1 00:00:02,216 --> 00:00:08,831 [music] 2 00:00:08,832 --> 00:00:12,558 Okay the next tunnels we're going to look at are DMVPN. 3 00:00:12,559 --> 00:00:18,261 These are probably the more common, more modern way of doing this, 4 00:00:18,261 --> 00:00:23,698 the transport IPv6 over an IPv4 only network. 5 00:00:23,698 --> 00:00:28,601 The advantage of this is of course the D means dynamic the M means 6 00:00:28,602 --> 00:00:33,476 multipoint. So we already have the dynamic and the multipoint part 7 00:00:33,477 --> 00:00:39,869 in here. Now, we just got done looking at two other dynamic multipoint 8 00:00:39,869 --> 00:00:41,599 methods of doing this. 9 00:00:41,600 --> 00:00:46,419 So what makes DMVPN so much better? 10 00:00:46,420 --> 00:00:50,257 First off it's a lot easier to do security with it. 11 00:00:50,258 --> 00:00:57,280 The other piece is you're going to see the hub doesn't need a whole 12 00:00:57,281 --> 00:00:58,453 lot of config. 13 00:00:58,454 --> 00:01:00,915 In fact it's actually the simplest part of this, 14 00:01:00,915 --> 00:01:06,551 and then all the spokes get almost identical configs. 15 00:01:06,552 --> 00:01:12,288 So that's really the big advantage to this whole thing, 16 00:01:12,289 --> 00:01:19,219 is that you have very, very simple config and it does everything 17 00:01:19,219 --> 00:01:22,725 you need it to do, our dynamic routing protocols can run over it, 18 00:01:22,726 --> 00:01:24,536 no problem at all. 19 00:01:24,537 --> 00:01:27,337 So that's what we're going to do. 20 00:01:27,337 --> 00:01:31,737 We're going to jump in. We're going to set this up. It's actually really easy to do. 21 00:01:31,737 --> 00:01:38,506 So once again, we'll be using our same VPN topology but this time, 22 00:01:38,507 --> 00:01:42,550 we're going to be focusing on just all the customer A sites. 23 00:01:42,550 --> 00:01:47,373 So we're going to be doing Switch 1, Switch 2, 24 00:01:47,374 --> 00:01:49,218 and Router 6 here. 25 00:01:49,219 --> 00:01:53,106 That way, we can actually have multipoint tunnels. 26 00:01:53,107 --> 00:01:59,432 We will use Router 1 as our hub, and we will use Routers 4 and 5 27 00:01:59,433 --> 00:02:03,361 as our spoke routers with the networks behind them. 28 00:02:03,361 --> 00:02:08,344 So let's again jump over the command line here and I'm already on 29 00:02:08,345 --> 00:02:12,039 Router 1 as the hub, so here we go, and this is where again, 30 00:02:12,039 --> 00:02:13,331 it's really nice. 31 00:02:13,331 --> 00:02:16,328 Actually before we get too far into this, 32 00:02:16,328 --> 00:02:20,626 we've been doing EIGRP this whole time on our previous lessons. 33 00:02:20,627 --> 00:02:25,374 So I decided it would be a good time to switch to OSPF. 34 00:02:25,374 --> 00:02:29,155 So that being the case, we do actually need to fire that up here 35 00:02:29,156 --> 00:02:32,993 real quick. So let's go over-- we'll start with the client devices, 36 00:02:32,994 --> 00:02:35,535 we'll start at Switch 1, and we'll say, 37 00:02:35,536 --> 00:02:40,680 interface loopback0 ipv6 ospf 1 area 0, 38 00:02:45,488 --> 00:02:53,073 loopback1 in area 0 and interface fa0/0.71. 39 00:02:53,074 --> 00:03:00,549 There's the switch, interface vlan 71 in area 0. 