undesirable call up

[lformelli]

I have an customer with a lot of router 801 connected on ISDN.

He said me which he had an expensive bill from the carrier for each this site.

What does the best strategy to find if there are some undesiderable call up ?

Are there an document about this ?

Thanks

Lorenzo

[oboehmer]

The challenge in those cases is to find out why the calls were established. You can use SNMP to periodically query the CISCO-CALL-HISTORY-MIB where the source and dest address of the packet which triggered the outgoing call is stored (MIB object ciscoCallHistoryDialReason). If you find the culprit, change the access-list referenced in the dialer-group to declare this traffic un-interesting so it doesn't bring up the link or keep the line open (if possible).

[ali-franks]

Try putting an inbound ACL on the Ethernet ports to block Netbios services. UDP ports 137 138 139.

Give it a go - might not be the problem but sounds familiar

Ali