Authoritative NHRP

Download this chapter
Download the complete book

Cisco IOS IP Addressing Services Command Reference
NHRP Commands
Table Of Contents
NHRP Commands
cl ear i p nhrp
i p nhrp authenti cati on
i p nhrp group
i p nhrp hol dti me
i p nhrp i nterest
i p nhrp map
i p nhrp map group
i p nhrp map mul ti cast
i p nhrp map mul ti cast dynami c
i p nhrp max-send
i p nhrp network-i d
i p nhrp nhs
i p nhrp record
i p nhrp redi rect
i p nhrp regi strati on
i p nhrp regi strati on no-uni que
i p nhrp responder
i p nhrp server-onl y
i p nhrp shortcut
i p nhrp tri gger-svc
i p nhrp use
show i p nhrp
show i p nhrp group-map
show i p nhrp mul ti cast
show i p nhrp nhs
show i p nhrp summary
show i p nhrp traffi c
show nhrp debug-condi ti on
NHRP Commands
clear ip nhrp
To cl ear al l dynami c entri es from the Next Hop Resol uti on Protocol (NHRP) cache, use the
clear ip nhrp command i n EXEC mode.
clear ip nhrp [dest_i p-address [dest_mask]] | [counters {interface i f-name i f-number | vrf vrf-name
}] | [shortcut [interface i f-name i f-number ]]
Syntax Description
dest_i p-
address
(Opti onal ) Cl ears NHRP mappi ng entri es for speci fi ed desti nati on IP
addresses.
dest_mask (Opti onal ) Name of the desti nati on network mask.
counters (Opti onal ) Cl ears the NHRP counters.
interface (Opti onal ) Cl ears NHRP mappi ng entri es for the speci fi ed i nterface.
i f-name (Opti onal ) Interface name. Speci fyi ng thi s arguments removes the
speci fi ed i nterface name that al l entri es l earned vi a thi s i nterface
from the Next Hop Resol uti on Protocol (NHRP) cache.
i f-number (Opti onal ) Interface number. Speci fyi ng thi s arguments removes the
speci fi ed i nterface number that al l entri es l earned vi a thi s i nterface
from the Next Hop Resol uti on Protocol (NHRP) cache.
vrf (Opti onal ) Del etes entri es from the Next Hop Resol uti on Protocol
(NHRP) cache for the speci fi ed VRF.
vrf-name (Opti onal ) Name of the VRF address-fami l y to whi ch the command i s
appl i ed.
shortcut (Opti onal ) Del etes shortcut entri es from the Next Hop Resol uti on
Protocol (NHRP) cache.
Command Modes
User EXEC
Pri vi l eged EXEC
Command History
Release Modification
11.0 Thi s command was i ntroduced.
12.2(33)SRA Thi s command was i ntegrated i nto Ci sco IOS Rel ease
Cisco I OS I P A ddressing
Services Command Reference
I ntroduction
A RP Commands
DHCP Commands: accounting
(DHCP ) through ip dhcp
excluded-address
DHCP Commands: ip dhcp
limit lease through lease
DHCP Commands: netbios-
name-server through vrf
(DHCP pool)
DNS Commands: ddns
(DDNS-update-method)
through ip dns server queue
limit
DNS Commands: ip dns
spoofing through view (DNS)
I P A ddressing Commands
NAT Commands
NHRP Commands
NHRP Commands
Cisco IOS IP Addressing
Serv ices Command
Ref erence PDF (PDF - 7 MB)
17-03-2011 Cisco IOS IP Addressing Services Com
cisco.com/en/US/docs//iad_nhrp.html 1/28
12.2(33)SRA.
12.2SX Thi s command i s supported i n the Ci sco IOS Rel ease 12.2SX
trai n. Support i n a speci fi c 12.2SX rel ease of thi s trai n depends
on your feature set, pl atform, and pl atform hardware.
Ci sco
IOS XE
Rel ease 2.5
Thi s command was modi fi ed. Support was added for the shortcut
keyword.
Usage Guidelines
Thi s command does not cl ear any stati c (confi gured) IP-to-nonbroadcast mul ti access (NBMA) address
mappi ngs from the NHRP cache. The clear ip nhrp shortcut command cl ears NHRP cache entri es that
have associ ated NHRP routes/nexthop-overri des i n the RIB.
Examples
The fol l owi ng exampl e cl ears al l dynami c entri es from the NHRP cache for the i nterface:
Router> clear ip nhrp
The fol l owi ng exampl e shows how to cl ear NHRP cache entri es that have associ ated NHRP
routes/nexthop-overri des i n the RIB:
Router> clear ip nhrp shortcut
Related Commands
Command Description
show ip nhrp Di spl ays the NHRP cache.
ip nhrp authentication
To confi gure the authenti cati on stri ng for an i nterface usi ng the Next Hop Resol uti on Protocol (NHRP),
use the ip nhrp authentication command i n i nterface confi gurati on mode. To remove the
authenti cati on stri ng, use the no form of thi s command.
ip nhrp authentication stri ng
no ip nhrp authentication [string]
Syntax Description
stri ng Authenti cati on stri ng confi gured for the source and desti nati on stati ons
that control s whether NHRP stati ons al l ow i ntercommuni cati on. The stri ng
can be up to ei ght characters l ong.
Defaults
No authenti cati on stri ng i s confi gured; the Ci sco IOS software adds no authenti cati on opti on to NHRP
packets i t generates.
Command Modes
Interface confi gurati on
Command History
12.2(33)SRA.
Usage Guidelines
Al l routers confi gured wi th NHRP wi thi n one l ogi cal nonbroadcast mul ti access (NBMA) network must
share the same authenti cati on stri ng.
Examples
In the fol l owi ng exampl e, the authenti cati on stri ng named speci al xx must be confi gured i n al l devi ces
usi ng NHRP on the i nterface before NHRP communi cati on occurs:
ip nhrp authentication specialxx
ip nhrp group
To confi gure a Next Hop Resol uti on Protocol (NHRP) group on a spoke, use the ip nhrp group
command i n i nterface confi gurati on mode. To remove an NHRP group, use the no form of thi s
command.
ip nhrp group group-name
no ip nhrp group group-name
Syntax Description
group-name Speci fi es an NHRP group name.
Command Default
No NHRP groups are created.
Command Modes
Interface confi gurati on (confi g-i f)
Command History
12.4(22)T Thi s command was i ntroduced.
Usage Guidelines
After you create an NHRP group on a spoke, you use the ip nhrp map group command to map the
group to a QoS pol i cy map.
Examples
The fol l owi ng exampl e shows how to create two NHRP groups named smal l and l arge.
Router> enable
Router# configure terminal
Router(config)# interface Tunnel 0
Router(config-if)# ip nhrp group small
Router(config-if)# ip nhrp group large
Related Commands
Command Description
ip nhrp
map
Stati cal l y confi gures the IP-to-NBMA address mappi ng of IP
desti nati ons connected to an NBMA network.
ip nhrp
map group
Adds NHRP groups to QoS pol i cy mappi ngs on a hub.
show
dmvpn
Di spl ays DMVPN-speci fi c sessi on i nformati on.
show ip
nhrp
Di spl ays NHRP mappi ng i nformati on.
show ip
nhrp group-
map
Di spl ays the detai l s of NHRP group mappi ngs on a hub and the l i st
of tunnel s usi ng each of the NHRP groups defi ned i n the
mappi ngs.
show
policy-map
mgre
Di spl ays stati sti cs about a speci fi c QoS pol i cy as i t i s appl i ed to a
tunnel endpoi nt.
ip nhrp holdtime
To change the number of seconds that Next Hop Resol uti on Protocol (NHRP) nonbroadcast
mul ti access (NBMA) addresses are adverti sed as val i d i n authori tati ve NHRP responses, use the ip nhrp
holdtime command i n i nterface confi gurati on mode. To restore the defaul t val ue, use the no form of
thi s command.
ip nhrp holdtime seconds
no ip nhrp holdtime [seconds]
Syntax Description
seconds Ti me i n seconds that NBMA addresses are adverti sed as val i d i n
posi ti ve authori tati ve NHRP responses.
Defaults
7200 seconds (2 hours)
Command Modes
Command History
12.2(33)SRA.
Usage Guidelines
The ip nhrp holdtime command affects authori tati ve responses onl y. The adverti sed hol di ng ti me i s
the l ength of ti me the Ci sco IOS software tel l s other routers to keep i nformati on that i t i s provi di ng i n
authori tati ve NHRP responses. The cached IP-to-NBMA address mappi ng entri es are di scarded after
the hol di ng ti me expi res.
The NHRP cache can contai n stati c and dynami c entri es. The stati c entri es never expi re. Dynami c
entri es expi re regardl ess of whether they are authori tati ve or nonauthori tati ve.
Examples
In the fol l owi ng exampl e, NHRP NBMA addresses are adverti sed as val i d i n posi ti ve authori tati ve
NHRP responses for 1 hour:
ip nhrp holdtime 3600
ip nhrp interest
To control whi ch IP packets can tri gger sendi ng a Next Hop Resol uti on Protocol (NHRP) request
packet, use the ip nhrp interest command i n i nterface confi gurati on mode. To restore the defaul t
val ue, use the no form of thi s command.
ip nhrp interest access-l i st-number
no ip nhrp interest [access-list-number]
Syntax Description
access-l i st-
number
Standard or extended IP access l i st number i n the range
from
1 to 199.
Defaults
Al l non-NHRP packets can tri gger NHRP requests.
Command Modes
Command History
12.2(33)SRA.
Usage Guidelines
