IR829 - Problems to connect and failover with dual SIM

[CaiodosSantos07545]

solved

[Georg Pauwen]

Hello,

have a look at the link below, it has an example of an IP SLA and EEM scripts. If you cannot figure out how to integrate this into your setup, post the output of 'sh run', as what you have posted now is all mingled up and hard to read...

https://community.cisco.com/t5/routing/cisco-819-dual-sim-auto-switch-fail-over-between-two-cellular/td-p/2192401

[CaiodosSantos07545]

solved

[Georg Pauwen]

Hello,

I don't see how this configuration works at all, since you don't even have any NAT configured. Or did you leave parts of the config out of what you posted ?

[CaiodosSantos07545]

Georg, this is a configuration that someone made here for our company, i was trying to correct it, so there a couple of things missing?

Thanks for all your help.

[Georg Pauwen]

Hello,

some things seem to be missing. I'll send over a failover config that (hopefully) works...

[CaiodosSantos07545]

Thank you very much Georg. About the time to the SIM not connecting or taking too long to connect, is it normal to take to 10 or 30 minutes to connect ?

Sorry i am not very expert in cisco configuration, but at this config that is happening, sometimes it work, sometimes it don't and if it do works, it takes that long to connect.

[Georg Pauwen]

Hello,

here is what I have come up with (important parts marked in bold):

