Router to Router Backup Dial-UP connection

gdelarosa · ‎07-14-2005

Hi everyone!!!

I'm trying to configure a dial-up backup between 2 routers on one link.

On the remote end I have a MultiTech Modem connected to the AUX Port on the router (Cisco-2620XM) and in the central site I have a Cisco-3725 with a voice E1.

I want that the remote site dial to the central site when the Serial0/0.16 is down.

This is the configuration I have until now, and when the Serial0/0.16 goes down the router begins to dial, but I doesn't authenticate with the other router. In both routers I have the same user and password configured.

Should I configure something else on the Central Site??

I hope some one could help me with this case.

CENTRAL SITE: Cisco-3275

--------------------------------

username test password <removed>

controller E1 2/0

framing NO-CRC4

pri-group timeslots 1-31

--------------------------------

REMOTE SITE: Cisco-2620XM

--------------------------------

username test password <removed>

interface Serial0/0.16 point-to-point

bandwidth 256

ip address 10.248.0.218 255.255.255.252

backup delay 15 15

backup interface Dialer1

frame-relay interface-dlci 16

class DV192

interface Async65

no ip address

encapsulation ppp

dialer in-band

dialer pool-member 20

async default routing

async mode interactive

no keepalive

ppp authentication chap

!

interface Dialer1

ip address 10.248.3.218 255.255.255.252

encapsulation ppp

dialer pool 20

dialer remote-name dbu-rtr.ssc8700

dialer idle-timeout 1800

dialer string 981557199

dialer-group 1

ppp authentication chap

ip route 0.0.0.0 0.0.0.0 Dialer1 250

access-list 101 deny ospf any any

access-list 101 deny ip any host 165.130.136.29

access-list 101 deny ip any host 165.130.136.30

access-list 101 deny ip any host 165.130.136.31

access-list 101 permit ip any any

dialer-list 1 protocol ip list 101

line aux 0

exec-timeout 0 0

script dialer modem

modem InOut

modem autoconfigure discovery

transport input all

autoselect ppp

stopbits 1

speed 57600

flowcontrol hardware

--------------------------------

Result of theh PPP authentication debug on the remote router:

--------------------------------

*Mar 1 00:04:27.743: %LINK-3-UPDOWN: Interface Async65, changed state to up

*Mar 1 00:04:27.743: %DIALER-6-BIND: Interface As65 bound to profile Di1

*Mar 1 00:04:27.767: As65 PPP: Using dialer call direction

*Mar 1 00:04:27.771: As65 PPP: Treating connection as a callout

*Mar 1 00:04:27.771: As65 PPP: Authorization required

*Mar 1 00:04:29.915: As65 CHAP: O CHALLENGE id 1 len 39 from "rtr1.CrossDock-Mty"

*Mar 1 00:04:30.027: As65 CHAP: I CHALLENGE id 5 len 36 from "dbu-rtr.ssc8700"

*Mar 1 00:04:30.031: As65 CHAP: Using hostname from unknown source

*Mar 1 00:04:30.035: As65 CHAP: Using password from AAA

*Mar 1 00:04:30.035: As65 CHAP: O RESPONSE id 5 len 39 from "rtr1.CrossDock-Mty"

*Mar 1 00:04:33.283: %LINK-5-CHANGED: Interface Async65, changed state to reset

*Mar 1 00:04:33.283: %DIALER-6-UNBIND: Interface As65 unbound from profile Di1

--------------------------------

Georg Pauwen · ‎07-14-2005

Hello,

the authentication fails because the routers do not know who 'test' is. You need to either configure the real router name on both routers (from the debug output I take it that the router names are as stated below):

CENTRAL SITE: Cisco-3275

username dbu-rtr.ssc8700 password xxxxx

REMOTE SITE: Cisco-2620XM

username rtr1.CrossDock-Mty password xxxxx

The passwords need to match.

As an alternative, you can use the commands 'ppp chap hostname' and 'ppp chap password' on both routers to specify a different CHAP hostname to authenticate (in this case, the passwords need to match as well).

