Cisco IOS Dial Technologies Configuration Guide, Release 12.4
Cisco IOS Dial Technologies Configuration Guide, Release 12.4
Guide
Release 12.4
Corporate Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: 408 526-4000
800 553-NETS (6387)
Fax: 408 526-4100
THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT
SHIPPED WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE
OR LIMITED WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.
The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB’s public
domain version of the UNIX operating system. All rights reserved. Copyright © 1981, Regents of the University of California.
NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS” WITH
ALL FAULTS. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT
LIMITATION, THOSE OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF
DEALING, USAGE, OR TRADE PRACTICE.
IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING,
WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO
OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
CCSP, CCVP, the Cisco Square Bridge logo, Follow Me Browsing, and StackWise are trademarks of Cisco Systems, Inc.; Changing the Way We Work,
Live, Play, and Learn, and iQuick Study are service marks of Cisco Systems, Inc.; and Access Registrar, Aironet, BPX, Catalyst, CCDA, CCDP,
CCIE, CCIP, CCNA, CCNP, Cisco, the Cisco Certified Internetwork Expert logo, Cisco IOS, Cisco Press, Cisco Systems, Cisco Systems Capital,
the Cisco Systems logo, Cisco Unity, Enterprise/Solver, EtherChannel, EtherFast, EtherSwitch, Fast Step, FormShare, GigaDrive, GigaStack, HomeLink,
Internet Quotient, IOS, IP/TV, iQ Expertise, the iQ logo, iQ Net Readiness Scorecard, LightStream, Linksys, MeetingPlace, MGX, the Networkers logo,
Networking Academy, Network Registrar, Packet, PIX, Post-Routing, Pre-Routing, ProConnect, RateMUX, ScriptShare, SlideCast, SMARTnet,
The Fastest Way to Increase Your Internet Quotient, and TransPath are registered trademarks of Cisco Systems, Inc. and/or its affiliates in the
United States and certain other countries.
All other trademarks mentioned in this document or Website are the property of their respective owners. The use of the word partner does not imply a
partnership relationship between Cisco and any other company. (0601R)
Any Internet Protocol (IP) addresses used in this document are not intended to be actual addresses. Any examples, command display output, and figures included in the
document are shown for illustrative purposes only. Any use of actual IP addresses in illustrative content is unintentional and coincidental.
Audience lvii
Logical Constructs 5
Asynchronous Interfaces 5
Group Asynchronous Interfaces 6
T1 and E1 Controllers 12
Non-ISDN Channelized T1 and Channelized E1 Lines 12
ISDN Service 13
ISDN BRI 13
ISDN PRI 14
Line Types 15
Relationship Between Lines and Interfaces 16
Asynchronous Interfaces and Physical Terminal Lines 16
Synchronous Interfaces and Virtual Terminal Lines 17
Encapsulation Types 18
Contents 47
Glossary 54
Feature Overview 55
Benefits 56
Restrictions 56
Related Documents 56
Supported Platforms 56
Prerequisites 58
Configuration Tasks 58
Ensuring That an EXEC Process Is Running on the Asynchronous Port to Be Monitored 58
Command Reference 61
Enabling UDPTN 65
Verifying UDPTN Traffic 65
1- and 2-Port V.90 Modem WICs for Cisco 2600 and Cisco 3600 Series Multiservice
Platforms 135
Feature Overview 135
Remote Router Management and Out-of-Band Access 135
Asynchronous Dial-on-Demand Routing and Dial-Backup 136
Low-Density Analog RAS Access 136
Benefits 136
Restrictions 137
Related Features and Technologies 137
Related Documents 137
Supported Platforms 138
Glossary 144
Prerequisites 147
Glossary 148
Cisco NM-8AM-V2 and NM-16AM-V2 Analog Modem Network Modules with V.92 149
Contents 149
Glossary 158
PIAFS Wireless Data Protocol Version 2.1 for Cisco MICA Modems 167
Restrictions 170
Related Documents 171
Technical Assistance Center 171
Prerequisites 173
Glossary 178
Contents 179
Prerequisites for V.92 and V.44 Support for Digital Modems 180
Information About V.92 and V.44 Support for Digital Modems 180
ITU-T V.92 Modem Standard 181
V.92 Modem on Hold 181
V.92 Quick Connect 183
V.44 LZJH Compression 184
V.44 AT Commands and S-Registers 185
How to Use the V.92 and V.44 Support for Digital Modems Feature 186
Monitoring Cisco Modems 186
Configuration Examples 186
V.92 Modem on Hold for Cisco AS5300 and Cisco AS5800 Universal Access Servers 191
Prerequisites 202
Glossary 203
V.92 Modem on Hold for Cisco AS5350, Cisco AS5400, and Cisco AS5850 Universal Gateways and
Cisco AS5800 Universal Access Servers 205
Feature Overview 206
V.92 206
Modem on Hold 206
AT Commands (Modemcaps) and S-Registers 207
RADIUS Authorization 208
Configuring V.92 Modem on Hold with RADIUS 210
Modem Enhancements for V.92 Modem On Hold 211
Supported Module Firmware and Cisco IOS Software 212
Benefits 212
Restrictions 213
Related Features and Technologies 213
Related Documents 213
Supported Platforms 214
Prerequisites 216
Glossary 218
V.92 Quick Connect for Cisco AS5300 and Cisco AS5800 Universal Access Servers 219
Prerequisites 225
Glossary 227
V.92 Quick Connect for Cisco AS5350, Cisco AS5400, and Cisco AS5850 Universal Gateways and
Cisco AS5800 Universal Access Servers 229
Feature Overview 230
V.92 230
Quick Connect 231
AT Commands and S-Registers 232
Benefits 233
Restrictions 233
Related Features and Technologies 233
Related Documents 234
Supported Platforms 234
Prerequisites 236
Glossary 237
Contents 239
Configuring and Managing Cisco Access Servers and Dial Shelves 255
Appendix 320
Glossary 321
Glossary 335
Prerequisites 365
Glossary 369
Contents 371
Information About the ISDN BCAC and Round-Robin Channel Selection Enhancements 372
BCAC Enhancements 372
Round-Robin Selection Scheme for ISDN B Channels 372
Logging of ISDN Events 373
Additional ISDN Switch Types Supported for Network Emulation 373
How to Configure the ISDN Enhancements 373
Configuring BCAC Service Audit Triggers 373
Examples 374
Configuring BCAC Service State Triggers 375
Examples 375
Configuring BCAC Message Retransmission 376
Examples 377
Configuring B-Channel Selection Order 377
Examples 378
Configuring ISDN Syslog Messages 378
Examples 379
Configuration Examples for ISDN BCAC and Round-Robin Channel Selection Enhancements 379
Glossary 382
How to Configure Robbed-Bit Signaling for Analog Calls over T1 Lines 471
PRI Groups and Channel Groups on the Same Channelized T1 Controller Example 497
Robbed-Bit Signaling Examples 498
Allocating All Channels for Robbed-Bit Signaling Example 498
Mixing and Matching Channels—Robbed-Bit Signaling and Channel Grouping 498
Switched 56K Configuration Examples 498
Switched 56K T1 Controller Procedure 499
Mixture of Switched 56K and Modem Calls over CT1 CAS Example 499
Switched 56K and Analog Modem Calls over Separate T1 CAS Lines Example 500
Comprehensive Switched 56K Startup Configuration Example 500
ISDN CAS Examples 505
Allocating All Channels for CAS Example 505
Mixing and Matching Channels—CAS and Channel Grouping Example 506
E1 R2 Signaling Procedure 506
R1 Modified Signaling Using an E1 Interface Example 508
R1 Modified Signaling for Taiwan Configuration Example 510
Contents 517
Information About the ISDN BCAC and Round-Robin Channel Selection Enhancements 518
BCAC Enhancements 518
Round-Robin Selection Scheme for ISDN B Channels 518
Logging of ISDN Events 519
Additional ISDN Switch Types Supported for Network Emulation 519
Glossary 528
Contents 529
Configuring Network Side ISDN PRI Signaling, Trunking, and Switching 555
Prerequisites 674
Prerequisites 685
Glossary 690
Contents 697
Prerequisites 717
Contents 723
Contents 729
Restrictions for CEF Support for Dialer Profiles on Cisco 7500 Routers 730
Information About CEF Support for Dialer Profiles on Cisco 7500 Routers 730
CEF Switching Across Dialer Interfaces 730
How to Implement Dialer CEF Support on Cisco 7500 Routers with RSP 731
Verifying that CEF Support for Dialer Profiles on Cisco 7500 Routers Feature Is Operational 731
Configuration Examples for CEF Support for Dialer Profiles on Cisco 7500 Routers 732
Recording CEF Events for Dialer Interface: Example 732
Displaying CEF Adjacency Table for Dialer Interface: Example 733
Displaying CEF Switching Status on IP Dialer Interface: Example 733
Additional References 734
Related Documents 734
Standards 734
MIBs 734
RFCs 734
Technical Assistance 735
Command Reference 735
Contents 757
Dialer Watch Configuration Example Prior to Cisco IOS Release 12.3(11)T 773
Dialer Watch Configuration Example After Cisco IOS Release 12.3(11)T 777
Prerequisites 783
Contents 787
Contents 795
Prerequisites for Reliable Static Routing Backup Using Object Tracking 796
Restrictions for Reliable Static Routing Backup Using Object Tracking 796
Information About Reliable Static Routing Backup Using Object Tracking 796
Reliable Static Routing Backup Using Object Tracking 796
Cisco IOS IP SLAs 797
Benefits of Reliable Static Routing Backup Using Object Tracking 797
How to Configure Reliable Static Routing Backup Using Object Tracking 797
Configuring the Primary Interface for Reliable Static Routing Backup Using Object Tracking 798
Configuring the Primary Interface for PPPoE 798
Configuring the Primary Interface for DHCP 799
Configuring the Primary Interface for Static Routing 800
Configuring the Backup Interface for Reliable Static Routing Backup Using Object Tracking 801
Configuring Network Monitoring with Cisco IOS IP SLAs for Reliable Static Routing Backup Using
Object Tracking 802
Configuring the Routing Policy for Reliable Static Routing Backup Using Object Tracking 804
Configuring a Routing Policy for PPPoE 804
805
Configuring a Routing Policy for DHCP 806
Configuring a Routing Policy for Static Routing 807
Configuring the Default Route for the Primary Interface Using Static Routing 811
Configuring a Floating Static Default Route on the Secondary Interface 812
Verifying the State of the Tracked Object for Reliable Static Routing Backup Using Object
Tracking 812
Configuration Examples for Reliable Static Routing Backup Using Object Tracking 813
Configuring Reliable Static Routing Backup Using Object Tracking: PPPoE Example 813
Configuring Reliable Static Routing Backup Using Object Tracking: DHCP Example 814
Configuring Reliable Static Routing Backup Using Object Tracking: Static Routing Examples 814
Verifying the State of the Tracked Object: Example 815
Additional References 816
Related Documents 816
Standards 816
MIBs 817
RFCs 817
Technical Assistance 817
Command Reference 817
Case 4: Virtual Profiles Configured by AAA, and a Virtual Template Defined by Another
Application 845
How to Configure Virtual Profiles 846
Configuring Virtual Profiles by Virtual Template 846
Creating and Configuring a Virtual Template Interface 846
Specifying a Virtual Template Interface for Virtual Profiles 847
Configuring Virtual Profiles by AAA Configuration 847
Configuring Virtual Profiles by Both Virtual Template and AAA Configuration 847
Creating and Configuring a Virtual Template Interface 848
Specifying Virtual Profiles by Both Virtual Templates and AAA 848
Troubleshooting Virtual Profile Configurations 849
Glossary 939
Prerequisites 944
Contents 949
Troubleshooting Enhancements for Multilink PPP over ATM Link Fragmentation and
Interleaving 963
Contents 963
Contents 967
Prerequisites for Implementing Multichassis Multilink PPP 967
Configuring MMP on an Explicitly Defined Dialer Interface with an E1 Controller: Example 992
Configuring MMP on a Native Dialer Interface: Example 993
Where to Go Next 993
Contents 1087
Restrictions for Using L2TP Large-Scale Dial-Out per-User Attribute via AAA 1088
Information About L2TP Large-Scale Dial-Out per-User Attribute via AAA 1088
How the L2TP Large-Scale Dial-Out per-User Attribute via AAA Feature Works 1088
How to Configure L2TP Large-Scale Dial-Out per-User Attribute via AAA 1089
Configuring the VPDN Group on the LNS 1089
Prerequisites 1089
Restrictions 1089
Configuration Examples for L2TP Large-Scale Dial-Out per-User Attribute via AAA 1093
LNS Configuration Example 1094
Per-User AAA Attributes Profile Example 1094
Virtual Access Interface Configuration Verification Example 1094
Virtual Access Interface Configuration Troubleshooting Example 1095
Additional References 1096
Related Documents 1096
Standards 1097
MIBs 1097
RFCs 1097
Technical Assistance 1097
Command Reference 1098
Prerequisites 1102
Glossary 1104
Verifying Modem and System Chat Scripts with Large-Scale Dial-Out 1108
Appendix 1110
Glossary 1111
Contents 1113
Prerequisites for Peer Pool Backup 1113
APPENDIX
This chapter describes the objectives, audience, organization, and conventions of Cisco IOS software
documentation. It also provides sources for obtaining documentation, technical assistance, and
additional publications and information from Cisco Systems. It contains the following sections:
• Documentation Objectives, page lvii
• Audience, page lvii
• Documentation Organization for Cisco IOS Release 12.4, page lviii
• Document Conventions, page lxiv
• Obtaining Documentation, page lxv
• Documentation Feedback, page lxvi
• Cisco Product Security Overview, page lxvii
• Obtaining Technical Assistance, page lxviii
• Obtaining Additional Publications and Information, page lxix
Documentation Objectives
Cisco IOS software documentation describes the tasks and commands available to configure and
maintain Cisco networking devices.
Audience
The Cisco IOS software documentation set is intended primarily for users who configure and maintain
Cisco networking devices (such as routers and switches) but who may not be familiar with the
configuration and maintenance tasks, the relationship among tasks, or the Cisco IOS software commands
necessary to perform particular tasks. The Cisco IOS software documentation set is also intended for
those users experienced with Cisco IOS software who need to know about new features, new
configuration options, and new software characteristics in the current Cisco IOS software release.
