Feedback
Table Of Contents
Configuring Backup Data Lines and Remote Management
Configuring Cellular Dial-on-Demand Routing Backup
Configuring DDR Backup Using Dialer Watch
Configuring DDR Backup Using Floating Static Route
Cellular Wireless Modem as Backup with NAT and IPsec Configuration
Configuring Dial Backup and Remote Management Through the Console or Auxiliary Port
Configuring Data Line Backup and Remote Management Through the ISDN S/T Port
Configuring Aggregator and ISDN Peer Router
Configuring Gigabit Ethernet Failover Media
Configuring Backup Data Lines and Remote Management
This chapter describes configuring backup data lines and remote management in the following sections:
•
Configuring Backup Interfaces
•
•
•
•
The Cisco 880 Series Integrated Services Routers (ISRs) support backup data connectivity with a backup data line that enables them to mitigate WAN downtime.
Note
Cisco 880 ISRs also support remote management functions as follows:
•
•
Note
Cisco 892F ISRs have a Gigabit Ethernet (GE) port that supports copper connections or a small-form-factor pluggable (SFP) port that supports fiber connections and can be configured for failover redundancy when the network goes down.
Configuring Backup Interfaces
When the router receives an indication that the primary interface is down, the backup interface becomes enabled. After the primary connection has been restored for a specified period, the backup interface is disabled.
Even if the backup interface comes out of standby mode, the router does not enable the backup interface unless the router receives the traffic specified for that backup interface.
Table 6-1 shows the backup interfaces for Cisco 880 and Cisco 890 series ISRs, along with their port designations. Basic configurations for these interfaces are given in the "Configuring WAN Interfaces" section of Chapter 3 "Basic Router Configuration."
Table 6-1 Model Numbers and Data Line Backup Capabilities
881G, 886G, 887G, 887VG, 888G
—
Yes
—
886, 886VA, 887, 887V, 888, 888E
Yes
—
—
891
—
—
Yes
892, 892F
Yes
—
—
To configure your router with a backup interface, perform these steps, beginning in global configuration mode:
SUMMARY STEPS
1.
2.
3.
DETAILED STEPS
Configuring Cellular Dial-on-Demand Routing Backup
To monitor the primary connection and initiate the backup connection over the cellular interface when needed, the router can use one of the following methods:
•
•
•
Note
Configuring DDR Backup Using Dialer Watch
To initiate dialer watch, you must configure the interface to perform dial-on-demand routing (DDR) and backup. Use traditional DDR configuration commands, such as dialer maps, for DDR capabilities. To enable dialer watch on the backup interface and create a dialer list, use the following commands in interface configuration mode.
SUMMARY STEPS
1.
2.
3.
4.
5.
6.
7.
8.
or
dialer group dialer group number
DETAILED STEPS
Configuring DDR Backup Using Floating Static Route
To configure a floating static default route on the secondary interface, use the following commands, beginning in the global configuration mode.
Note
SUMMARY STEPS
1.
2.
DETAILED STEPS
Cellular Wireless Modem as Backup with NAT and IPsec Configuration
The following example shows how to configure the 3G wireless modem as backup with NAT and IPsec on either GSM or CDMA networks.
Note
Current configuration : 3433 bytes!version 12.4no service padservice timestamps debug datetime msecservice timestamps log datetime msecno service password-encryption!hostname Router!boot-start-markerboot-end-marker!!no aaa new-model!!!!crypto isakmp policy 1encr 3desauthentication pre-sharecrypto isakmp key gsm address 128.107.241.234 *** or cdma ***!!crypto ipsec transform-set gsm ah-sha-hmac esp-3des *** or cdma ***!crypto map gsm1 10 ipsec-isakmp *** or cdma1 ***set peer 128.107.241.234set transform-set gsm *** or cdma ***match address 103!!!no ip dhcp use vrf connectedip dhcp excluded-address 10.4.0.254!ip dhcp pool gsmpool *** or cdmapool ***network 10.4.0.0 255.255.0.0dns-server 66.209.10.201 66.102.163.231default-router 10.4.0.254!!ip cef!no ipv6 cefmultilink bundle-name authenticatedchat-script gsm "" "atdt*98*1#" TIMEOUT 30 "CONNECT" *** or cdma ***!!archivelog confighidekeys!!controller DSL 0mode atmline-term cpeline-mode 4-wire standardline-rate 4608!!!!interface ATM0no ip addressip virtual-reassemblyload-interval 30no atm ilmi-keepalive!interface