Looking for assistance on STUN configuration / troubleshooting

[kent.dinkelman]

I am configuring 2 2811 routers for STUN.  I am using these to prove we can do what we need to do will work before purchasing newer hardware.  We no longer have these routers under support, or I would open a TAC case for them.

Both routers have 2 HWIC-2T WAN interface cards and a single WIC-1T interface card.

We have 4 channels of serial data that we want to send to a remote site. 

Site A config:

stun peer-name 10.7.6.21
stun protocol-group 13 basicRouting, 
stun protocol-group 14 basic
stun protocol-group 15 basic
stun protocol-group 16 basic

interface Loopback0
ip address 10.7.6.21 255.255.255.255
!
interface FastEthernet0/0
ip address 10.5.4.10 255.255.255.0
duplex auto
speed auto
!
interface Serial0/0/0
description SDC-Channel-F
mtu 2104
no ip address
encapsulation stun
load-interval 30
clock rate 128000
stun group 13
stun route all tcp 10.135.246.21
!
interface Serial0/0/1
description SDC-Channel-E
mtu 2104
no ip address
encapsulation stun
load-interval 30
clock rate 1000000
stun group 14
stun route all tcp 10.135.246.21
!
interface Serial0/2/0
description SDC-Channel-C
mtu 2104
no ip address
encapsulation stun
load-interval 30
clock rate 128000
stun group 15
stun route all tcp 10.135.246.21
!
interface Serial0/2/1
description SDC-Channel-D
mtu 2104
no ip address
encapsulation stun
load-interval 30
clock rate 192000
stun group 16
stun route all tcp 10.135.246.21

Site B config:

stun peer-name 10.7.6.21
stun protocol-group 12 basic
stun protocol-group 13 basic
stun protocol-group 14 basic
stun protocol-group 15 basic
stun protocol-group 16 basic
!
interface Loopback0
ip address 10.135.246.21 255.255.255.255
!
interface FastEthernet0/0
ip address 10.129.11.10 255.255.255.0
load-interval 30
duplex auto
speed auto
!
interface Serial0/0/0
description SDC-Channel-F
mtu 2104
no ip address
encapsulation stun
load-interval 30
clock rate 128000
stun group 13
stun route all tcp 10.7.6.21
!
interface Serial0/0/1
description SDC-Channel-E
mtu 2104
no ip address
encapsulation stun
load-interval 30
clock rate 1000000
stun group 14
stun route all tcp 10.7.6.21
!
interface Serial0/2/0
description SDC-Channel-C
mtu 2104
no ip address
encapsulation stun
load-interval 30
clock rate 128000
stun group 15
stun route all tcp 10.7.6.21
!
interface Serial0/2/1
description SDC-Channel-D
mtu 2104
no ip address
encapsulation stun
load-interval 30
clock rate 192000
stun group 16
stun route all tcp 10.7.6.21

My question is:

Are the HWIC-T2 cards limited to only being able to use a single port for STUN?

I can only get the first port of each of the cards to communicate.

sh stun
This peer: 10.7.6.21

Serial0/0/0 -- SDC-Channel-F (group 13 [basic])
state rx_pkts tx_pkts drops
all TCP 10.135.246.21 open 0 20298 0

Serial0/0/1 -- SDC-Channel-E (group 14 [basic])
state rx_pkts tx_pkts drops
all TCP 10.135.246.21 closed 0 0 0

Serial0/2/0 -- SDC-Channel-C (group 15 [basic])
state rx_pkts tx_pkts drops
all TCP 10.135.246.21 open 0 7967 0

Serial0/2/1 -- SDC-Channel-D (group 16 [basic])
state rx_pkts tx_pkts drops
all TCP 10.135.246.21 closed 0 0 0

[Georg Pauwen]

Hello,

on your Site B, is this a typo ?

Site B config:

--> stun peer-name 10.7.6.21 --> this needs to be 10.135.246.21
stun protocol-group 12 basic
stun protocol-group 13 basic
stun protocol-group 14 basic
stun protocol-group 15 basic
stun protocol-group 16 basic
!
interface Loopback0
ip address 10.135.246.21 255.255.255.255

[kent.dinkelman]

Georg,

My apolgies.  Yes it was a typo.  I'm having problems with one of my eyes.  Having a hard time seeing text.

Site B:

stun peer-name 10.135.246.21
stun protocol-group 12 basic
stun protocol-group 13 basic
stun protocol-group 14 basic
stun protocol-group 15 basic
stun protocol-group 16 basic

[Richard Burts]

It has been a long time since I configured STUN. Other than the typo I think the parts of the config that we see look ok. I see that you are configuring clock rate on each serial interface. Can you verify that you have proper DCE cables attached on each interface? Are the cables connected to anything? 

Even if you do get it to work on the 2811 routers I am concerned about implementing this in a live network. I have looked in the feature navigator and I am not finding any router that seems to have current support for STUN.