Cisco 1117 cellular interface IP is unassigned after some times later

[mustafabesirogluitu]

We configured the cellular interface as follows:

After some times later the IP adress assigned is downing, we also configured static route to ping some dumy IP like 1.1.1.1, but the result is same. 

interface Cellular0/2/0
ip address negotiated
load-interval 30
dialer in-band
dialer idle-timeout 0
dialer watch-group 2
dialer-group 2
ipv6 enable
pulse-time 1
end

ip sla 2
icmp-echo 1.1.1.1 source-interface Cellular0/2/0
frequency 5
ip sla schedule 2 life forever start-time now

How can we fix this problem?

[Georg Pauwen]

Hello,

post the full running configuration (sh run) of your C1117 router...

[mustafabesirogluitu]

All config is as follows:

sh running-config
Building configuration...

Current configuration : 10024 bytes
!
version 16.12
service timestamps debug datetime msec localtime
service timestamps log datetime msec localtime
service call-home
platform qfp utilization monitor load 80
platform punt-keepalive disable-kernel-core
!
hostname xx
!
boot-start-marker
boot-end-marker
!

!
aaa new-model
!
!
aaa group server tacacs+ VPN
server name vpn1
server name vpn2
!
aaa authentication login VPN_AUTH group VPN local
aaa authorization config-commands
aaa authorization exec VPN_EXEC group VPN local
aaa accounting exec default start-stop group VPN
!
!
!
!
!
!
aaa session-id common
clock timezone GMT 2 0
clock summer-time EED recurring
call-home
! If contact email address in call-home is configured as sch-smart-licensing@cisco.com
! the email address configured in Cisco Smart License Portal will be used as contact email address to send SCH notifications.
contact-email-addr sch-smart-licensing@cisco.com
profile "CiscoTAC-1"
active
destination transport-method http
no destination transport-method email
!
no ip domain lookup
ip domain name tellcom
!
!
!
login on-success log
ipv6 unicast-routing
!
!
!
!
!
!
!
subscriber templating
multilink bundle-name authenticated
!
chat-script lte "" "ATDT*99***1#" TIMEOUT 10 "CONNECT"
!
!
crypto pki trustpoint TP-self-signed-897615068
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-897615068
revocation-check none
rsakeypair TP-self-signed-897615068
!
crypto pki trustpoint SLA-TrustPoint
enrollment pkcs12
revocation-check crl
!
!
crypto pki certificate chain TP-self-signed-897615068
certificate self-signed 01
3082032E 30820216 A0030201 02020101 300D0609 2A864886 F70D0101 05050030
30312E30 2C060355 04031325 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 38393736 31353036 38301E17 0D323130 33333030 37303331
385A170D 33303031 30313030 30303030 5A303031 2E302C06 03550403 1325494F
532D5365 6C662D53 69676E65 642D4365 72746966 69636174 652D3839 37363135
30363830 82012230 0D06092A 864886F7 0D010101 05000382 010F0030 82010A02
82010100 EC8284BE 45D199BE DC34BB57 5230E6EF 4BD4DE38 0179DBAE 4AC5E6C5
F23B8BB1 528154DB 30FF003F AC601B1A 139C0A44 0C897A52 0F2B699D 97B9501C
39996D4B 1F6DAC00 80D38490 C9B65CB3 2D07C9FB 6874CA55 E66C56BB EAEBAC3E
07BB8A90 0E301CF3 692746E0 0E330AEF 5716A512 419A2173 B76BA4D2 3A1051E1