ATM0.1 point-to-pointbackup interface Cellular0ip nat outsideip virtual-reassemblypvc 0/35pppoe-client dial-pool-number 2!!interface FastEthernet0!interface FastEthernet1!interface FastEthernet2!interface FastEthernet3!interface Cellular0ip address negotiatedip nat outsideip virtual-reassemblyencapsulation pppno ip mroute-cachedialer in-banddialer idle-timeout 0dialer string gsm *** or cdma ***dialer-group 1async mode interactiveno ppp lcp fast-startppp chap hostname chunahayev@wwan.ccsppp chap password 0 B7uhestacrppp ipcp dns requestcrypto map gsm1 *** or cdma1 ***!interface Vlan1description used as default gateway address for DHCP clientsip address 10.4.0.254 255.255.0.0ip nat insideip virtual-reassembly!interface Dialer2ip address negotiatedip mtu 1492ip nat outsideip virtual-reassemblyencapsulation pppload-interval 30dialer pool 2dialer-group 2ppp authentication chap callinppp chap hostname cisco@dsl.comppp chap password 0 ciscoppp ipcp dns requestcrypto map gsm1 *** or cdma1 ***!ip local policy route-map track-primary-ifip forward-protocol ndip route 0.0.0.0 0.0.0.0 Dialer2 track 234ip route 0.0.0.0 0.0.0.0 Cellular0 254no ip http serverno ip http secure-server!!ip nat inside source route-map nat2cell interface Cellular0 overloadip nat inside source route-map nat2dsl interface Dialer2 overload!ip sla 1icmp-echo 209.131.36.158 source-interface Dialer2timeout 1000frequency 2ip sla schedule 1 life forever start-time nowaccess-list 1 permit anyaccess-list 2 permit 10.4.0.0 0.0.255.255access-list 3 permit anyaccess-list 101 permit ip 10.4.0.0 0.0.255.255 anyaccess-list 102 permit icmp any host 209.131.36.158access-list 103 permit ip host 166.136.225.89 128.107.0.0 0.0.255.255access-list 103 permit ip host 75.40.113.246 128.107.0.0 0.0.255.255dialer-list 1 protocol ip list 1dialer-list 2 protocol ip permit!!!route-map track-primary-if permit 10match ip address 102set interface Dialer2!route-map nat2dsl permit 10match ip address 101match interface Dialer2!route-map nat2cell permit 10match ip address 101match interface Cellular0!!control-plane!!line con 0no modem enableline aux 0line 3exec-timeout 0 0script dialer gsm *** or cdma ***loginmodem InOutno execline vty 0 4login!scheduler max-task-time 5000!webvpn cefendConfiguring Dial Backup and Remote Management Through the Console or Auxiliary Port
When customer premises equipment, such as a Cisco 880 series ISR, is connected to an ISP, an IP address is dynamically assigned to the router, or the IP address may be assigned by the router peer through the centrally managed function. The dial backup feature can be added to provide a failover route in case the primary line fails. The Cisco 880 series ISRs can use the auxiliary port for dial backup and remote management.
Figure 6-1 shows the network configuration used for remote management access and for providing backup to the primary WAN line.
Figure 6-1 Dial Backup and Remote Management Through the Auxiliary Port
To configure dial backup and remote management for these routers, perform these steps, beginning in global configuration mode:
SUMMARY STEPS
1.
2.
3.
4.
5.
6.
7.
8.
9.
10.
11.
12.
13.
14.
15.
16.
17.
18.
DETAILED STEPS
Step 1
ip name-server server-address
Example:
Router(config)# ip name-server 192.168.28.12Enters your ISP DNS IP address.
TipStep 2
ip dhcp pool name
Example:
Router(config)# ip dhcp pool 1Creates a DHCP address pool on the router and enters DHCP pool configuration mode. The name argument can be a string or an integer.
Configure the DHCP address pool. For sample commands that you can use in DHCP pool configuration mode, see the "Example" section.
Step 3
exit
Example:
Router(config-dhcp)#exitExits config-dhcp mode and enters global configuration mode.
Step 4
chat-script script-name expect-send
Example:
Router(config)#chat-script Dialout ABORT ERROR ABORT BUSY "" "AT" OK "ATDT 5555102 T" TIMEOUT 45 CONNECT \cConfigures a chat script used in dial-on-demand routing (DDR) to give commands for dialing a modem and for logging in to remote systems. The defined script is used to place a call over a modem connected to the PSTN.
Step 5
interface type number
Example:
Router(config)#interface Async 1Creates and enters configuration mode for the asynchronous interface.
Configure the asynchronous interface. For sample commands that you can use in asynchronous interface configuration mode, see the "Example" section.
