Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

ISDN Backup - Help Needed

Hi,

I know we visited this before but I still have the problem. I have attached a diagram to illustrate my dilemme.

Basically we run OSPF between between Sites A and B. At Site A I have injected a static route from Router 1 to 2. The reason for this that the ISDN backup is on router 2.

What's happening at the moment is the ISDN backup keeps initialing for no apparent reason. Could it be OSPF related?

Check attachments for errors and diagram.

Config on Router 1:

ip route <network B> 255.255.255.0 <router1 IP> 240 name isdn-backup

On Router 2 I have a dialer configured and a route statement pointing to that dialer.

Here is config:

ip route <network B> 255.255.255.0 Dialer3 240 name isdn-backup

Config on Router 2

------------------

interface Dialer3

description <number>/site b-backup

ip address 192.168.225.21 255.255.255.252

no ip redirects

no ip unreachables

no ip proxy-arp

encapsulation ppp

no ip split-horizon

shutdown

dialer pool 1

dialer remote-name cr17

dialer string <number>

dialer-group 1

no keepalive

no cdp enable

ppp authentication pap callin

ppp pap sent-username cr1 password removed

ppp multilink

ppp multilink links maximum 8

ppp multilink links minimum 4

ppp multilink load-threshold 75 either

ppp multilink endpoint hostname

max-reserved-bandwidth 90

end

!

router ospf 2

log-adjacency-changes

redistribute connected subnets

redistribute static subnets

network 192.168.225.0 0.0.0.255 area 0.0.0.0

!

access-list 130 deny eigrp any any

access-list 130 permit ospf any any

access-list 130 permit icmp any any

access-list 130 permit tcp any any

access-list 130 permit udp any any

access-list 180 permit icmp any any

dialer-list 1 protocol ip list 130

Config on Router 1

------------------

router ospf 2

log-adjacency-changes

redistribute connected subnets

redistribute static subnets

network 192.168.225.0 0.0.0.255 area 0.0.0.0

17 REPLIES
Silver

Re: ISDN Backup - Help Needed

Hi ,

Can you change the config as below.

int dialer 3

dialer map 192.168.225.22 name < router 2> broadcast

config)# ip route < destination> 192.168.225.22 240.

config)# access-list 130 deny ospf any any

access-list 130 permit ip any any

OSPF routing packets are denied in the dialer-list.

dialer-list 1 protocol ip list 130

and do the same thing on the other end.

In configuration you allowed ospf and applied it for dialer-list.Actually it should deny ospf.

IMP: remove redistibute static and connected commands configured under ospf.

Thanks,

satish

New Member

Re: ISDN Backup - Help Needed

Will try what you suggested but will the ISDN activate when it needs to?

New Member

Re: ISDN Backup - Help Needed

Satish,

You still online. I have a problem. The Site B has this config on the access-list.

sh run | inc access-list 130

access-list 130 remark user by dialer-list 1

access-list 130 deny eigrp any any

access-list 130 permit icmp any any

access-list 130 permit tcp any any

access-list 130 permit udp any any

The rest is the same, except for this.

Silver

Re: ISDN Backup - Help Needed

Hi Brad ,

I have given example where eigrp is used as a routing protocol.In your case ospf is the routing protocol and u should deny ospf and permit any any.

As soon as ospf route vanishes folating static route comes in to the picture and isdn will be active.

When ospf comes back isdn will be deativated automatically...

whatever document i posted in the previous thread is an example.

Instead of eigrp put ospf and configure ity according to document.

If possible please paste the config of both router, i can do the mofdifications.

Thanks,

satish

Silver

Re: ISDN Backup - Help Needed

Configure the following commands on both routers .i.e End-A router and End-B router.

end -A:

config)# ip route < destination> 192.168.225.22 240.

config)# access-list 130 deny ospf any any

access-list 130 permit ip any any

config)#dialer-list 1 protocol ip list 130

End-B:

config)# ip route < destination> 192.168.225.21 240.

config)# access-list 130 deny ospf any any

access-list 130 permit ip any any

config)# dialer-list 1 protocol ip list 130.

IMP:Before that remove all access-list and dialer-list 1 command from both the routers.

Thanks,

satish.

New Member

Re: ISDN Backup - Help Needed

What you mean by

"IMP:Before that remove all access-list and dialer-list 1 command from both the routers."

You mean before I make the changes you recommend I need to remove the current access-list applied to the dailer-list 1?