Use thi s command wi th the access-list command to control whi ch IP packets tri gger NHRP requests.
The ip nhrp interest command control s whi ch packets cause NHRP address resol uti on to take pl ace;
the ip nhrp use command control s how readi l y the system attempts such address resol uti on.
Examples
In the fol l owi ng exampl e, any TCP traffi c can cause NHRP requests to be sent, but no other IP packets
wi l l cause NHRP requests:
ip nhrp interest 101
access-list 101 permit tcp any any
Related Commands
Command Description
access-list
(IP
extended)
Defi nes an extended IP access l i st.
access-list
(IP
standard)
Defi nes a standard IP access l i st.
ip nhrp use Confi gures the software so that NHRP i s deferred unti l the system
has attempted to send data traffi c to a parti cul ar desti nati on
mul ti pl e ti mes.
ip nhrp map
To stati cal l y confi gure the IP-to-nonbroadcast mul ti access (NBMA) address mappi ng of IP desti nati ons
To stati cal l y confi gure the IP-to-nonbroadcast mul ti access (NBMA) address mappi ng of IP desti nati ons
connected to an NBMA network, use the ip nhrp map i nterface confi gurati on command. To remove
the stati c entry from Next Hop Resol uti on Protocol (NHRP) cache, use the no form of thi s command.
ip nhrp map i p-address nbma-address
no ip nhrp map i p-address nbma-address
Syntax Description
i p-
address
IP address of the desti nati ons reachabl e through the NBMA network.
Thi s address i s mapped to the NBMA address.
nbma-
address
NBMA address that i s di rectl y reachabl e through the NBMA network.
The address format vari es dependi ng on the medi um you are usi ng.
For exampl e, ATM has a Network Servi ce Access Poi nt (NSAP) address,
Ethernet has a MAC address, and Swi tched Mul ti megabi t Data Servi ce
(SMDS) has an E.164 address. Thi s address i s mapped to the IP
address.
Defaults
No stati c IP-to-NBMA cache entri es exi st.
Command Modes
Command History
12.2(33)SRA.
Usage Guidelines
You wi l l probabl y need to confi gure at l east one stati c mappi ng i n order to reach the next-hop server.
Repeat thi s command to stati cal l y confi gure mul ti pl e IP-to-NBMA address mappi ngs.
Examples
In the fol l owi ng exampl e, thi s stati on i n a mul ti poi nt tunnel network i s stati cal l y confi gured to be
served by two next-hop servers 10.0.0.1 and 10.0.1.3. The NBMA address for 10.0.0.1 i s stati cal l y
confi gured to be 192.0.0.1 and the NBMA address for 10.0.1.3 i s 192.2.7.8.
interface tunnel 0
ip nhrp nhs 10.0.0.1
ip nhrp nhs 10.0.1.3
ip nhrp map 10.0.0.1 192.0.0.1
ip nhrp map 10.0.1.3 192.2.7.8
Related Commands
Command Description
clear ip nhrp Cl ears al l dynami c entri es from the NHRP cache.
\
ip nhrp map group
To associ ate a Next Hop Resol uti on Protocol (NHRP) group to a QoS pol i cy map, use the ip nhrp map
group command i n i nterface confi gurati on mode. To remove an associ ati on, use the no form of thi s
command.
ip nhrp map group group-name service-policy output qos-pol i cy-map-name
no ip nhrp map group group-name service-policy output qos-pol i cy-map-name
Syntax Description
group-name Speci fi es an NHRP group name.
qos-pol i cy-map-name Speci fi es a QoS pol i cy map name.
Command Default
No mappi ngs are created.
Command Modes
Command History
Usage Guidelines
The command al l ows a QoS pol i cy i n the output di recti on onl y.
Examples
The fol l owi ng exampl e shows how to map two NHRP groups named smal l and l arge to two QoS pol i cy
maps named qos-smal l and qos-l arge respecti vel y.
Router> enable
Router(config)# interface Tunnel 0
Router(config-if)# ip nhrp map group small service-policy output qos-small
Router(config-if)# ip nhrp map group large service-policy output qos-large
Related Commands
Command Description
ip nhrp
group
Confi gures a NHRP group on a spoke.
ip nhrp
map
show
dmvpn
show ip
nhrp
show ip
nhrp group-
map
mappi ngs.
show
policy-map
mgre
tunnel endpoi nt.
ip nhrp map multicast
To confi gure nonbroadcast mul ti access (NBMA) addresses used as desti nati ons for broadcast or
mul ti cast packets to be sent over a tunnel network, use the ip nhrp map multicast command i n
i nterface confi gurati on mode. To remove the desti nati ons, use the no form of thi s command.
ip nhrp map multicast nbma-address
no ip nhrp map multicast nbma-address
Syntax Description
nbma-
address
NBMA address that i s di rectl y reachabl e through the NBMA network.
The address format vari es dependi ng on the medi um you are usi ng.
Defaults
No NBMA addresses are confi gured as desti nati ons for broadcast or mul ti cast packets.
Command Modes
Command History
12.2(33)SRA.
Usage Guidelines
Thi s command appl i es onl y to tunnel i nterfaces.
The command i s useful for supporti ng broadcasts over a tunnel network when the underl yi ng network
does not support IP mul ti cast. If the underl yi ng network does support IP mul ti cast, you shoul d use the
tunnel destination command to confi gure a mul ti cast desti nati on for transmi ssi on of tunnel broadcasts
or mul ti casts.
When mul ti pl e NBMA addresses are confi gured, the system repl i cates the broadcast packet for each
address.
address.
Examples
In the fol l owi ng exampl e, i f a packet i s sent to 10.255.255.255, i t i s repl i cated to desti nati ons 10.0.0.1
and 10.0.0.2. Addresses 10.0.0.1 and 10.0.0.2 are the IP addresses of two other routers that are part of
the tunnel network, but those addresses are thei r addresses i n the underl yi ng network, not the tunnel
network. They woul d have tunnel addresses that are i n network 10.0.0.0.
interface tunnel 0
ip address 10.0.0.3 255.0.0.0
ip nhrp map multicast 10.0.0.1
ip nhrp map multicast 10.0.0.2
ip nhrp map multicast dynamic
To al l ow Next Hop Resol uti on Protocol (NHRP) to automati cal l y add routers to the mul ti cast NHRP
mappi ngs, use the ip nhrp map multicast dynamic command i n i nterface confi gurati on mode. To
di sabl e thi s functi onal i ty or to cl ear dynami c entri es, use the no form of thi s command.
no ip nhrp map multicast dynamic
Syntax Description
Thi s command has no arguments or keywords.
Defaults
Thi s command i s not enabl ed.
Command Modes
Command History
12.2(18)SXE Thi s command was i ntegrated i nto Ci sco IOS Rel ease
12.2(18)SXE.
12.2(33)SRA.
15.0(1)M3 Thi s command was modi fi ed to enabl e the cl eari ng of al l
dynami c entri es i n the mul ti cast tabl e by usi ng the no form of thi s
command.
Usage Guidelines
Use thi s command when spoke routers need to i ni ti ate mul ti poi nt generi c routi ng encapsul ati on (GRE)
and IPSecuri ty (IPSec) tunnel s and regi ster thei r uni cast NHRP mappi ngs. Thi s command i s needed to
enabl e dynami c routi ng protocol s to work over the Mul ti poi nt GRE and IPSec tunnel s because IGP
routi ng protocol s use mul ti cast packets. Thi s command prevents the Hub router from needi ng a
separate confi gurati on l i ne for a mul ti cast mappi ng for each spoke router.
You can cl ear al l dynami c entri es i n the mul ti cast tabl e by usi ng the no form of thi s command.
Examples
The fol l owi ng exampl e shows how to enabl e the ip nhrp map multicast dynamic command on the
hub router:
crypto ipsec profile vpnprof
set transform-set trans2
!
interface Tunnel0
bandwith 1000
ip address 10.0.0.1 255.255.255.0
ip mtu 1436
ip nhrp authentication test
ip nhrp network-id 100000
ip nhrp holdtime 600
no ip split-horizon eigrp 1
delay 1000
tunnel source Ethernet0
tunnel mode gre multipoint
tunnel key 100000
tunnel protection ipsec profile vpnprof
!
interface Ethernet0
ip address 10.17.0.1 255.255.255.0
ip nhrp max-send
To change the maxi mum frequency at whi ch Next Hop Resol uti on Protocol (NHRP) packets can be
sent, use the ip nhrp max-send i nterface confi gurati on command. To restore thi s frequency to the
sent, use the ip nhrp max-send i nterface confi gurati on command. To restore thi s frequency to the
defaul t val ue, use the no form of thi s command.
ip nhrp max-send pkt-count every seconds
no ip nhrp max-send
Syntax Description
pkt-count Number of packets that can be sent i n the range from 1 to 65535.
Defaul t i s 100 packets.
every
seconds
Ti me (i n seconds) i n the range from 10 to 65535. Defaul t i s
10 seconds.
Defaults
pkt-count: 100 packets
seconds: 10 seconds
Command Modes
Command History
12.2(33)SRA.
Usage Guidelines
The software mai ntai ns a per-i nterface quota of NHRP packets that can be sent. NHRP traffi c, whether
l ocal l y generated or forwarded, cannot be sent at a rate that exceeds thi s quota. The quota i s