Step 6
exit
Example:
Router(config-if)# exitEnters global configuration mode.
Step 7
interface type number
Example:
Router(config)#interface Dialer 3Creates and enters configuration mode for the dilaer interface.
Step 8
dialer watch-group group-number
Example:
Router(config-if)# dialer watch-group 1Specifies the group number for the watch list.
Step 9
exit
Example:
Router(config-if)#exitExits the interface configuration mode.
Step 10
ip nat inside source {list access-list-number} {interface type number | pool name} [overload]
Example:
Router(config)#ip nat inside source list 101interface Dialer 3 overloadEnables dynamic translation of addresses on the inside interface.
Step 11
ip route prefix mask {ip-address | interface-type interface-number [ip-address]}
Example:
Router(config)# ip route 0.0.0.0 0.0.0.0 22.0.0.2Sets the IP route to point to the dialer interface as a default gateway.
Step 12
access-list access-list-number {deny | permit} source [source-wildcard]
Example:
Router(config)# access-list 1 permit 192.168.0.0 0.0.255.255 anyDefines an extended access list that indicates which addresses need translation.
Step 13
dialerwatch-list group-number {ip ip-address address-mask | delay route-check initial seconds}
Example:
Router(config)# dialer watch-list 1 ip 22.0.0.2 255.255.255.255Evaluates the status of the primary link, based on the existence of routes to the peer. The address 22.0.0.2 is the peer IP address of the ISP.
Step 14
line [aux | console | tty | vty] line-number [ending-line-number]
Example:
Router(config)# line console 0Enters configuration mode for the line interface.
Step 15
modem enable
Example:
Router(config-line)# modem enableSwitches the port from console to auxiliary port function.
Step 16
exit
Example:
Router(config-line)# exitExits the configure interface mode.
Step 17
line [aux | console | tty | vty] line-number [ending-line-number]
Example:
Router(config)# line aux 0Enters configuration mode for the auxiliary interface.
Step 18
flowcontrol {none | software [lock] [in | out] | hardware [in | out]}
Example:
Router(config)# flowcontrol hardwareEnables hardware signal flow control.
Example
The following configuration example specifies an IP address for the ATM interface through PPP and IPCP address negotiation and dial backup over the console port.
!ip name-server 192.168.28.12ip dhcp excluded-address 192.168.1.1!ip dhcp pool 1import allnetwork 192.168.1.0 255.255.255.0default-router 192.168.1.1!! Need to use your own correct ISP phone number.modemcap entry MY-USER_MODEM:MSC=&F1S0=1chat-script Dialout ABORT ERROR ABORT BUSY "" "AT" OK "ATDT 5555102\T"TIMEOUT 45 CONNECT \c!!!!interface vlan 1ip address 192.168.1.1 255.255.255.0ip nat insideip tcp adjust-mss 1452hold-queue 100 out!! Dial backup and remote management physical interface.interface Async1no ip addressencapsulation pppdialer in-banddialer pool-member 3async default routingasync dynamic routingasync mode dedicatedppp authentication pap callin!interface ATM0mtu 1492no ip addressno atm ilmi-keepalivepvc 0/35pppoe-client dial-pool-number 1!dsl operating-mode auto!! Primary WAN link.interface Dialer1ip address negotiatedip nat outsideencapsulation pppdialer pool 1ppp authentication pap callinppp pap sent-username account password 7 passppp ipcp dns requestppp ipcp wins requestppp ipcp mask request!! Dialer backup logical interface.interface Dialer3ip address negotiatedip nat outsideencapsulation pppno ip route-cacheno ip mroute-cachedialer pool 3dialer idle-timeout 60dialer string 5555102 modem-script Dialoutdialer watch-group 1!! Remote management PC IP address.peer default ip address 192.168.2.2no cdp enable!! Need to use your own ISP account and password.ppp pap sent-username account password 7 passppp ipcp dns requestppp ipcp wins requestppp ipcp mask request!! IP NAT over Dialer interface using route-map.ip nat inside source route-map main interface Dialer1 overloadip nat inside source route-map secondary interface Dialer3 overloadip classless!! When primary link is up again, distance 50 will override 80 if dial backup! has not timed out. Use multiple routes because peer IP addresses are alternated! among them when the CPE is connected.ip route 0.0.0.0 0.0.0.0 64.161.31.254 50ip route 0.0.0.0 0.0.0.0 66.125.91.254 50ip route 0.0.0.0 0.0.0.0 