Help configuring LTE 4G on Cisco C887VAG-4G-GA-K9

bsgd · ‎09-18-2018

Hello all,

First of all let me tell you that Im am completely new to Cisco products and this is the first time I am trying to configure a Cisco product. I run an small business and have just bought a brand new LTE router.

I have the SIM card in and after accessing the default router address 10.10.10.1 I started the QUICK SETUP WIZARD. I just let everything set at default, but at the end, when I click the SUBMIT button, an error comes up saying: "Invalid input detected. Command: dialer string"

Below is the automatically generated CLI that I get when I click CLI PREVIEW.

I do have the knowledge to configure regular household routers, but this Cisco seems like a whole different beast, so I need some step by step help. All I want to do is get internet from my 4G provider, and thats all.

Thanks everyone and sorry if I am missing something obivous. I did try going into advance configuration mode and trying to check the 4G LTE interface as MAIN WAN INTERFACE but a message saying "APPLYING" pops up and never finishes, I have to close Chrome and restart all over.

hostname Cisco


ip domain name regence


clock timezone GMT -3


ip dhcp pool ccp-pool
dns-server 10.10.10.1
exit
ip dns server


ip dns view default
default dns forwarder
default dns forwarding
default domain lookup
default domain name-server


interface Vlan1
ip nat inside
exit


object-group network local_lan_subnets
10.10.10.0 255.255.255.128


ip access-list extended nat-list
permit ip object-group local_lan_subnets any
deny ip any any


default interface Cellular 0


no chat-script lte


chat-script lte "" "AT!CALL1" TIMEOUT 20 "OK"


interface Dialer1
description PrimaryWANDesc___Cellular0
encapsulation slip
ip nat outside
ip address negotiated
dialer pool 1
dialer-group 1
dialer persistent
dialer string
dialer idle-timeout 0
no shut
exit


interface Cellular 0
description PrimaryWANDesc_
no shut
load-interval 30
dialer in-band
no peer default ip address
dialer pool-member 1
async mode interactive
ip nat outside
exit


line 3
script dialer
modem InOut
no exec
transport input all
transport output all


ip forward-protocol nd
dialer-list 1 protocol ip permit






access-list 23 permit 10.10.10.0 0.0.0.127
ip route 0.0.0.0 0.0.0.0 Dialer1
ip nat inside source list nat-list interface Dialer1 overload

bsgd · ‎09-18-2018

I have attached 2 screenshots of the problem in case it helps :)

Georg Pauwen · ‎09-18-2018

Hello,

below is the config that should work. Better get into the command line, the setup wizard is not really intuitive:

hostname Cisco
!
ip domain name regence
!
clock timezone GMT -3
ip dhcp excluded-address 10.10.10.1
!
ip dhcp pool ccp-pool
network 10.10.10.0 255.255.255.0
default-router 10.10.10.1
dns-server 10.10.10.1
lease 3
!
ip dns server
!
ip dns view default
default dns forwarder
default dns forwarding
default domain lookup
default domain name-server
!
interface Vlan1
ip address 10.10.10.1 255.255.255.0
ip nat inside
!
controller Cellular 0
!
chat-script lte "" "AT!CALL1" TIMEOUT 20 "OK"
!
interface Cellular 0
ip address negotiated
ip nat outside
encapsulation slip
load-interval 30
dialer in-band
dialer idle-timeout 0
dialer string lte
dialer-group 1
no peer default ip address
async mode interactive
routing dynamic
!
ip route 0.0.0.0 0.0.0.0 Cellular0
ip nat inside source list 1 interface Cellular0 overload
!
dialer-list 1 protocol ip permit
!
access-list 1 permit 10.10.10.0 0.0.0.255
!
line 3
script dialer lte
modem InOut
no exec
transport input all
transport output all

bsgd · ‎09-18-2018

Thanks!

