cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
136
Views
0
Helpful
3
Replies

cisco ISR 927 router dual ISP configuration issue

midhun-kumar
Level 1
Level 1

dualstatic Hello,

We have a dual ISP setup on a Cisco 927 using FTTP (primary) and SoGEA (secondary), both via PPPoE and controlled by IP SLA/Route Map.
When FTTP is active, the SoGEA connection becomes unreachable, preventing proactive monitoring of the backup link. Since the goal is to maintain visibility on both connections, how can we configure the router to ensure the secondary SoGEA WAN interface remains pingable while the primary FTTP route is active?



!
track 1 ip sla 1 reachability
delay down 30 up 30
!
!
interface ATM0
no ip address
load-interval 30
no atm ilmi-keepalive
pvc 0/38
encapsulation aal5mux ppp dialer
dialer pool-member 1
!
!
interface Ethernet0
no ip address
!
interface Ethernet0.101
encapsulation dot1Q 101
pppoe enable group global
pppoe-client dial-pool-number 1
!
interface GigabitEthernet0
no ip address
!
interface GigabitEthernet1
no ip address
!
interface GigabitEthernet2
no ip address
!
interface GigabitEthernet3
no ip address
!
interface GigabitEthernet4
description FTTP WAN
no ip address
duplex auto
speed auto
pppoe enable group global
pppoe-client dial-pool-number 2
!
interface Vlan1
description LAN
ip address 10.8.20.254 255.255.255.0
ip nat inside
ip virtual-reassembly in
ip tcp adjust-mss 1452
!
interface Dialer1
description SoGEA Backup
mtu 1492
ip address negotiated
ip nat outside
ip virtual-reassembly in
encapsulation ppp
dialer pool 1
dialer idle-timeout 0
no cdp enable
ppp authentication chap callin

!
interface Dialer2
description FTTP Primary
mtu 1492
ip address negotiated
ip nat outside
ip virtual-reassembly in
encapsulation ppp
dialer pool 2
dialer idle-timeout 0
dialer persistent
dialer-group 2

!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
ip nat inside source route-map FTTP-PRIMARY interface Dialer2 overload
ip nat inside source route-map SOGEA-BACKUP interface Dialer1 overload
ip route 0.0.0.0 0.0.0.0 Dialer2 track 1
ip route 1.1.1.1 255.255.255.255 Dialer2 permanent
!
ip sla 1
icmp-echo 1.1.1.1 source-interface Dialer2
threshold 200
timeout 400
frequency 20
ip sla schedule 1 life forever start-time now
!
route-map FTTP-PRIMARY permit 10
match ip address 100
match interface Dialer2
!
route-map SOGEA-BACKUP permit 10
match ip address 100
match interface Dialer1
!
!
tftp-server flash:/firmware/vadsl_module_img.bin

access-list 100 permit ip 10.8.20.0 0.0.0.255 any
!
control-plane
!
!

!
scheduler allocate 20000 1000
event manager applet PRIMARY_DOWN
event track 1 state down
action 1.0 cli command "enable"
action 2.0 cli command "conf t"
action 3.0 cli command "no ip route 0.0.0.0 0.0.0.0 Dialer2"
action 4.0 cli command "ip route 0.0.0.0 0.0.0.0 Dialer1 200"
action 5.0 cli command "end"
action 6.0 cli command "clear ip nat translation *"
event manager applet PRIMARY_UP
event track 1 state up
action 1.0 cli command "enable"
action 2.0 cli command "conf t"
action 3.0 cli command "no ip route 0.0.0.0 0.0.0.0 Dialer1"
action 4.0 cli command "ip route 0.0.0.0 0.0.0.0 Dialer2 track 1"
action 5.0 cli command "end"
action 6.0 cli command "clear ip nat translation *"
!
end

_________________

ping  from router

#ping 8.8.8.8 source dialer 1

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 8.8.8.8, timeout is 2 seconds:

Packet sent with a source address of 5.2.98.235

.....

Success rate is 0 percent (0/5)

3 Replies 3

pieterh
VIP
VIP

interface Dialer1
   description SoGEA Backup
...
   ip address negotiated

you can use a specific destination within the SoGEA network as destination of your ping
like one of it's DNS servers, or the other end of the dialer1 connection?
and adding a route specifying the dialer1 interface to this specific address?

I have a static route in place for Dailer1, which runs using EEM script 

ip route 0.0.0.0 0.0.0.0 Dialer1 200

Adding a route to the next hop IP address will enable ICMP reachability from external sources.

pieterh
VIP
VIP

>>> which runs using EEM script <<<
this EEM script runs when the primary links is down to modify the default route?
-> that is not what I meant!
     if you want to check the availability of the SoGEA link using a ping from a host in your network
     you need a route to a host on the SoGEA network using the SoGEA link when the FTTP link is UP (not using the default route)