40 00:03:00,550 --> 00:03:07,399 Switch 2, same basic thing, interface loopback0 ipv6 ospf 1 area 41 00:03:07,400 --> 00:03:10,033 0. And this is of course legacy OSPF config. 42 00:03:10,033 --> 00:03:15,020 We'll be doing fancier stuff in MPLS in our next lesson. 43 00:03:15,020 --> 00:03:21,488 So interface loopback1 in area 0, and interface VLAN. 44 00:03:21,488 --> 00:03:26,582 And this one up here is 84 in area 0. 45 00:03:27,848 --> 00:03:35,844 And then Router 6 interface loopback0 ipv6 ospf 1 area 0, 46 00:03:35,845 --> 00:03:42,772 interface loopback1 area 0, interface g0/0. 47 00:03:42,772 --> 00:03:48,346 and that's 65 in area 0. 48 00:03:49,915 --> 00:03:57,145 Okay. That should pretty much take care of those. 49 00:03:57,146 --> 00:04:06,508 Let's go to Router 1 now, and interface FA00.71 IPv6 OSPF 1 area 0. 50 00:04:06,509 --> 00:04:10,235 So we fire up OSPF with the client router, 51 00:04:11,311 --> 00:04:14,097 same on Router 4. 52 00:04:15,433 --> 00:04:29,837 Interface FA0/0.84 neighbor ship and Router 5. 53 00:04:37,385 --> 00:04:42,438 So that takes care of OSPF running on the outer edges, 54 00:04:42,438 --> 00:04:44,473 now we could get to our tunnel. 55 00:04:44,474 --> 00:04:51,740 So Router 1 interface tunnel 0 and there's two things we need to 56 00:04:51,741 --> 00:04:52,820 do right off the bat. 57 00:04:52,820 --> 00:04:58,229 First off IPv6 OSPF 1 area 0 before we forget and it's not going 58 00:04:58,230 --> 00:05:00,469 to let me, okay so we can't do that first. 59 00:05:00,470 --> 00:05:03,290 Fine. Let's go ahead and set this up normal, 60 00:05:03,291 --> 00:05:09,107 then. So IPv6 address FE80::1 link-local, 61 00:05:09,108 --> 00:05:22,907 and IPv6 address 2001:db8:100:200::1/64. 62 00:05:31,120 --> 00:05:35,077 We're just sort of using 200 for our tunnel interface here. 63 00:05:36,700 --> 00:05:51,194 Now we can say IPv6 OSPF 1 area 0, and IPv6 OSPF network type point-to-multipoint. 64 00:05:51,195 --> 00:05:54,739 Because it's the hub, so it's definitely going to have to either 65 00:05:54,739 --> 00:05:59,104 be point-to-multipoint or broadcast. 66 00:05:59,104 --> 00:06:06,243 We'll start to point to multipoint, this is essentially doing either 67 00:06:06,243 --> 00:06:11,866 phase one or phase two for DMVPN and then we'll move this whole thing 68 00:06:11,867 --> 00:06:13,150 over here in a minute. 69 00:06:13,151 --> 00:06:17,345 But we'll at least just do phase two, we'll turn it over to broadcast 70 00:06:17,345 --> 00:06:19,891 should only take about a moment. 71 00:06:19,892 --> 00:06:25,428 So that's what we need for the IPv6 basic config. 72 00:06:25,428 --> 00:06:29,663 Don't forget we also need a tunnel source and that's going to be 73 00:06:29,664 --> 00:06:33,159 on Router 1, that's going to be FA0/0.12. 74 00:06:35,050 --> 00:06:38,046 We could use a loop back too it doesn't really matter. 75 00:06:38,047 --> 00:06:43,892 Then we need a tunnel mode. 76 00:06:45,169 --> 00:06:48,960 Is GRE my multipoint. 77 00:06:56,897 --> 00:07:01,802 So tunnel mode GRE multipoint is what we typed in. 78 00:07:01,803 --> 00:07:06,704 Now we need a couple NHRP commands. 79 00:07:06,704 --> 00:07:09,847 NHRP is Next Hop Redundancy Protocol. 80 00:07:09,847 --> 00:07:15,065 It's what DMVPN uses to build the dynamic mappings on how to get 81 00:07:15,066 --> 00:07:16,956 to remote sites. 