6418536E D14E04CF A4E24A5F A5C5743E E2643D83 968AAE8D F80BCB70 571ABEAD
45D9ACFB 3970659E B13EBE78 DBE56677 201E0711 05EBB9F1 474EA50D 65DDE1C2
25C37F78 8D276ED4 6D23A297 243C4B71 B7867315 35230A84 70B6E4C1 6F9785C5
66BAE008 66EC728A BA642929 10ABD7B3 AAA56C98 127C9D40 C8B1AA18 236E432A
25E4B5F3 02030100 01A35330 51300F06 03551D13 0101FF04 05300301 01FF301F
0603551D 23041830 16801477 730BFE5E 1795CA42 8516546D 0A6E0AFD F9AF4E30
1D060355 1D0E0416 04147773 0BFE5E17 95CA4285 16546D0A 6E0AFDF9 AF4E300D
06092A86 4886F70D 01010505 00038201 01006920 0722B007 87EC95FD E071B898
92495E29 53EBF341 AB3091BA D4D9765C D8E4DCB8 059C726C 0E37639C 0D889A16
AD64F648 B6E0D461 BCE9AE0E 28DBED59 B8504A31 1A436583 8F95F024 20F192D3
20812890 1264B213 FC09D09A EEA18E04 7E6DC006 2B8F6201 EE39EB0B B1CD01DC
E63F186A D5212782 BD690472 7DDCEF7C 076A1972 0140ED63 A4E47413 DBE021F4
8A86F335 2EB4CA1E EFD0A3DC 3269F97F 95086EAC 78DEA13C 86CCCBE5 563FADD2
25F33548 9FCDBC8A 2BBAB467 8CA6B81E FC1DA5AC 75FC198B E7E4BA67 DF8B68A2
77160F34 DC6A673C B8979A95 0D1852C2 BA37CF3A 99E37385 13199D61 C0E806F1
1B6275F7 55528E30 26DC9F85 933C15C5 DE10
quit
crypto pki certificate chain SLA-TrustPoint
certificate ca 01
30820321 30820209 A0030201 02020101 300D0609 2A864886 F70D0101 0B050030
32310E30 0C060355 040A1305 43697363 6F312030 1E060355 04031317 43697363
6F204C69 63656E73 696E6720 526F6F74 20434130 1E170D31 33303533 30313934
3834375A 170D3338 30353330 31393438 34375A30 32310E30 0C060355 040A1305
43697363 6F312030 1E060355 04031317 43697363 6F204C69 63656E73 696E6720
526F6F74 20434130 82012230 0D06092A 864886F7 0D010101 05000382 010F0030
82010A02 82010100 A6BCBD96 131E05F7 145EA72C 2CD686E6 17222EA1 F1EFF64D
CBB4C798 212AA147 C655D8D7 9471380D 8711441E 1AAF071A 9CAE6388 8A38E520
1C394D78 462EF239 C659F715 B98C0A59 5BBB5CBD 0CFEBEA3 700A8BF7 D8F256EE
4AA4E80D DB6FD1C9 60B1FD18 FFC69C96 6FA68957 A2617DE7 104FDC5F EA2956AC
7390A3EB 2B5436AD C847A2C5 DAB553EB 69A9A535 58E9F3E3 C0BD23CF 58BD7188
68E69491 20F320E7 948E71D7 AE3BCC84 F10684C7 4BC8E00F 539BA42B 42C68BB7
C7479096 B4CB2D62 EA2F505D C7B062A4 6811D95B E8250FC4 5D5D5FB8 8F27D191
C55F0D76 61F9A4CD 3D992327 A8BB03BD 4E6D7069 7CBADF8B DF5F4368 95135E44
DFC7C6CF 04DD7FD1 02030100 01A34230 40300E06 03551D0F 0101FF04 04030201
06300F06 03551D13 0101FF04 05300301 01FF301D 0603551D 0E041604 1449DC85
4B3D31E5 1B3E6A17 606AF333 3D3B4C73 E8300D06 092A8648 86F70D01 010B0500
03820101 00507F24 D3932A66 86025D9F E838AE5C 6D4DF6B0 49631C78 240DA905
604EDCDE FF4FED2B 77FC460E CD636FDB DD44681E 3A5673AB 9093D3B1 6C9E3D8B
D98987BF E40CBD9E 1AECA0C2 2189BB5C 8FA85686 CD98B646 5575B146 8DFC66A8
467A3DF4 4D565700 6ADF0F0D CF835015 3C04FF7C 21E878AC 11BA9CD2 55A9232C
7CA7B7E6 C1AF74F6 152E99B7 B1FCF9BB E973DE7F 5BDDEB86 C71E3B49 1765308B
5FB0DA06 B92AFE7F 494E8A9E 07B85737 F3A58BE1 1A48A229 C37C1E69 39F08678
80DDCD16 D6BACECA EEBC7CF9 8428787B 35202CDC 60E4616A B623CDBD 230E3AFB
418616A9 4093E049 4D10AB75 27E86F73 932E35B5 8862FDAE 0275156F 719BB2F0
D697DF7F 28
quit
!
!
diagnostic bootup level minimal
!
spanning-tree extend system-id
!