repl eni shed at the rate speci fi ed by the seconds argument.
Thi s command needs to take i nto consi derati n the number of spoke routers bei ng handl ed by thi s
hub and how often they send NHRP regi strati on requests. To support thi s l oad you woul d need:
Number of spokes / regi strati on ti meout * Max-send-i nterval
Exampl e
500 spokes wi th 100 second Regi strati on ti meout
Max send val ue = 500/100*10 = 50
The Maxi mum number of spoke-spoke tunnel s that are expected to be up at any one ti me across
the whol e DMVPN network.
spoke-spoke tunnel s/NHRP hol dti me * Max-send-i nterval
Thi s woul d cover spoke-spoke tunnel creati on and the refreshi ng of spoke-spoke tunnel s that are
used for l onger peri ods of ti me.
Exampl e
2000 spoke-spoke tunnel s wi th 250 second hol d ti meout
Max send val ue = 2000/250*10 = 80
Then add these together and mul ti pl y thi s by 1.5 - 2.0 to gi ve a buffer.
Exampl e
Max send = (50 + 80) * 2 = 260
The max-send-i nterval can be used to keep the l ong term average number of NHRP messages
al l owed to be sent constant, but al l ow greater peaks.
Exampl e
400 messages i n 10 seconds
In thi s case i t coul d peak at approxi matel y 200 messages i n the fi rst second of the 10 second
i nterval , but sti l l keep to a 40 messages per second average over the 10 second i nterval .
4000 messages i n 100 seconds
In thi s case i t coul d peak at approxi matel y 2000 messages i n the fi rst second of the 100 second
i nterval , but i t woul d sti l l be hel d to 40 messages per second average over the 100 second
i nterval . In the second case i t coul d handl e a hi gher peak rate, but ri sk a l onger peri od of ti me
when no messages can be sent i f i t used up i ts quota for the i nterval .
By defaul t, the maxi mum rate at whi ch the software sends NHRP packets i s fi ve packets per 10
seconds. The software mai ntai ns a per-i nterface quota of NHRP packets (whether generated l ocal l y or
forwarded) that can be sent.
Examples
In the fol l owi ng exampl e, onl y one NHRP packet can be sent from seri al i nterface 0 each mi nute:
interface serial 0
ip nhrp max-send 1 every 60
Related Commands
Command Description
Command Description
ip nhrp
interest
Control s whi ch IP packets can tri gger sendi ng an NHRP request.
ip nhrp use Confi gures the software so that NHRP i s deferred unti l the system
has attempted to send data traffi c to a parti cul ar desti nati on
mul ti pl e ti mes.
ip nhrp network-id
To enabl e the Next Hop Resol uti on Protocol (NHRP) on an i nterface, use the ip nhrp network-id
command i n i nterface confi gurati on mode. To di sabl e NHRP on the i nterface, use the no form of thi s
command.
ip nhrp network-id number
no ip nhrp network-id [number]
Syntax Description
number Gl obal l y uni que, 32-bi t network i denti fi er from a nonbroadcast
mul ti access (NBMA) network. The range i s from 1 to 4294967295.
Defaults
NHRP i s di sabl ed on the i nterface.
Command Modes
Command History
12.2(33)SRA.
Usage Guidelines
In general , al l NHRP stati ons wi thi n one l ogi cal NBMA network must be confi gured wi th the same
network i denti fi er.
Examples
The fol l owi ng exampl e enabl es NHRP on the i nterface:
ip nhrp network-id 1
ip nhrp nhs
To speci fy the address of one or more Next Hop Resol uti on Protocol (NHRP) servers, use the
ip nhrp nhs command i n i nterface confi gurati on mode. To remove the address, use the no form of thi s
command.
Cisco IOS Release 12.2(33)SRA, 12.2SX, and Later Releases
ip nhrp nhs nhs-address [net-address [netmask]]
no ip nhrp nhs nhs-address [net-address [netmask]]
Cisco IOS Release 15.1(2)T and Later Releases
ip nhrp nhs {nhs-address [nbma {nbma-address | FQDN-stri ng}] [multicast] [priority val ue] [cluster
val ue] | cluster val ue max-connections val ue | dynamic nbma {nbma-address | FQDN-stri ng}
[multicast] [priority val ue] [cluster val ue] | fallback seconds}
no ip nhrp nhs {nhs-address [nbma {nbma-address | FQDN-stri ng}] [multicast] [priority val ue]
[cluster val ue] | cluster val ue max-connections val ue | dynamic nbma {nbma-address |
FQDN-stri ng} [multicast] [priority val ue] [cluster val ue] | fallback seconds}
Syntax Description
nhs-address Address of the next-hop server bei ng speci fi ed.
net-address (Opti onal ) IP address of a network served by the next-hop server.
netmask (Opti onal ) IP network mask to be associ ated wi th the IP address.
The IP address i s l ogi cal l y ANDed wi th the mask.
nbma (Opti onal ) Speci fi es the nonbroadcast mul ti pl e access (NBMA)
address or FQDN.
nbma-
address
NBMA address.
FQDN-stri ng Next hop server (NHS) ful l y qual i fi ed domai n name (FQDN) stri ng.
multicast (Opti onal ) Speci fi es to use NBMA mappi ng for broadcasts and
mul ti casts.
mul ti casts.
priority
val ue
(Opti onal ) Assi gns a pri ori ty to hubs to control the order i n whi ch
spokes sel ect hubs to establ i sh tunnel s. The range i s from 0 to
255; 0 i s the hi ghest and 255 i s the l owest pri ori ty.
cluster
val ue
(Opti onal ) Speci fi es NHS groups. The range i s from 0 to 10; 0 i s
the hi ghest and 10 i s the l owest. The defaul t val ue i s 0.
max-
connections
val ue
Speci fi es the number of NHS el ements from each NHS group that
needs to be acti ve. The range i s from 0 to 255.
dynamic Confi gures the spoke to l earn the NHS protocol address
dynami cal l y.
fallback
seconds
Speci fi es the durati on, i n seconds, for whi ch the spoke must wai t
before fal l i ng back to an NHS of hi gher pri ori ty upon recovery.
Defaults
No next-hop servers are expl i ci tl y confi gured, so normal network l ayer routi ng deci si ons are used to
forward NHRP traffi c.
Command Modes
Command History
12.2(33)SRA.
15.1(2)T Thi s command was modi fi ed. The net-address and mask
arguments were removed and the nbma, nbma-address, FQDN-
stri ng, multicast, priority val ue, cluster val ue, max-connections
val ue, dynamic, and fallback seconds keywords and arguments
were added.
Usage Guidelines
Use the ip nhrp nhs command to speci fy the address of a next hop server and the networks i t serves.
Normal l y, NHRP consul ts the network l ayer forwardi ng tabl e to determi ne how to forward NHRP
packets. When next hop servers are confi gured, these next hop addresses overri de the forwardi ng path
that woul d otherwi se be used for NHRP traffi c.
For any next hop server that i s confi gured, you can speci fy mul ti pl e networks by repeati ng thi s
command wi th the same nhs-address argument, but wi th di fferent IP network addresses.
Examples
The fol l owi ng exampl e shows how to regi ster a hub to a spoke usi ng NBMA and FQDN:
Router(config)# interface tunnel 1
Router(config-if)# ip nhrp nhs 192.0.2.1 nbma examplehub.example1.com
The fol l owi ng exampl e shows how to confi gure the desi red max-connections val ue:
Router(config-if)# ip nhrp nhs cluster 5 max-connections 100
The fol l owi ng exampl e shows how to confi gure the NHS fal l back ti me:
Router(config-if)# ip nhrp nhs fallback 25
The fol l owi ng exampl e shows how to confi gure NHS pri ori ty and group val ues:
Router(config-if)# ip nhrp nhs 192.0.2.1 priority 1 cluster 2
Related Commands
Command Description
ip nhrp
map
show ip
nhrp
ip nhrp record
To reenabl e the use of forward record and reverse record opti ons i n Next Hop Resol uti on Protocol
(NHRP) request and repl y packets, use the ip nhrp record i nterface confi gurati on command. To
suppress the use of such opti ons, use the no form of thi s command.
ip nhrp record
no ip nhrp record
Syntax Description
Defaults
Forward record and reverse record opti ons are used i n NHRP request and repl y packets.
Command Modes
Command History
12.2(33)SRA.
Usage Guidelines
Forward record and reverse record opti ons provi de l oop detecti on and are enabl ed by defaul t. Usi ng
the no form of thi s command di sabl es thi s method of l oop detecti on. For another method of l oop
detecti on, see the ip nhrp responder command.
Examples
The fol l owi ng exampl e suppresses forward record and reverse record opti ons:
no ip nhrp record
Related Commands
Command Description
ip nhrp
responder
Desi gnates the pri mary IP address of whi ch i nterface the Next Hop
Server wi l l use i n NHRP repl y packets when the NHRP requester
uses the Responder Address opti on.
ip nhrp redirect
To enabl e Next Hop Resol uti on Protocol (NHRP) redi rect, use the ip nhrp redirect command i n
i nterface confi gurati on mode. To remove the NHRP redi rect, use the no form of thi s command.
