On Tue, Dec 7, 2010 at 5:37 PM, TJ <techie.jovenes@gmail.com> wrote:

On 6 December 2010 18:27, Odhiambo Washington <odhiambo@gmail.com> wrote:

...

I am witnessing a weird situation and not sure where else to look. A tunnel has refused to come up between an C2811 and a C1811. I have looked and looked like the whole day! I hate obfuscation, but I have done some. I can avail the obfuscated details privately:-)

C1811#sh runn int tunnel 50 Building configuration...

Current configuration : 191 bytes ! interface Tunnel50 description Inet test to C2811 ip address 192.168.55.197 255.255.255.252 keepalive 5 2 tunnel source Vlan5 tunnel destination 85.9x.x.23 tunnel key 98745612 end

Its usually best practice to start with basic configs when things dont work. Try removing the keepalive as well as the tunnel key settings on both sides of the tunnel.

U might also want to do a debug on the router to see what errors you get when the tunnel is trying to bring itself up.

debug interface tunnel50

Turns out weird: Two things were happening: 1. I could ping my gateway on and off 2. sh arp | in 41.x.x (my gateway network) was always returning "Incomplete" - no MAC address 3. my provider was picking a mismatched MAC address from my router interface - it was off by a last digit:-) Finally my provider's engineer logged into my router and came up with a solution: They created a vlan id matching what they have on the router on their end. So out vlan5, in vlan787 and the link started working supa. Changed the tunnel source to vlan787 and the tunnel shot *up* in no time!! Aki: Looks like the Cisco gurus in this list are cowards, really. Only a few are able to speak and help. I think they fear newbies like me, otherwise how do you explain their silence in such matters?:-) -- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254733744121/+254722743223 _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ Damn!!