VPN link out of service

[beirut]

I have a network rel 9.0, of 10 OXEs. all sites are connected to one node, via a hybrid link. Network calls go through this main node using VPN hops.
I added a new node, and is having issues calling other distant nodes, it seems the VPN hop is not working. Once I dial distant nodes, requiring a VPN hope, I get the message LINK OUT OF SERVICE.
But the calls to the main node, where the IP link is created between the 2, is going well. Tunnel X25 and broadcast is good. I ran an audit to fix any issues, but did not correct the problem.

[beirut]

I checked the ARS routes, and VPN prefixes, they are all the same as the other nodes.

[vad]

usual error.
F.e. you have central node 1 and some periferal 2, 3 and 4.
When you add node 5. For you not enough to manage VPN 1-5. You need to have (on node 5) declared VPN hop 1-2, 1-3, 1-4.

(for IP - better to manage in additional VPN hop 2-5, 3-5, 4-5). The same for all nodes.

[beirut]

the VPN hop 1-2, 1-3, 1-4 etc..are already declared, but I will try to manage what you are suggesting.

[vad]

present or not VPN overflow prefixes?
some incidents?

[beirut]

no incidents, the trace I did, did not show me major issue,
Currently all the working nodes are configured like 1-2 1-3 1-4...and no complaints..
The VPN prefixes are all declared, local and distant,
What else can I check.?

Thank you very much

[vad]

Check with "suproutage" command (menu 2, after 1,2 and 5) your network (from both end nodes and from central node).
Present another nodes in X25? CAn you ping (172.30.X.Y) periferal nodes?
May be you have wrong IP management?

[beirut]

I will create today all the VPN hops, 2-5,4-5.etc..and will keep you posted.
As for the tunnel, I am able to ping all X25 tunnels,
the suproutage shows, the link is connected.

[beirut]

The ip, or VPN ARS route list number should have the same ID on all the nodes?

[beirut]

I was getting lot of incidents 2873=PH:Update seq synchro:Src=0
msg(exp=8 rcv=0) WaitDelay=386 s
So I disabled, and put Maintenance Packet mod 128= NO
Some of the calls are going to some networks, and not to all of them.
And now am getting the callback message when making a network call.