LTE in Germany using Telekom/Vodafone LAN-to-LAN tunnel

[NISITNETC]

Hello !

We habe some locations with very slow DSL connetion (< 200 kbit). Some services need direct vpn-connection to the datacenter and some RDP access etc. - the networks are connceted with LAN-to-LAN ipsec tunnel. Work's fine with slow speed.

Now we like to set up one side with LTE. Did someone set up ipsec with one side via LTE via Telekom or Vodafone in Germany ?      

[Michael Muenz]

Yes, both works! We used the vendor modems and connect to IOS routers. Then we configured the links as backup EasyVPN connections.

Michael

Please rate all helpful posts

[NISITNETC]

@ciscomax

You uses EasyVPN to get a LAN-to-LAN connection ?

[Michael Muenz]

Sure, with network extension mode, works great. But only for lte cause of thy dynamic ip adresses.

Michael

Please rate all helpful posts

[NISITNETC]

Ok. Never configured the "network extension mode". Can you drop the relevant part of your configuration? What Hardware and IOS do you use?

[Michael Muenz]

Sorry, was on vacation, do you still need the config parts?

Michael

Please rate all helpful posts

[NISITNETC]

Hello!

I'll be happy about a working config with Vodafone. Actually our Chat-Script ends with: "Chat script lte finished, status = Connection timed out; remote host not responding"

[Michael Muenz]

We use the B1000 from Vodafone to do the LTE stuff and behind it is a IOS router.

I can only provide D1 Chat Script (3G) from another project:

chat-script gsm "" "ATDT*99#" TIMEOUT 30 CONNECT

interface Cellular0

no ip address

ip flow ingress

encapsulation ppp

no ip mroute-cache

load-interval 60

dialer in-band

dialer pool-member 1

no ppp lcp fast-start

interface Dialer1

ip address negotiated

ip flow ingress

ip nat outside

ip virtual-reassembly

encapsulation ppp

dialer pool 1

dialer idle-timeout 0

dialer string gsm

dialer persistent

no cdp enable

ppp authentication chap callin

ppp chap hostname tm

ppp chap password 7 021209

ppp ipcp dns request

!

cellular 0 gsm profile create 1 internet.t-d1.de chap tm tm

Michael

Please rate all helpful posts

[Peter Koltl]

PIN:

router#cellular 0/2/0 gsm sim unlock 6543

Create the profile:

router#cellular 0/2/0 gsm profile create 1 apnname.net

AT command is

ATD*gprs_sc*CID#                                               

or

ATDT*gprs_sc*CID#                                 

where gprs_sc (GPRS service code) is 99, but  98 can also work. T-Mobile says 99, Cisco docs contain 98.

                  Some modem manual says:

                 99 (GPRS Service Code) a digit string (value 99) that identifies a
                   request to use the Packet Domain service.
                  98 (GPRS Service Code) a digit string (value 98) that identifies a
                   request to use the IP service

CID (PDP Context Identifier) is the connection profile number (see show cellular 0/2/0 profile ), number between 1..16 This profile contains the APN name.

Typical AT command is: ATD*99*1#*

(Or simply *99# ,  default CID is obviously 1 )

I don't think you need a chat-script:

interface Cellular0/1/0
  no ip address
  encapsulation ppp
  load-interval 30
  dialer in-band
  dialer pool-member 1
  dialer-group 1
  async mode interactive

!
interface Dialer0
ip address negotiated,
no ip redirects
  no ip proxy-arp
  encapsulation ppp
  load-interval 30
  dialer pool 1
  dialer idle-timeout 0
  dialer string "*99*1#"
dialer persistent
dialer-group 1
  no cdp enable
  ppp pfc local forbid
  ppp pfc remote reject
  ppp acfc local forbid
  ppp acfc remote reject
  ppp eap refuse
  ppp eap local
  ppp chap refuse
  ppp ms-chap refuse
  ppp ms-chap-v2 refuse
  ppp pap refuse
  ppp ipcp address accept
!
dialer-list 1 protocol ip permit

Troubleshooting:

sh int cell0/0/0
sh cell 0/0/0 all

(config)#service internal
(config)#exit
#test cellular 0/0/0 modem-power-cycle

[Peter Koltl]

Hi, is it solved?