64.174.91.254 50ip route 0.0.0.0 0.0.0.0 63.203.35.136 80ip route 0.0.0.0 0.0.0.0 63.203.35.137 80ip route 0.0.0.0 0.0.0.0 63.203.35.138 80ip route 0.0.0.0 0.0.0.0 63.203.35.139 80ip route 0.0.0.0 0.0.0.0 63.203.35.140 80ip route 0.0.0.0 0.0.0.0 63.203.35.141 80ip route 0.0.0.0 0.0.0.0 Dialer1 150no ip http serverip pim bidir-enable!! PC IP address behind CPE.access-list 101 permit ip 192.168.0.0 0.0.255.255 anyaccess-list 103 permit ip 192.168.0.0 0.0.255.255 any!! Watch multiple IP addresses because peers are alternated! among them when the CPE is connected.dialer watch-list 1 ip 64.161.31.254 255.255.255.255dialer watch-list 1 ip 64.174.91.254 255.255.255.255dialer watch-list 1 ip 64.125.91.254 255.255.255.255!! Dial backup will kick in if primary link is not available! 5 minutes after CPE starts up.dialer watch-list 1 delay route-check initial 300dialer-list 1 protocol ip permit!! Direct traffic to an interface only if the dialer is assigned an IP address.route-map main permit 10match ip address 101match interface Dialer1!route-map secondary permit 10match ip address 103match interface Dialer3!! Change console to aux function.line con 0exec-timedout 0 0modem enablestopbits 1line aux 0exec-timeout 0 0! To enable and communicate with the external modem properly.script dialer Dialoutmodem InOutmodem autoconfigure discoverytransport input allstopbits 1speed 115200flowcontrol hardwareline vty 0 4exec-timeout 0 0password ciscologin!scheduler max-task-time 5000endConfiguring Data Line Backup and Remote Management Through the ISDN S/T Port
Cisco 880 series routers can use the ISDN S/T port for remote management. Figure 6-2 and Figure 6-3 show two typical network configurations that provide remote management access and backup for the primary WAN line. In Figure 6-2, the dial backup link goes through a customer premises equipment (CPE) splitter, a digital subscriber line access multiplexer (DSLAM), and a central office (CO) splitter before connecting to the ISDN switch. In Figure 6-3, the dial backup link goes directly from the router to the ISDN switch.
Figure 6-2 Data Line Backup Through CPE Splitter, DSLAM, and CO Splitter
Figure 6-3 Data Line Backup Directly from Router to ISDN Switch
To configure dial backup and remote management through the ISDN S/T port of your router, perform the following procedures:
•
Configuring ISDN Settings
Note
To configure your router ISDN interface for use as a backup interface, perform these steps, beginning in global configuration mode:
SUMMARY STEPS
1.
2.
3.
4.
5.
6.
7.
8.
9.
10.
11.
12.
13.
14.
DETAILED STEPS
Step 1
isdn switch-type switch-type
Example:
Router(config)# isdn switch-type basic-net3Specifies the ISDN switch type.
The example specifies a switch type used in Australia, Europe, and the United Kingdom. For details on other supported switch types, see the Cisco IOS Dial Technologies Command Reference.
Step 2
interface type number
Example:
Router(config)# interface bri 0Enters configuration mode for the ISDN BRI.
Step 3
encapsulation encapsulation-type
Example:
Router(config-if)# encapsulation pppSets the BRI0 interface encapsulation type.
Step 4
dialer pool-member number
Example:
Router(config-if)# dialer pool-member 1Specifies the dialer pool membership.
Step 5
isdn switch-type switch-type
Example:
Router(config-if)# isdn switch-type basic-net3Specifies the ISDN switch type.
Step 6
exit
Example:
Router(config-if)# exitExits configuration interface mode and enters global configuration mode.
Step 7
interface dialer dialer-rotary-group-number
Example:
Router(config)# interface dialer 0Creates a dialer interface (numbered 0 to 255) and enters interface configuration mode.
Step 8
ip address negotiated
Example:
Router(config-if)# ip address negotiatedSpecifies that the IP address for the interface is obtained through PPP/IPCP (IP Control Protocol) address negotiation. The IP address is obtained from the peer.
Step 9
encapsulation encapsulation-type
Example:
Router(config-if)# encapsulation pppSets the encapsulation type to PPP for the interface.
Step 10
dialer pool number
Example:
Router(config-if)# dialer pool 1Specifies the dialer pool to be used.
In the example, the dialer pool 1 setting associates the dialer 0 interface with the BRI0 interface because the BRI0 dialer pool-member value is 1.
