Expert Transport Troubleshooting: MPLS and DMVPN Ticket Scenarios
Transport technologies fail in layers, and the art of troubleshooting them is knowing which layer to suspect. An MPLS L3VPN
Dynamic Multipoint VPN, the hub-and-spoke overlay that builds spoke-to-spoke tunnels on demand. Articles tagged DMVPN cover NHRP, mGRE, the three phases, and routing over the overlay.
Transport technologies fail in layers, and the art of troubleshooting them is knowing which layer to suspect. An MPLS L3VPN
Almost every mid-to-large enterprise WAN ends up running both MPLS and DMVPN. Not because someone planned it that
Every DMVPN carries IPsec, and every IPsec deployment sits on one of two key-exchange protocols: IKEv1, the original from
Everyone builds a second DMVPN hub for redundancy. Far fewer people test that the failover actually works - and the ones
EIGRP over DMVPN works beautifully, right up until the moment you realise none of your spokes can reach any of
A branch office with two WAN routers is a good design. Two routers, two circuits, no single point of failure.
DMVPN failures cluster hard. After the underlay itself, almost every broken cloud comes down to a spoke that cannot register,
Everything DMVPN sends is cleartext. GRE is an envelope with the contents printed on the outside, and a DMVPN cloud
NHRP builds the tunnels; the routing protocol decides what flows through them, and DMVPN is unusually opinionated about how you
This is the complete, working DMVPN Phase 3 build: one hub, two spokes, a router simulating the internet underlay, EIGRP
Ask what separates DMVPN Phase 1 from Phase 2 from Phase 3 and you will usually get a memorized answer:
Every interesting thing DMVPN does, it does with NHRP. Spokes appearing on the hub without configuration? NHRP registration. Spoke-to-