Note In some cases, information contained in Release 12.2T and 12.3T feature documents augments or
supersedes content in the accompanying documentation. Therefore it is important to review all
feature documents for a particular technology.
Table 1 lists the Cisco IOS Release 12.4 configuration guides and command references.
Table 1 Cisco IOS Release 12.4 Configuration Guides and Command References
Table 1 Cisco IOS Release 12.4 Configuration Guides and Command References (continued)
Table 1 Cisco IOS Release 12.4 Configuration Guides and Command References (continued)
Table 1 Cisco IOS Release 12.4 Configuration Guides and Command References (continued)
Table 1 Cisco IOS Release 12.4 Configuration Guides and Command References (continued)
Table 1 Cisco IOS Release 12.4 Configuration Guides and Command References (continued)
Table 2 lists the documents and resources that support the Cisco IOS Release 12.4 software
configuration guides and command references.
Table 2 Cisco IOS Release 12.4 Supporting Documents and Resources (continued)
Document Conventions
Within Cisco IOS software documentation, the term router is generally used to refer to a variety of Cisco
products (for example, routers, access servers, and switches). Routers, access servers, and other
networking devices that support Cisco IOS software are shown interchangeably within examples. These
products are used only for illustrative purposes; that is, an example that shows one product does not
necessarily indicate that other products are not supported.
The Cisco IOS documentation set uses the following conventions:
Convention Description
^ or Ctrl The ^ and Ctrl symbols represent the Control key. For example, the key combination ^D or Ctrl-D
means hold down the Control key while you press the D key. Keys are indicated in capital letters but
are not case sensitive.
string A string is a nonquoted set of characters shown in italics. For example, when setting an SNMP
community string to public, do not use quotation marks around the string or the string will include the
quotation marks.
Convention Description
bold Bold text indicates commands and keywords that you enter literally as shown.
italics Italic text indicates arguments for which you supply values.
[x] Square brackets enclose an optional element (keyword or argument).
| A vertical line indicates a choice within an optional or required set of keywords or arguments.
[x | y] Square brackets enclosing keywords or arguments separated by a vertical line indicate an optional
choice.
{x | y} Braces enclosing keywords or arguments separated by a vertical line indicate a required choice.
Nested sets of square brackets or braces indicate optional or required choices within optional or required
elements. For example:
Convention Description
[x {y | z}] Braces and a vertical line within square brackets indicate a required choice within an optional element.
Convention Description
screen Examples of information displayed on the screen are set in Courier font.
bold screen Examples of text that you must enter are set in Courier bold font.
< > Angle brackets enclose text that is not printed to the screen, such as passwords, and are used in
contexts in which the italic document convention is not available, such as ASCII text.
! An exclamation point at the beginning of a line indicates a comment line. (Exclamation points are also
displayed by the Cisco IOS software for certain processes.)
[ ] Square brackets enclose default responses to system prompts.
The following conventions are used to attract the attention of the reader:
Caution Means reader be careful. In this situation, you might do something that could result in equipment
damage or loss of data.
Note Means reader take note. Notes contain suggestions or references to material not covered in the
manual.
Timesaver Means the described action saves time. You can save time by performing the action described in the
paragraph.
Obtaining Documentation
Cisco documentation and additional literature are available on Cisco.com. Cisco also provides several
ways to obtain technical assistance and other technical resources. These sections explain how to obtain
technical information from Cisco Systems.
Cisco.com
You can access the most current Cisco documentation and technical support at this URL:
http://www.cisco.com/techsupport
Ordering Documentation
Beginning June 30, 2005, registered Cisco.com users may order Cisco documentation at the Product
Documentation Store in the Cisco Marketplace at this URL:
http://www.cisco.com/go/marketplace/
Nonregistered Cisco.com users can order technical documentation from 8:00 a.m. to 5:00 p.m.
(0800 to 1700) PDT by calling 1 866 463-3487 in the United States and Canada, or elsewhere by
calling 011 408 519-5055. You can also order documentation by e-mail at
[email protected] or by fax at 1 408 519-5001 in the United States and Canada,
or elsewhere at 011 408 519-5001.
Documentation Feedback
You can rate and provide feedback about Cisco technical documents by completing the online feedback
form that appears with the technical documents on Cisco.com.
You can send comments about Cisco documentation to [email protected].
You can submit comments by using the response card (if present) behind the front cover of your
document or by writing to the following address:
Cisco Systems
Attn: Customer Document Ordering
170 West Tasman Drive
San Jose, CA 95134-9883
We appreciate your comments.
Tip We encourage you to use Pretty Good Privacy (PGP) or a compatible product to encrypt any sensitive
information that you send to Cisco. PSIRT can work from encrypted information that is compatible with
PGP versions 2.x through 8.x.
Never use a revoked or an expired encryption key. The correct public key to use in your correspondence
with PSIRT is the one linked in the Contact Summary section of the Security Vulnerability Policy page
at this URL:
http://www.cisco.com/en/US/products/products_security_vulnerability_policy.html
The link on this page has the current PGP key ID in use.
Note Use the Cisco Product Identification (CPI) tool to locate your product serial number before submitting
a web or phone request for service. You can access the CPI tool from the Cisco Technical Support &
Documentation website by clicking the Tools & Resources link. Choose Cisco Product Identification
Tool from the Alphabetical Index drop-down list, or click the Cisco Product Identification Tool link
under Alerts & RMAs. The CPI tool offers three search options: by product ID or model name; by tree
view; or for certain products, by copying and pasting show command output. Search results show an
illustration of your product with the serial number label location highlighted. Locate the serial number
label on your product and record the information before placing a service call.
• Internet Protocol Journal is a quarterly journal published by Cisco Systems for engineering
professionals involved in designing, developing, and operating public and private internets and
intranets. You can access the Internet Protocol Journal at this URL:
http://www.cisco.com/ipj
• Networking products offered by Cisco Systems, as well as customer support services, can be
obtained at this URL:
http://www.cisco.com/en/US/products/index.html
• Networking Professionals Connection is an interactive website for networking professionals to share
questions, suggestions, and information about networking products and technologies with Cisco
experts and other networking professionals. Join a discussion at this URL:
http://www.cisco.com/discuss/networking
• World-class networking training is available from Cisco. You can view current offerings at
this URL:
http://www.cisco.com/en/US/learning/index.html
This chapter provides tips for understanding and configuring Cisco IOS software using the
command-line interface (CLI). It contains the following sections:
• Understanding Command Modes, page lxxi
• Getting Help, page lxxii
• Using the no and default Forms of Commands, page lxxvi
• Saving Configuration Changes, page lxxvi
• Filtering Output from the show and more Commands, page lxxvii
• Finding Additional Feature Support Information, page lxxvii
For an overview of Cisco IOS software configuration, see the Cisco IOS Configuration Fundamentals
Configuration Guide.
For information on the conventions used in the Cisco IOS software documentation set, see the “About
Cisco IOS Software Documentation for Release 12.4” chapter.
ROM monitor mode is a separate mode used when the Cisco IOS software cannot load properly. If a valid
software image is not found when the software boots or if the configuration file is corrupted at startup,
the software might enter ROM monitor mode.
Table 1 describes how to access and exit various common command modes of the Cisco IOS software.
It also shows examples of the prompts displayed for each mode.
For more information on command modes, see the “Using the Cisco IOS Command-Line Interface”
chapter in the Cisco IOS Configuration Fundamentals Configuration Guide.
Getting Help
Entering a question mark (?) at the CLI prompt displays a list of commands available for each command
mode. You can also get a list of keywords and arguments associated with any command by using the
context-sensitive help feature.
To get help specific to a command mode, a command, a keyword, or an argument, use one of the
following commands:
Command Purpose
help Provides a brief description of the help system in any command mode.
abbreviated-command-entry? Provides a list of commands that begin with a particular character string. (No space
between command and question mark.)
abbreviated-command-entry<Tab> Completes a partial command name.
Command Purpose
? Lists all commands available for a particular command mode.
command ? Lists the keywords or arguments that you must enter next on the command line.
(Space between command and question mark.)
Command Comment
Router> enable Enter the enable command and
Password: <password> password to access privileged EXEC
Router#
commands. You are in privileged
EXEC mode when the prompt changes
to Router#.
Router# configure terminal Enter the configure terminal
Enter configuration commands, one per line. End with CNTL/Z. privileged EXEC command to enter
Router(config)#
global configuration mode. You are in
global configuration mode when the
prompt changes to Router(config)#.
Command Comment
Router(config)# interface serial ? Enter interface configuration mode by
<0-6> Serial interface number specifying the serial interface that you
Router(config)# interface serial 4 ?
/
want to configure using the interface
Router(config)# interface serial 4/ ? serial global configuration command.
<0-3> Serial interface number
Enter ? to display what you must enter
Router(config)# interface serial 4/0 ?
<cr> next on the command line. In this
Router(config)# interface serial 4/0 example, you must enter the serial
Router(config-if)# interface slot number and port number,
separated by a forward slash.
When the <cr> symbol is displayed,
you can press Enter to complete the
command.
You are in interface configuration mode
when the prompt changes to
Router(config-if)#.
Router(config-if)# ? Enter ? to display a list of all the
Interface configuration commands: interface configuration commands
.
.
available for the serial interface. This
. example shows only some of the
ip Interface Internet Protocol config commands available interface configuration
keepalive Enable keepalive commands.
lan-name LAN Name command
llc2 LLC2 Interface Subcommands
load-interval Specify interval for load calculation for an
interface
locaddr-priority Assign a priority group
logging Configure logging for interface
loopback Configure internal loopback on an interface
mac-address Manually set interface MAC address
mls mls router sub/interface commands
mpoa MPOA interface configuration commands
mtu Set the interface Maximum Transmission Unit (MTU)
netbios Use a defined NETBIOS access list or enable
name-caching
no Negate a command or set its defaults
nrzi-encoding Enable use of NRZI encoding
ntp Configure NTP
.
.
.
Router(config-if)#
Command Comment
Router(config-if)# ip ? Enter the command that you want to
Interface IP configuration subcommands: configure for the interface. This
access-group Specify access control for packets
accounting Enable IP accounting on this interface
example uses the ip command.
address Set the IP address of an interface Enter ? to display what you must enter
authentication authentication subcommands
next on the command line. This
bandwidth-percent Set EIGRP bandwidth limit
broadcast-address Set the broadcast address of an interface example shows only some of the
cgmp Enable/disable CGMP available interface IP configuration
directed-broadcast Enable forwarding of directed broadcasts commands.
dvmrp DVMRP interface commands
hello-interval Configures IP-EIGRP hello interval
helper-address Specify a destination address for UDP broadcasts
hold-time Configures IP-EIGRP hold time
.
.
.
Router(config-if)# ip
Router(config-if)# ip address ? Enter the command that you want to
A.B.C.D IP address configure for the interface. This
negotiated IP Address negotiated over PPP
Router(config-if)# ip address
example uses the ip address command.
Enter ? to display what you must enter
next on the command line. In this
example, you must enter an IP address
or the negotiated keyword.
A carriage return (<cr>) is not
displayed; therefore, you must enter
additional keywords or arguments to
complete the command.
Router(config-if)# ip address 172.16.0.1 ? Enter the keyword or argument that you
A.B.C.D IP subnet mask want to use. This example uses the
Router(config-if)# ip address 172.16.0.1
172.16.0.1 IP address.
Enter ? to display what you must enter
next on the command line. In this
example, you must enter an IP subnet
mask.
A <cr> is not displayed; therefore, you
must enter additional keywords or
arguments to complete the command.
Command Comment
Router(config-if)# ip address 172.16.0.1 255.255.255.0 ? Enter the IP subnet mask. This example
secondary Make this IP address a secondary address uses the 255.255.255.0 IP subnet mask.
<cr>
Router(config-if)# ip address 172.16.0.1 255.255.255.0 Enter ? to display what you must enter
next on the command line. In this
example, you can enter the secondary
keyword, or you can press Enter.
A <cr> is displayed; you can press
Enter to complete the command, or
you can enter another keyword.
Router(config-if)# ip address 172.16.0.1 255.255.255.0 In this example, Enter is pressed to
Router(config-if)# complete the command.
It might take a minute or two to save the configuration. After the configuration has been saved, the
following output appears:
[OK]
Router#
On most platforms, this task saves the configuration to NVRAM. On the Class A flash file system
platforms, this task saves the configuration to the location specified by the CONFIG_FILE environment
variable. The CONFIG_FILE variable defaults to NVRAM.
For more information on the search and filter functionality, see the “Using the Cisco IOS Command-Line
Interface” chapter in the Cisco IOS Configuration Fundamentals Configuration Guide.
This chapter describes the different types of software constructs, interfaces, controllers, channels, and
lines that are used for dial-up remote access. It includes the following main sections:
• Cisco IOS Dial Components
• Logical Constructs
• Logical Interfaces
• Circuit-Switched Digital Calls
• T1 and E1 Controllers
• Non-ISDN Channelized T1 and Channelized E1 Lines
• ISDN Service
• Line Types
• Encapsulation Types
For a complete description of the commands in this chapter, refer to the Cisco IOS Dial Technologies
Command Reference. To locate documentation of other commands that appear in this chapter, use the
command reference master index or search online.
Interface Headquarters
virtual template intranet/Internet
Interface dialer
Fast Ethernet controlling the
interface D channels
Virtual
Interface access Loopback
group-async Cloning interface interface
AAA
TDM bus
Controllers
Cisco IOS software
inside a Cisco AS5300 E1/T1 PRI ports
PRI lines
= ISDN B channel
PSTN/ISDN
= Modem/POTS POTS
Modem
Cisco 1604
(ROBO) Remote
14931
Cisco 766 PC
(SOHO)
Logical Constructs
A logical construct stores core protocol characteristics to assign to physical interfaces. No data packets
are forwarded to a logical construct. Cisco uses three types of logical constructs in its access servers and
routers. These constructs are described in the following sections:
• Asynchronous Interfaces
• Group Asynchronous Interfaces
• Virtual Template Interfaces
Asynchronous Interfaces
An asynchronous interface assigns network protocol characteristics to remote asynchronous clients that
are dialing in through physical terminal lines and modems. (See Figure 2.)
Use the interface async command to create and configure an asynchronous interface.
