue Prev-State Prev-Queue
1    Tunnel0        0        10.0.0.4        2         RE    Running          E    Running
2    Tunnel0        0       10.0.0.10        1         RE    Running          E    Running

No.  Interface  Cluster   Status  Max-Con  Total-NHS Registering/UP  Expecting  Waiting Fallback
1    Tunnel0        0   Enable        2          2              2          0        0       15
iosv-2#sh ip ro | b Gate
Gateway of last resort is not set

      1.0.0.0/32 is subnetted, 1 subnets
O        1.1.1.1 [110/2001] via 10.0.0.10, 00:33:01, Tunnel0
                 [110/2001] via 10.0.0.4, 00:33:01, Tunnel0
      2.0.0.0/32 is subnetted, 1 subnets
C        2.2.2.2 is directly connected, Loopback0
      3.0.0.0/32 is subnetted, 1 subnets
O        3.3.3.3 [110/2001] via 10.0.0.10, 00:00:31, Tunnel0
                 [110/2001] via 10.0.0.4, 00:00:31, Tunnel0
      4.0.0.0/32 is subnetted, 1 subnets
O        4.4.4.4 [110/1001] via 10.0.0.4, 00:33:01, Tunnel0
      10.0.0.0/8 is variably subnetted, 7 subnets, 2 masks
C        10.0.0.0/24 is directly connected, Tunnel0
O        10.0.0.1/32 [110/2000] via 10.0.0.10, 00:33:01, Tunnel0
                     [110/2000] via 10.0.0.4, 00:33:01, Tunnel0
L        10.0.0.2/32 is directly connected, Tunnel0
O        10.0.0.3/32 [110/2000] via 10.0.0.10, 00:00:41, Tunnel0
                     [110/2000] via 10.0.0.4, 00:00:41, Tunnel0
O        10.0.0.4/32 [110/1000] via 10.0.0.4, 00:33:01, Tunnel0
O        10.0.0.10/32 [110/1000] via 10.0.0.10, 00:33:01, Tunnel0
O        10.10.10.10/32 [110/1001] via 10.0.0.10, 00:33:01, Tunnel0
      192.168.1.0/24 is variably subnetted, 2 subnets, 2 masks
C        192.168.1.0/24 is directly connected, GigabitEthernet0/0
L        192.168.1.2/32 is directly connected, GigabitEthernet0/0

clusterをわけるやりかた

iosv-3#sh run | sec Tunnel0
interface Tunnel0
ip address 10.0.0.3 255.255.255.0
[略]
ip nhrp nhs 10.0.0.10 priority 1 cluster 1
ip nhrp nhs 10.0.0.4 priority 2 cluster 2
ip nhrp nhs cluster 1 max-connections 1
ip nhrp nhs cluster 2 max-connections 1
ip nhrp nhs fallback 15
[略]
iosv-3#sh ip nhrp nhs
Legend: E=Expecting replies, R=Responding, W=Waiting
Tunnel0:
10.0.0.10  RE priority = 1 cluster = 1
10.0.0.4  RE priority = 2 cluster = 2

iosv-3#sh ip nhrp nhs redundancy

Legend: E=Expecting replies, R=Responding, W=Waiting
No.  Interface  Cluster             NHS Priority  Cur-State  Cur-Queue Prev-State Prev-Queue
  1    Tunnel0        1       10.0.0.10        1         RE    Running          E    Running
  2    Tunnel0        2        10.0.0.4        2         RE    Running          E    Running

No.  Interface  Cluster   Status  Max-Con  Total-NHS Registering/UP  Expecting  Waiting Fallback
  1    Tunnel0        1   Enable        1          1              1          0        0       15
  2    Tunnel0        2   Enable        1          1              1          0        0       15