ip nhrp redirect [timeout seconds]
no ip nhrp redirect [timeout seconds]
Syntax Description
timeout
seconds
Indi cates the i nterval , i n seconds, that the NHRP redi rects are sent for
the same nonbroadcast mul ti access (NBMA) source and desti nati on
combi nati on. The range i s from 2 to 30 seconds.
Command Default
NHRP redi rect i s di sabl ed.
Command Modes
Command History
Usage Guidelines
The NHRP redi rect message i s an i ndi cati on that the current path to the desti nati on i s not opti mal .
The recei ver of the message shoul d fi nd a better path to the desti nati on.
Thi s command generates an NHRP redi rect traffi c i ndi cati on message i f the i ncomi ng and outgoi ng
Thi s command generates an NHRP redi rect traffi c i ndi cati on message i f the i ncomi ng and outgoi ng
i nterface i s part of the same DMVPN network. The NHRP shortcut swi tchi ng feature depends on
recei vi ng the NHRP redi rect message. NHRP shortcut swi tchi ng does not tri gger an NHRP resol uti on
request on i ts own. It tri ggers an NHRP resol uti on request onl y after recei vi ng an NHRP redi rect
message.
Most of the traffi c woul d fol l ow a spoke-hub-spoke path. NHRP redi rect i s general l y requi red to be
confi gured on al l the DMVPN nodes i n the event the traffi c fol l ows a spoke-spoke-hub-spoke path,
whi ch i s unl i kel y the case.
Do not confi gure thi s command i f the DMVPN network i s confi gured for ful l -mesh. In a ful l -mesh
confi gurati on the spokes are popul ated wi th a ful l routi ng tabl e wi th next-hop bei ng the other spokes.
Examples
The fol l owi ng exampl e shows how to enabl e NHRP redi rects on the i nterface:
Router> enable
Router(config)# interface Tunnel0
Router(config-if)# ip address 192.2.0.11 255.255.255.0
Router(config-if)# ip nhrp authentication test
Router(config-if)# ip nhrp map multicast 192.2.0.2
Router(config-if)# ip nhrp map 192.2.0.2 192.2.0.13
Router(config-if)# ip nhrp network-id 100000
Router(config-if)# ip nhrp nhs 192.2.0.11
Router(config-if)# ip nhrp shortcut
Router(config-if)# ip nhrp redirect
Router(config-if)# tunnel source Serial1/0
Router(config-if)# tunnel mode gre multipoint
Router(config-if)# tunnel key 100000
Router(config-if)# tunnel protection ipsec profile vpnprof
Related Commands
Command Description
ip nhrp shortcut Enabl es NHRP shortcut swi tchi ng.
ip nhrp registration
To enabl e the cl i ent to not set the uni que fl ag i n the Next Hop Resol uti on Protocol (NHRP) request
and repl y packets, use the ip nhrp registration command i n i nterface confi gurati on mode. To
reenabl e thi s functi onal i ty, use the no form of thi s command.
ip nhrp registration [timeout seconds | no-unique]
no ip nhrp registration [timeout seconds | no-unique]
Syntax Description
timeout
seconds
(Opti onal ) Ti me between peri odi c regi strati on messages.
secondsNumber of seconds. The range i s from 1 through the
val ue of the NHRP hol d ti mer.
If the timeout keyword i s not speci fi ed, NHRP regi strati on
messages are sent every number of seconds equal to 1/3 the val ue
of the NHRP hol d ti mer.
no-
unique
(Opti onal ) Enabl es the cl i ent to not set the uni que fl ag i n the NHRP
request and repl y packets.
Defaults
Thi s command i s not enabl ed.
Command Modes
Command History
12.3(7.2) The timeout keyword and seconds argument were added. In
addi ti on, effecti ve wi th Ci sco IOS Rel ease 12.3(7.2), thi s
command repl aced the ip nhrp registration no-unique command.
12.3(7)T The timeout keyword and seconds argument were i ntegrated i nto
Ci sco IOS Rel ease 12.3(7)T. In addi ti on, the repl acement of the
ip nhrp registration no-unique command wi th thi s command was
i ntegrated i nto Ci sco IOS Rel ease 12.3(7)T.
12.2(18)SXE Thi s command was i ntegrated i nto Ci sco IOS Rel ease
12.2(18)SXE.
12.2(18)SXE.
12.2(33)SRA.
Usage Guidelines
If the uni que fl ag i s set i n the NHRP regi strati on request packet, a next-hop server (NHS) must rej ect
any regi strati on attempts for the same pri vate address usi ng a di fferent nonbroadcast mul ti access
(NBMA) address. If a cl i ent recei ves a new IP address, for exampl e vi a DHCP, and tri es to regi ster
before the cache entry on the NHS ti mes out, the NHS must rej ect i t.
By confi guri ng the ip nhrp registration command and no-unique keyword, the uni que fl ag i s not set,
and the NHS can overri de the ol d regi strati on i nformati on.
Thi s command and keyword combi nati on i s useful i n an envi ronment where cl i ent IP addresses can
change frequentl y such as a di al envi ronment.
Examples
The fol l owi ng exampl e confi gures the cl i ent to not set the uni que fl ag i n the NHRP regi strati on packet:
interface FastEthernet 0/0
ip nhrp registration no-unique
The fol l owi ng exampl e shows that the regi strati on ti meout i s set to 120 seconds, and the del ay i s set to
5 seconds:
interface FastEthernet 0/0
ip nhrp registration 120
Related Commands
Command Description
ip nhrp
holdtime
Changes the number of seconds that NHRP NBMA addresses are
adverti sed as val i d i n authori tati ve NHRP responses
ip nhrp registration no-unique
The ip nhrp registration no-unique command i s repl aced by the ip nhrp registration command. See
the ip nhrp registration command for more i nformati on.
ip nhrp responder
To desi gnate the pri mary IP address the Next Hop Server that an i nterface wi l l use i n Next Hop
Resol uti on Protocol (NHRP) repl y packets when the NHRP requestor uses the Responder Address
opti on, use the ip nhrp responder command i n i nterface confi gurati on mode. To remove the
desi gnati on, use the no form of thi s command.
ip nhrp responder i nterface-type i nterface-number
no ip nhrp responder [interface-type] [interface-number]
Syntax Description
i nterface-
type
Interface type whose pri mary IP address i s used when a next-hop
server compl i es wi th a Responder Address opti on (for exampl e, serial
or tunnel).
i nterface-
number
Interface number whose pri mary IP address i s used when a next-hop
server compl i es wi th a Responder Address opti on.
Defaults
The next-hop server uses the IP address of the i nterface where the NHRP request was recei ved.
Command Modes
Command History
12.2(33)SRA.
Usage Guidelines
If an NHRP requestor wants to know whi ch next-hop server generates an NHRP repl y packet, i t can
request that i nformati on through the Responder Address opti on. The next-hop server that generates
the NHRP repl y packet then compl i es by i nserti ng i ts own IP address i n the Responder Address opti on
of the NHRP repl y. The next-hop server uses the pri mary IP address of the speci fi ed i nterface.
If an NHRP repl y packet bei ng forwarded by a next-hop server contai ns the IP address of that next-hop
server, the next-hop server generates an Error Indi cati on of type "NHRP Loop Detected" and di scards
server, the next-hop server generates an Error Indi cati on of type "NHRP Loop Detected" and di scards
the repl y packet.
Examples
In the fol l owi ng exampl e, any NHRP requests for the Responder Address wi l l cause thi s router acti ng as
a next-hop server to suppl y the pri mary IP address of seri al i nterface 0 i n the NHRP repl y packet:
ip nhrp responder serial 0
ip nhrp server-only
To confi gure the i nterface to operate i n Next Hop Resol uti on Protocol (NHRP) server-onl y mode, use
the ip nhrp server-only command i n i nterface confi gurati on mode. To di sabl e thi s feature, use the no
form of thi s command.
ip nhrp server-only [non-caching]
no ip nhrp server-only
Syntax Description
non-
caching
(Opti onal ) The router wi l l not cache NHRP i nformati on recei ved on
thi s i nterface.
Defaults
Di sabl ed
Command Modes
Command History
12.0 The non-caching keyword was added.
12.2(33)SRA.
Usage Guidelines
When the i nterface i s operati ng i n NHRP server-onl y mode, the i nterface does not ori gi nate NHRP
requests or set up an NHRP shortcut Swi tched Vi rtual Ci rcui t (SVC).
Examples
The fol l owi ng exampl e confi gures the i nterface to operate i n server-onl y mode:
ip nhrp server-only
ip nhrp shortcut
To enabl e Next Hop Resol uti on Protocol (NHRP) shortcut swi tchi ng, use the ip nhrp shortcut
command i n i nterface confi gurati on mode. To remove shortcut swi tchi ng from NHRP, use the no form
of thi s command.
ip nhrp shortcut
no ip nhrp shortcut
Syntax Description
Command Default
The NHRP shortcut swi tchi ng i s di sabl ed.
Command Modes
Command History
