DMVPN monitoring in Spectrum

Discussion created by p.robin on Jan 17, 2013
Latest reply on May 4, 2018 by oldshield

Like • Show 2 Likes2
Comment • 22

Would like to ask how others are monitoring larger-scale deployments of DMVPN. We have noticed that there are some issues with such deployments with respect to Topology/connectivity.

Does anyone have experience they would like to share? Any results would be nice to understand. As well as whether there is interest in DMVPN monitoring (via the Enhancement request avenue).
Thank you.

Outcomes

22 Replies

susan_in_austin Dec 10, 2013 7:44 PM
We don't have experience monitoring a DMVPN in Spectrum, but we would like to know how do it. Do you have any details on how to set this up?

Thanks in advance.

Susan
Like • Show 1 Like1
Actions
- dpereyra @ susan_in_austin on Jan 9, 2014 8:56 PM
  Hello, any update to how monitoring a DMVPN in spectrum? in the documentation of spectrum 9.3 says nothing about this.
  
  thanks!
  
  diego
  Like • Show 0 Likes0
  Actions
  - Roderick.Olliver @ dpereyra on Jan 21, 2014 4:02 PM
    I'm interested in this too....
    Like • Show 0 Likes0
    Actions
    - harsh.prasad @ Roderick.Olliver on Apr 14, 2014 2:35 PM
      Hi Robin, Susan, Diego, Roderick,
      
      We are now planning on a DMVPN solution and it would really be helpful if we can get some insightful infromation from you around this.
      
      Request you to please drop me a note at harshvardhan.prasad@ca.com, mentioning your DMVPN environment as well as monitoring requirements, so that we can consider them while designing the solution.
      
      Thanks and Regards,
      
      Harsh
      Like • Show 1 Like1
      Actions
      - susan_in_austin @ harsh.prasad on Apr 14, 2014 6:20 PM
        
        Hi,
        
        So to clarify is there currently no way to monitor a DMVPN environmen in Spectrum? Without understanding what can be done today, it's hard to know what I need. I just wanted to know if we lost connectivity to the DMVPN from any location.
        
        Thanks for the help.
        
        Susan
        Like • Show 0 Likes0
        Actions
        muiz @ susan_in_austin on Apr 17, 2014 10:07 PM
        
        We do monitor our dmvpn environment in spectrum, however, we rely on eigrp notifications to determine if tunnel between hub and spoke is down.
        Like • Show 0 Likes0
        Actions
        susan_in_austin @ muiz on Apr 18, 2014 12:50 PM
        
        muiz:
        
        We do monitor our dmvpn environment in spectrum, however, we rely on eigrp notifications to determine if tunnel between hub and spoke is down.
        
        I was thinking this approach would work out OK. I was going to have the bgp notifications sent to Spectrum as traps and alert that way. If you have a better approach to how you are handling the notification, I would appreciate your input.
        
        But I do think it would be nice to see a model of the DMVPN in the topology.
        
        Susan
        
        Like • Show 0 Likes0
        Actions
        p.robin @ susan_in_austin on May 29, 2014 3:09 PM
        I would like to know if CA is going to introduce support for DMVPN. IN spectrum 9.2.3.x there are some interesting issues (connectivity in topology seem to drop but comes back depending on when device is rediscovered. SA, are there plans for DMVPN monitoring out side of the Syslog events (BGP/EIGRP)?
        Like • Show 0 Likes0
        Actions
        Issac08 @ p.robin on May 29, 2014 3:22 PM
        Hi ,
        
        Can u pls explain what is DMVPN ?Why we use this?
        Like • Show 0 Likes0
        Actions
        p.robin @ Issac08 on May 29, 2014 3:24 PM
        DMVPN - http://www.cisco.com/c/en/us/products/security/dynamic-multipoint-vpn-dmvpn/index.html?referring_site=bodynav
        Like • Show 0 Likes0
        Actions
        susan_in_austin @ p.robin on May 29, 2014 3:26 PM
        Sounds like someone else beat me to the link. It's a way to connect lots of sites with a secure tunnel.
        