Asynchronous interface
Line 1
Modem 1 PSTN/ISDN
Modem
Remote PC
negotiating parameters
with the asynchronous
14054
interface
To enable clients to dial in, you must configure two asynchronous components: asynchronous lines and
asynchronous interfaces. Asynchronous interfaces correspond to physical terminal lines. For example,
asynchronous interface 1 corresponds to tty line 1.
Commands entered in asynchronous interface mode configure protocol-specific parameters for
asynchronous interfaces, whereas commands entered in line configuration configure the physical aspects
for the same port.
Temporary
Multilink virtual access Protocol
session interface translation
event event
S6490
VPDN
session event
For more information, refer to the chapter “Configuring Protocol Translation and Virtual Asynchronous
Devices” in the Cisco IOS Terminal Services Configuration Guide.
Logical Interfaces
A logical interface receives and sends data packets and controls physical interfaces. Cisco IOS software
provides three logical interfaces used for dial access. These interfaces are described in the following
sections:
• Dialer Interfaces
• Virtual Access Interfaces
• Virtual Asynchronous Interfaces
Dialer Interfaces
A dialer interface is a parent interface that stores and projects protocol configuration information that is
common to all data (D) channels that are members of a dialer rotary group. Data packets pass through
dialer interfaces, which in turn initiate dialing for inbound calls. In most cases, D channels get their core
protocol intelligence from dialer interfaces.
Figure 4 shows packets coming into a dialer interface, which contains the configuration parameters
common to four D channels (shown as S0:0, S0:1, S0:2, and S0:3). All the D channels are members of
the same rotary group. Without the dialer interface configuration, each D channel must be manually
configured with identical properties. Dialer interfaces condense and streamline the configuration
process.
Incoming Incoming
data packets data packets
A dialer interface is user configurable and linked to individual B channels, where it delivers data packets
to their physical destinations. Dialer interfaces seize physical interfaces to cause packet delivery. If a
dialer interface engages in a multilink session, a dialer interface is in control of a virtual access interface,
which in turn controls S0:3 or chassis 2 S0:3, for example. A dialer interface is created with the interface
dialer global configuration command.
The following example shows a fully configured dialer interface:
Router# configure terminal
Router(config)# interface dialer 0
Router(config-if)# ip unnumbered loopback 0
Router(config-if)# no ip mroute-cache
Router(config-if)# encapsulation ppp
Router(config-if)# peer default ip address pool dialin_pool
Router(config-if)# dialer in-band
Router(config-if)# dialer-group 1
Router(config-if)# no fair-queue
Router(config-if)# no cdp enable
Router(config-if)# ppp authentication chap pap callin
Router(config-if)# ppp multilink
Note Effective with Cisco Release 12.4(11)T, the L2F protocol was removed in Cisco IOS Software.
A virtual access interface is a temporary interface that is spawned to terminate incoming PPP streams
that have no physical connections. PPP streams, Layer 2 Forwarding Protocol (L2F), and Layer 2 Tunnel
Protocol (L2TP) frames that come in on multiple B channels are reassembled on virtual access
interfaces. These access interfaces are constructs used to terminate packets.
Virtual access interfaces obtain their set of instructions from virtual interface templates. The attributes
configured in virtual templates are projected or cloned to a virtual access interfaces. Virtual access
interfaces are not directly user configurable. These interfaces are created dynamically and last only as
long as the tunnels or multilink sessions are active. After the sessions end, the virtual access interfaces
disappear.
Figure 5 shows how a virtual access interface functions to accommodate a multilink session event. Two
physical interfaces on two different access servers are participating in one multilink call from a remote
PC. However, each Cisco AS5300 access server has only one B channel available to receive a call. All
other channels are busy. Therefore all four packets are equally dispersed across two separate B channels
and two access servers. Each Cisco AS5300 access server receives only half the total packets. A virtual
access interface is dynamically spawned upstream on a Cisco 7206 backhaul router to receive the
multilink protocol, track the multilink frames, and reassemble the packets. The Cisco 7206 router is
configured to be the bundle master, which performs all packet assembly and reassembly for both
Cisco AS5300 access servers.
Figure 5 Virtual Access Interfaces Used for Multichassis Multilink Session Events
Cisco 1600
remote office
router
4
3
BRI
2
1
2 4
1 3
Fast
Ethernet
HSSI/ATM
ISDN network
S6492
Cisco 7206 backhaul router.
Spawns all virtual access interfaces.
The dedicated bundlemaster.
Note Effective with Cisco Release 12.4(11)T, the L2F protocol was removed in Cisco IOS Software.
A virtual asynchronous interface is created on demand to support calls that enter the router through a
nonphysical interface. For example, asynchronous character stream calls terminate or land on
nonphysical interfaces. These types of calls include inbound Telnet, LAT, PPP over character-oriented
protocols (such as V.120 or X.25), and LAPB-TA and PAD calls. A virtual asynchronous interface is also
used to terminate L2F/L2TP tunnels, which are often traveling companions with Multilink protocol
sessions. Virtual asynchronous interfaces are not user configurable; rather, they are dynamically created
and torn down on demand. A virtual asynchronous line is used to access a virtual asynchronous interface.
Figure 6 shows a variety of calls that are terminating on a virtual asynchronous interface. After the calls
end, the interface is torn down.
Telnet call
PPP stream
coming in over X.25 PAD
a V.120 line call
Virtual asynchronous
interface
S6488
terminated
PC sending e-mail
to headquarters
PPP
Hub
BRI PRI Fast
PSTN/ISDN Ethernet
PC
T1 and E1 Controllers
Cisco controllers negotiate the following parameters between an access server and a central office: line
coding, framing, clocking, DS0/time-slot provisioning, and signaling.
Time slots are provisioned to meet the needs of particular network scenarios. T1 controllers have
24 time slots, and E1 controllers have 30 time slots. To support traffic flow for one ISDN PRI line in a
T1 configuration, use the pri-group command. To support traffic flow for analog calls over a
channelized E1 line with recEive and transMit (E&M—also ear and mouth) signaling, use the cas-group
1 timeslots 1-30 type e&m-fgb command. Most telephone companies do not support provisioning one
trunk for different combinations of time-slot services, though this provisioning is supported on Cisco
controllers. On a T1 controller, for example, time slots 1 to 10 could run PRI, time slots 11 to 20 could
run channel-associated signaling (CAS), and time slots 21 to 24 could support leased-line grouping.
The following example configures one of four T1 controllers on a Cisco AS5300 access server:
Router# configure terminal
Router(config)# controller t1 ?
<0-3> Controller unit number
Router(config)# controller t1 0
Router(config-controller)# framing esf
Router(config-controller)# linecode b8zs
Router(config-controller)# clock source line primary
Router(config-controller)# pri-group timeslots 1-24
Router(config-controller)#
This example supports modem calls and circuit-switched digital calls over ISDN PRI.
ISDN Service
Cisco routing devices support ISDN BRI and ISDN PRI. Both media types use B channels and
D channels. Figure 8 shows how many B channels and D channels are assigned to each media type.
B channel
B channel BRI 2B + D
D channel
B channel
23B + D
T1-PRI Used in North America
and Japan
D channel
B channel
30B + D
E1-PRI Used in Europe
14051
D channel
ISDN BRI
ISDN BRI operates over most of the copper twisted-pair telephone wiring in place. ISDN BRI delivers
a total bandwidth of a 144 kbps via three separate channels. Two of the B channels operate at 64 kbps
and are used to carry voice, video, or data traffic. The third channel, the D channel, is a 16-kbps signaling
channel used to tell the Public Switched Telephone Network (PSTN) how to handle each of the B
channels. ISDN BRI is often referred to as “2 B + D.”
Enter the interface bri command to bring up and configure a single BRI interface, which is the overseer
of the 2 B + D channels. The D channel is not user configurable.
The following example configures an ISDN BRI interface on a Cisco 1600 series router. The isdn spid
command defines the service profile identifier (SPID) number for both B channels. The SPID number is
assigned by the ISDN service provider. Not all ISDN lines have SPIDs.
Router# configure terminal
ISDN PRI
ISDN PRI is designed to carry large numbers of incoming ISDN calls at point of presences (POPs) and
other large central site locations. All the reliability and performance of ISDN BRI applies to ISDN PRI,
but ISDN PRI has 23 B channels running at 64 kbps each and a shared 64 kbps D channel that carries
signaling traffic. ISDN PRI is often referred to as “23 B + D” (North America and Japan) or “30 B + D”
(rest of the world).
The D channel notifies the central office switch to send the incoming call to particular timeslots on the
Cisco access server or router. Each one of the B channels carries data or voice. The D channel carries
signaling for the B channels. The D channel identifies if the call is a circuit-switched digital call or an
analog modem call. Analog modem calls are decoded and then sent to the onboard modems.
Circuit-switched digital calls are directly relayed to the ISDN processor in the router. Enter the interface
serial command to bring up and configure the D channel, which is user configurable.
Figure 9 shows the logical contents of an ISDN PRI interface used in a T1 network configuration. The
logical contents include 23 B channels, 1 D channel, 24 time slots, and 24 virtual serial interfaces (total
number of B + D channels).
Virtual
Serial
Channel Time Slot Interface
Type Number Number
B (data channel) 1 S0:0
B (data channel) 2 S0:1
B (data channel) 3 S0:2
B (data channel) 4 S0:3
• • •
• • •
• • • Logical
• • • contents
of a PRI
• • • interface
B (data channel) 21 S0:20
B (data channel) 22 S0:21
B (data channel) 23 S0:22
S6487
The following example is for a Cisco AS5300 access server. It configures one T1 controller for ISDN
PRI, then configures the neighboring D channel (interface serial 0:23). Controller T1 0 and interface
serial 0:23 are both assigned to the first PRI port. The second PRI port is assigned to controller T1 1 and
interface serial 1:23, and so on. The second PRI port configuration is not shown in this example. This
Cisco AS5300 access server is used as part of a stack group dial-in solution for an Internet service
provider.
Router# configure terminal
Router(config)# controller t1 0
Router(config-controller)# framing esf
Router(config-controller)# linecode b8zs
Router(config-controller)# clock source line primary
Router(config-controller)# pri-group timeslots 1-24
Router(config-controller)# exit
Router(config)# interface serial 0:23
Line Types
This section describes the different line types used for dial access. It also describes the relationship
between lines and interfaces.
Note Cisco devices have four types of lines: console, auxiliary, asynchronous, and virtual terminal. Different
routers have different numbers of these line types. Refer to the hardware and software configuration
guides that shipped with your device for exact configurations.
Use the show line command to see the status of each of the lines available on a router. (See Figure 10.)
Figure 10 Sample Show Line Output Showing CTY, tty, AUX, and vty Line Statistics
For example, to enable IP resources to dial in to a network through a Cisco 2500 series access server,
configure the lines and asynchronous interfaces as follows.
• Configure the physical aspect of a line that leads to a port. You might enter the following commands
to configure lines 1 through 16 (asynchronous physical terminal lines on a Cisco 2511 access
server):
line 1 16
login local
modem inout
speed 115200
flowcontrol hardware
! Configures the line to autosense PPP; physical line attribute.
autoselect ppp
• On asynchronous interface 1, you configure your protocol-specific commands. You might enter the
following commands:
interface async 1
encapsulation ppp
async mode interactive
async dynamic address
async dynamic routing
async default ip address 192.168.16.132
ppp authentication chap
The remote node services SLIP, PPP, and XRemote are configured in asynchronous interface mode. ARA
is configured in line configuration mode on virtual terminal lines or physical terminal lines.
Encapsulation Types
Synchronous serial interfaces default to High-Level Data Link Control (HDLC) encapsulation, and
asynchronous serial interfaces default to SLIP encapsulation. Cisco IOS software provides a long list of
encapsulation methods that can be set on the interface to change the default encapsulation method. See
the Cisco IOS Interface Command Reference for a complete list and description of these encapsulation
methods.
The following list summarizes the encapsulation commands available for serial interfaces used in dial
configurations:
• encapsulation frame-relay—Frame Relay
• encapsulation hdlc—HDLC protocol
• encapsulation lapb—X.25 LAPB DTE operation
• encapsulation ppp—PPP
• encapsulation slip—SLIP
To use SLIP or PPP encapsulation, the router or access server must be configured with an IP routing
protocol or with the ip host-routing command.
This chapter describes how to configure asynchronous line features in the following main sections:
• How to Configure Asynchronous Interfaces and Lines
• How to Configure Other Asynchronous Line and Interface Features
• Configuration Examples for Asynchronous Interfaces and Lines
Perform these tasks, as required, for your particular network.
To identify the hardware platform or software image information associated with a feature, use the
Feature Navigator on Cisco.com to search for information about the feature or refer to the software
release notes for a specific release. For more information, see the “Finding Additional Feature Support
Information” section in the “Using Cisco IOS Software for Release 12.4” chapter.
For a complete description of the commands in this chapter, refer to the Cisco IOS Dial Technologies
Command Reference. To locate documentation of other commands that appear in this chapter, use the
command reference master index or search online.
Command Purpose
Step 1 Router(config)# interface async number Brings up a single asynchronous interface and enters
interface configuration mode.
Step 2 Router(config-if)# description description Provides a description for the interface.
Step 3 Router(config-if)# ip address address mask Specifies an IP address.
Step 4 Router(config-if)# encapsulation ppp Enables PPP to run on the asynchronous interfaces in the
group.
Step 5 Router(config-if)# async default routing Enables the router to pass routing updates to other routers
over the AUX port configured as an asynchronous interface.
Step 6 Router(config-if)# async mode dedicated Places a line into dedicated asynchronous mode using Serial
Line Internet Protocol (SLIP) or PPP encapsulation.
Step 7 Router(config-if)# dialer in-band Specifies that dial-on-demand routing (DDR) is to be
supported.
Step 8 Router(config-if)# dialer map protocol Configures a serial interface to call one or multiple sites or
next-hop-address to receive calls from multiple sites.
Step 9 Router(config-if)# dialer-group Controls access by configuring an interface to belong to a
specific dialing group.
Step 10 Router(config-if)# ppp authentication chap pap Enables Challenge Handshake Authentication Protocol
list-name (CHAP) and Password Authentication Protocol (PAP)
authentication on the interface. Replace the list-name
variable with a specified authentication list name.1
Step 11 Router(config-if)# exit Return to global configuration mode.