82 00:07:16,956 --> 00:07:20,757 We're not going to get a whole bunch into DMVPN this is again, 83 00:07:20,758 --> 00:07:26,886 just about changes from IPv4 to IPv6 so I'm not going to get into 84 00:07:26,887 --> 00:07:27,944 a whole bunch here. 85 00:07:27,945 --> 00:07:32,463 Probably the best way to think of NHRP if you're not real familiar 86 00:07:32,463 --> 00:07:41,129 with DMVPN is it's like ARP but instead of ARP which does Layer 3 87 00:07:41,129 --> 00:07:45,592 to Layer 2 lookup, this is Layer 3 to Layer 3. 88 00:07:45,593 --> 00:07:51,627 I want to get to this private address through what public address? 89 00:07:51,628 --> 00:07:53,415 So, that's what we need to do. 90 00:07:53,415 --> 00:07:57,447 Now, the hub though is very, very simple because it doesn't get that 91 00:07:57,447 --> 00:08:04,990 information. It just gets IPv6 , NHRP map, 92 00:08:04,991 --> 00:08:08,494 for multicast, learn it dynamics. 93 00:08:08,494 --> 00:08:11,071 That's so we can run routing protocols over it, 94 00:08:11,071 --> 00:08:17,327 and then IPv6, NHRP, network ID and give it a number. 95 00:08:17,327 --> 00:08:19,785 It doesn't really matter - network ID 1 - we're not trying to run 96 00:08:19,786 --> 00:08:23,995 multiple networks over this same tunnel interface, 97 00:08:23,995 --> 00:08:25,541 so that's fine. 98 00:08:25,541 --> 00:08:30,606 And at the end of this whole thing, guess what? 99 00:08:30,607 --> 00:08:32,653 That's the config. 100 00:08:32,654 --> 00:08:35,896 Do show run interface tunnel 0. 101 00:08:35,896 --> 00:08:39,108 That's it. That's what we have. 102 00:08:41,837 --> 00:08:44,289 And we did turn on OSPF, correct? 103 00:08:44,290 --> 00:08:45,552 Yes we did, okay. 104 00:08:45,552 --> 00:08:57,897 So let's go over to Router 4 and interface tunnel 0 IPv6 address 105 00:08:59,579 --> 00:09:05,612 FE80:: four link local. 106 00:09:13,719 --> 00:09:15,671 So, give him an address. 107 00:09:16,782 --> 00:09:24,141 Of course, IPv6 RSPF1 area 0 for consistency, 108 00:09:24,142 --> 00:09:26,538 and so we don't have to change timers and stuff. 109 00:09:26,539 --> 00:09:32,466 We will change his network type to point to multipoint as well. 110 00:09:33,475 --> 00:09:38,124 And then there's the stuff that makes the spokes a little bit 111 00:09:38,124 --> 00:09:39,460 different from the hub. 112 00:09:39,460 --> 00:09:42,672 Now, I've put in the stuff that's the same first, 113 00:09:42,673 --> 00:09:46,622 so first off, tunnel source FA0/0. 114 00:09:46,622 --> 00:09:50,165 and in this case it's 34. 115 00:09:52,456 --> 00:09:58,854 And tunnel mode GRE multipoint. 116 00:10:00,941 --> 00:10:10,312 And IPv6 NHRP network ID 1. 117 00:10:10,313 --> 00:10:12,074 So those things are the same. 118 00:10:12,075 --> 00:10:14,363 Those are things we had put in on the other side, 119 00:10:14,363 --> 00:10:16,034 and they're going to be the same on this side, 120 00:10:16,035 --> 00:10:19,679 the side of course in the tunnel source may be different. 121 00:10:19,679 --> 00:10:24,229 Now, the next things are things that we're going to need on the 122 00:10:24,229 --> 00:10:26,910 spokes, but not on the hub. 123 00:10:26,911 --> 00:10:33,604 So the first one is IPv6 NHRP map multicast. 