        Susan
        Like • Show 0 Likes0
        Actions
ENTIIS_TH Oct 7, 2014 4:58 AM
We also got the issue with DMVPN at our customer, since our customer are using DMVPN technonology, we faced an issue with incorrect topology view.Currently we implemented CA Spectrum 9.4 with this customer. Are there anyone have experince with this issue?, and Do you have any resolution?, We also opend this ticket with CA Support for fixing this issue?.

Thanks
Yutthachai
Like • Show 0 Likes0
Actions
- weagl02 @ ENTIIS_TH on Nov 20, 2014 11:50 AM
  Please see
  
  https://communities.ca.com/ideas/235715516#comment-233900504
  Like • Show 0 Likes0
  Actions
JAY.Song Jan 8, 2015 7:34 PM
We are facing the same issue monitoring large scaled DMVPN network. When the network was originally discovered, it created a WAN link icon connecting all field devices. Initially, it may look fine, but as soon as you have a device goes down, the fault isolation process will kick in to identify the status of all adjacent devices. This often cause performance issue and looping in fault isolation process. CA needs to design a better way of modeling DMVPN network.
Like • Show 0 Likes0
Actions
jbovee Jan 21, 2015 2:34 PM
So we know Spectrum v10 is going to come with support for things like VPC, VSS, etc. I would be really interested to know if DMVPN is also on that list.
Like • Show 0 Likes0
Actions
jbovee Jul 29, 2016 7:59 PM
It's been a year and a half. Time for a thread bump. Any word on when Spectrum will have support for DMVPN? Modeling NHRP and all that?
Like • Show 1 Like1
Actions
Nagesh_Jaiswal Jul 31, 2016 6:24 AM
Hi jbovee,

This is in our radar and part of our backlog as well. Due to some other high priorities items in our list we can take a look at this later.

Thanks,
Nagesh
Like • Show 0 Likes0
Actions
- oldshield @ Nagesh_Jaiswal on Oct 6, 2016 7:30 PM
  I have a large dmvpn deployment too and I really need CA to get on the ball and give us a solution. I have asked about this for 2 years now. with nothing being done.
  Like • Show 0 Likes0
  Actions
dnissel Jan 3, 2018 9:29 PM
Time to kick this thread again. What is the word on true monitoring for DMVPN topologies? Specifically, we have an environment where we are running tunnels on two separate interfaces using two separate broadband mediums (Cable Internet and Cellular Internet). We use Cable as the primary and Cellular as the secondary fail-over. Since the model never loses contact in the event of one or the other failing, we do not know if one of them is currently offline. I thought about doing some type of SpectroWatch (and if anyone has any thoughts on that, it would be appreciated) but surely there must be a way programatically within Spectrum to alarm and notify if the tunnel goes offline. Thoughts on this?
Like • Show 1 Like1
Actions
oldshield Jan 8, 2018 8:33 PM
So, has anyone put this in to vote up for a feature request? I know I did awhile back and did not get many votes. I have 500+ sites in dmvpn that need correct monitoring.
Like • Show 0 Likes0
Actions
lilah May 3, 2018 9:31 PM
The workaround I'm considering is creating dummy loopbacks at the headend routers, and creating a connection under Oneclick between the DMVPN tunnels at the spoke and these dummy loopbacks.

I then track with IP SLA the reachability of these DMVPN tunnels from the headend and if a tunnel goes down I can run a simple EEM script that shuts down the associated dummy loopback for that thnnel. Oneclick will the show the live link as down since one end of the connection becomes disabled.

If reachability returns, a different EEM script will enable the associated dimmy loopback and the live link will be up.

It's not the best of workarounds, and requires upkeep, but it does work and allows the use of live links.
Like • Show 1 Like1
Actions
- oldshield @ lilah on May 4, 2018 3:11 PM
  Do you have a sample config you can share with the ip addresses stripped out < or not > I am a visual person, I kinda understand what you stated but could use a config to look at and then try to modify to see if I can get it to work.
  Like • Show 0 Likes0
  Actions

DMVPN monitoring in Spectrum

Outcomes

Related Content

Recommended Content

Incoming Links