I know this will sound stupid, but how do I get into command line and send this 'script' to the router?
I always configured routers using the web page and have no idea how to do this in a differene way, but would love to learn :)

bsgd · ‎09-18-2018

I have managed to telnet my router, but after pasting the commands above config did not change... Heres what I got:

yourname#configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
yourname(config)#hostname Cisco
Cisco(config)#!
Cisco(config)#ip domain name regence
Cisco(config)#!
Cisco(config)#clock timezone GMT -3
Cisco(config)#ip dhcp excluded-address 10.10.10.1
Cisco(config)#!
Cisco(config)#ip dhcp pool ccp-pool
Cisco(dhcp-config)#network 10.10.10.0 255.255.255.0
% Subnet overlaps with an existing subnet [10.10.10.0, 255.255.255.128] in this pool.
Cisco(dhcp-config)#default-router 10.10.10.1
Cisco(dhcp-config)#dns-server 10.10.10.1
Cisco(dhcp-config)#lease 3
Cisco(dhcp-config)#!
Cisco(dhcp-config)#ip dns server
Cisco(config)#!
Cisco(config)#ip dns view default
Cisco(cfg-dns-view)#default dns forwarder
Cisco(cfg-dns-view)#default dns forwarding
Cisco(cfg-dns-view)#default domain lookup
Cisco(cfg-dns-view)#default domain name-server
Cisco(cfg-dns-view)#!
Cisco(cfg-dns-view)#interface Vlan1
Cisco(config-if)#ip address 10.10.10.1 255.255.255.0
Cisco(config-if)#ip nat inside
Cisco(config-if)#!
Cisco(config-if)#controller Cellular 0
Cisco(config-controller)#!
Cisco(config-controller)#chat-script lte "" "AT!CALL1" TIMEOUT 20 "OK"
% Chat script lte already defined as "" "AT!CALL" TIMEOUT 20 "OK"
Cisco(config)#!
Cisco(config)#interface Cellular 0
Cisco(config-if)#ip address negotiated
Cisco(config-if)#ip nat outside
Cisco(config-if)#encapsulation slip
Cisco(config-if)#load-interval 30
Cisco(config-if)#dialer in-band
Cisco(config-if)#dialer idle-timeout 0
Cisco(config-if)#dialer string lte
Cisco(config-if)#dialer-group 1
Cisco(config-if)#no peer default ip address
Cisco(config-if)#async mode interactive
Cisco(config-if)#routing dynamic
Cisco(config-if)#!
Cisco(config-if)#ip route 0.0.0.0 0.0.0.0 Cellular0
Cisco(config)#ip nat inside source list 1 interface Cellular0 overload
Cisco(config)#!
Cisco(config)#dialer-list 1 protocol ip permit
Cisco(config)#!
Cisco(config)#access-list 1 permit 10.10.10.0 0.0.0.255
Cisco(config)#!
Cisco(config)#line 3
Cisco(config-line)#script dialer lte
Cisco(config-line)#modem InOut
Cisco(config-line)#no exec
Cisco(config-line)#transport input all
Cisco(config-line)#transport output all

Georg Pauwen · ‎09-18-2018

Hello,

did you save what you configured with the 'wr mem' command ?

Cisco#wr mem

Can you post the output of:

Cisco#show run

bsgd · ‎09-19-2018

Sorry for the delay.

I did not use the wr mem command as I didnt know about it. I just hit end. I will try to hard reset the router and start all over again, this time using the wr mem command and will post back in a few minutes :)

Georg Pauwen · ‎09-20-2018

Let us know how it is going and if you need more help...

bsgd · ‎09-21-2018

First of all Georg, thank you very much for the quick reply and help.

After resetting and redoing the telnet steps and sending your suggested config, Im able to use the LTE data over ethernet, thank you very much.

I still have a few questions. First of all, on the web interface the router still says ther PRIMARY WAN INTERFACE is not configured, is this OK? Please see attached image.

Second, how do I configure another SIM CARD as backup interface (my router has 2 sim card slots) and how do I change the router interface and DHCP for a more 'commom' 192.168.0.1 range?

I tried reading and doing it myself but ended up loosing router access :(

I guess I need to study more how to 'program' these things...

Georg Pauwen · ‎09-21-2018

Configuring the second SIM card as a backup requires a few things. Can you post the running configuration as you have it now ?

bsgd · ‎09-21-2018

SHOW RUN returns quite a lt of stuff, here it goes:

Cisco#show run
Building configuration...