124 00:10:33,604 --> 00:10:38,605 And all this part we had on the hub, but the hub said dynamic. 125 00:10:38,606 --> 00:10:41,412 Actually you know what, I'm sorry. 126 00:10:41,413 --> 00:10:46,144 Before we do multicast we should really map the address of the hub 127 00:10:46,145 --> 00:10:52,113 first. 2001 DB8:100:200::1. 128 00:10:52,114 --> 00:11:03,422 So that IPv6 address/64 is available through what's his IPv4 129 00:11:03,422 --> 00:11:14,246 address. You can go back to the diagram if you need to but it's 173.1.12.1. 130 00:11:14,246 --> 00:11:23,834 So I'm telling him that you can get to his address on the cloud through 131 00:11:23,835 --> 00:11:26,034 that next hub. 132 00:11:26,035 --> 00:11:29,387 This is also where we're going to map our multicast. 133 00:11:29,387 --> 00:11:40,120 So IPv6 NHRP map multicast to 173.1.12.1. 134 00:11:42,859 --> 00:11:56,000 Last but not least IPv6 NHRP next hop server end point into that 135 00:11:56,001 --> 00:12:03,284 guy. Oops, not with the mask. 136 00:12:08,521 --> 00:12:16,068 OSPF just came up over the tunnel which is always a really good sign. 137 00:12:16,069 --> 00:12:24,408 Do show run interface tunnel 0. 138 00:12:24,408 --> 00:12:26,599 So there's the spoke configuration. 139 00:12:30,213 --> 00:12:36,863 Here's the beautiful part about the spoke configuration is we can 140 00:12:36,863 --> 00:12:48,264 grab this, we can copy this put it in your favorite note editor and 141 00:12:48,264 --> 00:12:50,273 then just tweak it a little bit. 142 00:12:50,274 --> 00:12:53,623 So let's see this is going to go on Router 5 next. 143 00:12:53,624 --> 00:12:57,720 So his link local is going to be 5, oops not 51. 144 00:12:57,721 --> 00:12:59,970 Area 51 is a whole different thing. 145 00:13:01,147 --> 00:13:06,635 Five but guess what, that's the same, that's the same, 146 00:13:06,635 --> 00:13:09,038 that's the same, that's the same, that's the same, 147 00:13:09,039 --> 00:13:14,449 this is going to be different because it's actually 35. 148 00:13:15,922 --> 00:13:26,519 That's it. Copy it, switch back to your command line make sure you 149 00:13:26,520 --> 00:13:27,979 go to the right router. 150 00:13:31,825 --> 00:13:34,812 I want to make sure I have that interface right. 151 00:13:34,812 --> 00:13:38,105 I said 35 I'm pretty sure that's right, 152 00:13:38,106 --> 00:13:41,320 yeah it is. Okay, and paste. 153 00:13:43,460 --> 00:13:47,092 Didn't really need an end on that but that's okay. 154 00:13:47,093 --> 00:13:51,860 OSPF already came up, already a good sign. 155 00:13:51,861 --> 00:13:57,468 Now what this means is we should be able to go to say Switch 1 156 00:13:57,469 --> 00:14:09,032 and say, Do trace 2001 DB8:100:8::8 good. 157 00:14:09,032 --> 00:14:14,659 Also somebody we haven't hit yet 6::6 Router 6. 158 00:14:14,660 --> 00:14:22,182 You can see right here it went to 1 and then 4 and here it went 159 00:14:22,183 --> 00:14:24,631 from 1 and then 5. 160 00:14:26,012 --> 00:14:32,349 So just like that DMVPN is done and up and good to go. 161 00:14:34,194 --> 00:14:41,524 If you go to router-- let's see we're on Switch 1. 162 00:14:41,525 --> 00:15:01,472 So let's go to switch two and say do trace 2001 DB8:100:6::6 that 163 00:15:01,473 --> 00:15:04,460 should go through Router 1, so it goes to 4, 164 00:15:04,460 --> 00:15:07,049 to 1, to 5, to 6. 