1. To create a string used to name the following list of authentication methods tried when a user logs in, refer to the aaa authentication ppp
command. Authentication methods include RADIUS, TACACS+, and Kerberos.
The “Interface and Line Configuration Examples” and “Asynchronous Interface As the Only Network
Interface Example” sections later in this chapter contain examples of how to configure an asynchronous
interface.
To monitor and maintain asynchronous activity, use the following commands in privileged EXEC mode
as needed:
Command Purpose
Router# clear line line-number Returns a line to its idle state.
Router# show async bootp Displays parameters that have been set for extended BOOTP
requests.
Router# show async status Displays statistics for asynchronous interface activity.
Router# show line [line-number] Displays the status of asynchronous line connections.
To debug asynchronous interfaces, use the following debug command in privileged EXEC mode:
Command Purpose
Router# debug async {framing | state | packets} Displays errors, changes in interface state, and log input and
output.
To debug PPP links, use the following debug commands in privileged EXEC mode as needed:
Command Purpose
Router# debug ppp negotiation Enables debugging of PPP protocol negotiation
process.
Router# debug ppp error Displays PPP protocol errors.
Router# debug ppp packet Displays PPP packets sent and received.
Router# debug ppp chap Displays errors encountered during remote or local
system authentication.
Command Purpose
Step 1 Router(config)# interface async number Brings up a single asynchronous interface and enters
interface configuration mode.
Step 2 Router(config-if)# ip unnumbered loopback number Configures the asynchronous interfaces as unnumbered
and assigns the IP address of the loopback interface to
them to conserve IP addresses.1
Step 3 Router(config-if)# encapsulation ppp Enables PPP to run on the asynchronous interfaces in
the group.
Command Purpose
Step 4 Router(config-if)# async mode interactive Configures interactive mode on the asynchronous
interface.
Step 5 Router(config-if)# ppp authentication chap pap Enables CHAP and PAP authentication on the interface.
list-name Replace the list-name variable with a specified
authentication list name.2
Step 6 Router(config-if)# peer default ip address pool Assigns dial-in clients IP addresses from an address
poolname pool.3
Step 7 Router(config-if)# no cdp enable Disables the Cisco Discovery Protocol (CDP) on the
interface.
Step 8 Router(config-if)# group-range low-end-of-range Specifies the range of asynchronous interfaces to
high-end-of-range include in the group, which is usually equal to the
number of modems you have in the access server.
Step 9 Router(config-if)# exit Returns to global configuration mode.
1. You can also specify the Ethernet interface to conserver address space. In this case, enter the ip unnumbered ethernet 0 command.
2. To create a string used to name the following list of authentication methods tried when a user logs in, refer to the aaa authentication ppp
command. Authentication methods include RADIUS, TACACS+, and Kerberos.
3. To create an IP address pool, refer to the ip local pool global configuration command.
The “Group and Member Asynchronous Interface Examples” section later in this chapter contains an
example of how to configure a group interface.
If you are having trouble, enter one of the following debug commands and then send a call into the
access server. Interpret the output and make configuration changes accordingly.
• undebug all
• debug ppp negotiation
• debug ppp authentication
• debug modem
• debug ip peer
Router# undebug all
All possible debugging has been turned off
Router# debug ppp negotiation
PPP protocol negotiation debugging is on
Router# debug ppp authentication
PPP authentication debugging is on
Router# debug modem
Modem control/process activation debugging is on
Router# debug ip peer
IP peer address activity debugging is on
Router# show debug
General OS:
Modem control/process activation debugging is on
Generic IP:
IP peer address activity debugging is on
PPP:
PPP authentication debugging is on
PPP protocol negotiation debugging is on
Router#
*Mar 1 21:34:56.958: tty4: DSR came up
*Mar 1 21:34:56.962: tty4: Modem: IDLE->READY
*Mar 1 21:34:56.970: tty4: EXEC creation
*Mar 1 21:34:56.978: tty4: set timer type 10, 30 seconds
*Mar 1 21:34:59.722: tty4: Autoselect(2) sample 7E
*Mar 1 21:34:59.726: tty4: Autoselect(2) sample 7EFF
*Mar 1 21:34:59.730: tty4: Autoselect(2) sample 7EFF7D
*Mar 1 21:34:59.730: tty4: Autoselect(2) sample 7EFF7D23
*Mar 1 21:34:59.734: tty4 Autoselect cmd: ppp negotiate
*Mar 1 21:34:59.746: tty4: EXEC creation
*Mar 1 21:34:59.746: tty4: create timer type 1, 600 seconds
*Mar 1 21:34:59.786: ip_get_pool: As4: using pool default
*Mar 1 21:34:59.790: ip_get_pool: As4: returning address = 172.20.1.101
*Mar 1 21:34:59.794: tty4: destroy timer type 1 (OK)
*Mar 1 21:34:59.794: tty4: destroy timer type 0
*Mar 1 21:35:01.798: %LINK-3-UPDOWN: Interface Async4, changed state to up
*Mar 1 21:35:01.834: As4 PPP: Treating connection as a dedicated line
*Mar 1 21:35:01.838: As4 PPP: Phase is ESTABLISHING, Active Open
*Mar 1 21:35:01.842: As4 LCP: O CONFREQ [Closed] id 1 len 25
*Mar 1 21:35:01.846: As4 LCP: ACCM 0x000A0000 (0x0206000A0000)
*Mar 1 21:35:01.850: As4 LCP: AuthProto CHAP (0x0305C22305)
*Mar 1 21:35:01.854: As4 LCP: MagicNumber 0x64E923A8 (0x050664E923A8)
*Mar 1 21:35:01.854: As4 LCP: PFC (0x0702)
*Mar 1 21:35:01.858: As4 LCP: ACFC (0x0802)
*Mar 1 21:35:02.718: As4 LCP: I CONFREQ [REQsent] id 3 len 23
*Mar 1 21:35:02.722: As4 LCP: ACCM 0x000A0000 (0x0206000A0000)
*Mar 1 21:35:02.726: As4 LCP: MagicNumber 0x00472467 (0x050600472467)
*Mar 1 21:35:02.726: As4 LCP: PFC (0x0702)
*Mar 1 21:35:02.730: As4 LCP: ACFC (0x0802)
*Mar 1 21:35:02.730: As4 LCP: Callback 6 (0x0D0306)
*Mar 1 21:35:02.738: As4 LCP: O CONFREJ [REQsent] id 3 len 7
*Mar 1 21:35:02.738: As4 LCP: Callback 6 (0x0D0306)
*Mar 1 21:35:02.850: As4 LCP: I CONFREQ [REQsent] id 4 len 20
Connections are authenticated using the method specified for the line configurations for the
asynchronous rotary group. If a connection is queued, authentication is done prior to queueing and no
authentication is done when the connection is later established.
Make sure you comply with the following requirements when configuring asynchronous rotary line
queueing:
• Configure more virtual terminal lines than will ever be used by waiting asynchronous rotary
connection attempts. Even when the queue is at its maximum, there must be at least one virtual
terminal line available so that system operators or network administrators can use Telnet to access
the router to show, debug, or configure system performance.
• When adding lines to a rotary group, all lines must be either queued or not queued. A mixture of
queued and unenqueued lines in the same rotary group is not supported and can result in unexpected
behavior.
• All lines within a queued rotary group need to use the same authentication method. Using different
authentication methods within the same rotary group can result in unexpected behavior.
To configure asynchronous rotary line queueing, use the following commands beginning in global
configuration mode:
Command Purpose
Step 1 Router (config)# line [aux | console | tty | vty] Starts line configuration mode on the line type and
line-number [ending-line-number] numbers specified.
Step 2 Router(config-line)# rotary group [queued | Enables asynchronous rotary line queueing on the
round-robin] designated line or group of lines. The optional
round-robin keyword selects a round-robin port
selection algorithm instead of the default (queued)
linear port selection algorithm.
Command Purpose
Router# show line async-queue rotary-group Displays which lines are queued.
Router# clear line async-queue rotary-group Clears all rotary queues or the specified rotary queue. If the
rotary-group argument is not specified, all rotary queues are
removed.
Configuring Autoselect
Autoselect is used by the access server to sense the protocol being received on an incoming line and to
launch the appropriate protocol. Autoselect can be used for AppleTalk Remote Access (ARA), PPP, or
SLIP.
When using Autoselect, “login” authentication is bypassed, so if security is required, it must be
performed at the protocol level, that is, the AppleTalk Remote Access Protocol (ARAP) or PPP
authentication. SLIP does not offer protocol layer authentication.
To configure the Cisco IOS software to allow an ARA, PPP, or SLIP session to start automatically, use
the following command in line configuration mode:
Command Purpose
Router(config-line)# autoselect {arap | ppp | slip | Configures a line to automatically start an ARA, PPP, or
during login} SLIP session.
The autoselect command enables the Cisco IOS software to start a process automatically when a start
character is received.
The autoselect command bypasses the login prompt and enables the specified session to begin
automatically. However, when the autoselect command is entered with the during login keyword, the
username or password prompt appears without the need to press the Return key; thus “login” users will
get a prompt right away without needing to press the Return key. While the username or password
prompt is displayed, you can choose either to answer these prompts or to send packets from an
autoselected protocol.
Normally a router avoids line and modem noise by clearing the initial data received within the first one
or two seconds. However, when the autoselect PPP feature is configured, the router flushes characters
initially received and then waits for more traffic. This flush causes timeout problems with applications
that send only one carriage return. To ensure that the input data sent by a modem or other asynchronous
device is not lost after line activation, enter the flush-at-activation line configuration command.
Note When the autoselect command is used, the activation character should be set to the default Return, and
exec-character-bits should be set to 7. If you change these defaults, the application cannot recognize the
activation request.
See the “High-Density Dial-In Solution Using Autoselect and EXEC Control Example” section for an
example that makes use of the autoselect feature.
Command Purpose
Router(config)# line aux line-number Enables the auxiliary serial DTE port.
You cannot use the auxiliary (AUX) port as a second console port. To use the AUX port as a console port,
you must order a special cable from your technical support personnel.
On an access server, you can configure any of the available asynchronous interfaces (1 through 8, 16, or
48). The auxiliary port (labeled AUX on the back of the product) can also be configured as an
asynchronous serial interface, although performance on the AUX port is much slower than on standard
asynchronous interfaces and the port does not support some features.
Table 4 illustrates why asynchronous interfaces permit substantially better performance than AUX ports
configured as asynchronous interfaces.
Table 4 Differences Between the Asynchronous Port and the Auxiliary (AUX) Port
On routers without built-in asynchronous interfaces, only the AUX port can be configured as an
asynchronous serial interface. To configure the AUX port as an asynchronous interface, you must also
configure it as an auxiliary line with the line aux 1 command. Access servers do not have this restriction.
Use the line command with the appropriate line configuration commands for modem control, such as
speed.
Only IP packets can be sent across lines configured for SLIP. PPP supports transmission of IP, Internet
Packet Exchange (IPX), and AppleTalk packets on an asynchronous serial interface.
See the “Line AUX Configuration Example” section for an example that shows how to configure the
AUX port.
To control the EXEC process, use the following commands in line configuration mode:
Command Purpose
Step 1 Router(config-line)# exec Turns on EXEC processes.
Step 2 Router(config-line)# exec-timeout minutes [seconds] Sets the idle terminal timeout interval.
See the “High-Density Dial-In Solution Using Autoselect and EXEC Control Example” section for an
example of configuring control over the EXEC process.
Command Purpose
Router(config-if)# async dynamic routing Configures an asynchronous interface for dynamic
routing. Use this command to manually bring up
PPP from an EXEC session.
Router(config-if)# async default routing Automatically configures an asynchronous
interface for routing. Use this command to enable
two routers to communicate over an asynchronous
dial backup link.
The async dynamic routing command routes IP packets on an asynchronous interface, which permits
you to enable the Interior Gateway Routing Protocol (IGRP), Routing Information Protocol (RIP), and
Open Shortest Path First (OSPF) routing protocols for use when the user makes a connection using the
ppp or slip EXEC commands. The user must, however, specify the /routing keyword at the SLIP or PPP
command line.
For asynchronous interfaces in interactive mode, the async default routing command causes the ppp
and slip EXEC commands to be interpreted as though the /route switch had been included in the
command. For asynchronous interfaces in dedicated mode, the async dynamic routing command
enables routing protocols to be used on the line. Without the async default routing command, there is
no way to enable the use of routing protocols automatically on a dedicated asynchronous interface.
See the following sections for examples of enabling routing on asynchronous interfaces:
• Asynchronous Interface As the Only Network Interface Example
• IGRP Configuration Example
In interactive mode, a line can be used to make any type of connection, depending on the EXEC
command entered by the user. For example, depending on its configuration, the line could be used for
Telnet or XRemote connections, or SLIP or PPP encapsulation. The user is prompted for an EXEC
command before a connection is initiated.
You can configure an asynchronous interface to be in dedicated network mode. When the interface is
configured for dedicated mode, the end user cannot change the encapsulation method, address, or other
parameters.
To configure an interface for dedicated network mode or to return it to interactive mode, use one of the
following commands in interface configuration mode:
Command Purpose
Router(config-if)# async mode dedicated Places the line into dedicated asynchronous network mode.
Router(config-if)# async mode interactive Returns the line to interactive mode.
By default, no asynchronous mode is configured. In this state, the line is not available for inbound
networking because the SLIP and PPP connections are disabled.
See the “Dedicated Asynchronous Interface Configuration Example” section for an example of how to
configure a dedicated asynchronous interface.
Command Purpose
Router(config-if)# ip unnumbered type number Conserves IP addresses by configuring the asynchronous
interfaces as unnumbered, and assigns the IP address of the
interface type that you want to leverage.
Whenever the unnumbered interface generates a packet (for example, a routing update), it uses the
address of the specified interface as the source address of the IP packet. It also uses the address of the
specified interface to determine which routing processes are sending updates over the unnumbered
interface.
You can use the IP unnumbered feature even if the system on the other end of the asynchronous link does
not support it. The IP unnumbered feature is transparent to the other end of the link because each system
bases its routing activities on information in the routing updates it receives and on its own interface
address.
See the “Network Address Conservation Using the ip unnumbered Command Example” section for an
example of how to conserve network addresses.