username tellcom privilege 15 secret 9 $9$hYaP6PfYAQH7jk$kuWaG9Lu1WLnWdWKIuLVQXI8INLMwOxBocd7wwr3M9E
!
redundancy
mode none
!
controller Cellular 0/2/0
!
controller VDSL 0/3/0
!
!
vlan internal allocation policy ascending
!
track 1 ip route 10.63.134.65 255.255.255.255 reachability
!
track 2 ip sla 2
delay down 5 up 10
!
track 3 ip route 10.63.133.6 255.255.255.255 reachability
!
!
!
!
!
!
interface GigabitEthernet0/0/0
no ip address
shutdown
negotiation auto
!
interface GigabitEthernet0/1/0
!
interface GigabitEthernet0/1/1
!
interface GigabitEthernet0/1/2
!
interface GigabitEthernet0/1/3
!
interface Cellular0/2/0
description T-SOL_MOBILE_BACKUP
ip address negotiated
load-interval 30
dialer in-band
dialer idle-timeout 0
dialer enable-timeout 3
dialer redial interval 10 attempts 100 re-enable 5
dialer watch-group 2
dialer-group 2
pulse-time 1
!
interface Cellular0/2/1
no ip address
shutdown
!
interface ATM0/3/0
no ip address
shutdown
atm oversubscribe factor 2
no atm enable-ilmi-trap
!
interface Ethernet0/3/0
no ip address
no negotiation auto
!
interface Ethernet0/3/0.35
encapsulation dot1Q 35
pppoe enable group global
pppoe-client dial-pool-number 1
!
interface Vlan1
ip address 10.50.30.1 255.255.255.0
ip policy route-map Nexthop_Dialer
!
interface Dialer0
ip address negotiated
no ip proxy-arp
encapsulation ppp
ip tcp adjust-mss 1436
dialer pool 1
dialer-group 1
no cdp enable
ppp authentication pap callin
ppp pap sent-username 110141497409@tellcomsdsl password 0 1234567
ip virtual-reassembly
!
ip forward-protocol nd
no ip http server
ip http authentication local
no ip http secure-server
ip route 0.0.0.0 0.0.0.0 Cellular0/2/0 track 2
ip route 0.0.0.0 0.0.0.0 Dialer0 200
ip route 1.1.1.1 255.255.255.255 Cellular0/2/0 permanent
!
!
!
ip sla 2
icmp-echo 1.1.1.1 source-interface Cellular0/2/0
frequency 5
ip sla schedule 2 life forever start-time now
ip access-list standard 7
70 permit 176.235.31.55
10 permit 85.29.60.0 0.0.0.255
20 permit 85.29.26.0 0.0.0.255
30 permit 92.45.0.0 0.0.0.31
40 permit 176.43.137.0 0.0.0.255
50 permit 176.43.138.0 0.0.0.255
60 permit 213.14.208.0 0.0.0.255
ip access-list extended 2220
10 permit ip 10.50.30.0 0.0.0.127 any
dialer-list 1 protocol ip permit
dialer-list 2 protocol ip permit
!
!
route-map Nexthop_Dialer permit 10
match ip address 2220
set ip next-hop verify-availability 10.41.140.1 10 track 3
!
!
tacacs server vpn1
address ipv4 176.43.137.66
key VerYs3cr3taqskey
tacacs server vpn2
address ipv4 176.235.226.1
key VerYs3cr3taqskey
!
!
!
control-plane
!
banner login ^C
*
!
line con 0
transport input none
stopbits 1
line vty 0 4
exec-timeout 3 0
privilege level 15
authorization exec VPN_EXEC
login authentication VPN_AUTH
transport input ssh
line vty 5 15
exec-timeout 3 0
privilege level 15
authorization exec VPN_EXEC
login authentication VPN_AUTH
transport input ssh
!
!
!
!
!
event manager applet PING_to_1.1.1.1
event track 1 state down
action 1.0 syslog msg "Cell IP Almiyor bi Ping Atalim"
action 2.0 wait 60
action 2.1 cli command "enable"
action 2.3 cli command "ping 1.1.1.1 repeat 1000"
action 3.0 syslog msg "Ping Atildi"
!
end

