Avatar of ziadalshowaiter
ziadalshowaiter
Flag for Yemen asked on

GRE TUNNEL Recursive error

hi guys

i hope you are doing well

i am preparing for ccie exam using INE topology v5 , now i am stuck at the GRE Tunnel Recursive  error , i applied access-list and then ip prefix-list to solve the issue of the Recursive  , but it is not solved , the tunnel keep getting up and then get down , both the configuration and topology are in the attachment .

i am trying to do GRE tunnel between R4 and R8

can you  please advise what ip prefix list i should applied to solve the issue ,  i treid too much things but it didnt solve the issue

the error massage is below :


*Aug 27 08:20:25.103: %ADJ-5-PARENT: Midchain parent maintenance for IP midchain out of Tunnel100 - looped chain attempting to stack
*Aug 27 08:20:30.023: %TUN-5-RECURDOWN: Tunnel100 temporarily disabled due to recursive routing
*Aug 27 08:20:30.027: %LINEPROTO-5-UPDOWN: Line protocol on Interface Tunnel100, changed state to down
*Aug 27 08:20:30.031: %DUAL-5-NBRCHANGE: EIGRP-IPv4 1: Neighbor 79.0.0.8 (Tunnel100) is down: interface down
R4.txt
R8.txt
INE-Topology.png
RoutersVPNNetworkingNetworking ProtocolsInternet Protocol Security

Avatar of undefined
Last Comment
ziadalshowaiter

8/22/2022 - Mon
Predrag Jovic

My guess is that as soon as EIGRP learns route to reach other side of tunnel through  EIGRP, metric looks better than using physical interface. So, when route through tunnel is inserted in routing table - tunnel collapses.
Possible solutions (if my assumption is correct)
- create static route (better AD) to other side of tunnel (on both routers) that point through physical interface
- make route through tunnel looks worse to reach other side of tunnel (you could use offset list - to make cost through tunnel worse than through physical interface)
- make in EIGRP - passive-interface tunnel 100
I guess you should also include no auto-summary in EIGRP (both sides now advertise 155.1.0.0/16).
ASKER CERTIFIED SOLUTION
ziadalshowaiter

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question
Predrag Jovic

Great. I did not notice that prefix is missing, and to be honest I would miss it again. When added it finally stopped advertisement of tunnel destination network through tunnel.
This is already my knowledgebase.
:)
Thank you.
ziadalshowaiter

ASKER
the problem has been solved
Experts Exchange has (a) saved my job multiple times, (b) saved me hours, days, and even weeks of work, and often (c) makes me look like a superhero! This place is MAGIC!
Walt Forbes
ziadalshowaiter

ASKER
many thanks for you Predrag
ziadalshowaiter

ASKER
the commend change solve the issue