Hi
Am new to Cisco devices and got my hands on a Cisco ISR C1111 with 4G redundancy. Am trying to set it up to help a friend but am having difficulties to get it configured. Essentially, I want to get an internal vlan 88 for the users, connected to ISP through PPP, with 4G fallback to mitigate ISP outage. WAN interface 0/0/1, LAN interface 0/1/0.
If possible, I would also want to try setting up a portchannel between 2 LAN ports and two ports in my switch.
With below config I cannot ping outbound from a client. I can ping 8.8.8.8 from the router over my 0/0/1 interface. I can see DHCP binding to the client. Can anyone hint me where to spot the problem zones - my main goal is to learn...
Sun Feb 16 2020 19:53:43 GMT+0100 (Midden-Europese standaardtijd)
===================================================================================
#show running
Building configuration...
Current configuration : 8789 bytes
!
! Last configuration change at 18:48:15 UTC Sun Feb 16 2020
!
version 16.9
service timestamps debug datetime msec
service timestamps log datetime msec
service internal
service call-home
platform qfp utilization monitor load 80
no platform punt-keepalive disable-kernel-core
!
hostname Sxxxx-RTR
!
boot-start-marker
boot-end-marker
!
!
!
no aaa new-model
call-home
! If contact email address in call-home is configured as sch-smart-licensing@cisco.com
! the email address configured in Cisco Smart License Portal will be used as contact email address to send SCH notifications.
contact-email-addr xxxlicensing@cisco.com
profile "CiscoTAC-1"
active
destination transport-method http
no destination transport-method email
!
!
!
ip name-server 195.xxx.xxx.xxx
no ip domain lookup
ip admission watch-list expiry-time 0
ip dhcp excluded-address 192.168.88.1
ip dhcp excluded-address 192.168.88.2
ip dhcp excluded-address 192.168.88.3
ip dhcp excluded-address 192.168.88.4
ip dhcp excluded-address 192.168.88.5
ip dhcp excluded-address 192.168.88.6
ip dhcp excluded-address 192.168.88.7
ip dhcp excluded-address 192.168.88.8
ip dhcp excluded-address 192.168.88.9
ip dhcp excluded-address 192.168.88.10
ip dhcp excluded-address 192.168.88.247
ip dhcp excluded-address 192.168.88.248
ip dhcp excluded-address 192.168.88.249
ip dhcp excluded-address 192.168.88.250
ip dhcp excluded-address 192.168.88.254
ip dhcp excluded-address 192.168.88.253
ip dhcp excluded-address 192.168.88.252
ip dhcp excluded-address 192.168.88.251
ip dhcp excluded-address 192.168.88.0
ip dhcp excluded-address 192.168.88.255 255.255.255.255
!
ip dhcp pool UserPool
import all
network 192.168.88.0 255.255.255.0
default-router 192.168.88.1
!
!
!
!
!
!
!
!
!
!
subscriber templating
!
!
multilink bundle-name authenticated
!
!
!
crypto pki trustpoint TP-self-signed-1953940975
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-1953940975
revocation-check none
rsakeypair TP-self-signed-xxxxxxx
!
crypto pki trustpoint SLA-TrustPoint
enrollment pkcs12
revocation-check crl
!
!
crypto pki certificate chain TP-self-signed-xxxxxxx
certificate self-signed 01
30820330 ...
quit
crypto pki certificate chain SLA-TrustPoint
certificate ca 01
30820321 ...
quit
!
license udi pid C1111-4PLTEEA sn XXXXXXX
license smart enable
license smart conversion automatic
!
diagnostic bootup level minimal
!
spanning-tree extend system-id
!
!
username SolverAdmin privilege 15 secret 5 XXXXXXX
!
redundancy
mode none
!
controller Cellular 0/2/0
lte sim data-profile 1 attach-profile 1 slot 0
lte modem link-recovery rssi onset-threshold -110
lte modem link-recovery monitor-timer 20
lte modem link-recovery wait-timer 10
lte modem link-recovery debounce-count 6
!
!
vlan internal allocation policy ascending
!
!
!
!
!
!
interface GigabitEthernet0/0/0
no ip address
negotiation auto
!
interface GigabitEthernet0/0/1
description SolverRTR WAN port
no ip address
ip mtu 1452
ip access-group 1 out
ip tcp adjust-mss 1412
negotiation auto
ipv6 enable
ipv6 nd autoconfig default-route
ipv6 dhcp client request vendor
pppoe enable group global
pppoe-client dial-pool-number 1
!
interface GigabitEthernet0/1/0
description LANinterface
switchport access vlan 88
!
interface GigabitEthernet0/1/1
!
interface GigabitEthernet0/1/2
!
interface GigabitEthernet0/1/3
!
interface Cellular0/2/0
description Secondary_
ip address negotiated
ip access-group 1 out
ipv6 enable
!
interface Cellular0/2/1
no ip address
!
interface Vlan1
no ip address
!
interface Vlan88
ip address 192.168.88.1 255.255.255.0
ip nat inside
!
interface Dialer1
ip address negotiated
ip nat outside
encapsulation ppp
ip tcp adjust-mss 1412
dialer pool 1
dialer idle-timeout 0
dialer persistent
dialer-group 1
ppp mtu adaptive
ppp authentication pap callin
ppp chap hostname ptXXXXXX@SKYNET
ppp chap password 0 XXXXXX
ppp pap sent-username ptXXXXXX@SKYNET password 0 XXXXXX
ppp ipcp dns request
!
ip local policy route-map track-primary-intf
ip nat inside source route-map track-primary-if interface Dialer1 overload
ip nat inside source list 1 interface GigabitEthernet0/0/1 overload
ip forward-protocol nd
ip http server
ip http authentication local
ip http secure-server
ip dns server
ip route 0.0.0.0 0.0.0.0 Dialer1 track 1
ip route 0.0.0.0 0.0.0.0 GigabitEthernet0/0/1 track 1
ip route 0.0.0.0 0.0.0.0 Dialer1
ip route 0.0.0.0 0.0.0.0 Cellular0/2/0 253
!
!
access-list 1 permit 192.168.88.0 0.0.0.255
access-list 102 permit icmp any host 8.8.8.8
!
!
route-map track-primary-if permit 1
match ip address 197
set interface Dialer1 GigabitEthernet0/0/1
!
route-map track-primary-intf permit 10
match ip address 102
set interface GigabitEthernet0/0/1
!
!
!
control-plane
!
!
line con 0
exec-timeout 0 0
transport input none
stopbits 1
line vty 0 4
login
!
!
!
!
!
!
!
pnp profile pnp_cco_profile
transport https ipv4 18.205.167.7 port 443
end
###############################################
Many thanks