fallbackについて

[2023-08-01 22:16:10.966]
[2023-08-01 22:16:10.966] iosv-1#
[2023-08-01 22:16:11.169] iosv-1#ping 2.2.2.2 repeat 2000
[2023-08-01 22:16:54.404] Type escape sequence to abort.
[2023-08-01 22:16:54.404] Sending 2000, 100-byte ICMP Echos to 2.2.2.2, timeout is 2 seconds:
[2023-08-01 22:16:54.504] !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
[2023-08-01 22:16:55.210] !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
[2023-08-01 22:16:56.016] !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!............................
[2023-08-01 22:17:56.302] ..............................
[2023-08-01 22:18:57.282] *Aug  1 12:42:52.716: %OSPF-5-ADJCHG: Process 1, Nbr 10.10.10.10 on Tunnel0 from FULL to DOWN, Neighbor Down: Dead timer expired..!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
[2023-08-01 22:19:00.811] !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
[]
[2023-08-01 22:19:56.912] !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
[2023-08-01 22:19:58.396] Success rate is 97 percent (1940/2000), round-trip min/avg/max = 1/13/107 ms
[2023-08-01 22:19:58.616] iosv-1#

fallback Xの時間で切り替わると思っていたけど、どうやらtunnel I/Fのholdtimeに準拠してそうな感じがする。

iosv-1#sh ip nhrp nhs re   

Legend: E=Expecting replies, R=Responding, W=Waiting
No.  Interface  Cluster             NHS Priority  Cur-State  Cur-Queue Prev-State Prev-Queue
1    Tunnel0        0        10.0.0.4        2         RE    Running          E    Running
2    Tunnel0        0       10.0.0.10        1          E    Running         RE    Running

No.  Interface  Cluster   Status  Max-Con  Total-NHS Registering/UP  Expecting  Waiting Fallback
1    Tunnel0        0   Enable        2          2              1          1        0       15

Cur-Stateから10.0.0.10が消えたことがわかる。

ip nhrp holdtime 5にしてみる

[2023-08-01 22:29:12.599] iosv-1#ping 2.2.2.2 repeat 2000
[2023-08-01 22:29:33.552] Type escape sequence to abort.
[2023-08-01 22:29:33.650] Sending 2000, 100-byte ICMP Echos to 2.2.2.2, timeout is 2 seconds:
[2023-08-01 22:29:33.751] !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
[2023-08-01 22:29:34.661] !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
[]
[2023-08-01 22:30:43.015] !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
[2023-08-01 22:30:44.748] Success rate is 100 percent (2000/2000), round-trip min/avg/max = 1/14/85 ms

[2023-08-01 22:32:25.511] iosv-1#sh ip nhrp nhs re
[2023-08-01 22:32:31.464]
[2023-08-01 22:32:31.464] Legend:	E=Expecting replies, R=Responding, W=Waiting
[2023-08-01 22:32:31.464] No.  Interface  Cluster             NHS Priority  Cur-State  Cur-Queue Prev-State Prev-Queue
[2023-08-01 22:32:31.670]   1    Tunnel0        0        10.0.0.4        2         RE    Running          E    Running
[2023-08-01 22:32:31.764]   2    Tunnel0        0       10.0.0.10        1         RE    Running          E    Running
[2023-08-01 22:32:31.869]
[2023-08-01 22:32:31.869] No.  Interface  Cluster   Status  Max-Con  Total-NHS Registering/UP  Expecting  Waiting Fallback
[2023-08-01 22:32:31.965]   1    Tunnel0        0   Enable        2          2              2          0        0       15
[2023-08-01 22:32:32.165]
[2023-08-01 22:32:32.165] iosv-1#ping 10.0.0.10
[2023-08-01 22:32:40.517] Type escape sequence to abort.
[2023-08-01 22:32:40.627] Sending 5, 100-byte ICMP Echos to 10.0.0.10, timeout is 2 seconds:
[2023-08-01 22:32:42.643] .....
[2023-08-01 22:32:50.923] Success rate is 0 percent (0/5)
[2023-08-01 22:32:51.027] iosv-1#trace 2.2.2.2
[2023-08-01 22:33:02.217] Type escape sequence to abort.
[2023-08-01 22:33:02.318] Tracing the route to 2.2.2.2
[2023-08-01 22:33:11.599] VRF info: (vrf in name/id, vrf out name/id)
[2023-08-01 22:33:11.599]   1 10.0.0.4 7 msec 6 msec 8 msec
[2023-08-01 22:33:20.874]   2 10.0.0.2 14 msec 17 msec *
[2023-08-01 22:33:33.274] iosv-1#

まさかの通信断なし。そんなことある?
でもtracerouteしたりsh ip nhrp re見る限りちゃんとiosv-0は消えてるっぽい。

この記事が気に入ったらサポートをしてみませんか?