New Member

Re: ISDN Backup - Help Needed

Hi Satish,

This did not fix my problem. Look at the log from a debug dialer

126377: Feb 11 14:19:00.234 SAST: Se1/1:15 DDR: Dialing cause ip (s=192.168.225.21, d=224.0.0.5)

126378: Feb 11 14:19:00.234 SAST: Se1/1:15 DDR: Attempting to dial 0116212200

126379: Feb 11 14:19:02.230 SAST: %LINK-3-UPDOWN: Interface Serial1/1:30, changed state to up

126380: Feb 11 14:19:02.230 SAST: Se1/1:30: interface must be fifo queue, force fifo

126381: Feb 11 14:19:02.238 SAST: %DIALER-6-BIND: Interface Se1/1:30 bound to profile Di3

126382: Feb 11 14:19:02.238 SAST: %ISDN-6-CONNECT: Interface Serial1/1:30 is now connected to 0116212200 N/A

126383: Feb 11 14:19:03.294 SAST: %ISDN-6-DISCONNECT: Interface Serial1/1:30 disconnected from , call lasted 1 seconds

There is still something activating this dialer

Silver

Re: ISDN Backup - Help Needed

Hi ,

The below link shows how to configure isdn as a backup .

http://www.cisco.com/en/US/tech/tk713/tk237/technologies_configuration_example09186a00800a3b77.shtml

Thaks,

satish

New Member

Re: ISDN Backup - Help Needed

Hi,

Thanks for the help on the config for the 2 sites. It worked. I still see something trying to activate ospf in access-list 130. How can I see who the culprit is? I see this on both sites A and B.

sh access-lists 130

Extended IP access list 130

10 deny eigrp any any

20 deny ospf any any (5 matches)

30 permit icmp any any

40 permit tcp any any

50 permit udp any any

Silver

Re: ISDN Backup - Help Needed

Hi,

Glad to hear that your problem is resolved.

You can check it with the help of show ip route when the isdn is active.

Thanks,

satish

New Member

Re: ISDN Backup - Help Needed

If it wasn't for the deny ospf statement on the access-list the dialer would be connecting all the time.

sh access-lists 130

Extended IP access list 130

10 deny eigrp any any

20 deny ospf any any (29448 matches)

30 permit icmp any any (345 matches)

40 permit tcp any any (992 matches)

50 permit udp any any (99 matches)

How do I debug these packets?

Silver

Re: ISDN Backup - Help Needed

Hi Brad ,

we are denying the ospf using access-list because it prevent opsf packets from keeping the link up.

You can see what's happening with the packet using the following command.

debug ip packey detail.

Hope it helps you.

IMP: Don't use debug all or debug ip packet detail because router may go down after issuing the debug command due to high cpu utilization.

If you want to debug ip packet then use access-list in debug command as mentioned above.

Thanks,

satish

New Member

Re: ISDN Backup - Help Needed

hey ...

you've been EXTREMELY helpful and VERY patient!

Thanks got the info. I got the source and destination addresses. It does make sense though.

208123: Feb 12 12:33:18.790 SAST: IP: tableid=0, s=ROUTER A IP (local), d=MONITORING SERVER (FastEthernet0/0), routed via FIB

208124: Feb 12 12:33:18.790 SAST: IP: tableid=0, s=ROUTER A IP (local), d=MONITORING SERVER IP (FastEthernet0/0), routed via FIB

208125: Feb 12 12:33:18.790 SAST: IP: tableid=0, s=ROUTER A IP (local), d=MONITORING SERVER IP (FastEthernet0/0), routed via FIB

208126: Feb 12 12:33:18.794 SAST: IP: tableid=0, s=ROUTER A IP (local), d=MONITORING SERVER IP (FastEthernet0/0), routed via FIB

208127: Feb 12 12:33:18.794 SAST: IP: tableid=0, s=ROUTER A IP (local), d=MONITORING SERVER IP (FastEthernet0/0), routed via FIB

208128: Feb 12 12:33:18.794 SAST: IP: tableid=0, s=ROUTER A IP (local), d=MONITORING SERVER IP (FastEthernet0/0), routed via FIB

208129: Feb 12 12:33:18.794 SAST: IP: tableid=0, s=ROUTER A IP (local), d=MONITORING SERVER IP (FastEthernet0/0), routed via FIB

208130: Feb 12 12:33:18.798 SAST: IP: tableid=0, s=ROUTER A IP (local), d=MONITORING SERVER IP (FastEthernet0/0), routed via FIB

208131: Feb 12 12:33:18.798 SAST: IP: tableid=0, s=ROUTER A IP (local), d=MONITORING SERVER IP (FastEthernet0/0), routed via FIB

208132: Feb 12 12:33:18.798 SAST: IP: tableid=0, s=ROUTER A IP (local), d=MONITORING SERVER IP (FastEthernet0/0), routed via FIB

Silver

Re: ISDN Backup - Help Needed

Hi Brad ,

Thanks for your rating..

Netpro is very useful one...

Thanks,

Satish

New Member

Re: ISDN Backup - Help Needed

Why are these appearing on the access-list configured to teh dialer?

Silver

Re: ISDN Backup - Help Needed

Hi Brad ,

Do you have Site Administrator Security Token (SAST) device in LAN ?

Thanks,

satish

New Member

Re: ISDN Backup - Help Needed

I dont know. What is it and how do I check / look for it?

148
Views
5
Helpful
17
Replies
CreatePlease login to create content