[Georg Pauwen]

Hello,

I think your interfaces support the 'backup interface' command, if they do, try the config below (which is significantly different from what you have now - important parts marked in bold

Current configuration : 10024 bytes
!
version 16.12
service timestamps debug datetime msec localtime
service timestamps log datetime msec localtime
service call-home
platform qfp utilization monitor load 80
platform punt-keepalive disable-kernel-core
!
hostname xx
!
boot-start-marker
boot-end-marker
!
aaa new-model
!
aaa group server tacacs+ VPN
server name vpn1
server name vpn2
!
aaa authentication login VPN_AUTH group VPN local
aaa authorization config-commands
aaa authorization exec VPN_EXEC group VPN local
aaa accounting exec default start-stop group VPN
!
aaa session-id common
clock timezone GMT 2 0
clock summer-time EED recurring
call-home
! If contact email address in call-home is configured as sch-smart-licensing@cisco.com
! the email address configured in Cisco Smart License Portal will be used as contact email address to send SCH notifications.
contact-email-addr sch-smart-licensing@cisco.com
profile "CiscoTAC-1"
active
destination transport-method http
no destination transport-method email
!
no ip domain lookup
ip domain name tellcom
!
login on-success log
ipv6 unicast-routing
!
subscriber templating
multilink bundle-name authenticated
!
chat-script lte "" "ATDT*99***1#" TIMEOUT 10 "CONNECT"
!
crypto pki trustpoint TP-self-signed-897615068
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-897615068
revocation-check none
rsakeypair TP-self-signed-897615068
!
crypto pki trustpoint SLA-TrustPoint
enrollment pkcs12
revocation-check crl
!
crypto pki certificate chain TP-self-signed-897615068
certificate self-signed 01
3082032E 30820216 A0030201 02020101 300D0609 2A864886 F70D0101 05050030
30312E30 2C060355 04031325 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 38393736 31353036 38301E17 0D323130 33333030 37303331
385A170D 33303031 30313030 30303030 5A303031 2E302C06 03550403 1325494F
532D5365 6C662D53 69676E65 642D4365 72746966 69636174 652D3839 37363135
30363830 82012230 0D06092A 864886F7 0D010101 05000382 010F0030 82010A02
82010100 EC8284BE 45D199BE DC34BB57 5230E6EF 4BD4DE38 0179DBAE 4AC5E6C5
F23B8BB1 528154DB 30FF003F AC601B1A 139C0A44 0C897A52 0F2B699D 97B9501C
39996D4B 1F6DAC00 80D38490 C9B65CB3 2D07C9FB 6874CA55 E66C56BB EAEBAC3E
07BB8A90 0E301CF3 692746E0 0E330AEF 5716A512 419A2173 B76BA4D2 3A1051E1
6418536E D14E04CF A4E24A5F A5C5743E E2643D83 968AAE8D F80BCB70 571ABEAD
45D9ACFB 3970659E B13EBE78 DBE56677 201E0711 05EBB9F1 474EA50D 65DDE1C2
25C37F78 8D276ED4 6D23A297 243C4B71 B7867315 35230A84 70B6E4C1 6F9785C5
66BAE008 66EC728A BA642929 10ABD7B3 AAA56C98 127C9D40 C8B1AA18 236E432A
25E4B5F3 02030100 01A35330 51300F06 03551D13 0101FF04 05300301 01FF301F
0603551D 23041830 16801477 730BFE5E 1795CA42 8516546D 0A6E0AFD F9AF4E30
1D060355 1D0E0416 04147773 0BFE5E17 95CA4285 16546D0A 6E0AFDF9 AF4E300D
06092A86 4886F70D 01010505 00038201 01006920 0722B007 87EC95FD E071B898
92495E29 53EBF341 AB3091BA D4D9765C D8E4DCB8 059C726C 0E37639C 0D889A16
AD64F648 B6E0D461 BCE9AE0E 28DBED59 B8504A31 1A436583 8F95F024 20F192D3
20812890 1264B213 FC09D09A EEA18E04 7E6DC006 2B8F6201 EE39EB0B B1CD01DC
E63F186A D5212782 BD690472 7DDCEF7C 076A1972 0140ED63 A4E47413 DBE021F4
