DMVPN connection not working?

[jaw4322]

Hello

I'm in the process of trying to setup a test for DMVPN. I am using two 2811 routers and believe i have everything setup, but it doesnt seem to be working. I'm in no way an expert. Looking for a little help. I've attached the configs of the Hub and spoke. Appreciate any help you can give.

 

[dgrizzard]

Not sure what isn't working, but here is what jumps out to me...

You dont have a network-id on your spoke tunnel.

You need to set tunnel mode gre multipoint on your spoke tunnel.

This may not be related, but you have a crypto map setup on your WAN interface which shouldn't be necessary, again not sure if that would even create a problem. You also have the tunnel destination set and this shouldn't be necessary either as it will go off of the NHRP MAP command. This is on your spoke tunnel.

 

[jaw4322]

Hello

Thank you for the reply. I made the changes and still not working. One thing i notice now is that when i do a sh dmvpn...i do get status on the spoke, but nothing on the HUB. Spoke shows up/down time as never.

Spoke:
crypto isakmp policy 1
authentication pre-share
crypto isakmp key cisco47 address 0.0.0.0 0.0.0.0
!
!
crypto ipsec transform-set trans2 esp-des esp-md5-hmac
mode transport
!
crypto ipsec profile Labbing
set transform-set trans2
!
!
interface Tunnel1
bandwidth 10000
ip address 192.168.11.2 255.255.255.0
no ip redirects
ip mtu 1400
ip nhrp authentication donttell
ip nhrp map 192.168.11.1 216.X.X.X
ip nhrp map multicast 216.X.X.X
ip nhrp network-id 1
ip nhrp holdtime 450
ip nhrp nhs 192.168.11.1
ip tcp adjust-mss 1360
delay 1000
tunnel source FastEthernet0/0
tunnel mode gre multipoint
tunnel key 100000
tunnel protection ipsec profile Labbing
!
interface FastEthernet0/0
ip address 65.X.X.X 255.255.255.192
duplex auto
speed auto
!
interface FastEthernet0/1
ip address 10.10.10.2 255.255.255.0
duplex auto
speed auto
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 65.X.X.X
no ip http server
no ip http secure-server

spoke#sh dmvpn
Interface: Tunnel1, IPv4 NHRP Details
Type:Spoke, NHRP Peers:1,

# Ent Peer NBMA Addr Peer Tunnel Add State UpDn Tm Attrb
----- --------------- --------------- ----- -------- -----
1 216.X.X.X 192.168.11.1 IPSEC never S


HUB:
crypto isakmp policy 1
authentication pre-share
crypto isakmp key cisco47 address 0.0.0.0 0.0.0.0
!
!
crypto ipsec transform-set trans2 esp-des esp-md5-hmac
mode transport
!
crypto ipsec profile Labbing
set transform-set trans2

interface Tunnel1
bandwidth 100000
ip address 192.168.11.1 255.255.255.0
no ip redirects
ip mtu 1400
ip nhrp authentication donttell
ip nhrp map multicast dynamic
ip nhrp network-id 1
ip nhrp holdtime 450
ip tcp adjust-mss 1360
delay 1000
tunnel source FastEthernet0/0
tunnel mode gre multipoint
tunnel key 100000
tunnel protection ipsec profile Labbing
!
interface FastEthernet0/0
ip address 216.X.X.X 255.255.255.192
duplex auto
speed auto
!
interface FastEthernet0/1
ip address 10.10.11.1 255.255.255.0
duplex auto
speed auto
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 216.X.X.X
no ip http server
no ip http secure-server

sh dmvpn shows nothing.