Command Purpose
Router(config-if)# peer default ip address ip-address Assigns a default IP address to an asynchronous interface.
Use the no form of this command to disable the default address. If the server has been configured to
authenticate asynchronous connections, you are prompted for a password after you enter the slip default
or ppp default EXEC command before the line is placed into asynchronous mode.
The assigned default address is implemented when the user enters the slip default or ppp default EXEC
command. The transaction is validated by the TACACS server, when enabled, and the line is put into
network mode using the address that is in the configuration file.
Configuring a default address is useful when the user is not required to know the IP address to gain
access to a system (for example, users of a server that is available to many students on a campus). Instead
of each user being required to know an IP address, they only need to enter the slip default or ppp default
EXEC command and let the server select the address to use.
See the section “Making Additional Remote Node Connections” in the chapter “” in this publication for
more information about the slip and ppp EXEC commands.
See the following sections for examples:
• Modem Asynchronous Group Example
• Configuring Specific IP Addresses for an Interface
• IP and PPP Asynchronous Interface Configuration Example
For example, an application on a personal computer that automatically dials in using Serial Line Internet
Protocol (SLIP) and polls for electronic mail messages can be set up to dial in periodically and enter the
required IP address and password.
To assign asynchronous addresses dynamically, use the following command in interface configuration
mode:
Command Purpose
Router(config-if)# async dynamic address Allows the IP address to be assigned when the protocol is
initiated.
The dynamic addressing features of the internetwork allow packets to get to their destination and back
regardless of the access server, router, or network they are sent from. For example, if a host such as a
laptop computer moves from place to place, it can keep the same address no matter where it is dialing in
from.
Logical host names are first converted to uppercase and then sent to the TACACS server for
authentication.
See the following sections for examples of configurations that allow asynchronous addresses to be
assigned dynamically:
• Access Restriction on the Asynchronous Interface Example
• Asynchronous Routing and Dynamic Addressing Configuration Example
• Network Address Conservation Using the ip unnumbered Command Example
Command Purpose
Router(config-if)# ip tcp header-compression Configures Van Jacobson TCP header compression on the
[on | off | passive] asynchronous link.
Command Purpose
Router(config-if)# ip tcp header-compression Allows status of header compression to be assigned at the user level.
passive
For PPP interfaces, the passive option functions the same as the on option.
See the following sections for examples of header compression:
• TCP Header Compression Configuration Example
• Network Address Conservation Using the ip unnumbered Command Example
• IGRP Configuration Example
line 1
login tacacs
location 457-5xxx
exec-timeout 20 0
password XXXXXXXX
session-timeout 20
stopbits 1
modem InOut
transport preferred none
transport input all
The following example enables asynchronous rotary line queueing using the round-robin algorithm:
line 1 2
rotary 1 queued round-robin
The following example shows how you need to configure asynchronous interfaces 1, 2, and 3 separately
if you do not have a group interface configured:
interface Async1
ip unnumbered Ethernet0
encapsulation ppp
async default ip address 172.30.1.1
async mode interactive
async dynamic routing
!
interface Async2
ip unnumbered Ethernet0
encapsulation ppp
async default ip address 172.30.1.2
async mode interactive
async dynamic routing
!
interface Async3
ip unnumbered Ethernet0
!
encapsulation ppp
async default ip address 172.30.1.3
async mode interactive
async dynamic routing
The following example configures the same interfaces, but from a single group asynchronous interface:
interface Group-Async 0
ip unnumbered Ethernet0
encapsulation ppp
async mode interactive
async dynamic routing
group-range 1 3
member 1 async default ip address 172.30.1.1
member 2 async default ip address 172.30.1.2
member 3 async default ip address 172.30.1.3
The following global configuration example shows how to specify which DHCP servers are used on your
network. You can specify up to four servers using IP addresses or names. If you do not specify servers,
the default is to use the IP limited broadcast address of 255.255.255.255 for transactions with any and
all discovered DHCP servers.
ip dhcp-server jones smith wesson
The following interface configuration example illustrates how to disable DHCP proxy-client
functionality on asynchronous interface 1:
async interface
interface 1
no peer default ip address
ip address-pool local
! This command defines the ip address pool.
! The address pool is named group1 and comprised of addresses.
! 172.30.0.1 through 172.30.0.28 inclusive
ip local-pool group1 172.30.0.1 172.30.0.28
The following example shows how the IP unnumbered configuration works. Although the user is
assigned an address, the system response shows the interface as unnumbered, and the address entered by
the user will be used only in response to BOOTP requests.
Router> slip /compressed 10.11.11.254
Password:
Entering async mode.
Interface IP address is unnumbered, MTU is 1500 bytes.
Header compression is On.
line 1
modem ri-is-cd
The Asynchronous Call Queueing by Role feature allows priority users making Telnet connection
requests to busy asynchronous rotary groups to be placed at the head of the queue when asynchronous
rotary line queueing is enabled. If a second priority user makes a Telnet connection request, they will be
placed behind the first priority user at the head of the queue. This feature allows a priority user to access
the first available line.
Finding Support Information for Platforms and Cisco IOS Software Images
Use Cisco Feature Navigator to find information about platform support and Cisco IOS software image
support. Access Cisco Feature Navigator at http://www.cisco.com/go/fn. You must have an account on
Cisco.com. If you do not have an account or have forgotten your username or password, click Cancel at
the login dialog box and follow the instructions that appear.
Contents
• Prerequisites for Asynchronous Call Queueing by Role, page 48
• Restrictions for Asynchronous Call Queueing by Role, page 48
• Information About Asynchronous Call Queueing by Role, page 48
Authentication of Connections
Connections are authenticated using the method specified for the line configurations for the
asynchronous rotary group. If a connection is queued, authentication is done prior to queueing and no
authentication is done when the connection is later established.
Note Priority users must have the privilege level of administrator(PRIV_ROOT) to take advantage of the
Asynchronous Call Queueing by Role feature.
SUMMARY STEPS
1. enable
2. configure terminal
3. line [aux | console | tty | vty] line-number [ending-line-number]
4. rotary group [queued [by-role]]
DETAILED STEPS
Example:
Router# configure terminal
Example:
Router(config)# line 1 2
Step 4 rotary group [queued [by-role]] Enables asynchronous rotary line queueing on the
designated line or group of lines.
Example: • The optional by-role keyword enables asynchronous
Router(config-line)# rotary 1 queued by-role call queueing by role.
Troubleshooting Tips
In the event that asynchronous rotary line queueing is not operating correctly, use the following debug
commands in privileged EXEC mode to determine the source of the problem:
• debug async async-queue
• debug ip tcp transactions
• debug modem
Refer to the Cisco IOS Debug Command Reference publication for information about the debug modem,
debug ip tcp transactions, and the debug async async-queue commands.
SUMMARY STEPS
1. enable
2. configure terminal
3. show line async-queue rotary-group
4. clear line async-queue rotary-group
DETAILED STEPS
Example:
Router# configure terminal
Example:
Router# show line async-queue 1
Step 4 clear line async-queue rotary-group Clears all rotary queues or the specified rotary queue.
• If the rotary-group argument is not specified, all rotary
Example: queues are removed.
Router# clear line async-queue 1
Additional References
The following sections provide additional references related to the Asynchronous Call Queueing by Role
feature:
• Related Documents, page 52
• Standards, page 52
• MIBs, page 52
• RFCs, page 53
• Technical Assistance, page 53
Related Documents
Related Topic Document Title
Additional information about the Asynchronous Asynchronous Rotary Line Queueing, Release 12.1(1)T
Rotary Line Queuing feature
Additional information about configuring Cisco IOS Dial Technologies Configuration Guide, Release 12.2
asynchronous lines and rotary groups
Additional information about debug commands Cisco IOS Debug Command Reference, Release 12.2
Standards
Standards Title
None —
MIBs
MIBs MIBs Link
None To obtain lists of supported MIBs by platform and Cisco IOS
release, and to download MIB modules, go to the Cisco MIB website
on Cisco.com at the following URL:
http://www.cisco.com/public/sw-center/netmgmt/cmtk/mibs.shtml
To locate and download MIBs for selected platforms, Cisco IOS releases, and feature sets, use
Cisco MIB Locator found at the following URL:
http://tools.cisco.com/ITDIT/MIBS/servlet/index
If Cisco MIB Locator does not support the MIB information that you need, you can also obtain a list of
supported MIBs and download MIBs from the Cisco MIBs page at the following URL:
http://www.cisco.com/public/sw-center/netmgmt/cmtk/mibs.shtml
To access Cisco MIB Locator, you must have an account on Cisco.com. If you have forgotten or lost your
account information, send a blank e-mail to [email protected]. An automatic check will verify
that your e-mail address is registered with Cisco.com. If the check is successful, account details with a
new random password will be e-mailed to you. Qualified users can establish an account on Cisco.com
by following the directions found at this URL:
http://www.cisco.com/register
RFCs
RFCs Title
None —
Technical Assistance
Description Link
Technical Assistance Center (TAC) home page, http://www.cisco.com/public/support/tac/home.shtml
containing 30,000 pages of searchable technical
content, including links to products, technologies,
solutions, technical tips, tools, and lots more.
Registered Cisco.com users can log in from this page to
access even more content.
Command Reference
The following modified commands are pertinent to this feature. To see the command pages for these
commands and other commands used with this feature, go to the Cisco IOS Master Commands List,
Release 12.4, at http://www.cisco.com/univercd/cc/td/doc/product/software/ios124/124mindx/
124index.htm.
• rotary
Glossary
asynchronous transmission—Term describing digital signals that are sent without precise clocking.
Such signals generally have different frequencies and phase relationships. Asynchronous transmissions
usually encapsulate individual characters in control bits (called start and stop bits) that designate the
beginning and end of each character.
EIA/TIA-232—Common physical layer interface standard, developed by the Electronic Industries
Association and Telecommunications Industry Association, that supports unbalanced circuits at signal
speeds of up to 64 kbps. Closely resembles the V.24 specification. Formerly called RS-232.
rotary groups—Several contiguous lines that allow a connection to be made to the next free line in the
group. Also called a hunt group.
TCP—Transmission Control Protocol. Connection-oriented transport layer protocol that provides
reliable full-duplex data transmission. TCP is part of the TCP/IP protocol stack.
Telnet—Standard terminal emulation protocol in the TCP/IP protocol stack. Telnet is used for remote
terminal connection, enabling users to log in to remote systems and use resources as if they were
connected to a local system. Telnet is defined in RFC 854.
Transmission Connection Protocol—See TCP.
TTY—terminal line.
VTY—virtual terminal line.
Note Refer to the Internetworking Terms and Acronyms for terms not included in this glossary.
Feature History
Release Modification
12.2(4)T This feature was introduced.
12.2(11)T This feature was integrated into Cisco IOS Release 12.2(11)T and support
was added for the Cisco AS5300, Cisco AS5400 and Cisco AS5800
platforms.
This document describes the Asynchronous Line Monitoring feature in Cisco IOS Release 12.2(11)T. It
includes the following sections:
• Feature Overview, page 55
• Supported Platforms, page 56
• Supported Standards, MIBs, and RFCs, page 57
• Prerequisites, page 58
• Configuration Tasks, page 58
• Monitoring and Maintaining Character Mode Asynchronous Traffic, page 58
• Configuration Examples, page 59
• Command Reference, page 61
Feature Overview
Before introduction of the Asynchronous Line Monitoring feature, Cisco IOS software did not provide
a method for displaying asynchronous character mode traffic flowing out of an asynchronous line.
Therefore, when a user tried to troubleshoot difficult asynchronous traffic problems, the user needed to
use EIA/TIA-232 datascopes in order to examine the data stream. This method is very detailed and
cumbersome. The Asynchronous Line Monitoring feature allows the monitoring of inbound and
outbound asynchronous character mode traffic on another terminal line.
Benefits
This feature increases the efficiency of troubleshooting asynchronous character mode traffic problems.
Restrictions
The Asynchronous Line Monitoring feature can be used only to monitor character mode asynchronous
traffic in Cisco IOS Release 12.2(11)T. This feature does not allow the user to monitor asynchronous
packet traffic. The user cannot monitor traffic on console or virtual terminal ports. Furthermore, the user
cannot monitor traffic on his or her own port.
Related Documents
• Cisco IOS Dial Technologies Configuration Guide, Release 12.2
• Cisco IOS Dial Technologies Command Reference, Release 12.2
Supported Platforms
• Cisco 2500 series
• Cisco 2600 series
• Cisco 3620 router
• Cisco 3640 router
• Cisco 3660 router
• Cisco 3725 router
• Cisco 3745 router
• Cisco 7200 series
• Cisco AS5300
• Cisco AS5400
• Cisco AS5800
• Cisco IGX 8400 URM
To access Cisco Feature Navigator, you must have an account on Cisco.com. If you have forgotten or
lost your account information, send a blank e-mail to [email protected]. An automatic check
will verify that your e-mail address is registered with Cisco.com. If the check is successful, account
details with a new random password will be e-mailed to you. Qualified users can establish an account
on Cisco.com by following the directions found at this URL:
http://www.cisco.com/register
Cisco Feature Navigator is updated regularly when major Cisco IOS software releases and technology
releases occur. For the most current information, go to the Cisco Feature Navigator home page at the
following URL:
http://www.cisco.com/go/fn
MIBs
None
To locate and download MIBs for selected platforms, Cisco IOS releases, and feature sets, use
Cisco MIB Locator found at the following URL:
http://tools.cisco.com/ITDIT/MIBS/servlet/index
If Cisco MIB Locator does not support the MIB information that you need, you can also obtain a list of
supported MIBs and download MIBs from the Cisco MIBs page at the following URL:
http://www.cisco.com/public/sw-center/netmgmt/cmtk/mibs.shtml
To access Cisco MIB Locator, you must have an account on Cisco.com. If you have forgotten or lost your
account information, send a blank e-mail to [email protected]. An automatic check will verify
that your e-mail address is registered with Cisco.com. If the check is successful, account details with a
new random password will be e-mailed to you. Qualified users can establish an account on Cisco.com
by following the directions found at this URL:
http://www.cisco.com/register
RFCs
None
Prerequisites
In order for the Asynchronous Line Monitoring feature to function, an EXEC process (which interprets
the user commands) must be running on the asynchronous port that is being monitored for inbound or
outbound asynchronous traffic. This feature will not work if, instead of an EXEC process, a TTY
DAEMON process (which handles an incoming network connection) is running on the asynchronous
port that is being monitored.