165 00:15:07,050 --> 00:15:11,231 Fine. Trace it a couple of times, it'll do the same thing. 166 00:15:13,057 --> 00:15:17,724 This is what's referred to as DMVPN Phase 1. 167 00:15:17,725 --> 00:15:26,084 Phase 1 essentially says that all traffic has to go through the hub. 168 00:15:26,084 --> 00:15:31,838 So I'm learning all the routes, but the next hop for all the routes, 169 00:15:31,838 --> 00:15:36,215 if I go to-- this is of course, not taking place on Switch 2, 170 00:15:36,215 --> 00:15:38,133 it's taking place on Router 4. 171 00:15:38,133 --> 00:15:44,736 If I go to Router 4 and I say, do show IPv6 route OSPF, 172 00:15:44,737 --> 00:15:50,507 all of his next hops, all point to the link-local address of Router 173 00:15:50,507 --> 00:15:53,866 1. I mean, everything is not on this side, 174 00:15:53,866 --> 00:15:55,878 of course. Stuff on this side is, of course, 175 00:15:55,879 --> 00:15:57,760 pointing to Switch 2. 176 00:15:57,761 --> 00:16:03,967 But everything else including 5's address. 177 00:16:03,967 --> 00:16:08,237 So you know Router 5's address on the tunnel, 178 00:16:08,238 --> 00:16:12,942 Router 6 is loopback, all goes to Router 1, 179 00:16:12,943 --> 00:16:16,255 so that's essentially Phase 1. 180 00:16:16,256 --> 00:16:19,813 Now with Phase 1, I technically wouldn't have to get all these routes, 181 00:16:19,813 --> 00:16:21,144 I could summarize. 182 00:16:21,145 --> 00:16:24,907 But we're not going down the whole big DMVPN discussion here. 183 00:16:24,907 --> 00:16:30,169 But what I can do, just to show you that it works fine for IPv6, 184 00:16:30,169 --> 00:16:34,014 is I could go to Router 1 and I could say, 185 00:16:34,015 --> 00:16:40,110 ipv6 ospf network broadcast. 186 00:16:42,430 --> 00:16:53,943 And then on 4, I'm on the interface, ipv6 ospf network broadcast 187 00:16:53,943 --> 00:17:04,159 and ip ospf priority 0, so we cannot become the DR or the BDR. 188 00:17:04,160 --> 00:17:10,430 Router 5, and I'm not under the tunnel. 189 00:17:28,183 --> 00:17:32,496 Okay. Give t:58.840000 Stuff on this side is, of course, pointing to switch to, but everything 0:15:58.840000 --> 0:16:04.140000 else, including, you know, five's address. 0:16:04.140000 --> 0:16:08.480000 So, you know, router five's address on the, on the tunnel. 0:16:08.480000 --> 0:16:10.840000 Router six is loop back. 0:16:10.840000 --> 0:16:13.240000 All goes to router one. 0:16:13.240000 --> 0:16:16.080000 So that's essentially phase one. 0:16:16.080000 --> 0:16:19.340000 Now with phase one, I technically wouldn't have to get all these routes. 0:16:19.340000 --> 0:16:24.020000 I could summarize, but we're not going down a whole big DMVPN discussion 0:16:24.020000 --> 0:16:30.220000 here. But what I can do, just to show you that it works fine for IPV six, 0:16:30.220000 --> 0:16:40.240000 is I can go to router one and I could say IPV six OSPF network broadcast. 0:16:40.240000 --> 0:16:44.360000 And then on four. 0:16:44.360000 --> 0:16:47.160000 I'm going to interface. 0:16:47.160000 --> 0:17:01.500000 IPV six OSPF network broadcast and IPOSPF priority zero so we cannot become 0:17:01.500000 --> 0:17:27.920000 the B.R. or the B.D.R. 0:17:27.920000 --> 0:17:32.640000 Okay. Give this just a second and it should stabilize. 