Ci sco IOS XE
Rel ease 2.5
Thi s command was i ntegrated i nto Ci sco IOS XE
Rel ease 2.5.
Usage Guidelines
Do not confi gure thi s command i f the DMVPN network i s confi gured for ful l -mesh. In a ful l -mesh
confi gurati on the spokes are popul ated wi th a ful l routi ng tabl e wi th next-hop bei ng the other spokes.
Examples
The fol l owi ng exampl e shows how to confi gure an NHRP shortcut on an i nterface:
Router> enable
Router(config-if)# ip nhrp authentication test
Router(config-if)# ip nhrp map multicast 192.2.0.2
Router(config-if)# ip nhrp map 192.2.0.2 192.2.0.13
Router(config-if)# ip nhrp network-id 100000
Router(config-if)# ip nhrp nhs 192.2.0.11
Router(config-if)# ip nhrp shortcut
Router(config-if)# ip nhrp redirect
Router(config-if)# tunnel source Serial1/0
Router(config-if)# tunnel mode gre multipoint
Router(config-if)# tunnel key 100000
Router(config-if)# tunnel protection ipsec profile vpnprof
Related Commands
Command Description
ip nhrp redirect Enabl es NHRP redi rect.
ip nhrp trigger-svc
To confi gure when the Next Hop Resol uti on Protocol (NHRP) wi l l set up and tear down a swi tched
vi rtual ci rcui t (SVC) based on aggregate traffi c rates, use the ip nhrp trigger-svc command i n
i nterface confi gurati on mode. To restore the defaul t threshol ds, use the no form of thi s command.
ip nhrp trigger-svc trigger-threshold teardown-threshold
no ip nhrp trigger-svc
Syntax Description
tri gger-
threshol d
Average traffi c rate cal cul ated duri ng the load interval, at or above
whi ch NHRP wi l l set up an SVC for a desti nati on. The defaul t val ue
i s 1 kbps.
teardown-
threshol d
Average traffi c rate cal cul ated duri ng the l oad i nterval , at or bel ow
whi ch NHRP wi l l tear down the SVC to the desti nati on. The defaul t
val ue i s 0 kbps.
Defaults
tri gger-threshol d: 1 kbps
teardown-threshol d: 0 kbps
Command Modes
Command History
12.2(33)SRA.
Usage Guidelines
The two threshol ds are measured duri ng a sampl i ng i nterval of 30 seconds, by defaul t. To change that
i nterval , use the load-interval seconds argument of the ip cef traffic-statistics command.
Examples
In the fol l owi ng exampl e, the tri ggeri ng and teardown threshol ds are set to 100 kbps and 5 kbps,
respecti vel y:
ip nhrp trigger-svc 100 5
Related Commands
Command Description
ip cef Enabl es CEF on the route processor card.
ip cef
accounting
Enabl es network accounti ng of CEF i nformati on.
ip cef traffic-
statistics
Changes the ti me i nterval that control s when NHRP wi l l set up
or tear down an SVC.
ip nhrp interest Control s whi ch IP packets can tri gger sendi ng an NHRP
request.
ip nhrp use
To confi gure the software so that Next Hop Resol uti on Protocol (NHRP) i s deferred unti l the system has
attempted to send data traffi c to a parti cul ar desti nati on mul ti pl e ti mes, use the ip nhrp use command
i n i nterface confi gurati on mode. To restore the defaul t val ue, use the no form of thi s command.
ip nhrp use usage-count
no ip nhrp use usage-count
Syntax Description
usage-count Packet count i n the range from 1 to 65535. Defaul t i s 1.
Defaults
usage-count: 1. The fi rst ti me a data packet i s sent to a desti nati on for whi ch the system determi nes
NHRP can be used, an NHRP request i s sent.
Command Modes
Command History
12.2(33)SRA.
Usage Guidelines
When the software attempts to send a data packet to a desti nati on for whi ch i t has determi ned that
NHRP address resol uti on can be used, an NHRP request for that desti nati on i s normal l y sent
i mmedi atel y. Confi guri ng the usage-count argument causes the system to wai t unti l that many data
packets have been sent to a parti cul ar desti nati on before i t attempts NHRP. The usage-count
argument for a parti cul ar desti nati on i s measured over 1-mi nute i nterval s (the NHRP cache expi rati on
i nterval ).
The usage count appl i es per desti nati on. So i f the usage-count argument i s confi gured to be 3, and
four data packets are sent toward 10.0.0.1 and one packet toward 10.0.0.2, then an NHRP request i s
generated for 10.0.0.1 onl y.
If the system conti nues to need to forward data packets to a parti cul ar desti nati on, but no NHRP
response has been recei ved, retransmi ssi on of NHRP requests i s performed. Thi s retransmi ssi on occurs
onl y i f data traffi c conti nues to be sent to a desti nati on.
The ip nhrp interest command control s whi ch packets cause NHRP address resol uti on to take pl ace;
the ip nhrp use command control s how readi l y the system attempts such address resol uti on.
Examples
In the fol l owi ng exampl e, i f i n the fi rst mi nute fi ve packets are sent to the fi rst desti nati on and fi ve
packets are sent to a second desti nati on, then a si ngl e NHRP request i s generated for the second
desti nati on.
If i n the second mi nute the same traffi c i s generated and no NHRP responses have been recei ved,
then the system resends i ts request for the second desti nati on.
ip nhrp use 5
Related Commands
Command Description
ip nhrp interest Control s whi ch IP packets can tri gger sendi ng an NHRP
request.
ip nhrp max-
send
Changes the maxi mum frequency at whi ch NHRP packets can
be sent.
show ip nhrp
To di spl ay Next Hop Resol uti on Protocol (NHRP) mappi ng i nformati on, use the show ip nhrp
command i n user EXEC or pri vi l eged EXEC mode.
show ip nhrp [dynamic | incomplete | static] [address | i nterface] [brief | detail] [purge]
[shortcut]
Syntax Description
dynamic (Opti onal ) Di spl ays dynami c (l earned) IP-to-nonbroadcast
mul ti access address (NBMA) mappi ng entri es. Dynami c NHRP
mappi ng entri es are obtai ned from NHRP resol uti on/regi strati on
exchanges. See Tabl e 40 for types, number ranges, and
descri pti ons.
incomplete (Opti onal ) Di spl ays i nformati on about NHRP mappi ng entri es for
whi ch the IP-to-NBMA i s not resol ved. See Tabl e 40 for types,
number ranges, and descri pti ons.
static (Opti onal ) Di spl ays stati c IP-to-NBMA address mappi ng entri es.
Stati c NHRP mappi ng entri es are confi gured usi ng the ip nhrp map
command. See Tabl e 40 for types, number ranges, and
descri pti ons.
address (Opti onal ) Di spl ays NHRP mappi ng entri es for speci fi ed protocol
addresses.
i nterface (Opti onal ) Di spl ays NHRP mappi ng entri es for the speci fi ed
i nterface. See Tabl e 40 for types, number ranges, and descri pti ons.
brief (Opti onal ) Di spl ays a short output of the NHRP mappi ng.
detail (Opti onal ) Di spl ays detai l ed i nformati on about NHRP mappi ng.
purge (Opti onal ) Di spl ays NHRP purge i nformati on.
shortcut (Opti onal ) Di spl ays NHRP shortcut i nformati on.
Command Modes
User EXEC (>)
Pri vi l eged EXEC (#)
Command Default
Informati on i s di spl ayed for al l NHRP mappi ngs.
Command History
12.2(33)SRA.
12.4(22)T The output of thi s command was extended to di spl ay the NHRP
group recei ved from the spoke.
Ci sco IOS
XE Rel ease
2.5
Thi s command was modi fi ed. Support was added for the shortcut
keyword.
Usage Guidelines
Tabl e 40 l i sts the val i d types, number ranges, and descri pti ons for the opti onal i nterface argument.
Note The val i d types can vary accordi ng to the pl atform and i nterfaces on the pl atform.
Table 40 Valid Types, Number Ranges, and Interface Description
Valid Types Number Ranges Interface Descriptions
async 1 Async
atm 0 to 6 ATM
bvi 1 to 255 Bri dge-Group Vi rtual Interface
cdma-ix 1 CDMA Ix
ctunnel 0 to 2147483647 C-Tunnel
dialer 0 to 20049 Di al er
ethernet 0 to 4294967295 Ethernet
fastethernet 0 to 6 FastEthernet IEEE 802.3
lex 0 to 2147483647 Lex
loopback 0 to 2147483647 Loopback
mfr 0 to 2147483647 Mul ti l i nk Frame Rel ay bundl e
multilink 0 to 2147483647 Mul ti l i nk-group
null 0 Nul l
port-channel 1 to 64 Port channel
tunnel 0 to 2147483647 Tunnel
vif 1 PGM mul ti cast host
virtual-ppp 0 to 2147483647 Vi rtual PPP
virtual-template 1 to 1000 Vi rtual templ ate
virtual-tokenring 0 to 2147483647 Vi rtual Token Ri ng
xtagatm 0 to 2147483647 Extended tag ATM
Examples
The fol l owi ng i s sampl e output from the show ip nhrp command. Thi s output shows the NHRP group
recei ved from the spoke:
Router# show ip nhrp
10.0.0.2/32 via 10.0.0.2, Tunnel0 created 00:17:49, expire 00:01:30
Type: dynamic, Flags: unique registered used
NBMA address: 172.17.0.2
Group: test-group-0
Group: test-group-0
Group: test-group-1
The fol l owi ng i s sampl e output from the show i p nhrp shortcut command:
Router#show ip nhrp shortcut

