/
SDWAN troubleshooting

SDWAN troubleshooting

Owned by Jean-luc KRIKER, created
Last updated: Nov 06, 2024
2 min read
headerFTU.jpg

LAN Interface

 

LAN Interface

 

 

v600JLK2#show running-config interface gigabitethernet 0/1 interface gigabitethernet 0/1 description l:data,t:lan,o:,c:EKI_Customer,ci:1,p:Pre_Sales,pi:1 ip verify reverse-path ip policy-routing AppPolicy-data in ip tic profile profile_tic_data in ip forwarding-group 1000 ip address 172.10.46.1 255.255.255.0 exit

 

 

WAN Interface

 

 

v600JLK2#show running-config interface gigabitethernet 0/0 interface gigabitethernet 0/0 description l:internet,t:wan,o:,c:EKI_Customer,ci:1,p:Pre_Sales,pi:1 ip vrf forwarding wan_internet ip policy-routing send_to_vasi_internet in ip address dhcp ip dhcp client ignore-default-route ip nat inside overload user-list from_vasi_internet ip nat inside bypass-list not_from_vasi_internet ip nat static 198.51.100.5 self user-list permitSpecificPortsVrf exit

 

v600JLK2#show ip vrf brief VRF Name VRF Id Interfaces wan_internet 2 GigabitEthernet 0/0 Vasi 1/1 v600JLK2#show ip route vrf wan_internet S default [1/0] via 192.168.0.1, GigabitEthernet 0/0 C 192.168.0.0/24 is directly connected, GigabitEthernet 0/0 C 198.51.100.4/30 is directly connected, Vasi 1/1

 

 

 

 

 

 

Remote Breakout

 

ip route

 

tunnel 11

v600JLK2#show running-config interface tunnel interface tunnel 11 description l:internet,t:tunnel,o:HandS,c:EKI_Customer,ci:1,p:Pre_Sales,pi:1 bandwidth-in 1000000 connection-wait-time 15 tunnel mode gre tunnel source vasi 1/0 tunnel destination host hub.internet.hub_massy_200.hands.eki_customer.pre_sales.sdwan.ekinops.com tunnel forwarding-group 16301 tunnel protection ipsec profile Ikev2IpsecProfile-1-internet ip policy-routing AppPolicyTunnel-HandS in ip unnumbered loopback 10011 ip mtu 1374 ip load-sharing least-load-first use-interface gigabitethernet 0/0 ip forwarding-group 1 ip forwarding-group 10011 exit

loopback 10011

v600JLK2#show running-config interface loopback interface loopback 10011 ip address 10.10.5.7 255.255.255.255 exit interface loopback 65535 ip address 192.0.2.1 255.255.255.255 exit

tunnel

v600JLK2#show tunnel endpoint interface status name source destination epIndex status tos ttl fragBit ================================================================================================================================================= Tunnel 11 198.51.100.5 176.149.235.201 0 UP 0 64 clr v600JLK2#show tunnel endpoint interface statistics interface: tunnel 11 destination active upTime downTime startTime stopTime statusChanges startReq stopReq hub.internet.hub_massy_200.hands.eki_customer.pre_sales.sdwan.ekinops.comtrue 2h15m14s 2h15m15s 2h15m15s 2h15m15s 3 2 1

ping tunnel

 

 

 

BGP

 

 

router bgp 65000 timers bgp 10 30 bgp router-id 172.10.46.1 bgp bestpath as-path ignore bgp listen limit 5000 neighbor 10.10.5.1 remote-as 65000 fall-over bfd update-source loopback 10011 exit address-family ipv4 maximum-paths eibgp 16 network 172.10.46.0/24 route-map data neighbor 10.10.5.1 activate addpath-tx-all-paths next-hop-self all allowas-in 1 route-map nhrp-in-11 in route-map nhrp-out-11 out exit exit

 

 

 

 

 

 

 

 

 

Related content