8A86F335 2EB4CA1E EFD0A3DC 3269F97F 95086EAC 78DEA13C 86CCCBE5 563FADD2
25F33548 9FCDBC8A 2BBAB467 8CA6B81E FC1DA5AC 75FC198B E7E4BA67 DF8B68A2
77160F34 DC6A673C B8979A95 0D1852C2 BA37CF3A 99E37385 13199D61 C0E806F1
1B6275F7 55528E30 26DC9F85 933C15C5 DE10
quit
crypto pki certificate chain SLA-TrustPoint
certificate ca 01
30820321 30820209 A0030201 02020101 300D0609 2A864886 F70D0101 0B050030
32310E30 0C060355 040A1305 43697363 6F312030 1E060355 04031317 43697363
6F204C69 63656E73 696E6720 526F6F74 20434130 1E170D31 33303533 30313934
3834375A 170D3338 30353330 31393438 34375A30 32310E30 0C060355 040A1305
43697363 6F312030 1E060355 04031317 43697363 6F204C69 63656E73 696E6720
526F6F74 20434130 82012230 0D06092A 864886F7 0D010101 05000382 010F0030
82010A02 82010100 A6BCBD96 131E05F7 145EA72C 2CD686E6 17222EA1 F1EFF64D
CBB4C798 212AA147 C655D8D7 9471380D 8711441E 1AAF071A 9CAE6388 8A38E520
1C394D78 462EF239 C659F715 B98C0A59 5BBB5CBD 0CFEBEA3 700A8BF7 D8F256EE
4AA4E80D DB6FD1C9 60B1FD18 FFC69C96 6FA68957 A2617DE7 104FDC5F EA2956AC
7390A3EB 2B5436AD C847A2C5 DAB553EB 69A9A535 58E9F3E3 C0BD23CF 58BD7188
68E69491 20F320E7 948E71D7 AE3BCC84 F10684C7 4BC8E00F 539BA42B 42C68BB7
C7479096 B4CB2D62 EA2F505D C7B062A4 6811D95B E8250FC4 5D5D5FB8 8F27D191
C55F0D76 61F9A4CD 3D992327 A8BB03BD 4E6D7069 7CBADF8B DF5F4368 95135E44
DFC7C6CF 04DD7FD1 02030100 01A34230 40300E06 03551D0F 0101FF04 04030201
06300F06 03551D13 0101FF04 05300301 01FF301D 0603551D 0E041604 1449DC85
4B3D31E5 1B3E6A17 606AF333 3D3B4C73 E8300D06 092A8648 86F70D01 010B0500
03820101 00507F24 D3932A66 86025D9F E838AE5C 6D4DF6B0 49631C78 240DA905
604EDCDE FF4FED2B 77FC460E CD636FDB DD44681E 3A5673AB 9093D3B1 6C9E3D8B
D98987BF E40CBD9E 1AECA0C2 2189BB5C 8FA85686 CD98B646 5575B146 8DFC66A8
467A3DF4 4D565700 6ADF0F0D CF835015 3C04FF7C 21E878AC 11BA9CD2 55A9232C
7CA7B7E6 C1AF74F6 152E99B7 B1FCF9BB E973DE7F 5BDDEB86 C71E3B49 1765308B
5FB0DA06 B92AFE7F 494E8A9E 07B85737 F3A58BE1 1A48A229 C37C1E69 39F08678
80DDCD16 D6BACECA EEBC7CF9 8428787B 35202CDC 60E4616A B623CDBD 230E3AFB
418616A9 4093E049 4D10AB75 27E86F73 932E35B5 8862FDAE 0275156F 719BB2F0
D697DF7F 28
quit
!
diagnostic bootup level minimal
!
spanning-tree extend system-id
!
username tellcom privilege 15 secret 9 $9$hYaP6PfYAQH7jk$kuWaG9Lu1WLnWdWKIuLVQXI8INLMwOxBocd7wwr3M9E
!
redundancy
mode none
!
controller Cellular 0/2/0
!
controller VDSL 0/3/0
!
vlan internal allocation policy ascending
!
track 2 ip sla 2
delay down 5 up 10
!
interface GigabitEthernet0/0/0
no ip address
shutdown
negotiation auto
!
interface GigabitEthernet0/1/0
!
interface GigabitEthernet0/1/1
!
interface GigabitEthernet0/1/2
!
interface GigabitEthernet0/1/3
!
interface Cellular0/2/0
description T-SOL_MOBILE_BACKUP
--> backup interface Dialer0
ip address negotiated
--> ip nat outside
load-interval 30
dialer in-band
dialer idle-timeout 0
dialer enable-timeout 3
dialer redial interval 10 attempts 100 re-enable 5
dialer-group 2
pulse-time 1
!
interface Cellular0/2/1
no ip address
shutdown
!
interface ATM0/3/0
no ip address
shutdown
atm oversubscribe factor 2
no atm enable-ilmi-trap
!
interface Ethernet0/3/0
no ip address
no negotiation auto
!
interface Ethernet0/3/0.35
encapsulation dot1Q 35
pppoe enable group global
pppoe-client dial-pool-number 1
!
interface Vlan1
ip address 10.50.30.1 255.255.255.0
--> ip nat inside

