On Tue, Dec 7, 2010 at 5:37 PM, TJ <techie.jovenes@gmail.com> wrote:


On 6 December 2010 18:27, Odhiambo Washington <odhiambo@gmail.com> wrote:
I am witnessing a weird situation and not sure where else to look. A tunnel has refused to come up between an C2811 and a C1811. I have looked and looked like the whole day! I hate obfuscation, but I have done some. I can avail the obfuscated details privately:-)




C1811#sh runn int tunnel 50
Building configuration...

Current configuration : 191 bytes
!
interface Tunnel50
 description Inet test to C2811
 ip address 192.168.55.197 255.255.255.252
 keepalive 5 2
 tunnel source Vlan5
 tunnel destination 85.9x.x.23
 tunnel key 98745612
end


Its usually best practice to start with basic configs when things dont work.
Try removing the keepalive as well as the tunnel key settings on both sides of the tunnel.

U might also want to do a debug on the router to see what errors you get when the tunnel is trying to bring itself up.

debug interface tunnel50



Turns out weird:

Two things were happening:

1. I could ping my gateway on and off
2. sh arp | in 41.x.x (my gateway network) was always returning "Incomplete" - no MAC address
3. my provider was picking a mismatched MAC address from my router interface - it was off by a last digit:-)

Finally my provider's engineer logged into my router and came up with a solution:

They created a vlan id matching what they have on the router on their end. So out vlan5, in vlan787 and the link started working supa. Changed the tunnel source to vlan787 and the tunnel shot up in no time!!

Aki: Looks like the Cisco gurus in this list are cowards, really. Only a few are able to speak and help. I think they fear newbies like me, otherwise how do you explain their silence in such matters?:-)

--
Best regards,
Odhiambo WASHINGTON,
Nairobi,KE
+254733744121/+254722743223
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
Damn!!