Configuration Tasks
See the following section for required configuration tasks for the Asynchronous Line Monitoring
feature:
• Ensuring That an EXEC Process Is Running on the Asynchronous Port to Be Monitored (required)
Command Purpose
Router> show processes [cpu] Displays information about the active processes.
Command Purpose
Router# monitor traffic line [aux | tty] line-number [in | out] Monitors inbound and outbound asynchronous
character mode traffic on another terminal line.
• aux—(Optional) Specifies the auxiliary
EIA/TIA-232 DTE port.
• tty—(Optional) Specifies the standard
asynchronous line.
• line-number—Specifies the absolute or
relative number of the line to be monitored.
• in—(Optional) Specifies inbound traffic.
• out—(Optional) Specifies outbound traffic.
Before entering the monitor traffic line command, ensure that an EXEC process is running on the
asynchronous port that will be monitored. To check that an EXEC process is running on the line, enter
the show processes command. To monitor the asynchronous character mode traffic in the inbound
direction on tty line 1, enter the monitor traffic line command in privileged EXEC mode:
Router# monitor traffic line tty 1 in
To stop monitoring the traffic, enter the escape sequence (Ctrl-Shift-6, then x [Ctrl^x] by default). The
router will return to the privileged EXEC prompt.
Troubleshooting Tips
If no character output appears after you have entered the monitor traffic line command, one of the
following scenarios is occurring:
• No characters are traversing the asynchronous port.
• An EXEC process is not active on the asynchronous port that is being monitored.
• The platform does not support the monitor traffic line command, which is available with Cisco IOS
Release 12.2(4)T and later releases.
Configuration Examples
The following example allows the user to monitor asynchronous character mode traffic in the inbound
direction:
Router# monitor traffic line tty 1 in
To stop monitoring traffic, you must enter the escape sequence (Ctrl-Shift-6, then x [Ctrl^x] by default).
The router will be returned to the privileged EXEC prompt.
The following example allows the user to monitor asynchronous character mode traffic in the outbound
direction. When you do not specify inbound or outbound traffic by entering the keywords in or out, the
default will be outbound traffic:
Router# monitor traffic line tty 10
Figure 11 shows a common scenario for asynchronous character mode traffic that involves a remote user
on Workstation 1 dialing in to an asynchronous port on Router A (a Cisco router or access server). The
user commands are interpreted by an EXEC process (such as EXEC process 1). To monitor the inbound
or outbound asynchronous traffic on this port, you must log in to Router A via another terminal line—for
example, a vty when logging from Workstation 2—and enter the monitor traffic line command. This
command is interpreted by a second EXEC process (such as EXEC process 2).
Router
A EXEC
process 1 PSTN
cloud
EXEC Modem Modem
Workstation
process 2
1
IP
cloud
60902
Workstation
2
Figure 12 shows another scenario for asynchronous character mode traffic in which a remote user on
Workstation 1 uses reverse Telnets to access an asynchronous port of Router A, causing a TTY
DAEMON process (such as TTY DAEMON 1) to run on the asynchronous port of Router A. The user
then dials in to an asynchronous port on Router B. The user commands are interpreted by an EXEC
process (such as EXEC process 1) on Router B. To monitor the inbound or outbound asynchronous
traffic on this port on Router A, you must log in to Router A through another terminal line—for example,
another terminal line when logging from Workstation 2—and enter the monitor traffic line command.
The command is interpreted by a second EXEC process (such as EXEC process 2).
IP IP
cloud cloud
60903
Workstation Workstation
2 1
The monitor traffic line command cannot be used to monitor the asynchronous traffic on the
asynchronous port of router A in Figure 12 that is running the TTY DAEMON process, TTY
DAEMON 1.
When the monitor traffic line command is running and the asynchronous characters are being displayed
to the user on the second terminal line (Workstation 2), the Asynchronous Line Monitoring feature
allows this user to enter more commands on the second terminal line. The output of the additional
commands will be displayed not only to the user on Workstation 2, but also to the user on Workstation 1
on the terminal line that is being monitored. To prevent this display of command output on
Workstation 1, the user on Workstation 2 must be careful not to enter more commands while the monitor
traffic line command is still running.
Command Reference
The following new commands are pertinent to this feature. To see the command pages for these
commands and other commands used with this feature, go to the Cisco IOS Master Commands List,
Release 12.4, at http://www.cisco.com/univercd/cc/td/doc/product/software/ios124/124mindx/
124index.htm.
• monitor traffic line
This chapter describes how to communicate with a modem using the Asynchronous Serial Traffic over
UDP feature in the following main sections:
• UDPTN Overview
• How to Configure Asynchronous Serial Traffic over UDP
See the “Configuration Examples for UDPTN” section for configuration examples.
To identify the hardware platform or software image information associated with a feature, use the
Feature Navigator on Cisco.com to search for information about the feature or refer to the software
release notes for a specific release. For more information, see the “Finding Additional Feature Support
Information” section on page lxxvii in the “Using Cisco IOS Software for Release 12.4” chapter.
For a complete description of the UDP commands mentioned in this chapter, refer to the Cisco IOS Dial
Technologies Command Reference, Release 12.2. To locate documentation of other commands that
appear in this chapter, use the command reference master index or search online.
UDPTN Overview
The Asynchronous Serial Traffic over UDP feature provides the ability to encapsulate asynchronous data
into User Datagram Protocol (UDP) packets and then unreliably send this data without needing to
establish a connection with a receiving device. This process is referred to as UDP Telnet (UDPTN),
although it does not—and cannot—use the Telnet protocol. UDPTN is similar to Telnet in that both are
used to send data, but UDPTN is unique in that it does not require that a connection be established with
a receiving device. You load the data that you want to send through an asynchronous port, and then send
it, optionally, as a multicast or a broadcast. The receiving device(s) can then receive the data whenever
it wants. If the receiver ends reception, the transmission is unaffected.
The Asynchronous Serial Traffic over UDP feature provides a low-bandwidth, low-maintenance method
to unreliably deliver data. This delivery is similar to a radio broadcast: It does not require that you
establish a connection to a destination; rather, it sends the data to whatever device wants to receive it.
The receivers are free to begin or end their reception without interrupting the transmission.
It is a low-bandwidth solution for delivering streaming information for which lost packets are not
critical. Such applications include stock quotes, news wires, console monitoring, and multiuser chat
features.
This feature is particularly useful for broadcast, multicast, and unstable point-to-point connections. This
feature may not work as expected when there are multiple users on the same port number in a
nonmulticast environment. The same port must be used for both receiving and sending.
Command Purpose
Step 1 Router(config)# line line-number Enters line configuration mode for the line number
specified.
Step 2 Router(config-line)# transport output udptn Enables the line to transport UDP packets.
Step 3 Router(config-line)# dispatch-timeout 1000 Sends packets every 1000 milliseconds.
Step 4 Router(config-line)# dispatch-character 13 Sends packets after every new line.
Step 5 Router(config-line)# no session-timeout Disables timeout connection closing.
Enabling UDPTN
There are two methods of enabling UDPTN. You can manually enable UDPTN when you want to begin
transmission or reception, or you can configure the router to automatically enable UDPTN when a
connection is made to the line.
To manually enable UDPTN and begin UDPTN transmission or reception, use the following command
in EXEC mode:
Command Purpose
Router# udptn ip-address [port] [/transmit] [/receive] Enables UDPTN to the specified IP address (optionally,
using the specified port). Use the /transmit or /receive
keyword if the router will only be sending or receiving
UDPTN.
To automatically enable UDPTN when a connection is made to the line, use the following commands
beginning in global configuration mode:
Command Purpose
Step 1 Router(config)# line line-number Enters line configuration mode for the line number
specified.
Step 2 Router(config-line)# autocommand udptn ip-address Enables UDPTN automatically when a connection is
[port] [/transmit] [/receive] made to the line (optionally, using the specified port).
Use the /transmit or /receive keyword if the router will
only be sending or receiving UDPTN.
Step 1 Enable UDPTN debugging by using the debug udptn EXEC command.
Step 2 Enable UDPTN by using the udptn ip-address EXEC command, and then observe the debug output.
The following debug output shows a UDPTN session being successfully established and then
disconnected.
Router# debug udptn
Router# udptn 172.16.1.1
Trying 172.16.1.1 ... Open
Step 3 While the udptn command is enabled, enter the show ip socket command to verify that the socket being
used for UDPTN opened correctly.
Router# show ip socket
Proto Remote Port Local Port In Out Stat TTY OutputIF
17 --listen-- 172.21.14.90 67 0 0 89 0
17 0.0.0.0 520 172.21.14.90 520 0 0 1 0
17 1.1.1.2 57 1.1.1.1 57 0 0 48 0
17 224.1.1.1 57 1.2.2.2 57 0 0 48 0 Loopback0
Receiving Routers
ip multicast-routing
interface ethernet 0
ip address 10.99.98.97 255.255.255.192
ip pim dense-mode
!
line 0 16
transport output udptn telnet lat rlogin
autocommand udptn 172.1.1.1 /receive
Receiving Routers
interface ethernet 0
ip address 10.99.98.97 255.255.255.192
!
line 0 16
transport output udptn telnet lat rlogin
autocommand udptn 255.255.255.255 /receive
Router A
interface ethernet 0
ip address 10.54.46.1 255.255.255.192
!
line 5
no session-timeout
transport output udptn
dispatch-timeout 10000
dispatch-character 13
modem in
autocommand udptn 10.54.46.2
Router B
interface ethernet 0
ip address 10.54.46.2 255.255.255.192
!
line 10
no session-timeout
transport output udptn
dispatch-timeout 10000
dispatch-character 13
modem in
autocommand udptn 10.54.46.1
Cisco AS2511-RJ
Modem
Modem
14479
Figure 14 Cisco AS5300 Access Server
Cisco AS5300
Modems are inside
the chassis
14480
Cisco IOS Modem Components
Different components inside Cisco IOS software work together to enable remote clients to dial in and
send packets. Figure 15 shows one Cisco AS5300 access server that is receiving calls from a remote
office, branch office (ROBO); small office, home office (SOHO); and modem client.
Depending on your network scenario, you may encounter all of the components in Figure 15. For
example, you might decide to create a virtual IP subnet by using a loopback interface. This step saves
address space. Virtual subnets can exist inside devices that you advertise to your backbone. In turn, IP
packets get relayed to remote PCs, which route back to the central site.
Interface Headquarters
virtual template intranet/Internet
Interface dialer
Fast Ethernet controlling the
interface D channels
Virtual
Interface access Loopback
group-async Cloning interface interface
AAA
TDM bus
Controllers
Cisco IOS software
inside a Cisco AS5300 E1/T1 PRI ports
PRI lines
= ISDN B channel
PSTN/ISDN
= Modem/POTS POTS
Modem
Cisco 1604
(ROBO) Remote
14931
Cisco 766 PC
(SOHO)
Asynchronous Interfaces
An asynchronous interface assigns network protocol characteristics to remote asynchronous clients that
are dialing in through physical terminal lines and modems. (See Figure 16.)
Use the interface async command to create and configure an asynchronous interface.
Asynchronous interface
Line 1
Modem 1 PSTN/ISDN
Modem
Remote PC
negotiating parameters
with the asynchronous
14054
interface
To enable clients to dial in, you must configure two asynchronous components: asynchronous lines and
asynchronous interfaces. Asynchronous interfaces correspond to physical terminal lines. For example,
asynchronous interface 1 corresponds to tty line 1.
Commands entered in asynchronous interface mode configure protocol-specific parameters for
asynchronous interfaces, whereas commands entered in line configuration mode configure the physical
aspects for the same port.
To configure multiple asynchronous interfaces at the same time (with the same parameters), you can
assign each asynchronous interface to a group and then configure the group. Configurations throughout
this guide configure group asynchronous interfaces, rather than each interface separately.
If you want to configure different attributes on different asynchronous interfaces, do not assign them to
the group or assign different interfaces to different groups. After assigning asynchronous interfaces to a
group, you cannot configure these interfaces separately. For example, on a Cisco AS5300 access server
in a T1 configuration, you could assign asynchronous interfaces 1 to 48 as part of one group (such as
group-async1) and asynchronous interfaces 49 to 96 as part of another group (group-async2). You can
also use the member command to perform a similar grouping function.
Note The number of interfaces and modems varies among access server product models.
server, depending on
Modem 1 Modem 2 Modem 96 the product model
Use the interface group-async command to create and configure a group asynchronous interface. The
following example shows a group asynchronous configuration for a Cisco AS5300 access server loaded
with one 4-port ISDN PRI card and 96 MICA modems:
Router(config)# interface group-async 1
Router(config-if)# ip unnumbered loopback 0
Router(config-if)# encapsulation ppp
Router(config-if)# async mode interactive
Router(config-if)# peer default ip address pool dialin_pool
Router(config-if)# no cdp enable
Router(config-if)# ppp authentication chap pap dialin
Router(config-if)# group-range 1 96
Modem Calls
Modem calls travel through traditional telephone and ISDN lines. Regardless of the media used, these
calls are initiated by a modem and terminate on another modem at the remote end.
Figure 18 shows a remote laptop using a V.90 internal modem to dial in to a Cisco AS5300 access server,
which is loaded with 96 internal V.90 MICA technologies modems.
PPP
14052
business LAN modems
In the following sample display, absolute line numbers are listed at the far left. Relative line numbers are
in the third column, after the line type. The second virtual terminal line, vty 1, is absolute line number
3. Compare the line numbers in this sample display to the output from the show line command.
Line User Host(s) Idle Location
0 con 0
1 aux 0
2 vty 0 incoming 0 SERVER.COMPANY.COM
3 vty 1
4 vty 2
5 vty 3
6 vty 4
On the Cisco AS5350, AS5400, AS5800, AS5850 access servers, you can view the absolute and relative
line numbers with the following commands:
• show users all | exclude tty | interface to show the non-internal modem lines
• show controller async | include tty to show the internal modem lines
The following example shows the information displayed with the show users all | exclude tty|Interface
command:
Router# show users all | exclude tty | Interface
Line User Host(s) Idle Location
* 0 con 0 idle 00:00:00
1 aux 0 00:00:00
2 vty 0 00:00:00
3 vty 1 00:00:00
4 vty 2 00:00:00
5 vty 3 00:00:00
6 vty 4 00:00:00
The following example shows the information displayed with the show controller async | include tty
command:
Router# show controller async | include tty
Controller information for Async2/00 (tty324)
Controller information for Async2/01 (tty325)
Controller information for Async2/02 (tty326)
.