Current configuration : 6268 bytes
!
! Last configuration change at 11:05:54 GMT Fri Sep 21 2018 by admin
!
version 15.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Cisco
!
boot-start-marker
boot-end-marker
!
!
logging buffered 51200 warnings
!
no aaa new-model
clock timezone GMT -3 0
!
crypto pki trustpoint TP-self-signed-373082462
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-373082462
revocation-check none
rsakeypair TP-self-signed-373082462
!
!
crypto pki certificate chain TP-self-signed-373082462
certificate self-signed 01
30820229 30820192 A0030201 02020101 300D0609 2A864886 F70D0101 05050030
30312E30 2C060355 04031325 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 33373330 38323436 32301E17 0D313830 39313832 33343932
305A170D 32303031 30313030 30303030 5A303031 2E302C06 03550403 1325494F
532D5365 6C662D53 69676E65 642D4365 72746966 69636174 652D3337 33303832
34363230 819F300D 06092A86 4886F70D 01010105 0003818D 00308189 02818100
A34B3E88 4E6AE195 E75E4C81 6E24C913 4EB07700 074C305D A3C8766D 39B0EB01
3FA6415B 2F5066CF 50AE19BF CE190EA5 5BA8298B ED57DBD6 286C5DC6 6FB4E60D
19FCE55A 36D33027 35F27DE0 070D3837 E805FAFB 287E51C4 E8C9FE7F 3A1FB157
107B1426 2F25ED46 991A137D 1D4A450D B776FA67 BC03D9ED 8E5D813F 114D60AD
02030100 01A35330 51300F06 03551D13 0101FF04 05300301 01FF301F 0603551D
23041830 168014F1 529010F9 D4B02C36 97B1F86A AD1D7132 E2E9B130 1D060355
1D0E0416 0414F152 9010F9D4 B02C3697 B1F86AAD 1D7132E2 E9B1300D 06092A86
4886F70D 01010505 00038181 000E98FC 575405D7 EC154875 A123F954 F7DC3A30
BD6CC82E AE008D4F 5078D668 6E5D7FF5 871B1DC3 61AC71A6 CFC643BB 0BFE438E
61AF9C85 1BA46C16 8C114791 5965DD0E D306254D 3336827C E31510A8 337F15CC
3140912F 710E6042 993E5137 7C877E17 41A9A969 42892323 6B69A79A 05782837
159EAF83 53D3544B 6200236C 18
quit
!
!
!
!
!
!
!
!

!
ip dhcp excluded-address 10.10.10.1
!
ip dhcp pool ccp-pool
import all
network 10.10.10.0 255.255.255.128
default-router 10.10.10.1
dns-server 10.10.10.1
lease 3
!
!
!
ip domain name regence
ip cef
no ipv6 cef
!
!
!
!
!
multilink bundle-name authenticated
!
!
chat-script lte "" "AT!CALL" TIMEOUT 20 "OK"
!
!
!
!
!
!
cts logging verbose
license udi pid C887VAG-4G-GA-K9 sn FGL1943241V
!
!
username admin privilege 15 secret 5 $1$pPR5$XYzqbXK57/wqObBLX3S7H.
!
!
!
!
!
controller VDSL 0
!
controller Cellular 0
lte modem link-recovery rssi onset-threshold -110
lte modem link-recovery monitor-timer 20
lte modem link-recovery wait-timer 10
lte modem link-recovery debounce-count 6
no cdp run
!
!
!
!
!
!
!
!
!
!
!
!
interface ATM0
no ip address
shutdown
no atm ilmi-keepalive
!
interface Cellular0
ip address negotiated
ip nat outside
ip virtual-reassembly in
encapsulation slip
load-interval 30
dialer in-band
dialer idle-timeout 0
dialer string lte
dialer-group 1
no peer default ip address
async mode interactive
routing dynamic
!
interface Ethernet0
no ip address
shutdown
!
interface FastEthernet0
no ip address
!
interface FastEthernet1
no ip address
!
interface FastEthernet2
no ip address
!
interface FastEthernet3
no ip address
!
interface Vlan1
description $ETH_LAN$
ip address 10.10.10.1 255.255.255.0
ip nat inside
ip virtual-reassembly in
ip tcp adjust-mss 1452
!
ip forward-protocol nd
ip http server
ip http access-class 23
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
!
!
ip dns server
ip nat inside source list 1 interface Cellular0 overload
ip route 0.0.0.0 0.0.0.0 Cellular0
!
dialer-list 1 protocol ip permit
!
access-list 1 permit 10.10.10.0 0.0.0.255
access-list 23 permit 10.10.10.0 0.0.0.127
!
control-plane
!
!
mgcp behavior rsip-range tgcp-only
mgcp behavior comedia-role none
mgcp behavior comedia-check-media-src disable
mgcp behavior comedia-sdp-force disable
!
mgcp profile default
!
!
!
!
!
!
banner exec ^C
% Password expiration warning.
-----------------------------------------------------------------------

