dmvpn 阶段3 ospf 优化不了

ohyesyue

HUB配置了ip nhrp redirect 和spoke 配置了ip nhrp shortcut，分支之间访问还是要通过HUB，没有一跳直达。配置对着教程配的，不知道为啥不行。

spoke1#traceroute 10.3.1.1 source loopback 0 numeric
Type escape sequence to abort.
Tracing the route to 10.3.1.1
VRF info: (vrf in name/id, vrf out name/id)
  1 172.16.1.1 9 msec 8 msec 7 msec
  2 172.16.1.3 10 msec *  10 msec




spoke1# sh ip route
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2
       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
       ia - IS-IS inter area, * - candidate default, U - per-user static route
       o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
       a - application route
       + - replicated route, % - next hop override

Gateway of last resort is 202.100.1.254 to network 0.0.0.0

S*    0.0.0.0/0 [1/0] via 202.100.1.254, Ethernet0/0
      10.0.0.0/8 is variably subnetted, 4 subnets, 2 masks
O        10.1.1.1/32 [110/1001] via 172.16.1.1, 01:29:44, Tunnel0
C        10.2.1.0/24 is directly connected, Loopback0
L        10.2.1.1/32 is directly connected, Loopback0
O        10.3.1.1/32 [110/2001] via 172.16.1.1, 01:29:24, Tunnel0
      172.16.0.0/16 is variably subnetted, 4 subnets, 2 masks
C        172.16.1.0/24 is directly connected, Tunnel0
O        172.16.1.1/32 [110/1000] via 172.16.1.1, 01:29:44, Tunnel0
L        172.16.1.2/32 is directly connected, Tunnel0
O   %    172.16.1.3/32 [110/2000] via 172.16.1.1, 01:29:24, Tunnel0
      202.100.1.0/24 is variably subnetted, 2 subnets, 2 masks
C        202.100.1.0/24 is directly connected, Ethernet0/0
L        202.100.1.1/32 is directly connected, Ethernet0/0


配置文件如下

HUB(config)#do sh run
crypto isakmp policy 10
encr 3des
hash md5
authentication pre-share
group 2
crypto isakmp key cisco address 0.0.0.0        
!
!
crypto ipsec transform-set DMVPN esp-3des esp-md5-hmac
mode transport
!
crypto ipsec profile DMVPN
set transform-set DMVPN
!
!
!
interface Loopback0
ip address 10.1.1.1 255.255.255.0
!
interface Tunnel0
ip address 172.16.1.1 255.255.255.0
no ip redirects
ip mtu 1400
ip nhrp map multicast dynamic
ip nhrp network-id 10
ip nhrp redirect
ip ospf network point-to-multipoint
tunnel source Ethernet0/0
tunnel mode gre multipoint
tunnel key 123
tunnel protection ipsec profile DMVPN
!
interface Ethernet0/0
ip address 61.128.1.1 255.255.255.0
!
router ospf 110
router-id 10.1.1.1
network 10.0.0.0 0.255.255.255 area 0
network 172.16.0.0 0.0.255.255 area 0
!
ip route 0.0.0.0 0.0.0.0 Ethernet0/0 61.128.1.254




spoke1#sh run
!
crypto isakmp policy 10
encr 3des
hash md5
authentication pre-share
group 2
crypto isakmp key cisco address 0.0.0.0        
!
!
crypto ipsec transform-set DMVPN esp-3des esp-md5-hmac
mode transport
!
crypto ipsec profile DMVPN
set transform-set DMVPN
!
interface Loopback0
ip address 10.2.1.1 255.255.255.0
!
interface Tunnel0
ip address 172.16.1.2 255.255.255.0
no ip redirects
ip mtu 1400
ip nhrp map multicast 61.128.1.1
ip nhrp map 172.16.1.1 61.128.1.1
ip nhrp network-id 10
ip nhrp nhs 172.16.1.1
ip nhrp shortcut
ip ospf network point-to-multipoint
tunnel source Ethernet0/0
tunnel mode gre multipoint
tunnel key 123
tunnel protection ipsec profile DMVPN
!
interface Ethernet0/0
ip address 202.100.1.1 255.255.255.0
!
router ospf 110
router-id 10.2.1.1
network 10.0.0.0 0.255.255.255 area 0
network 172.16.0.0 0.0.255.255 area 0
!         
ip route 0.0.0.0 0.0.0.0 Ethernet0/0 202.100.1.254
!
!
end



spoke2#sh run

crypto isakmp policy 10
encr 3des
hash md5
authentication pre-share
group 2
crypto isakmp key cisco address 0.0.0.0        
!
!
crypto ipsec transform-set DMVPN esp-3des esp-md5-hmac
mode transport
!
crypto ipsec profile DMVPN
set transform-set DMVPN
!
!
interface Loopback0
ip address 10.3.1.1 255.255.255.0
!
interface Tunnel0
ip address 172.16.1.3 255.255.255.0
no ip redirects
ip mtu 1400
ip nhrp map multicast 61.128.1.1
ip nhrp map 172.16.1.1 61.128.1.1
ip nhrp network-id 10
ip nhrp nhs 172.16.1.1
ip nhrp shortcut
ip ospf network point-to-multipoint
tunnel source Ethernet0/0
tunnel mode gre multipoint
tunnel key 123
tunnel protection ipsec profile DMVPN
!
interface Ethernet0/0
ip address 137.78.10.1 255.255.255.0
!
!
router ospf 110
router-id 10.3.1.1
network 10.0.0.0 0.255.255.255 area 0
network 172.16.0.0 0.0.255.255 area 0
!         
!

ip route 0.0.0.0 0.0.0.0 Ethernet0/0 137.78.10.254
!
end

falcon2019

进来学习学习