10.1.1.1/24 via 1.1.1.22 Tunnel0 created 00:00:05, expire 00:02:24
Type: dynamic, Flags: router rib
10.1.1.2/24 via 1.1.1.22 Tunnel0 created 00:00:05, expire 00:02:24
Type: dynamic, Flags: router rib nho
The fol l owi ng i s sampl e output from the show ip nhrp detail command:
Router# show ip nhrp detail
10.1.1.1/8 via 10.2.1.1, Tunnel1 created 00:46:29, never expire
Type: static, Flags: used
Type: dynamic, Flags: authoritative unique nat registered used
10.1.1.4, Tunnel1 created 00:00:07, expire 00:02:57
Type: incomplete, Flags: negative
Cache hits: 4
Tabl e 41 descri bes the si gni fi cant fi el ds shown i n the di spl ays.
Table 41 show ip nhrp Field Descriptions
Field Description
10.1.1.1/8 Target network.
vi a
10.2.1.1
Next Hop to reach the target network.
Tunnel 1 Interface through whi ch the target network i s reached.
created
00:00:12
Length of ti me si nce the entry was created (hours:mi nutes:seconds).
expi re
01:59:47
Ti me remai ni ng unti l the entry expi res (hours:mi nutes:seconds).
never Indi cates that stati c entri es never expi re.
never
expi re
Indi cates that stati c entri es never expi re.
Type dynami cNHRP mappi ng i s obtai ned dynami cal l y. The
mappi ng entry i s created usi ng i nformati on from the NHRP
resol uti on and regi strati ons.
stati cNHRP mappi ng i s confi gured stati cal l y. Entri es
confi gured by the ip nhrp map command are marked stati c.
i ncompl eteThe NBMA address i s not known for the target
network.
NBMA
address
Nonbroadcast mul ti access address of the next hop. The address
format i s appropri ate for the type of network bei ng used: ATM,
Ethernet, Swi tched Mul ti megabi t Data Servi ce (SMDS), or
mul ti poi nt tunnel .
Fl ags authori tati veIndi cates that the NHRP i nformati on was
obtai ned di rectl y from the Next Hop Server or router that
mai ntai ns and i s authori tati ve for the NBMA-to-IP address
mappi ng for a parti cul ar desti nati on.
i mpl i ci tIndi cates that the l ocal node l earned about the NHRP
mappi ng entri es from the source mappi ng i nformati on of an
NHRP resol uti on request recei ved by the l ocal router, or from
an NHRP resol uti on packet bei ng forwarded through the l ocal
router.
l ocal Indi cates NHRP mappi ng entri es that are for networks
l ocal to thi s router (that i s, servi ced by thi s router). These fl ag
entri es are created when thi s router answers an NHRP
resol uti on request that has thi s i nformati on and i s used to store
the transport (tunnel ) IP address of al l the other NHRP nodes to
whi ch i t has sent thi s i nformati on. If for some reason thi s router
l oses access to thi s l ocal network (that i s, i t can no l onger
servi ce thi s network), i t sends an NHRP purge message to al l
remote NHRP nodes that are l i sted i n the "l ocal " entry (i n show
ip nhrp detail command output) to tel l the remote nodes to
cl ear thi s i nformati on from thei r NHRP mappi ng tabl es. Thi s
l ocal mappi ng entry ti mes out of the l ocal NHRP mappi ng
database at the same ti me that thi s i nformati on (from the
NHRP resol uti on repl y) woul d ti me out of the NHRP mappi ng
database on the remote NHRP nodes.
natIndi cates that the remote node (NHS cl i ent) supports the
new NHRP NAT extensi on type for dynami c spoke-spoke
tunnel s to/from spokes behi nd a NAT router. Thi s marki ng does
not i ndi cate that the spoke (NHS cl i ent) i s behi nd a NAT router.
Fl ags
(conti nued)
negati veFor negati ve cachi ng, i ndi cates that the requested
NBMA mappi ng has not yet been or coul d not be obtai ned.
When NHRP sends an NHRP resol uti on request, an i ncompl ete
(negati ve) NHRP mappi ng entry for the address i s i nserted i n
the resol uti on request. Thi s i nserti on suppresses any more
tri ggeri ng of NHRP resol uti on requests whi l e the resol uti on
request i s bei ng resol ved. If confi gured, any encrypti on
parameters (IKE/IPsec) for the tunnel are negoti ated.
(no socket)Indi cates that the NHRP mappi ng entri es wi l l not
tri gger IPsec to set up encrypti on because data traffi c does not
need to use thi s tunnel . Later, i f data traffi c needs to use thi s
tunnel , the fl ag wi l l change from a "(no socket)" to a "(socket)"
entry and IPsec wi l l be tri ggered to set up the encrypti on for
thi s tunnel . Local and i mpl i ci t NHRP mappi ng entri es are
al ways i ni ti al l y marked as "(no socket)."
By defaul t, NHRP caches source i nformati on from NHRP
resol uti on request or repl i es as they go through the system. To
al l ow thi s cachi ng to conti nue, but not have the entry create an
IPsec socket, they are marked as (no socket). If thi s was not
done there woul d be extra IPsec sockets from the hubs to the
vari ous spokes that ei ther were not used or were used for onl y
one or two packets whi l e a di rect spoke-to-spoke tunnel was
bei ng bui l t. Data packets and NHRP packets that arri ve on the
tunnel i nterface and are forwarded back out the tunnel
i nterface are not al l owed to use the (no socket) NHRP
mappi ngs for forwardi ng. Because, i n thi s case, the router i s an
i ntermedi ate node i n the path between the two endpoi nts and
we onl y want to create short-cut tunnel s between the i ni ti al
entrance and fi nal exi t poi nt of the DMVPN (NBMA) network
and not between any i ntermedi ate nodes. If at some poi nt the
router recei ves a data packet that has a source i nterface that i s
not the tunnel i nterface and i t woul d use the (no socket)
mappi ng entry, the router converts the (no socket) entry to a
(socket) entry. In thi s case, thi s router i s the entrance (or exi t)
poi nt of the NBMA (for thi s traffi c stream).
Fl ags
(conti nued)
(no socket) (conti nued)These (no socket) mappi ng entri es are
marked (non-authori tati ve); onl y mappi ngs from NHRP
regi strati ons are marked (authori tati ve). The NHRP resol uti on
requests are al so marked (authori tati ve), whi ch means that the
NHRP resol uti on request can be answered onl y from an
(authori tati ve) NHRP mappi ng entry. A (no socket) mappi ng
entry wi l l not be used to answer an NHRP resol uti on request
and the NHRP resol uti on request wi l l be forwarded to the NHS
of the nodes .
regi steredIndi cates that the mappi ng entry was created i n
response to an NHRP regi strati on request. Al though regi stered
mappi ng entri es are dynami c entri es, they may not be
refreshed through the "used" mechani sm. Instead, these entri es
are refreshed by another NHRP regi strati on request wi th the
same transport (tunnel ) IP to NBMA address mappi ng. The Next
Hop Cl i ent (NHC) peri odi cal l y sends NHRP regi strati on requests
to keep these mappi ngs from expi ri ng.
routerIndi cates that NHRP mappi ng entri es for a remote
router (that i s accessi ng a network or host behi nd the remote
router) are marked wi th the router fl ag.
uni queNHRP regi strati on requests have the uni que fl ag set
on by defaul t. Thi s fl ag i ndi cates that an NHRP mappi ng entry
cannot be overwri tten by a mappi ng entry that has the same IP
address and a di fferent NBMA address. When a spoke has a
stati cal l y confi gured outsi de IP (NBMA) address, thi s i s used to
keep another spoke that i s mi s-confi gured wi th the same
transport (tunnel ) IP address from overwri ti ng thi s entry. If a
spoke has a dynami c outsi de IP (NBMA) address, you can
confi gure the ip nhrp registration no-unique command on the