0:17:32.640000 --> 0:17:44.320000 Right now they're in two way. 0:17:44.320000 --> 0:17:46.280000 And it's got to wait for things to time out and stuff. 0:17:46.280000 --> 0:17:50.340000 It might actually be faster. 0:17:50.340000 --> 0:17:51.720000 Give it a second here. 0:17:51.720000 --> 0:17:54.280000 You might have to bounce the tunnel interfaces. 0:17:54.280000 --> 0:18:08.020000 I'm just going to do it. 0:18:08.020000 --> 0:18:11.220000 This is usually faster. 0:18:11.220000 --> 0:18:28.920000 And you're going to do this always bring the hub up first. 0:18:28.920000 --> 0:18:48.540000 Now this OSPF neighborhood should come up. 0:18:48.540000 --> 0:18:50.020000 Probably in the wait state. 0:18:50.020000 --> 0:18:51.600000 You have to wait 40 seconds. 0:18:51.600000 --> 0:18:56.160000 Do show IP OSPF interface brief. 0:18:56.160000 --> 0:19:01.240000 I'm looking at IP. 0:19:01.240000 --> 0:19:03.740000 I'm sitting there going like those aren't the right interfaces. 0:19:03.740000 --> 0:19:06.420000 That's much better. 0:19:06.420000 --> 0:19:12.840000 Okay. So he's the drother, which is good. 0:19:12.840000 --> 0:19:17.360000 And then five. No shut. 0:19:17.360000 --> 0:19:23.080000 It's already done before I came to command. 0:19:23.080000 --> 0:19:26.320000 Okay. So OSPF is up and running now. 0:19:26.320000 --> 0:19:30.180000 So now let's go back to our switch to do our trace again. 0:19:30.180000 --> 0:19:34.840000 That's looking spectacular. 0:19:34.840000 --> 0:19:38.440000 There we go. Okay. 0:19:38.440000 --> 0:19:43.600000 So again, four to one to five to eight, just like we had before. 0:19:43.600000 --> 0:19:48.180000 Four, one, five to six. 0:19:48.180000 --> 0:19:49.520000 Eight to milliseconds. 0:19:49.520000 --> 0:19:51.200000 I'm like, what is eight? 0:19:51.200000 --> 0:19:52.880000 Okay. All right. 0:19:52.880000 --> 0:19:54.940000 So four, one, five, eight. 0:19:54.940000 --> 0:20:01.500000 Four, one, five, six. 0:20:01.500000 --> 0:20:06.640000 Okay. Let's go to router three. 0:20:06.640000 --> 0:20:09.840000 Yeah. I'm out of four, sorry. 0:20:09.840000 --> 0:20:13.540000 Do show IPV six. 0:20:13.540000 --> 0:20:22.440000 NHRP. And what you can see here. 0:20:22.440000 --> 0:20:25.100000 So he's got that entry. 0:20:25.100000 --> 0:20:35.160000 He's got the 200. 0:20:35.160000 --> 0:20:38.320000 Is it a little bit interesting there? 0:20:38.320000 --> 0:20:54.380000 So that's going through one and into five. 0:20:54.380000 --> 0:21:02.160000 And then one and into five is not switching over. 0:21:02.160000 --> 0:21:05.240000 All the traffic is going through the hub still. 0:21:05.240000 --> 0:21:10.660000 Do show IPV six route OSPF. 0:21:10.660000 --> 0:21:17.080000 So he has the right next hops now. 0:21:17.080000 --> 0:21:27.480000 But for some reason it's not switching. 0:21:27.480000 --> 0:21:28.200000 It's interesting. 0:21:28.200000 --> 0:21:33.500000 Take a look at router one here. 0:21:33.500000 --> 0:21:43.020000 Make sure everything worked okay. 0:21:43.020000 --> 0:21:45.420000 And by the way, this is how you look at the cache, right? 