Current configuration : 7521 bytes
!
! Last configuration change at 07:13:22 CDT Thu Aug 13 2020
!
version 15.7
service timestamps debug datetime localtime
service timestamps log datetime localtime
service password-encryption
!
hostname xxxxxx
!
boot-start-marker
boot-end-marker
!
enable secret x xxxxxxxxxxxxxxx
!
aaa new-model
!
aaa authentication login default group tacacs+ local
aaa authorization exec default group tacacs+ local
aaa accounting exec default start-stop group tacacs+
aaa accounting commands 15 default start-stop group tacacs+
aaa accounting network default start-stop group tacacs+
!
aaa session-id common
clock timezone CST -6 0
clock summer-time CDT recurring
service-module wlan-ap 0 bootimage autonomous
!
ignition off-timer 900
!
ignition undervoltage threshold 11
!
no ignition enable
!
ip domain name xxxxxxxxxxxxxxxxxxxxxx
ip name-server xxxxxxxxxxx
ip name-server xxxxxxxxxxx
ip cef
no ipv6 cef
!
multilink bundle-name authenticated
!
chat-script lte "" "AT!CALL" TIMEOUT 20 "OK"
!
license udi pid IR829GW-LTE-LA-ZK9 sn xxxxxxxxxxxx
!
username xxxx password x xxxxxxxxxxxxxxxxxxxxxxx
username xxxx password x xxxxxxxxxxxxxxxxxxxxxxx
!
redundancy
!
track 1 ip sla 1 reachability
!
controller Cellular 0
lte sim data-profile 1 attach-profile 1 slot 0
lte sim data-profile 2 attach-profile 2 slot 1
lte failovertimer 5
lte modem link-recovery rssi onset-threshold -110
lte modem link-recovery monitor-timer 20
lte modem link-recovery wait-timer 10
lte modem link-recovery debounce-count 6
!
crypto ipsec client ezvpn SAHQ
connect auto
group EasyVPN key xxxxxxxxxx
mode network-extension
peer xxxxxxxxxxxxxxx
username xxxxxxxxxxxxxx password xxxxxxxxxxx
xauth userid mode local
!
interface GigabitEthernet0
no ip address
shutdown
!
interface GigabitEthernet1
no ip address
!
interface GigabitEthernet2
no ip address
!
interface GigabitEthernet3
no ip address
!
interface GigabitEthernet4
no ip address
!
interface Wlan-GigabitEthernet0
no ip address
!
interface GigabitEthernet5
no ip address
shutdown
duplex auto
speed auto
!
interface Cellular0
ip address negotiated
ip nat outside
ip virtual-reassembly in
encapsulation slip
load-interval 30
dialer in-band
dialer-string lte
dialer-group 1
no peer default ip address
async mode interactive
routing dynamic
ipv6 address autoconfig
crypto ipsec client ezvpn SAHQ
!
interface Cellular1
ip address negotiated
ip nat outside
ip virtual-reassembly in
encapsulation slip
load-interval 30
dialer in-band
dialer-string lte
dialer-group 1
no peer default ip address
async mode interactive
routing dynamic
ipv6 address autoconfig
crypto ipsec client ezvpn SAHQ
!
interface wlan-ap0
no ip address
shutdown
!
interface Vlan1
ip address xxxxxxxxxxx xxxxxxxxxxxxx
ip nat inside
ip virtual-reassembly in
ip tcp adjust-mss 1452
crypto ipsec client ezvpn SAHQ inside
!
interface Async0
no ip address
encapsulation scada
!
interface Async1
no ip address
encapsulation scada
!
ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
ip nat inside source route-map CELL_0 interface Cellular0 overload
ip nat inside source route-map CELL_1 interface Cellular1 overload
!
ip route 0.0.0.0 0.0.0.0 Cellular0 track 1
ip route 0.0.0.0 0.0.0.0 Cellular1
ip route 8.8.8.8 255.255.255.255 Cellular0
!
ip sla 1
icmp-echo 8.8.8.8 source-interface Cellular0
threshold 1000
timeout 3000
frequency 3
!
ip sla schedule 1 life forever start-time now
!
dialer-list 1 protocol ip permit
!
route-map CELL_0 permit 10
match ip address 1
match interface Cellular0
!
route-map CELL_1 permit 10
match ip address 1
match interface Cellular1
!
ip tacacs source-interface Vlan1
!
access-list 1 permit x.x.x.x y.y.y.y --> Vlan 1 subnet
!
ip access-list standard SNMP_SERVERS
permit xxxxxxxxxx
permit xxxxxxxxxx
permit xxxxxxxxxx
permit xxxxxxxxxx
permit xxxxxxxxxx
permit xxxxxxxxxx
permit xxxxxxxxxx
permit xxxxxxxxxx
!
dialer-list 1 protocol ip permit
dialer-list 1 protocol ipv6 permit
!
!
snmp-server community Ady_nth3L1fe0f-N3twrk RO SNMP_SERVERS
snmp-server trap-source Vlan1
snmp-server system-shutdown
snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart
snmp-server enable traps wpan
snmp-server host xxxxxxxxxx version 2c Ady_nth3L1fe0f-N3twrk
snmp-server host xxxxxxxxxx version 2c Ady_nth3L1fe0f-N3twrk
snmp-server host xxxxxxxxxx version 2c Ady_nth3L1fe0f-N3twrk
snmp-server host xxxxxxxxxx version 2c Ady_nth3L1fe0f-N3twrk
snmp-server host xxxxxxxxxx version 2c Ady_nth3L1fe0f-N3twrk
snmp-server host xxxxxxxxxx version 2c Mon1tor1ngSA
tacacs server TACACS+
address ipv4 xxxxxxxxxx
key x xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
access-list 23 permit xxxxxxxxxx
access-list 23 permit xxxxxxxxxx
access-list 23 permit xxxxxxxxxx
access-list 23 permit xxxxxxxxxx
access-list 23 permit xxxxxxxxxx
access-list 23 permit xxxxxxxxxx
access-list 23 permit xxxxxxxxxx
access-list 23 permit xxxxxxxxxx
access-list 23 permit xxxxxxxxxx
access-list 23 permit xxxxxxxxxx
access-list 23 permit xxxxxxxxxx
access-list 23 permit xxxxxxxxxx
access-list 23 permit xxxxxxxxxx
access-list 23 permit xxxxxxxxxx
access-list 23 permit xxxxxxxxxx
access-list 23 permit xxxxxxxxxx
access-list 23 permit xxxxxxxxxx
access-list 23 permit xxxxxxxxxx
access-list 23 permit xxxxxxxxxx
!
event manager applet CLEAR_NAT
event track 1 state any
action 1.0 cli command “enable”
action 2.0 cli command “clear ip nat translation *”
action 3.0 cli command "end"
!
control-plane
!
banner motd ^C
********** NOTICE **********
xxxxxxxxxx
********** NOTICE **********
^C
!
line con 0
session-timeout 30
stopbits 1
line 1 2
stopbits 1
line 3
script dialer lte
no exec
transport preferred lat pad telnet rlogin lapb-ta mop udptn v120 ssh
transport output lat pad telnet rlogin lapb-ta mop udptn v120 ssh
rxspeed 150000000
txspeed 50000000
line 4
no activation-character
no exec
transport preferred none
transport input all
transport output lat pad telnet rlogin lapb-ta mop udptn v120 ssh
line 8
no exec
transport preferred lat pad telnet rlogin lapb-ta mop udptn v120 ssh
transport output lat pad telnet rlogin lapb-ta mop udptn v120 ssh
rxspeed 150000000
txspeed 50000000
line 1/3 1/6
transport preferred none
transport output none
stopbits 1
line vty 0 4
session-timeout 30
access-class 23 in
privilege level xx
password x xxxxxxxxxxxxxxxxxxx
transport input ssh
transport output ssh
!
no scheduler max-task-time
ntp server xxxxxxxxxx
ntp server xxxxxxxxxx
no iox hdm-enable
iox client enable interface GigabitEthernet5
no iox recovery-enable
!
event manager applet SIM-FALLBACK
event snmp oid 1.3.6.1.4.1.9.9.661.1.3.2.1.4.14 get-type exact entry-op le entry-val "2" poll-interval 120
action 1.0 cli command "enable" pattern "5T@y0uT!"
action 1.1 cli command "clear interface cellular 0"
action 1.2 cli command "cellular 0 lte sim activate slot 0"
action 1.3 cli command "end"
action 1.4 cli command "clear ip route *"
!
end

[CaiodosSantos07545]

solved

[Georg Pauwen]

Hello,

that does not look like the configuration I sent. Did you try the one I sent you ?

[CaiodosSantos07545]

Do i just have to copy and paste with my informations ?

[Georg Pauwen]

Hello,

you can save the configuration I sent you as a .txt file (e.g. config_1.txt), copy it to the flash of your router using TFTP, and then copy it to your running configuration.

I am not sure what your experience level is, it might be easier to just use the command line and enter the configuration manually..

[CaiodosSantos07545]

solved

[Georg Pauwen]

Hello,

post the output of 'show run', you might still have missed something...

[fabio.santos@2s.com.br]

Hello Caio?

Does script works?  Is possible shared with us?

Regards!

Fabio Santos