spoke to cl ear thi s fl ag. Thi s confi gurati on al l ows the regi stered
NHRP mappi ng entry for that spoke on the hub to be
overwri tten wi th a new NBMA address. Thi s i s necessary i n thi s
case because the spoke's outsi de IP (NBMA) address can
change at any ti me. If the "uni que" fl ag was set, the spoke
woul d have to wai t for the mappi ng entry on the hub to ti me
out before i t coul d regi ster i ts new (NBMA) mappi ng.
Fl ags
(conti nued)
usedWhen data packets are process-swi tched and thi s
mappi ng entry was used, the mappi ng entry i s marked as used.
The mappi ng database i s checked every 60 seconds. If the
used fl ag i s set and more than 120 seconds remai n unti l expi re
ti me, the used fl ag i s cl eared. If fewer than 120 seconds are
l eft, thi s mappi ng entry i s "refreshed" by the transmi ssi on of
another NHRP resol uti on request.
Note When usi ng DMVPN Phase 3 i n 12.4(6)T, CEF
swi tched packets wi l l al so set the "used" fl ag, and
these entri es wi l l be ti med out and refreshed as
descri bed i n the "used" fl ag descri pti on above.
Related Commands
Command Description
ip nhrp
group
Confi gures a NHRP group on a spoke.
ip nhrp
map
ip nhrp
map group
i p nhrp
shortcut
Enabl es shortcut swi tchi ng on the tunnel i nterface.
show
dmvpn
show ip
nhrp group-
map
mappi ngs.
show ip
nhrp
multicast
Di spl ays NHRP mul ti cast mappi ng i nformati on.
show ip
nhrp nhs
Di spl ays NHRP Next Hop Server i nformati on.
show ip
nhrp
summary
Di spl ays NHRP mappi ng summary i nformati on.
show ip
nhrp traffic
Di spl ays NHRP traffi c stati sti cs.
show
policy-map
mgre
tunnel endpoi nt.
show ip nhrp group-map
To di spl ay the detai l s of NHRP group mappi ngs, use the show ip nhrp group-map command i n user
EXEC or pri vi l eged EXEC mode.
show ip nhrp group-map [group-name]
Syntax Description
group-
name
(Opti onal ) Name of an NHRP group mappi ng for whi ch i nformati on
wi l l be di spl ayed.
Command Default
Informati on i s di spl ayed for al l NHRP group mappi ngs.
Command Modes
User EXEC (>)
Command History
Usage Guidelines
Thi s command di spl ays the detai l s on NHRP group mappi ngs on the hub al ong wi th the l i st of tunnel s
usi ng each of the NHRP groups defi ned i n the mappi ngs. In combi nati on wi th the show ip nhrp
command, thi s command l ets you easi l y determi ne whi ch QoS pol i cy map i s appl i ed to a speci fi c
tunnel endpoi nt.
Thi s command di spl ays the detai l s of the speci fi ed NHRP group mappi ng. The detai l s i ncl ude the
associ ated QoS pol i cy name and the l i st of tunnel endpoi nts usi ng the QoS pol i cy. If no opti on i s
speci fi ed, i t di spl ays the detai l s of al l NHRP group mappi ngs.
Examples
The fol l owi ng i s sampl e output from the show ip nhrp group-map command:
Router# show ip nhrp group-map
Interface: Tunnel0
NHRP group: test-group-0
QoS policy: queueing
Tunnels using the QoS policy:
Tunnel destination overlay/transport address
10.0.0.2/172.17.0.2
10.0.0.3/172.17.0.3
Interface: Tunnel1
11.0.0.2/172.17.0.2
QoS policy: p1
Tunnels using the QoS policy: None
The fol l owi ng i s sampl e output from the show ip nhrp group-map command for an NHRP group
named test-group-0:
Router# show ip nhrp group-map test-group-0
Interface: Tunnel0
10.0.0.2/172.17.0.2
10.0.0.3/172.17.0.3
Table 42 show ip nhrp group-map Field Descriptions
Field Description
Interface Interface on whi ch the pol i cy i s confi gured.
Interface Interface on whi ch the pol i cy i s confi gured.
NHRP group NHRP group associ ated wi th the QoS pol i cy on
the i nterface.
QoS pol i cy QoS pol i cy confi gured on the i nterface.
Tunnel s usi ng the QoS
Pol i cy
Li st of tunnel endpoi nts usi ng the QoS pol i cy.
Tunnel desti nati on
overl ay/transport address
Tunnel desti nati on overl ay address (such as the
tunnel endpoi nt address).
Related Commands
Command Description
ip nhrp group Confi gures a NHRP group on a spoke.
ip nhrp map Stati cal l y confi gures the IP-to-NBMA address mappi ng of IP
ip nhrp map
group
show dmvpn Di spl ays DMVPN-speci fi c sessi on i nformati on.
show ip nhrp Di spl ays NHRP mappi ng i nformati on.
show policy-
map mgre
tunnel endpoi nt.
show ip nhrp multicast
To di spl ay Next Hop Resol uti on Protocol (NHRP) mul ti cast mappi ng i nformati on, use the show ip
nhrp multicast command i n user EXEC or pri vi l eged EXEC mode.
show ip nhrp multicast [nbma-address | i nterface]
Syntax Description
nbma-
address
(Opti onal ) Di spl ays mul ti cast mappi ng i nformati on for the speci fi ed
NBMA address.
i nterface (Opti onal ) Di spl ays al l mul ti cast mappi ng entri es of the NHRP network
for the i nterface. See Tabl e 43 for types, number ranges, and
descri pti ons.
Command Modes
User EXEC
Pri vi l eged EXEC
Command History
12.4(7) Thi s command was i ntroduced.
Usage Guidelines
Tabl e 43 l i sts the val i d types, number ranges, and descri pti ons for the opti onal i nterface argument.
Table 43 Valid Types, Number Ranges, and Interface Descriptions
async 1 Async
atm 0 to 6 ATM
cdma-ix 1 CDMA Ix
fastethernet 0 to 6 FastEthernet IEEE 802.3
lex 0 to 2147483647 Lex
multilink 0 to 2147483647 Mul ti l i nk-group
null 0 Nul l
Examples
The fol l owi ng i s sampl e output from the show ip nhrp multicast command:
Router# show ip nhrp multicast
I/F NBMA address
Tunnel1 1.1.1.1 Flags: static
Tabl e 44 descri bes the fi el ds shown i n the di spl ay.
Table 44 show ip nhrp Field Descriptions
Field Description
I/F Interface associ ated wi th the mul ti cast mappi ng entry.
NBMA
address
Nonbroadcast Mul ti access Address to whi ch mul ti cast packets wi l l be
sent. The address format i s appropri ate for the type of network used:
ATM, Ethernet, SMDS, or mul ti poi nt tunnel .
Fl ags stati cIndi cates that the mul ti cast mappi ng entry i s confi gured
stati cal l y by the ip nhrp map multicast command.
dynami cIndi cates that the mul ti cast mappi ng entry i s obtai ned
dynami cal l y. A mul ti cast mappi ng entry i s created for each
regi stered Next Hop Cl i ent (NHC) when the ip nhrp map multicast
dynamic command i s confi gured.
Related Commands
Command Description
show ip nhrp
nhs
show ip nhrp
summary
show ip nhrp
traffic
show ip nhrp nhs
To di spl ay Next Hop Resol uti on Protocol (NHRP) next hop server (NHS) i nformati on, use the show ip
nhrp nhs command i n user EXEC or pri vi l eged EXEC mode.
show ip nhrp nhs [i nterface-type i nterface-number] [detail | redundancy [cluster number |
preempted | running | waiting]
Syntax Description
i nterface-
type
(Opti onal ) Type of i nterface for whi ch NHS i nformati on shoul d be
di spl ayed. See Tabl e 43 for types, number ranges, and
descri pti ons.
i nterface-
number
(Opti onal ) Interface or subi nterface number. For more i nformati on
about the numberi ng syntax for your networki ng devi ce, use the
questi on mark (?) onl i ne hel p functi on.
questi on mark (?) onl i ne hel p functi on.
detail (Opti onal ) Di spl ays detai l ed NHS i nformati on.
redundancy (Opti onal ) Di spl ays NHS recovery i nformati on.
cluster
number
(Opti onal ) Di spl ays NHS recovery i nformati on based on the cl uster
val ue. The range i s from 0 to 10.
preempted (Opti onal ) Di spl ays NHSs that are decl ared as down and not
acti vel y probed.
running (Opti onal ) Di spl ays NHSs that are respondi ng or expecti ng repl i es.
waiting (Opti onal ) Di spl ays NHSs that are wai ti ng to be schedul ed.