0:21:45.420000 --> 0:21:50.400000 So what this is basically telling you is, okay, so here's this host. 0:21:50.400000 --> 0:21:55.020000 Okay. We're getting to him through that guy through this IPV four address 0:21:55.020000 --> 0:22:01.680000 of 34.4. To get to router five, he's going to 35.5. 0:22:01.680000 --> 0:22:05.240000 And then of course the link locals are getting registered as well to those 0:22:05.240000 --> 0:22:11.500000 same addresses. So what we have going on here is both spokes are registering 0:22:11.500000 --> 0:22:13.460000 with the hub. No problem. 0:22:13.460000 --> 0:22:19.460000 And then we go to router four. 0:22:19.460000 --> 0:22:26.480000 And he's learning. 0:22:26.480000 --> 0:22:35.780000 That's the problem right there. 0:22:35.780000 --> 0:22:38.620000 Yeah, he's learning it as a slash 64. 0:22:38.620000 --> 0:22:51.800000 So yeah, he's going to continue to go to router one. 0:22:51.800000 --> 0:22:58.020000 Let's try something behind it. 0:22:58.020000 --> 0:23:10.080000 Let's try and go to six again from four. 0:23:10.080000 --> 0:23:25.520000 He's still going to one. 0:23:25.520000 --> 0:23:27.380000 That's actually really interesting. 0:23:27.380000 --> 0:23:29.640000 Why is he going to one? 0:23:29.640000 --> 0:23:31.820000 Oh, that'd be why. 0:23:31.820000 --> 0:23:42.220000 Because he says that FE80 colon colon five goes to the NBMA address of 0:23:42.220000 --> 0:24:04.520000 173.1.12.1. That's not what we're looking for here. 0:24:04.520000 --> 0:24:28.340000 So let's try this one more time. 0:24:28.340000 --> 0:24:31.100000 Let him re-register with the server. 0:24:31.100000 --> 0:24:33.160000 Because see router one has it right. 0:24:33.160000 --> 0:25:03.080000 34, 35, 34, 35. Okay, neighbor four just came up. 0:25:03.080000 --> 0:25:04.580000 Yeah, the problem is he keeps learning. 0:25:04.580000 --> 0:25:12.120000 He keeps learning the link local with the NBMA address of 12.1. 0:25:12.120000 --> 0:25:25.620000 So we may have to actually say IPv6, NHRP, redirect. 0:25:25.620000 --> 0:25:35.420000 And I'm router four, IPv6, NHRP, shortcut. 0:25:35.420000 --> 0:25:38.520000 Shouldn't have to do this just for phase two. 0:25:38.520000 --> 0:25:40.640000 This is really what you do when you go into phase three. 0:25:40.640000 --> 0:25:44.080000 But it looks like for IPv6 with the link local, it's going to cause us 0:25:44.080000 --> 0:25:49.100000 a problem. Oops. 0:25:49.100000 --> 0:25:53.820000 See if that fixes it. 0:25:53.820000 --> 0:25:57.920000 At this point it's working. 0:25:57.920000 --> 0:25:59.900000 So it's not that big of a deal. 0:25:59.900000 --> 0:26:06.220000 But I'd really rather see it do the actual peer to peer. 0:26:06.220000 --> 0:26:17.840000 So let's clear this again. 0:26:17.840000 --> 0:26:35.820000 So we only know about one now. 0:26:35.820000 --> 0:26:38.300000 Now he's getting it incomplete. 0:26:38.300000 --> 0:26:41.440000 And he's still going to go through one. 0:26:41.440000 --> 0:26:43.900000 We might have to clear it on five too. 0:26:43.900000 --> 0:26:47.040000 We'll do this one more time and see if it works. 0:26:47.040000 --> 0:26:49.740000 We'll just bounce all these interfaces one more time. 0:26:49.740000 --> 0:26:52.840000 Now that we turned on that feature. 0:26:52.840000 --> 0:27:01.120000 For anybody who's not real familiar with DMVPN, what I'm trying to get 0:27:01.120000 --> 0:27:06.420000 working here and for some silly reason it's not, is spoke to spoke. 