.
.
Compare the line numbers in this sample display to the output from the show line command.
For example, a laser printer is attached to line 10 of a Cisco 2511 router. Such a printer usually uses
XON/XOFF software flow control. Because the Cisco IOS software cannot receive an incoming
connection if the line already has a process, you must ensure that an EXEC session is not accidentally
started. You must, therefore, configure it as follows:
line 10
flowcontrol software
no exec
A host that wants to send data to the printer would connect to the router on TCP port 4008, send the data,
and then close the connection. (Remember that line number 10 octal equals 8 decimal.)
The Cisco IOS software provides commands that manage modems that reside inside access servers or
routers in the form of modem cards. This chapter describes the modem management tasks. It includes
the following main sections:
• Modems and Modem Feature Support
• Managing Modems
• Configuration Examples for Modem Management
For additional instructions for configuring Cisco access servers, see the chapter “Configuring and
Managing Cisco Access Servers and Dial Shelves” in this publication.
To identify the hardware platform or software image information associated with a feature, use the
Feature Navigator on Cisco.com to search for information about the feature or refer to the software
release notes for a specific release. For more information, see the “Finding Additional Feature Support
Information” section on page lxxvii in the “Using Cisco IOS Software for Release 12.4” chapter.
Modem initialization strings are listed in the “Modem Initialization Strings” appendix. For a complete
description of the commands mentioned in this chapter, refer to the Cisco IOS Dial Technologies
Command Reference. To locate documentation of other commands that appear in this chapter, use the
command reference master index or search online.
Cisco 2600/3600
Device Support Cisco AS5300 Cisco AS5350 Cisco AS5400 Cisco AS5800 Series Routers
Integrated 6- and 12-port 60-port 108-port 72- and 6-port, 12-port,
modems MICA NextPort CSM NextPort CSM 144-port MICA 18-port,
v6DFC v6DFC 24-port, or
324-port
30-port MICA
NextPort CSM
NM-DM
v6DFC
8- and 16-port
analog
NM-AM
V.90 Yes Yes Yes Yes Yes with
NM-DM
V.110 Yes Yes Yes Yes Yes with
NM-DM
V.120 No, CPU only Yes Yes Yes with No, CPU only
324-port
NextPort1 CSM
v6DFC
1. For more detailed information regarding the V.120 functionalities that are supported both by NextPort and Cisco IOS
software, see the section “V.120 Bit Rate Adaptation Standard.”
Note If the platform is using MICA technologies modems, the V.120 rate adaptation is done by CPU on vty
lines like protocol translation sessions.
The following sections summarize the standards supported by modems in the Cisco access servers. See
Table 7 through Table 10 for a summary and comparison of the Cisco IOS commands used for the MICA
and NextPort modems.
to an ISDN B channel allowing the remote station or terminal adapter to use the fast call setup times
offered by ISDN. This feature allows V.110 calls to be originated and terminated over ISDN. It also
enables GSM wireless connectivity.
V.110, as an alternative to V.120, provides DTE with V-series type interfaces with access to ISDN
network by bit stuffing. Many V.110 devices are used in Europe and Japan. In Japan, MICA supports the
Personal-Handyphone-System Internet Access Forum Standard (PIAFS) protocol, which is similar to
V.110.
The V.110 implementation for calls on MICA modems is managed by special boardware and modem
code, along with the appropriate Cisco IOS image, in a manner similar to other modulation standards.
This MICA V.110 implementation provides V.110 user rates ranging from 600 bps to 38,400 bps.
V.110 is supported on the following Cisco devices and network modules:
• Cisco AS5300-series access servers
• Cisco 3620, 3640, and 3660 access routers
• NM-6DM, NM-12DM, NM-18DM, NM-24DM, and NM-30DM network modules
The digital signal processors (DSPs) on the board can function as either modems or V.110 terminal
adapters (or V.120 terminal adapters for NextPort DSPs). Based on the ISDN Q.931 bearer capability
information element, the Cisco IOS software configures the DSP to treat the incoming call as a modem
call, a V.110 call, or a V.120 call.
Figure 19 shows a dial-in scenario for how V.110 technology can be used with a stack of
Cisco AS5300-series access servers.
Figure 19 V.110 Dial-In Scenario Using a Stack of Cisco AS5300-Series Access Servers
GSM cellular
satellite
Cellular
phone Cellular PSTN/
tower ISDN
network V.110 terminal
Telecommuter or
adapter
home office
PRI PRI
Laptop with Stack of Cisco AS5300
wireless modem access servers loaded with
V.110 terminal adapter cards
Internet or
enterprise
S6819
Dial process
server
Managing Modems
To manage modems, perform the tasks in the following sections; the tasks you need to perform depend
upon the type and needs of your system:
• Managing SPE Firmware
• Configuring Modems in Cisco Access Servers
• Configuring Cisco Integrated Modems Using Modem Attention Commands
• Configuring Modem Pooling
• Configuring Physical Partitioning
• Configuring Virtual Partitioning
• Configuring Call Tracker
• Configuring Polling of Link Statistics on MICA Modems
• Configuring MICA In-Band Framing Mode Control Messages
• Enabling Modem Polling
• Setting Modem Poll Intervals
• Setting Modem Poll Retry
• Collecting Modem Statistics
• Troubleshooting Using a Back-to-Back Modem Test Procedure
• Clearing a Direct Connect Session on a Microcom Modem
Command Purpose
Step 1 Router# configure terminal Enters global configuration mode.
Step 2 AS5400: Enters SPE configuration mode. You can choose to
Router(config)# spe slot/spe configure a range of SPEs by specifying the first and last
or SPE in the range.
Router(config)# spe slot/spe slot/spe
AS5800:
Router(config)# spe shelf/slot/spe
or
Router(config)# spe shelf/slot/spe
shelf/slot/spe
Step 3 Router(config-spe)# firmware upgrade {busyout | Specifies the upgrade method.
download-maintenance | reboot}
Three methods of upgrade are available. The busyout
keyword waits until all calls are terminated on an SPE
before upgrading the SPE to the designated firmware. The
download-maintenance keyword upgrades the firmware
during the download maintenance time. The reboot
keyword requests the access server to upgrade firmware at
the next reboot.
Command Purpose
Step 4 Router(config-spe)# firmware location Specifies the SPE firmware file in flash memory to use for
[IFS:[/]]filename the selected SPEs. Allows you to upgrade firmware for
SPEs after the new SPE firmware image is copied to your
flash memory.
The Cisco IOS file specification (IFS) can be any valid IFS
on any local file system. Use the dir all-filesystems EXEC
command to display legal IFSs. Examples of legal IFS
specifications include:
• bootflash:—Loads the firmware from a separate flash
memory device.
• flash:—Loads the firmware from the flash NVRAM
located within the router.
• system:/—Loads the firmware from a built-in file
within the Cisco IOS image. The optional forward slash
(/) and system path must be entered with this
specification.
• filename—The name of the desired firmware file (for
example, mica-modem-pw.2.7.3.0.bin). If the system
keyword is specified, enter the path to the filename you
want to download.
Step 5 Router(config-spe)# exit Exits SPE configuration mode.
Step 6 Router(config)# exit Exits global configuration mode.
Step 7 Router# copy running-config startup-config Saves your changes.
Note As soon as a firmware file is specified, the downloading begins. Do not specify all modems and then go
into an upgrade process on a busy router. The modems that are not busy will all be marked busy and the
server will wait until all the modems on each of the given cards are free before upgrading the
multiple-port cards. The only way to clear this situation is to start disconnecting users with a clear
command. Normally, groups of modems are specified in scripts with the spe slot/spe_begin and
slot/spe_end statements, and upgrades are done in a rolling fashion.
Use the show modem version and show spe version commands to verify that the modems are running
the portware version you specified.
The following example shows how to enter the SPE configuration mode, set the range of SPEs, specify
the firmware file location in flash memory, download the file to the SPEs, and display a status report
using the show spe EXEC command:
Router# configure terminal
Router(config)# spe 7/0 7/17
Router(config-spe)# firmware upgrade busyout
Router(config-spe)# firmware location flash:np_6_75
Started downloading firmware flash:np_6_75.spe
Router(config-spe)# exit
Router(config)# exit
Router# show spe 7
.
.
.
For information about upgrading Cisco 3600 Series and Cisco 3700 modems, see the Cisco 3600 Series
and Cisco 3700 Series Modem Portware Upgrade Configuration Note at the following URL:
http://www.cisco.com/univercd/cc/td/doc/product/access/acs_mod/cis3600/sw_conf/portware/5257d56
k.htm .
Note See the chapter “Configuring and Managing Cisco Access Servers and Dial Shelves” for additional
information about configuring Cisco AS5x00 series access servers.
Command Purpose
Step 1 MICA modems Depending on the type of modems loaded in your
Router(config)# modem country mica country access server, specifies the modem vendor and
country code.1 This step is only for the MICA,
NextPort SPE modems NextPort SPE, and Microcom modems in the
Router(config)# spe country country Cisco AS5000 series access servers.
Table 7 through Table 10 provide a summary and
Microcom modems
comparison of the Cisco IOS commands used for
Router(config)# modem country microcom_hdms country the MICA and NextPort modems.
Step 2 Router(config)# line beginning-line-number Enters the number of modem lines to configure.
ending-line-number Usually this range is equal to the number of
modems in the access server. Use the show line
EXEC command to see which lines are available.
Command Purpose
Step 3 Router(config-line)# transport {input | output} {all | Specifies that connection protocols can be used
none} when connecting to the line. For outgoing calls,
choose the output option. For incoming calls,
choose the input option. If you do not intend to
dial out, choose the none option.
Step 4 Router(config-line)# autoselect {arap | ppp | slip} Configures the line to automatically startup an
AppleTalk Remote Access (ARA), PPP, and
Serial Line Internet Protocol (SLIP) session. You
can configure more than one protocol by entering
multiple autoselect commands with the
appropriate keyword.
Step 5 Router(config-line)# autoselect during-login Configures the lines to display the username and
password prompt as soon as the line is connected,
rather than waiting until the user presses the Enter
or Return key at the terminal.
Step 6 Router(config-line)# login authentication dialin Enables authentication across all asynchronous
or modem logins.
Router(config-line)# login login-name Use the login authentication dialin command
Router(config-line)# password password
when authentication, authorization, and
accounting (AAA) authentication has been
enabled.
Use the login and password commands to
configure non-AAA user authentication.
Step 7 Router(config-line)# modem dialin Configures the modem for only incoming calls.
Step 8 Router(config-line)# exit Returns to global configuration mode.
1. For a comprehensive list of modem country codes, see the modem country mica command and the modem country microcom_hdms
command in the Cisco IOS Dial Technologies Command Reference.
Note The same configuration issues exist between the client DTE and client modem. Make sure that you have
the correct EIA/TIA-232 cabling and modem initialization string for your client modem.
The following is an example of a successful connection from a PC using a known good modem to dial
in to a Cisco access server:
at
OK
atdt9,5550101
CONNECT 14400/ARQ/V32/LAPM/V42BIS
User Access Verification
Username: user1
Password:
Router>
• Enter the debug modem ? command for a list of additional modem debugging commands:
Router# debug modem ?
b2b Modem Special B2B
csm CSM activity
maintenance Modem maintenance activity
mica MICA Async driver debugging
oob Modem out of band activity
tdm B2B Modem/PRI TDM
trace Call Trace Upload
Note When configuring an internal modem, avoid using the Modem Autoconfigure Discovery feature because
the feature can misdetect the internal modem type and cause the modem to start working in an
unpredictable and unreproducable manner.
Step 1 Use the modemcap edit command to define your own modemcap entry.
The following example defines modemcap MODEMCAPNAME:
Router(config)# modemcap edit MODEMCAPNAME miscellaneous &FS0=1&D3
Step 2 Apply the modemcap to the modem lines as shown in the following example:
Router# terminal monitor
Router# debug confmodem
Modem Configuration Database debugging is on
Router#configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Router(config)#line 33 34
Router(config-line)#modem autoconfigure type MODEMCAPNAME
Jan 16 18:12:59.643: TTY34: detection speed (115200) response ---OK---
Jan 16 18:12:59.643: TTY34: Modem command: --AT&FS0=1&D3--
Jan 16 18:12:59.659: TTY33: detection speed (115200) response ---OK---
Jan 16 18:12:59.659: TTY33: Modem command: --AT&FS0=1&D3--
Jan 16 18:13:00.227: TTY34: Modem configuration succeeded
Jan 16 18:13:00.227: TTY34: Detected modem speed 115200
Jan 16 18:13:00.227: TTY34: Done with modem configuration
Jan 16 18:13:00.259: TTY33: Modem configuration succeeded
Jan 16 18:13:00.259: TTY33: Detected modem speed 115200
Jan 16 18:13:00.259: TTY33: Done with modem configuration
Note The report that is generated by the debug confmodem command can be misleading for the MICA and
NextPort internal modems because these modems do not have Universal Asynchronous
Receiver/Transmitter (UART) and exchange data with the CPU at speeds of hundreds of kbps.
Note For additional information about dial modifiers for the MICA modems, search Cisco.com for the
publication AT Command Set and Register Summary for MICA Six-Port Modules.
The Cisco NAS Modem Health feature is enabled by arguments to the ATD AT command. The AT prefix
informs the network access server modem that commands are being sent to it, and the D (dial string or
dial) suffix dials a telephone number, establishing a connection. With NAS Modem Health feature, you
can enter the dial modifiers listed in Table 11 after the D in your dial string: X, W, and the comma (,)
character. These modifiers had been previously accepted without error but ignored in Cisco MICA
modems on Cisco AS5300 and Cisco AS5800 universal access servers.
Dial
Modifier Definition
X Switches to in-band dual tone multifrequency (DTMF) mode for any subsequent digits
remaining in the ATD string. The X dial modifier has been added to serve as a delimiter for
the host when the dial string is processed. It allows Cisco MICA portware to be used in
many environments that do not support DTMF dialing (for example, PRI).