Command Modes
User EXEC (>)
Command History
12.2(33)SRB Thi s command was i ntegrated i nto Ci sco IOS Rel ease
12.2(33)SRB.
15.1(2)T Thi s command was modi fi ed. The redundancy, cluster number,
preempted, running, and waiting keywords and argument were
added.
Usage Guidelines
Tabl e 43 l i sts the val i d types, number ranges, and descri pti ons for the opti onal i nterface-number
argument.
Table 45 Valid Types, Number Ranges, and Interface Descriptions
async 1 Async
atm 0 to 6 ATM
cdma-ix 1 CDMA Ix
fastethernet 0 to 6 Fast Ethernet IEEE 802.3
lex 0 to 2147483647 Lex
multilink 0 to 2147483647 Mul ti l i nk group
null 0 Nul l
Examples
The fol l owi ng i s sampl e output from the show ip nhrp nhs detail command:
Router# show ip nhrp nhs detail
Legend:
E=Expecting replies
R=Responding
Tunnel1:
10.1.1.1 E req-sent 128 req-failed 1 repl-recv 0
Pending Registration Requests:
Registration Request: Reqid 1, Ret 64 NHS 10.1.1.1
The fol l owi ng i s sampl e output from the show ip nhrp nhs command:
Router# show ip nhrp nhs
Legend: E=Expecting replies, R=Responding, W=Waiting
Tunnel0:
192.0.2.1 W priority = 2 cluster = 0
192.0.2.2 RE priority = 0 cluster = 0
192.0.2.3 RE priority = 1 cluster = 0
The fol l owi ng i s sampl e output from the show ip nhrp nhs redundancy command:
Router# show ip nhrp nhs redundancy
Legend: E=Expecting replies, R=Responding, W=Waiting
No. Interface Cluster NHS Priority Cur-State Cur-Queue Prev-State Prev-Queue
1 Tunnel0 0 10.0.0.253 3 RE Running E Running
No. Interface Cluster Status Max-Con Total-NHS Responding Expecting Waiting Fallback
1 Tunnel0 0 Enable 3 3 3 0 0 0
Table 46 show ip nhrp nhs Field Descriptions
Field Description
Tunnel 1 Interface through whi ch the target network i s reached.
pri ori ty Pri ori ty val ue assi gned to the NHS.
cl uster Group to whi ch the NHS bel ong to.
W=Wai ti ng NHSs that are preempted and are not i n the acti ve probe
l i st.
E=Expecti ng
repl i es
NHSs that are acti ve and expecti ng repl i es.
R=Respondi ng NHSs that are acti ve and respondi ng.
Related Commands
Command Description
show ip nhrp
multicast
show ip nhrp
summary
show ip nhrp Di spl ays NHRP traffi c stati sti cs.
show ip nhrp
traffic
show ip nhrp summary
To di spl ay Next Hop Resol uti on Protocol (NHRP) mappi ng summary i nformati on, use the show ip
nhrp summary command i n user EXEC or pri vi l eged EXEC mode.
show ip nhrp summary
Command Modes
User EXEC
Pri vi l eged EXEC
Command History
12.2(33)SRB Thi s command was i ntegrated i nto Ci sco IOS rel ease
12.2(33)SRB.
Examples
The fol l owi ng i s sampl e output from the show ip nhrp summary command:
Router# show ip nhrp summary
IP NHRP cache 1 entry, 256 bytes
1 static 0 dynamic 0 incomplete
Tabl e 47 descri bes the si gni fi cant fi el d shown i n the di spl ay.
Table 47 show ip nhrp summary Field Descriptions
Field
Output Description
dynami c NHRP mappi ng i s obtai ned dynami cal l y. The mappi ng entry i s
created usi ng i nformati on from the NHRP resol uti on and
regi strati ons
stati c NHRP mappi ng i s confi gured stati cal l y. Entri es confi gured by the ip
nhrp map command are marked stati c.
i ncompl ete NBMA address i s not known for the target network.
Related Commands
Command Description
show ip nhrp
multicast
show ip nhrp
nhs
show ip nhrp
traffic
show ip nhrp traffic
To di spl ay Next Hop Resol uti on Protocol (NHRP) traffi c stati sti cs, use the show ip nhrp traffic
command i n pri vi l eged EXEC mode.
show ip nhrp traffic [interface tunnel number]
Syntax Description
interface (Opti onal ) Di spl ays NHRP traffi c i nformati on for a gi ven
i nterface.
tunnel
number
(Opti onal ) Speci fi es the tunnel i nterface number.
Command Modes
Pri vi l eged EXEC
Command History
12.4(6)T The command output was enhanced to di spl ay traffi c i ndi cati on
packets (redi rects).
12.4(9)T The interface and tunnel keywords and the number argument
were added.
12.2(33)SRA.
Examples
The fol l owi ng exampl e shows output for a speci fi c tunnel , tunnel 0:
Router# show ip nhrp traffic interface tunnel0
Tunnel0: Max-send limit:100Pkts/10Sec, Usage:0%
Sent: Total 79
18 Resolution Request 10 Resolution Reply 42 Registration Request
0 Registration Reply 3 Purge Request 6 Purge Reply
0 Error Indication 0 Traffic Indication
Rcvd: Total 69
10 Resolution Request 15 Resolution Reply 0 Registration Request
36 Registration Reply 6 Purge Request 2 Purge Reply
0 Error Indication 0 Traffic Indication
Tabl e 48 descri bes the si gni fi cant fi el ds shown i n the di spl ay.
Table 48 show ip nhrp traffic Field Descriptions
Field Description
Tunnel 0 Interface type and number.
Max-send
l i mi t
Maxi mum number of NHRP messages that can be sent by thi s
stati on i n the gi ven i nterval .
Resol uti on
Request
Number of NHRP resol uti on request packets ori gi nated from or
recei ved by thi s stati on.
Resol uti on
Repl y
Number of NHRP resol uti on repl y packets ori gi nated from or
Regi strati on
Request
Number of NHRP regi strati on request packets ori gi nated from or
Regi strati on
Repl y
Number of NHRP regi strati on repl y packets ori gi nated from or
Purge
Request
Number of NHRP purge request packets ori gi nated from or
Purge Repl y Number of NHRP purge repl y packets ori gi nated from or recei ved
by thi s stati on.
Error
Indi cati on
Number of NHRP error packets ori gi nated from or recei ved by thi s
stati on.
Traffi c
Indi cati on
Number of NHRP traffi c i ndi cati on packets (redi rects) ori gi nated
from or recei ved by thi s stati on.
Related Commands
Command Description
debug nhrp condition Enabl es NHRP condi ti onal debuggi ng.
debug nhrp error Enabl es NHRP error l evel debuggi ng.
show nhrp debug-condition
To di spl ay the Next Hop Resol uti on Protocol (NHRP) condi ti onal debuggi ng i nformati on, use the
To di spl ay the Next Hop Resol uti on Protocol (NHRP) condi ti onal debuggi ng i nformati on, use the
show nhrp debug-condition command i n pri vi l eged EXEC mode.
show nhrp debug-condition
Syntax Description
Command Modes
Command History
Examples
The fol l owi ng i s sampl e output from the show nhrp debug-condition command:
Router# show nhrp debug-condition
Peer NBMA addresses under debug are:
1.1.1.1,
Interfaces under debug are:
Tunnel1, Peer Tunnel addresses under debug are:
2.2.2.2,
The output i f sel f-expl anatory. It di spl ays the condi ti onal debuggi ng i nformati on for NHRP.
Related Commands
Command Description
debug nhrp condition Enabl es the NHRP condi ti onal debuggi ng.
Feedback: Help us help you
Please rate this document.
Excellent Poor
This document solv ed my problem.
Yes No Just Browsing
Suggestions to improv e this document.
(512 characters)
If y ou hav e prov ided a suggestion,
please enter y our f ull name and e-mail
address. This inf ormation is optional and
allows us to contact y ou if necessary .
Name
E-mail
Submit
Terms & Conditions | Priv acy Statement | Cookie Policy | Trademarks

Authoritative NHRP

Încărcat de

Informații document

Descriere originală:

Drepturi de autor

Formate disponibile

Partajați acest document

Partajați sau inserați document

Opțiuni de partajare

Vi se pare util acest document?

Este necorespunzător acest conținut?

Drepturi de autor:

Formate disponibile

Authoritative NHRP

Încărcat de

Drepturi de autor:

Formate disponibile

Download this chapter

Download the complete book

S-ar putea să vă placă și