Step 11
dialer string dial-string#[:isdn-subaddress]
Example:
Router(config-if)# dialer string 384040Specifies the telephone number to be dialed.
Step 12
dialer-group group-number
Example:
Router(config-if)# dialer group 1Assigns the dialer interface to a dialer group (1-10).
Step 13
exit
Example:
Router(config-if)# exitExits dialer 0 interface configuration mode, and enters global configuration mode.
Step 14
dialer-list dialer-group protocol protocol-name {permit | deny | list access-list-number | access-group}
Example:
Router(config)# dialer-list 1 protocol ip permitCreates a dialer list for packets of interest to be forwarded through the specified interface dialer group.
In the example, dialer-list 1 corresponds to dialer-group 1.
For details about this command and additional parameters that can be set, see Cisco IOS Dial Technologies Command Reference.
Configuring Aggregator and ISDN Peer Router
The ISDN peer router is any router that has an ISDN interface and can communicate through a public ISDN network to reach your Cisco router ISDN interface. The ISDN peer router provides Internet access for your Cisco router during the ATM network downtime.
The aggregator is typically a concentrator router where your Cisco router ATM PVC terminates. In the following configuration example, the aggregator is configured as a PPPoE server.
! This portion of the example configures the aggregator.vpdn enableno vpdn logging!vpdn-group 1accept-dialinprotocol pppoevirtual-template 1!interface Ethernet3description "4700ref-1"ip address 40.1.1.1 255.255.255.0media-type 10BaseT!interface Ethernet4ip address 30.1.1.1 255.255.255.0media-type 10BaseT!interface Virtual-Template1ip address 22.0.0.2 255.255.255.0ip mtu 1492peer default ip address pool adsl!interface ATM0no ip addresspvc 1/40encapsulation aal5snapprotocol pppoe!no atm limi-keepalive!ip local pool adsl 22.0.0.1ip classlessip route 0.0.0.0 0.0.0.0 22.0.0.1 50ip route 0.0.0.0 0.0.0.0 30.1.1.2.80! This portion of the example configures the ISDN peer.isdn switch-type basic-net3!interface Ethernet0ip address 30.1.1.2 255.0.0.0!interface BRI0description "to 836-dialbackup"no ip addressencapsulation pppdialer pool-member 1isdn switch-type basic-net3!interface Dialer0ip address 192.168.2.2 255.255.255.0encapsulation pppdialer pool 1dialer string 384020dialer-group 1peer default ip address pool isdn!ip local pool isdn 192.168.2.1ip http serverip classlessip route 0.0.0.0 0.0.0.0 192.168.2.1ip route 40.0.0.0 255.0.0.0 30.1.1.1!dialer-list 1 protocol ip permit!Configuring Gigabit Ethernet Failover Media
Cisco 892F routers have a Gigabit Ethernet (GE) port that supports copper connections or a small-form-factor pluggable (SFP) port that supports fiber connections. Media can be configured for failover redundancy when the network goes down.
To assign primary and secondary failover media on the GE-SFP port, perform these steps, beginning in global configuration mode.
SUMMARY STEPS
1.
2.
3.
4.
5.
DETAILED STEPS
Auto-Detect
The Auto-Detect feature is enabled if media-type is not configured. This feature automatically detects which media is connected and links up. If both media are connected, whichever media comes up first is linked up.
Note
To configure the Auto-Detect feature, perform the following steps, starting in global configuration mode:
SUMMARY STEPS
1.
2.
3.
DETAILED STEPS
Configuring Third-Party SFPs
Small Form-Factor Pluggables (SFPs) that are not Cisco certified are called third-party SFPs. Cisco approved means the SFPs have undergone rigorous testing with Cisco products and the SFPs are guaranteed to have 100% compatibility.
Third-party SFPs are manufactured by companies that are not on the Cisco-approved Vendor List (AVL). Currently, Cisco ISR G2 routers support only Cisco-approved SFPs. From Release 15.3(2)T, Cisco ISR G2 routers recognize third-party SFPs.
Note
Restrictions
•
•
•
•
•
•
•
•
•
•
•
SUMMARY STEPS
1.
2.
3.
4.
5.
6.
7.
8.
9.
DETAILED STEPS
Examples
This example shows how to configure a third-party SFP on a Cisco ISR G2 Series Router:
Router# configure terminalRouter(config-if)# service unsupported-transceiverRouter(config)# interface ethernet 0/3/0Router(config-if)# media-type sfpRouter(config-if)# speed 100Router(config-if)# shutdownRouter(config-if)# no shutdownRouter(config-if)# exitRouter(config)# exit