HTH,

GP

gdelarosa · ‎07-14-2005

GP,

Thank you very much for your comments.

I made some changes on the configuration, I also changed the users on both remote and central router, I also changed the dialer remote-name to dbu-rtr.ssc8700 on dialer1 on the remote router, but I'm still unable to connect to the central router.

Central Router:

---------------------------------------------------

dbu-rtr.ssc8700#sh run | i dbu-rtr.ssc8700

hostname dbu-rtr.ssc8700

username dbu-rtr.ssc8700 password 7

dbu-rtr.ssc8700#

---------------------------------------------------

Remote Router:

---------------------------------------------------

Dial-Up#sh run | i Dial-Up

hostname Dial-Up

username Dial-Up password 7

Dial-Up#

---------------------------------------------------

Here's the log of PPP authentication debugging on the remote router:

---------------------------------------------------

*Mar 1 00:25:22.091: %DIALER-6-BIND: Interface As65 bound to profile Di1

*Mar 1 00:25:22.091: As65 PPP: Using dialer call direction

*Mar 1 00:25:22.091: As65 PPP: Treating connection as a callout

*Mar 1 00:25:22.091: As65 PPP: Authorization required

*Mar 1 00:25:27.315: As65 CHAP: O CHALLENGE id 6 len 28 from "Dial-Up"

*Mar 1 00:25:27.319: As65 CHAP: I CHALLENGE id 6 len 36 from "dbu-rtr.ssc8700"

*Mar 1 00:25:27.323: As65 CHAP: Unable to authenticate for peer

*Mar 1 00:25:29.423: As65 PPP: Authorization required

*Mar 1 00:25:29.435: %LINK-5-CHANGED: Interface Async65, changed state to reset

*Mar 1 00:25:29.435: %DIALER-6-UNBIND: Interface As65 unbound from profile Di1

*Mar 1 00:25:34.435: %LINK-3-UPDOWN: Interface Async65, changed state to down

---------------------------------------------------

Here's the log of PPP authentication debugging on the Central router:

---------------------------------------------------

Jul 14 15:50:53.835: %ISDN-6-CONNECT: Interface Serial2/0:3 is now connected to 8181557000

Jul 14 15:51:14.820: %LINK-3-UPDOWN: Interface Async46, changed state to up

Jul 14 15:51:14.820: As46 PPP: Using dialer call direction

Jul 14 15:51:14.820: As46 PPP: Treating connection as a callin

Jul 14 15:51:14.824: As46 PPP: Authorization NOT required

Jul 14 15:51:14.992: As46 CHAP: O CHALLENGE id 8 len 36 from "dbu-rtr.ssc8700"

Jul 14 15:51:15.008: As46 CHAP: I CHALLENGE id 7 len 28 from "Dial-Up"

Jul 14 15:51:15.008: As46 CHAP: Waiting for Peer to authenticate first

Jul 14 15:51:15.328: %ISDN-6-DISCONNECT: Interface Serial2/0:3 disconnected from 8181557000 , call lasted 27 seconds

Jul 14 15:51:19.120: %LINK-5-CHANGED: Interface Async46, changed state to reset

Jul 14 15:51:24.120: %LINK-3-UPDOWN: Interface Async46, changed state to down

---------------------------------------------------

Any ideas of what else I'm missing on the configuration??

Thanks!

Georg Pauwen · ‎07-14-2005

Hello,

you need to have the remote router name in your local user database, not the name of the local router:

Central Router:

---------------------------------------------------

dbu-rtr.ssc8700#sh run | i dbu-rtr.ssc8700

hostname dbu-rtr.ssc8700

username Dial-Up password 7

dbu-rtr.ssc8700#

---------------------------------------------------

Remote Router:

---------------------------------------------------

Dial-Up#sh run | i Dial-Up

hostname Dial-Up

username dbu-rtr.ssc8700 password 7

Dial-Up#

Can you check if that makes a difference ?

Regards,

GP