0:27:06.420000 --> 0:27:10.060000 I mean spoke to spoke through the hub is working just fine. 0:27:10.060000 --> 0:27:15.200000 So just from a raw connectivity standpoint, it's working. 0:27:15.200000 --> 0:27:18.900000 But what I'm trying to do is move us out of phase two slash phase or phase 0:27:18.900000 --> 0:27:23.020000 one here, which is all traffic through the hub and get us over to something 0:27:23.020000 --> 0:27:26.800000 a little more modern. 0:27:26.800000 --> 0:27:30.580000 And again, I'm not trying this on this particular version of code. 0:27:30.580000 --> 0:27:32.800000 So it's also possible here. 0:27:32.800000 --> 0:27:33.860000 Then it doesn't work. 0:27:33.860000 --> 0:27:36.320000 I run into a few things that don't work on particular code. 0:27:36.320000 --> 0:28:20.980000 So the hub then let's trace it. 0:28:20.980000 --> 0:28:23.060000 Oh, play hello, Vospey. 0:28:23.060000 --> 0:28:28.200000 I came back up. There we go. 0:28:28.200000 --> 0:28:45.620000 Might help. And now it's hitting incomplete negative. 0:28:45.620000 --> 0:28:48.480000 So it's not going to switch over. 0:28:48.480000 --> 0:28:51.380000 So either the code's not working or I missed something. 0:28:51.380000 --> 0:29:13.820000 Let me give a real quick look at my configs. 0:29:13.820000 --> 0:29:16.300000 And that's right. 0:29:16.300000 --> 0:29:42.160000 And that all looks right. 0:29:42.160000 --> 0:30:09.000000 I did have. And one more thing. 0:30:09.000000 --> 0:30:17.960000 So he's got the next top right. 0:30:17.960000 --> 0:30:28.720000 It's just not resolving the next top right. 0:30:28.720000 --> 0:30:55.500000 Yep. So some reason he's hitting type incomplete flags negative trying 0:30:55.500000 --> 0:30:58.240000 to do the switch over spoke to spoke. 0:30:58.240000 --> 0:31:01.780000 So not going to spend a whole lot of time looking at this. 0:31:01.780000 --> 0:31:05.600000 Again, we're not trying to focus here on DM VPN. 0:31:05.600000 --> 0:31:10.800000 So obviously something's not quite set right here for some reason, though 0:31:10.800000 --> 0:31:12.740000 everything looks right. 0:31:12.740000 --> 0:31:21.100000 So as far as IPv6 over DM VPN though, working fine, no problem. 0:31:21.100000 --> 0:31:25.260000 And again, still no IPv4 on anything underneath. 0:31:25.260000 --> 0:31:27.740000 So that's really all it takes to set it up and run it. 0:31:27.740000 --> 0:31:30.200000 And by the way, there's another one you want to be aware of. 0:31:30.200000 --> 0:31:35.720000 Do show DM VPN. Another good command that will actually show you what's 0:31:35.720000 --> 0:31:38.740000 up for what addresses. 0:31:38.740000 --> 0:31:44.480000 So another good one to keep your eyes on for NHRP. 0:31:44.480000 --> 0:31:50.280000 And there's another one detail that adds a little bit more information, 0:31:50.280000 --> 0:31:53.820000 particularly if you're running IP Sac over any of this. 0:31:53.820000 --> 0:31:56.460000 And you're doing cryptography. 0:31:56.460000 --> 0:31:59.840000 It shows you the crypto information down at the bottom. 0:31:59.840000 --> 0:32:02.880000 So that's pretty cool as well. 0:32:02.880000 --> 0:32:06.620000 So that's IPv6 over DM VPN.