Hello Giuseppe,
I read many of your post, thakn you for all of them. They are so helpfull. I need your quik look, thank you in advance..
I am trying to configure 3G backup line with primary ADSL on Cisco router 887G at branch office.
DSL line is point to point. When I just finished the DSL config, line uses ISP's MPLS vpn, and we can work on as site-to-site VPN.
3G line I configured few days ago. And I configured DMVPN on the 3G line. Until here everything is ok.
One by one each line works fine. But when I try to configure 3G line as a backup line of DSL, I can not reach to the head office.
Today I read more about tracking. I can send my last configuration by now. But, I can only try this config successfull or not unfortunately on monday.
Can you please check my config ? Any thing look wrong...
x.x.x.x head quarter real ip
x.x.x.z track ip
!
! Last configuration change at 14:04:58 UTC Tue Feb 8 2011 by dpcmerkez
!
version 15.1
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname IST_DPC
!
boot-start-marker
boot system flash c880data-universalk9-mz.151-2.T2a.bin
boot-end-marker
!
!
logging buffered 51200 warnings
enable secret 5 $1$Hgd4$F/8kIIGAwxl7lS2kLetnJ.
!
no aaa new-model
!
memory-size iomem 10
crypto pki token default removal timeout 0
!
crypto pki trustpoint TP-self-signed-2733612712
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-2733612712
revocation-check none
rsakeypair TP-self-signed-2733612712
!
!
ip source-route
!
!
!
!
!
ip cef
no ip domain lookup
ip domain name yourdomain.com
no ipv6 cef
!
!
multilink bundle-name authenticated
chat-script internet "" "ATDT*99#" TIMEOUT 60 "CONNECT"
!
username **** password *****
!
!
!
!
controller Cellular 0
!
ip ftp source-interface Vlan1
ip ftp username ozgur
ip ftp password 7 1418080C1916
!
!
crypto isakmp policy 10
hash md5
authentication pre-share
group 2
crypto isakmp key cisco123 address x.x.x.x
!
crypto ipsec transform-set *** esp-3des esp-md5-hmac
!
crypto ipsec profile ****
set transform-set ****
!
!
!
!
!
interface Tunnel1
ip address 192.168.168.2 255.255.255.0
no ip redirects
ip mtu 1440
ip nhrp authentication cisco123
ip nhrp map multicast dynamic
ip nhrp map multicast x.x.x.x
ip nhrp map 192.168.168.1 x.x.x.x
ip nhrp network-id 5
ip nhrp nhs 192.168.168.1
ip nhrp registration no-unique
tunnel source Dialer1
tunnel mode gre multipoint
tunnel key 5
tunnel protection ipsec profile ******
!
interface ATM0
no ip address
no atm ilmi-keepalive
pvc 8/35
pppoe-client dial-pool-number 2
!
!
interface FastEthernet0
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
interface Cellular0
description "### 3g interface ###"
no ip address
ip virtual-reassembly in
encapsulation ppp
load-interval 60
dialer in-band
dialer pool-member 1
async mode interactive
no fair-queue
!
interface Vlan1
description "### LAN baglantilari ###"
ip address 172.25.190.1 255.255.255.0
ip virtual-reassembly in
ip tcp adjust-mss 1452
!
interface Dialer0
ip address negotiated
backup interface dialer1
ip directed-broadcast
encapsulation ppp
ip tcp adjust-mss 1300
dialer pool 2
ppp authentication chap pap callin
ppp chap hostname *********
ppp chap password ****
ppp pap sent-username ***** password *******
no cdp enable
!
interface Dialer1
ip address negotiated
ip flow ingress
ip virtual-reassembly in
encapsulation ppp
shutdown
dialer pool 1
dialer idle-timeout 0
dialer string internet
dialer persistent
dialer-group 1
ppp authentication chap callin
ppp chap refuse
ppp pap refuse
ppp ipcp dns request
no cdp enable
!
!
router eigrp 5
network 172.25.190.0 0.0.0.255
network 192.168.168.0
!
ip forward-protocol nd
no ip http server
ip http access-class 23
ip http authentication local
no ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
!
!
ip local policy route-map track-primary-if
ip route 0.0.0.0 0.0.0.0 Dialer0 2
ip route 0.0.0.0 0.0.0.0 Dialer1 254
ip sla 1
icmp-echo x.x.x.z source-interface Dialer0
ip sla schedule 1 life forever start-time now
logging esm config
access-list 1 permit any
access-list 120 permit icmp any host x.x.x.z
dialer-list 1 protocol ip permit
no cdp run
!
!
!
!
route-map track-primary-if permit 10
match ip address 120
set interface Dialer0
!
!
control-plane
!
!
line con 0
login local
no modem enable
line aux 0
line 3
exec-timeout 0 0
script dialer internet
modem InOut
no exec
transport input all
speed 237000
line vty 0 4
privilege level 15
login local
transport input telnet ssh
!
end