!
--> ip policy route-map TRACK_PRIMARY
!
interface Dialer0
ip address negotiated
--> ip nat outside
no ip proxy-arp
encapsulation ppp
ip tcp adjust-mss 1436
dialer pool 1
dialer-group 1
no cdp enable
ppp authentication pap callin
ppp pap sent-username 110141497409@tellcomsdsl password 0 1234567
ip virtual-reassembly
!
ip forward-protocol nd
no ip http server
ip http authentication local
no ip http secure-server
--> ip route 0.0.0.0 0.0.0.0 Cellular0/2/0 track 2
--> ip route 0.0.0.0 0.0.0.0 Dialer0 200
!
--> ip nat inside source route-map CELL_NAT interface Cellular0/2/0 overload
--> ip nat inside source route-map DIALER_NAT interface Dialer0 overload
!
ip sla 2
icmp-echo 1.1.1.1 source-interface Cellular0/2/0
frequency 5
!
ip sla schedule 2 life forever start-time now
!
--> access-list 101 permit ip 10.50.30.0 0.0.0.255 any
!
--> access-list 102 permit icmp any host 1.1.1.1
!
dialer-list 1 protocol ip permit
dialer-list 2 protocol ip permit
!
--> route-map TRACK_PRIMARY permit 10
--> match ip address 102
!
--> route-map CELL_NAT permit 10
--> match ip address 101
--> match interface Cellular0/2/0
!
--> route-map DIALER_NAT permit 10
--> match ip address 101
--> match interface Dialer0
!
tacacs server vpn1
address ipv4 176.43.137.66
key VerYs3cr3taqskey
tacacs server vpn2
address ipv4 176.235.226.1
key VerYs3cr3taqskey
!
control-plane
!
banner login ^C
*
!
line con 0
transport input none
stopbits 1
line vty 0 4
exec-timeout 3 0
privilege level 15
authorization exec VPN_EXEC
login authentication VPN_AUTH
transport input ssh
line vty 5 15
exec-timeout 3 0
privilege level 15
authorization exec VPN_EXEC
login authentication VPN_AUTH
transport input ssh
!
end