DX NetOps

We don't have experience monitoring a DMVPN in Spectrum, but we would like to know how do it.  Do you have any details on how to set this up?

Thanks in advance.

Susan

Hello, any update to how monitoring a DMVPN in spectrum? in the documentation of spectrum 9.3 says nothing about this.

thanks!

diego

I'm interested in this too....

Hi Robin, Susan, Diego, Roderick,

We are now planning on a DMVPN solution and it would really be helpful if we can get some insightful infromation from you around this.

Request you to please drop me a note at harshvardhan.prasad@ca.com, mentioning your DMVPN environment as well as monitoring requirements, so that we can consider them while designing the solution.

Thanks and Regards,

Harsh

Hi,

So to clarify is there currently no way to monitor a DMVPN environmen in Spectrum?  Without understanding what can be done today, it's hard to know what I need. I just wanted to know if we lost connectivity to the DMVPN from any location.

Thanks for the help.

Susan

We do monitor our dmvpn environment in spectrum, however, we rely on eigrp notifications to determine if tunnel between hub and spoke is down.

muiz:

 

We do monitor our dmvpn environment in spectrum, however, we rely on eigrp notifications to determine if tunnel between hub and spoke is down.

I was thinking this approach would work out OK.  I was going to have the bgp notifications sent to Spectrum as traps and alert that way.  If you have a better approach to how you are handling the notification, I would appreciate your input.

But I do think it would be nice to see a model of the DMVPN in the topology.

Susan

I would like to know if CA is going to introduce support for DMVPN.  IN spectrum 9.2.3.x there are some interesting issues (connectivity in topology seem to drop but comes back depending on when device is rediscovered.  SA, are there plans for DMVPN monitoring out side of the Syslog events (BGP/EIGRP)?

Hi ,

Can u pls explain what is DMVPN ?Why we use this?

DMVPN - http://www.cisco.com/c/en/us/products/security/dynamic-multipoint-vpn-dmvpn/index.html?referring_site=bodynav

Sounds like someone else beat me to the link. It's a way to connect lots of sites with a secure tunnel.

Susan

We also got the issue with DMVPN at our customer, since our customer are using DMVPN technonology, we faced an issue with incorrect topology view.Currently we implemented CA Spectrum 9.4 with this customer. Are there anyone have experince with this issue?, and Do you have any resolution?, We also opend this ticket with CA Support for fixing this issue?.

Thanks

Yutthachai

Please see

https://communities.ca.com/ideas/235715516#comment-233900504

We are facing the same issue monitoring large scaled DMVPN network. When the network was originally discovered, it created a WAN link icon connecting all field devices. Initially, it may look fine, but as soon as you have a device goes down, the fault isolation process will kick in to identify the status of all adjacent devices. This often cause performance issue and looping in fault isolation process.  CA needs to design a better way of modeling DMVPN network.

So we know Spectrum v10 is going to come with support for things like VPC, VSS, etc.  I would be really interested to know if DMVPN is also on that list.

It's been a year and a half.  Time for a thread bump.  Any word on when Spectrum will have support for DMVPN?  Modeling NHRP and all that?

Hi jbovee,

This is in our radar and part of our backlog as well. Due to some other high priorities items in our list we can take a look at this later.

Thanks,

Nagesh

I have a large dmvpn deployment too and I really need CA to get on the ball and give us a solution. I have asked about this for 2 years now. with nothing being done.

Time to kick this thread again. What is the word on true monitoring for DMVPN topologies? Specifically, we have an environment where we are running tunnels on two separate interfaces using two separate broadband mediums (Cable Internet and Cellular Internet). We use Cable as the primary and Cellular as the secondary fail-over. Since the model never loses contact in the event of one or the other failing, we do not know if one of them is currently offline. I thought about doing some type of SpectroWatch (and if anyone has any thoughts on that, it would be appreciated) but surely there must be a way programatically within Spectrum to alarm and notify if the tunnel goes offline. Thoughts on this?

So, has anyone put this in to vote up for a feature request? I know I did awhile back and did not get many votes. I have 500+ sites in dmvpn that need correct monitoring.

The workaround I'm considering is creating dummy loopbacks at the headend routers, and creating a connection under Oneclick between the DMVPN tunnels at the spoke and these dummy loopbacks.

I then track with IP SLA the reachability of these DMVPN tunnels from the headend and if a tunnel goes down I can run a simple EEM script that shuts down the associated dummy loopback for that thnnel. Oneclick will the show the live link as down since one end of the connection becomes disabled.

If reachability returns, a different EEM script will enable the associated dimmy loopback and the live link will be up.

It's not the best of workarounds, and requires upkeep, but it does work and allows the use of live links. 

Do you have a sample config you can share with the ip addresses stripped out < or not > I am a visual person, I kinda understand what you stated but could use a config to look at and then try to modify to see if I can get it to work.