Hi Murat,
I am also triynig to configure 3g bakcup line with primary DSL line. I need some advice about configuraiton.
My situation can be bit different from yours, because DSL line is point to point. And 3G line has DMVPN configurations. Both lines works fine as a primary.
But second step is backup configuration,problem here.
I configure ip sla, track is working. But when I let both line is up, I thing is routing confuse, than I lost connection to the headquerter.
Could you please check my config ? Any thing look wrong...I am lost in config now:(
x.x.x.x head quarter real ip
x.x.x.z track ip
!
! Last configuration change at 14:04:58 UTC Tue Feb 8 2011
!
version 15.1
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname IST_DPC
!
boot-start-marker
boot system flash c880data-universalk9-mz.151-2.T2a.bin
boot-end-marker
!
!
logging buffered 51200 warnings
enable secret *****
!
no aaa new-model
!
memory-size iomem 10
crypto pki token default removal timeout 0
!
crypto pki trustpoint TP-self-signed-2733612712
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-2733612712
revocation-check none
rsakeypair TP-self-signed-2733612712
!
!
ip source-route
!
!
!
!
!
ip cef
no ip domain lookup
ip domain name yourdomain.com
no ipv6 cef
!
!
multilink bundle-name authenticated
chat-script internet "" "ATDT*99#" TIMEOUT 60 "CONNECT"
!
username **** password *****
!
!
!
!
controller Cellular 0
!
ip ftp source-interface Vlan1
ip ftp username ozgur
ip ftp password 7 1418080C1916
!
!
crypto isakmp policy 10
hash md5
authentication pre-share
group 2
crypto isakmp key *** address x.x.x.x
!
crypto ipsec transform-set *** esp-3des esp-md5-hmac
!
crypto ipsec profile ****
set transform-set ****
!
!
!
!
!
interface Tunnel1
ip address 192.168.168.2 255.255.255.0
no ip redirects
ip mtu 1440
ip nhrp authentication cisco123
ip nhrp map multicast dynamic
ip nhrp map multicast x.x.x.x
ip nhrp map 192.168.168.1 x.x.x.x
ip nhrp network-id 5
ip nhrp nhs 192.168.168.1
ip nhrp registration no-unique
tunnel source Dialer1
tunnel mode gre multipoint
tunnel key 5
tunnel protection ipsec profile ******
!
interface ATM0
no ip address
no atm ilmi-keepalive
pvc 8/35
pppoe-client dial-pool-number 2
!
!
interface FastEthernet0
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
interface Cellular0
description "### 3g interface ###"
no ip address
ip virtual-reassembly in
encapsulation ppp
load-interval 60
dialer in-band
dialer pool-member 1
async mode interactive
no fair-queue
!
interface Vlan1
ip address 172.25.190.1 255.255.255.0
ip virtual-reassembly in
ip tcp adjust-mss 1452
!
interface Dialer0
ip address negotiated
backup interface dialer1
ip directed-broadcast
encapsulation ppp
ip tcp adjust-mss 1300
dialer pool 2
ppp authentication chap pap callin
ppp chap hostname *********
ppp chap password ****
ppp pap sent-username ***** password *******
no cdp enable
!
interface Dialer1
ip address negotiated
ip flow ingress
ip virtual-reassembly in
encapsulation ppp
shutdown
dialer pool 1
dialer idle-timeout 0
dialer string internet
dialer persistent
dialer-group 1
ppp authentication chap callin
ppp chap refuse
ppp pap refuse
ppp ipcp dns request
no cdp enable
!
!
router eigrp 5
network 172.25.190.0 0.0.0.255
network 192.168.168.0
!
ip forward-protocol nd
no ip http server
ip http access-class 23
ip http authentication local
no ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
!
!
ip local policy route-map track-primary-if
ip route 0.0.0.0 0.0.0.0 Dialer0 2
ip route 0.0.0.0 0.0.0.0 Dialer1 254
ip sla 1
icmp-echo x.x.x.z source-interface Dialer0
ip sla schedule 1 life forever start-time now
logging esm config
access-list 1 permit any
access-list 120 permit icmp any host x.x.x.z
dialer-list 1 protocol ip permit
no cdp run
!
!
!
!
route-map track-primary-if permit 10
match ip address 120
set interface Dialer0
!
!
control-plane
!
!
line con 0
login local
no modem enable
line aux 0
line 3
exec-timeout 0 0
script dialer internet
modem InOut
no exec
transport input all
speed 237000
line vty 0 4
privilege level 15
login local
transport input telnet ssh
!
end
