Re: Connecting two Cisco 878 G.SHDSL routers back to back and one of them with home broadband router

Theofilos Gk · ‎06-12-2018

Hi! I have o problem with cisco 878. I want to connect them back to back with g.shdsl and one of the with broadband router (no cisco). I have configure both 878 with atm, dialer and tunnel interface. I have also ospf protocol over tunnel. One PC is connected in one router and the other router is connected to the broadband router. The PC's ping passes through g.shdsl successfully and reaches the ip of the tunnel of the other router. But here is the problem. It can't route/switch to the vlan. The vlan and the Tunnel are in the routing table. Moreover broadband's router mac address is on the arp table of the router. What can i do to solve the problem? Thank you!

Georg Pauwen · ‎06-12-2018

Hello,

it is unclear what your physical setup looks like. Can you post a schematic drawing including all devices ?

Theofilos Gk · ‎06-12-2018

Here is the connections. The broadband router is no Cisco!

Georg Pauwen · ‎06-12-2018

Hello,

thanks for the drawing. Basically you don't need a tunnel. You assign the physical ATM interfaces to a dialer pool, and then put IP addresses on both dialers, such as in the example below. It might help if you post the full configs of both 878 routers, that way it is easier to see what is needed.

878-1

interface ATM0
no ip address
no atm ilmi-keepalive
pvc 8/35
encapsulation aal5mux ppp dialer
dialer pool-member 1

!

interface Dialer0
ip address 1.1.1.1 255.255.255.0
encapsulation ppp
dialer pool 1
dialer-group 1
!
dialer-list 1 protocol ip permit

878-2

interface ATM0
no ip address
no atm ilmi-keepalive
pvc 8/35
encapsulation aal5mux ppp dialer

!
dialer pool-member 1

interface Dialer0
ip address 1.1.1.2 255.255.255.0
encapsulation ppp
dialer pool 1
dialer-group 1
!
dialer-list 1 protocol ip permit

Theofilos Gk · ‎06-13-2018

I have the tunnel interfaces because it was the only way to have the ospf running. They couldn't form an adjacency but with the tunnel the did it. I will post the configurations. That you for your support.

Georg Pauwen · ‎06-13-2018

Hello,

odd. Did you try to configure the adjacent interfaces with 'ip ospf network point-to-multipoint' ?

Either way, looking forward to seeing the configs...

Theofilos Gk · ‎06-13-2018

Here is the configuration of the first 878. This one is connected with the broadband router.

version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Tasseas_1
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
!
!
dot11 syslog
ip cef
!
!
!
!
no ip domain lookup
!
multilink bundle-name authenticated
!
!
username Tasseas password 0 cisco
username Tasseas_2 password 0 cisco
!
!
archive
log config
hidekeys
!
!
controller DSL 0
mode atm
line-term co
line-mode 2-wire line-zero
dsl-mode shdsl symmetric annex A
line-rate auto
!
!
bridge irb
!
!
interface Tunnel0
ip address 192.168.7.1 255.255.255.0
tunnel source Dialer0
tunnel destination 192.168.6.2
!
interface BRI0
no ip address
encapsulation hdlc
shutdown
!
interface ATM0
ip address 192.168.3.1 255.255.255.0
no atm ilmi-keepalive
pvc 8/35
broadcast
encapsulation aal5mux ppp dialer
dialer pool-member 1
!
bridge-group 1
bridge-group 1 spanning-disabled
!
interface FastEthernet0
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
interface Vlan1
ip address 192.168.1.1 255.255.255.0
!
interface Vlan30
description DEFAULT GATEWAY
ip address 192.168.60.1 255.255.255.0
!
interface Dialer0
ip address 192.168.6.1 255.255.255.0
ip mtu 1492
encapsulation ppp
dialer pool 1
dialer-group 1
ppp authentication chap
!
router ospf 1
router-id 1.1.1.1
log-adjacency-changes
redistribute static
network 192.168.1.0 0.0.0.255 area 0
network 192.168.7.0 0.0.0.255 area 0
!
ip default-gateway 192.168.1.254
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 192.168.1.254
!
!
no ip http server
no ip http secure-server
!
dialer-list 1 protocol ip permit
!
!
!
!
control-plane
!
bridge 1 protocol ieee
bridge 1 route ip
!
line con 0
logging synchronous
no modem enable
line aux 0
line vty 0 4
login
!
scheduler max-task-time 5000
end

And here is the second configuration.

version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Tasseas_2
!
boot-start-marker
boot-end-marker
!
logging message-counter syslog
!
no aaa new-model
!
!
dot11 syslog
ip source-route
!
!
!
!
ip cef
no ipv6 cef
!
multilink bundle-name authenticated
!
!
!
username Tasseas_1 password 0 cisco
!
!
!
archive
log config
hidekeys
!
!
controller DSL 0
mode atm
!
!
bridge irb
!
!
interface Tunnel0
ip address 192.168.7.2 255.255.255.0
tunnel source Dialer0
tunnel destination 192.168.6.1
!
interface BRI0
no ip address
encapsulation hdlc
shutdown
!
interface ATM0
ip address 192.168.3.2 255.255.255.0
no atm ilmi-keepalive
pvc 8/35
broadcast
encapsulation aal5mux ppp dialer
dialer pool-member 1
!
!
interface FastEthernet0
switchport access vlan 2
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
interface Vlan1
no ip address
!
interface Vlan2
ip address 192.168.5.2 255.255.255.0
!
interface Dialer0
ip address 192.168.6.2 255.255.255.0
ip mtu 1492
encapsulation ppp
dialer pool 1
dialer-group 1
ppp authentication chap
!
router ospf 1
router-id 2.2.2.2
log-adjacency-changes
network 192.168.5.0 0.0.0.255 area 0
network 192.168.7.0 0.0.0.255 area 0
!
ip default-gateway 192.168.6.2
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
!
dialer-list 1 protocol ip permit
!
!
!
!
!
control-plane
!
!
line con 0
no modem enable
line aux 0
line vty 0 4
login
!
scheduler max-task-time 5000
end