Cisco Configuration Professional (Cisco CP) is installed on this device
and it provides the default username "cisco" for one-time use. If you have
already used the username "cisco" to login to the router and your IOS image
supports the "one-time" user option, then this username has already expired.
You will not be able to login to the router with this username after you exit
this session.

It is strongly suggested that you create a new username with a privilege level
of 15 using the following command.

username <myuser> privilege 15 secret 0 <mypassword>

Replace <myuser> and <mypassword> with the username and password you
want to use.

-----------------------------------------------------------------------
^C
banner login ^C
-----------------------------------------------------------------------
Cisco Configuration Professional (Cisco CP) is installed on this device.
This feature requires the one-time use of the username "cisco" with the
password "cisco". These default credentials have a privilege level of 15.

YOU MUST USE CISCO CP or the CISCO IOS CLI TO CHANGE THESE
PUBLICLY-KNOWN CREDENTIALS

Here are the Cisco IOS commands.

username <myuser> privilege 15 secret 0 <mypassword>
no username cisco

Replace <myuser> and <mypassword> with the username and password you want
to use.

IF YOU DO NOT CHANGE THE PUBLICLY-KNOWN CREDENTIALS, YOU WILL
NOT BE ABLE TO LOG INTO THE DEVICE AGAIN AFTER YOU HAVE LOGGED OFF.

For more information about Cisco CP please follow the instructions in the
QUICK START GUIDE for your router or go to http://www.cisco.com/go/ciscocp
-----------------------------------------------------------------------
^C
!
line con 0
login local
no modem enable
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport input all
stopbits 1
line 3
script dialer lte
modem InOut
no exec
transport input all
transport output all
rxspeed 100000000
txspeed 50000000
line vty 0 4
access-class 23 in
privilege level 15
login local
transport input telnet ssh
line vty 5 15
access-class 23 in
privilege level 15
login local
transport input telnet ssh
!
scheduler allocate 20000 1000
!
!
!
end

Georg Pauwen · ‎09-21-2018

Hello,

I'll have a look...

Georg Pauwen · ‎09-21-2018

Hello,

your router has only 1 controller, so you can only configure failover, that is, both SIMs cannot be active at the same time.

When you issue the command:

show cellular 0 profile

you probably see 1 profile in there. You need to create a second one for the second SIM, e.g.:

Cisco#cellular 0/0/0 lte profile create 2 test.com <-- this needs to be what your ISP has provided

and attach it to slot 1 (slot 0 by default is the primary, slot 1 the backup):

Cisco# configure terminal
Cisco(config)# controller Cellular 0
Cisco(config-controller)# lte sim data-profile 2 attach-profile 2 slot 1

The EEM script below is optional, it will activate the backup SIM when the primary fails:

event manager applet SIM_FAILOVER
event snmp oid 1.3.6.1.4.1.9.9.661.1.3.2.1.4.14 get-type exact entry-op le entry-val "2" poll-interval 120
action 1.0 cli command "enable"
action 1.1 cli command "clear interface cellular 0"
action 1.2 cli command "cellular 0 gsm sim activate slot 1"
action 1.3 cli command "end"
action 1.4 cli command "clear ip route *"

bsgd · ‎09-21-2018

Cisco#cellular 0/0/0 lte profile create 2 test.com <-- this needs to be what your ISP has provided

What exactly is test.com? I dont know what to ask my ISP. I didnt configure this for SIM 0 either...

Thank you :)

Georg Pauwen · ‎09-22-2018

Hello,

do you have both SIM cards inserted ? If so, post the output of 'show cellular 0 profile'...