Hi
I am having problems with these types of 3G cards(EHWIC-3G-HSPA+7) from Cisco.
We are using them on ships where we have a SAT connection and the 3G connection.
Failover between the two connections are handled by an IP SLA echo and a track on the cellular interface, towards an public IP where we have configured a static route to via the Cellular interface.
Once configured the connection comes up fine, the VPN tunnels comes up and all is good.
But after some time the connection dies, the track goes down because no data goes through.
a sh cell 0/0/0 all however say that the profile is active.
I have seen this problem on several different 3G network both in the UK and in Denmark.
I have pastet the relevant portion of the config below, hope you can spot the problem
Kind Regards Jens W
!
chat-script gsm "" "AT!SCACT=1,1" TIMEOUT 60 "OK"
!
!
track 123 ip sla 1 reachability
default-state up
delay up 30
!
!
interface GigabitEthernet0/0
description Vsat
ip address xxx 255.255.255.0
ip access-group outside-in in
ip nbar protocol-discovery
ip flow ingress
ip nat outside
ip inspect Firewall out
ip virtual-reassembly in
duplex auto
speed auto
priority-group 1
crypto map pix
!
interface Cellular0/0/0
ip address negotiated
ip nat outside
ip inspect Firewall out
ip virtual-reassembly in
encapsulation slip
dialer in-band
dialer string gsm
dialer-group 1
async mode interactive
priority-group 1
crypto map pix
!
interface Cellular0/0/1
no ip address
encapsulation slip
!
!
ip nat inside source route-map natMap interface GigabitEthernet0/0 overload
ip nat inside source route-map natMapCell interface Cellular0/0/0 overload
ip route 208.67.220.220 255.255.255.255 Cellular0/0/0
ip route 208.67.222.222 255.255.255.255 Cellular0/0/0
!
ip access-list extended Admin-Acl
permit ip host xxx xxx 0.0.0.255
y
ip access-list extended Client-Acl
ip access-list extended Crew-Acl
ip access-list extended crypto
ip access-list extended nat-list
ip access-list extended nat-list-cell
ip access-list extended outside-in
permit tcp any any eq 22
permit udp any any eq bootpc
permit esp any any
permit ahp any any
permit udp any any eq non500-isakmp
permit udp any any eq isakmp
permit icmp any any
permit ip host xxx any
!
ip sla 1
icmp-echo 208.67.222.222 source-interface Cellular0/0/0
threshold 550
frequency 15
ip sla schedule 1 life forever start-time now
access-list 23 permit xxx 0.0.0.7
access-list 100 permit ip any any
dialer-list 1 protocol ip permit
dialer-list 10 protocol ip list 100
!
!
!
!
route-map natMapCell permit 10
match ip address nat-list-cell
match interface Cellular0/0/0
!
route-map natMap permit 10
match ip address nat-list
match interface GigabitEthernet0/0
!
!
!
!
!
control-plane
!
!
!
line 0/0/0
exec-timeout 0 0
script dialer gsm
modem InOut
no exec
rxspeed 21600000
txspeed 5760000
line 0/0/1
no exec