Georg Pauwen · ‎06-14-2018

Hello,

what if you disable the tunnels and configure the below (on both routers), do the dialer interfaces form an OSPF adjacency ?

interface Dialer0
ip address 192.168.6.2 255.255.255.0
ip mtu 1492

ip ospf network point-to-multipoint
encapsulation ppp
dialer pool 1
dialer-group 1
ppp authentication chap
!
router ospf 1
router-id 2.2.2.2
log-adjacency-changes
network 192.168.5.0 0.0.0.255 area 0
network 192.168.6.0 0.0.0.255 area 0

Theofilos Gk · ‎06-14-2018

Hi! With your configuration the two 878 made an adjancency without the tunnel interaface but with the dialer. But even with that change the PC cannot ping broadband router . The traceroute from the pc to broadband router stops to the dialer interface(first hop 192.168.5.2, second hop 192.168.6.1) and then request timed out.

Georg Pauwen · ‎06-15-2018

Hello,

I have simplified your configurations, check if you get it to work this way. Important parts are marked in bold.

That said, I assume all your clients need Internet connectivity ? Your broadband router dishes out addresses in the 192.168.1.0/24 range, that is most likely all that is being translated. So you might need double NAT (unless you have added the additional networks to the broadband router). I have added optional lines (bold/italic) which you could add in case your clients don't all have Internet access...

version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Tasseas_1
!
boot-start-marker
boot-end-marker
!
no aaa new-model
!
!
dot11 syslog
ip cef
!
no ip domain lookup
!
multilink bundle-name authenticated
!
username Tasseas password 0 cisco
username Tasseas_2 password 0 cisco
!
archive
log config
hidekeys
!
controller DSL 0
mode atm
line-term co
line-mode 2-wire line-zero
dsl-mode shdsl symmetric annex A
line-rate auto
!
interface BRI0
no ip address
encapsulation hdlc
shutdown
!
interface ATM0
no ip address
no atm ilmi-keepalive
pvc 8/35
broadcast
encapsulation aal5mux ppp dialer
dialer pool-member 1
!
interface FastEthernet0
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
interface Vlan1
ip address 192.168.1.1 255.255.255.0

ip nat outside
!
interface Vlan30
description DEFAULT GATEWAY
ip address 192.168.60.1 255.255.255.0

ip nat inside
!
interface Dialer0
ip address 192.168.6.1 255.255.255.0

ip nat inside
ip mtu 1492
encapsulation ppp
ip ospf network point-to-multipoint
dialer pool 1
dialer-group 1
ppp authentication chap
!
router ospf 1
router-id 1.1.1.1
log-adjacency-changes
network 0.0.0.0 255.255.255.255 area 0
!

ip nat inside source list 1 interface Vlan1 overload

!

access-list 1 permit 192.168.0.0 0.0.255.255

!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 192.168.1.254
!
no ip http server
no ip http secure-server
!
dialer-list 1 protocol ip permit
!
control-plane
!
line con 0
logging synchronous
no modem enable
line aux 0
line vty 0 4
login
!
scheduler max-task-time 5000
end

Router 2

version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Tasseas_2
!
boot-start-marker
boot-end-marker
!
logging message-counter syslog
!
no aaa new-model
!
dot11 syslog
ip source-route
!
ip cef
no ipv6 cef
!
multilink bundle-name authenticated
!
username Tasseas_1 password 0 cisco
!
archive
log config
hidekeys
!
controller DSL 0
mode atm
!
interface BRI0
no ip address
encapsulation hdlc
shutdown
!
interface ATM0
no ip address
no atm ilmi-keepalive
pvc 8/35
broadcast
encapsulation aal5mux ppp dialer
dialer pool-member 1
!
interface FastEthernet0
switchport access vlan 2
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
interface Vlan1
no ip address
!
interface Vlan2
ip address 192.168.5.2 255.255.255.0
!
interface Dialer0
ip address 192.168.6.2 255.255.255.0
ip mtu 1492
encapsulation ppp
ip ospf network point-to-multipoint
dialer pool 1
dialer-group 1
ppp authentication chap
!
router ospf 1
router-id 2.2.2.2
log-adjacency-changes
network 0.0.0.0 255.255.255.255 area 0
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
dialer-list 1 protocol ip permit
!
control-plane
!
line con 0
no modem enable
line aux 0
line vty 0 4
login
!
scheduler max-task-time 5000
end

Theofilos Gk · ‎06-15-2018

The new configuration has the same result. The pc can ping the 878 but 878 cant ping pc. I believe that is a switching problem. For example i can ping from pc to the vlan1 (192.168.1.1) of the 878 which is connected to broadband router but i cant ping the default gateway (192.168.1.254).

Georg Pauwen · ‎06-15-2018

Hello,

can you post the output of 'show ip route' for both routers ?

Theofilos Gk · ‎06-19-2018

Hi! I will post the " show ip route" in a few days because i had to leave from my work for a few days. Thank you.

Theofilos Gk · ‎07-03-2018

Hi! The things getting better. My pc can ping the default gateway but the Taseas_1 (that is connected to the default gateway) can't ping my pc.

Georg Pauwen · ‎07-03-2018

Hello,

can you post both the configurations you currently have ?