W Waits for dial tone and then switches to in-band DTMF mode for any subsequent digits
remaining in the ATD string. The W dial modifier also acts as a delimiter between the
primary and secondary sections of the dial string, so that no additional X modifier is
needed. Once either an X or a W has been parsed in the dial string, any additional X
modifiers are ignored. Additional W modifiers cause Cisco MICA modems to wait for a
dial tone.
, Delay: Number of seconds in S8. Default is 2 seconds. The comma (,) dial modifier is
treated as a silent DTMF tone for the duration of seconds specified in S8. The comma is
acted on only after the call switching module (CSM) has made the transition to DTMF
mode, which requires that it either follow an X or a W in the dial string, or that the T1/E1
be configured for DTMF signaling.
In the following example dial string, the portion of the string before the X is dialed for the given line
type used in your configuration. All digits after the X generate the appropriate DTMF tones.
atdT5550101x,,567
To establish a direct connect session to an internal or integrated modem (existing inside the router), such
as the connection required for Microcom modems in the Cisco AS5200 access server, open a directly
connected session with the modem at-mode command and then send an AT command to the specified
modem. For example, the following example sends the AT command at%v to modem 1/1:
AS5200# modem at-mode 1/1
You are now entering AT command mode on modem (slot 1 / port 1).
Please type CTRL-C to exit AT command mode.
at%v
OK
at\s
IDLE 000:00:00
LAST DIAL
The modem responds with “OK” when the AT command you send is received.
To configure a modem for leased-line operation, use the following commands in global configuration
mode:
Command Purpose
Step 1 Router(config)# modemcap entry Sets the modemcap for leased-line operation for the
modem-type-name:AA=S0=0&L2 originating modem.
Step 2 Router(config)# modemcap entry Sets the modemcap for leased-line operation for the
modem-type-name:AA=S0=1&L2 answering modem.
The show modemcap command lists all the predefined modem types and any user-defined modemcaps
that are currently configured on the router:
• If the leased line has been configured, the modemcap information will be available.
• If the leased line has not been configured, only the predefined modem types will be displayed.
The important setting for leased-line support is what is defined in the modemcap as the key configuration
item and its application to the leased line. Consider the following command strings:
modemcap entry micro_LL_orig:AA=S0=0&L2
modemcap entry micro_LL_ans:AA=S0=1&L2
Note For the modemcap entry command, one of the predefined modem types may be used or a completely
user-defined modemcap may be created. For leased line, no new modem type was added. Users may
create their own modemcaps for leased-line functionality.
To configure the modem for leased-line operation, use the modemcap entry command. For each
connection, each modem must be configured as an originator or answerer.
The following example shows modemcaps for a leased-line originator and answerer and their application
to specific ports:
modemcap entry micro_LL_orig:AA=S0=0&L2
modemcap entry micro_LL_ans:AA=S0=1&L2
line 73
no exec
modem InOut
modem autoconfigure type micro_LL_ans
transport input all
line 74
no exec
modem InOut
modem autoconfigure type micro_LL_orig
transport input all
Note When Multilink PPP (MLP) is configured on a dialer interface, the dialer configuration has a default
value of 2 minutes for dialer idle timeout. For leased-line connections, set the dialer idle timeout to
infinity by adding dialer idle-timeout 0 to the configuration.
The following information is important for verifying or troubleshooting your configuration. The show
modem log command displays the progress of leased-line connections. Here is an example log for a
leased-line answerer. Note the “LL Answering” state and “LL Answer” in the “Direction” field of the
connection report:
00:44:03.884 DTR set high
00:44:02.888 Modem enabled
00:43:57.732 Modem disabled
00:43:52.476 Modem State:LL Answering
00:43:52.476 CSM:event-MODEM_STARTING_CONNECT New
State-CSM_CONNECT_INITIATED_STATE
00:43:51.112 Modem State:Waiting for Carrier
00:43:43.308 Modem State:Connected
00:43:42.304 Connection:TX/RX Speed = 33600/33600,
Modulation = V34
Direction = LL Answer, Protocol = MNP, Compression =
V42bis
00:43:42.304 CSM:event-MODEM_CONNECTED New
State-CONNECTED_STATE
00:43:42.300 RS232:noCTS* DSR* DCD* noRI noRxBREAK
TxBREAK*
00:43:41.892 PPP mode active
00:43:41.892 Modem enabled
00:43:39.888 PPP escape maps set:TX map=00000000 RX
map=FFFFFFFF
00:43:39.724 PPP escape maps set:TX map=00000000 RX
map=000A0000
00:43:34.444 RS232:CTS* DSR DCD noRI noRxBREAK TxBREAK
00:43:11.716 Modem Analog Report:TX = -20, RX = -34,
Signal to noise = 61
Cisco 2600 and 3600 Series Analog Modem Leased-Line Support Examples
In the following examples, one Cisco 3620 router and one Cisco 3640 router are connected back-to-back
using leased lines. The Cisco 3620 router has the originating configuration, and the Cisco 3640 router
has the answering configuration.
In the dialer interface configuration, the dialer idle-timeout 0 command is added to set the dialer idle
timeout to be infinity. Otherwise the leased line will go down and up every 2 minutes because the default
dialer interface idle timeout is 2 minutes.
Note Except for passwords and logins, the Cisco IOS command-line interface (CLI) is case-insensitive. For
this document, an uppercase “L” has been used in the command examples to avoid confusion with the
numeral “1”.
dialer pool-member 1
async default routing
async dynamic routing
async mode dedicated
no peer default ip address
no fair-queue
no cdp enable
ppp direction callout
ppp multilink
!
interface Dialer1
ip address 10.1.24.2 255.255.255.0
encapsulation ppp
no ip route-cache
no ip mroute-cache
load-interval 30
dialer remote-name sara20
dialer pool 1
dialer idle-timeout 0
dialer load-threshold 1 either
dialer max-call 4096
no cdp enable
ppp direction callout
ppp multilink
!
dialer-list 1 protocol ip permit
line con 0
exec-timeout 0 0
transport input none
line 73
no exec
modem InOut
modem autoconfigure type micro_LL_ans
transport input all
line aux 0
transport input all
flowcontrol hardware
line vty 0 4
exec-timeout 0 0
!
end
Command Purpose
Step 1 Router(config)# modem-pool name Creates a modem pool and assigns it a name, and starts
modem pool configuration mode.
Step 2 Router(config-modem-pool)# pool-range number-number Assigns a range of modems to the pool. A hyphen (-) is
required between the two numbers. The range of
modems you can choose from is equivalent to the
number of modems in your access server that are not
currently associated with another modem pool.
Step 3 Router(config-modem-pool)# called-number number Assigns the DNIS to be used for this modem pool.
[max-conn number]
The max-conn option specifies the maximum number
of simultaneous connections allowed for this DNIS. If
you do not specify a max-conn value, the default (total
number of modems in the pool) is used.1
Step 4 Router(config-modem-pool)# Ctrl-Z Returns to EXEC mode.
Command Purpose
Step 5 Router# show configuration Displays the running configuration to verify the modem
pool settings. Make changes accordingly.
Step 6 Router# copy running-config startup-config Saves the running configuration to the startup
configuration.
1. The DNIS string can have an integer x to indicate a “don’t care” digit for that position, for example, 555010x.
Note If you have active modem calls on the access server before using modem pooling, modem pooling
gracefully applies itself to the access server. Modem pooling first waits for active calls to hang up before
assigning modems to modem pools and directing calls according to DNIS.
modem-pool: System-def-Mpool
modems in pool: 0 active conn: 0
0 no free modems in pool
modem-pool: v90service
modems in pool: 48 active conn: 46
8 no free modems in pool
called_party_number: 1234
max conn allowed: 48, active conn: 46
8 max-conn exceeded, 8 no free modems in pool
modem-pool: v34service
modems in pool: 48 active conn: 35
0 no free modems in pool
called_party_number: 5678
max conn allowed: 48, active conn: 35
0 max-conn exceeded, 0 no free modems in pool
Field Description
modem-pool Name of the modem pool. In the previous example, there are three
modem pools configured: System-def-Mpool, v90service, and
v34service. To set the modem pool name, refer to the modem-pool
command.
All the modems not assigned to a modem pool are automatically
assigned to the system default pool (displayed as
System-def-Mpool).
modems in pool Number of modems assigned to the modem pool. To assign modems
to a pool, refer to the display and descriptions for the pool-range
command.
Field Description
active conn Number of simultaneous active connections for the specified modem
pool or called party DNIS number.
no free modems in pool Number of times incoming calls were rejected because there were no
more free modems in the pool to accept the call.
called_party_number Specified called party DNIS number. This is the number that the
remote clients use to dial in to the access server. You can have more
than one DNIS number per modem pool. To set the DNIS number,
refer to the description for the called-number command.
max conn allowed Maximum number of modems that a called party DNIS number can
use, which is an overflow protection measure. To set this feature,
refer to the description for the called-number command.
max-conn exceeded Number of times an incoming call using this called party DNIS
number was rejected because the max-conn number parameter
specified by the called-number command was exceeded.
For modem pool configuration examples, see the section “Physical Partitioning with Dial-In and
Dial-Out Scenario” later in this chapter.
Check the following if you are having trouble operating your modem:
• Make sure you have not configured the same DNIS for multiple pools.
• Make sure you have not placed the same modem in multiple pools.
Note Modem pools that use MICA or Microcom modems support incoming analog calls over ISDN PRI.
However, only MICA modems support modem pooling for T1 and E1 configurations with CAS.
13053
POS modems 24 555-4444
Physical partitioning can also be used to set up an access server for bidirectional dial access. (See
Figure 21.)
Figure 21 shows one Cisco AS5300 access server loaded with 96 MICA modems and configured with 2
modem pools. One modem pool has 84 modems and collects DNIS. This pool is shared by 400
salespeople who remotely download e-mail from headquarters. The other modem pool contains 12
fax-capable modems and does not collect DNIS. This pool is shared by 40 employees using PCs on a
LAN. Each time an outbound call is initiated by a PC, a modem on the Cisco AS5300 access server is
seized and used to fax out or dial out. Not configuring DNIS support in the fax-out modem pool protects
the pool from being used by the calls coming in from the field. Regardless of how many salespeople are
dialing in or which telephone number they use, the fax-out and dial-out modem pool will always be
reserved for the PCs connected to the LAN.
Dial-in calls
• 84 V.90 modems
in modem pool
• DNIS is collected 40 PCs dialing out
and faxing out with
Cisco DialOut Utility
software
Four PRI
or CT1 lines Dial in Headquarters LAN
PSTN
E-mail server
dialing in with
56K modems
The following hardware configuration is used on the Cisco AS5200 access server:
• One 2-port T1 PRI card
• One 48-port card containing four 6-port MICA 56K modem modules and two 12-port Microcom
V.34 modem modules
To configure basic physical partitioning, perform the following steps:
Step 2 Create the modem pool for the 56K MICA modem services using the modem-pool name command. The
modem pool is called 56kservices, which spans four 6-port MICA 56K modem modules.
Router(config)# modem-pool 56kservices
Router(config-modem-pool)#
Note The router is in modem pool configuration mode after the prompt changes from Router(config)#
to Router(config-modem-pool)#.
Step 3 Assign a range of modems to the modem pool using the pool-range number-number command. Because
all the 56K MICA technologies modems are seated in slot 1, they are assigned TTY line numbers 1 to
24. Use the show line EXEC command to determine the TTY line numbering scheme for your access
server.
Router(config-modem-pool)# pool-range 1-24
Step 4 Assign a DNIS to the modem pool using the called-number number [max-conn number] command.
This example uses the DNIS 5550101 to connect to the 56K modems. The maximum simultaneous
connection limit is set to 24. The 25th user who dials 5550101 gets a busy signal.
Router(config-modem-pool)# called-number 5550101 max-conn 24
Step 5 Return to EXEC mode by entering Ctrl-Z. Next, display the modem pool configuration using the show
modem-pool command. In the following example, 56K modems are in the modem pool called
56kservices. The remaining 24 V.34 Microcom modems are still in the default system pool.
Router(config-modem-pool)# ^Z
Router# show modem-pool
modem-pool: System-def-Mpool
modems in pool: 24 active conn: 0
0 no free modems in pool
modem-pool: 56kservices
modems in pool: 24 active conn: 0
0 no free modems in pool
called_party_number: 5550101
max conn allowed: 24, active conn: 0
0 max-conn exceeded, 0 no free modems in pool
Step 6 Create the modem pool for the Microcom physical partition. After the configuration is complete, the
show modem-pool command shows that there are no remaining modems in the system default modem
pool.
Router# configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Router(config)# modem-pool v34services
modem-pool: System-def-Mpool
modems in pool: 0 active conn: 0
0 no free modems in pool
modem-pool: 56kservices
modems in pool: 48 active conn: 0
0 no free modems in pool
called_party_number: 5550101
max conn allowed: 48, active conn: 0
0 max-conn exceeded, 0 no free modems in pool
modem-pool: v34services
modems in pool: 48 active conn: 0
0 no free modems in pool
called_party_number: 5550202
max conn allowed: 48, active conn: 0
0 max-conn exceeded, 0 no free modems in pool
Step 1 Create the 56K modem pool for the 400 remote salespeople. This modem pool contains 84 modems,
which are reserved for the dial-in calls. To get access, the salespeople dial the DNIS 5550303. The total
number of simultaneous calls is limited to 84. The 85th call and those above it are rejected. The modem
dialin line configuration command is used to prevent modems 1 to 84 from dialing out.
Router# configure terminal
Router(config)# modem-pool 56ksalesfolks
Router(config-modem-pool)# pool-range 1-84
Router(config-modem-pool)# called-number 5550303 max-conn 84
Router(config-modem-pool)# exit
Router(config)# line 1 84
Router(config-line)# modem dialin
Router(config-line)# transport input all
Router(config-line)# rotary 1
Router(config-line)# autoselect ppp
Router(config-line)# exit
Router(config)#
Step 2 Create the dial-out/fax-out modem pool for the 40 local employees connected to the headquarters LAN.
This modem pool contains 12 fax-capable MICA modems. No DNIS is assigned to the pool. Because
lines 85 to 96 are used for the dial-out and fax-out modem services, the asynchronous lines are
configured for reverse Telnet. This configuration is needed for the Telnet extensions to work with the
dial-out application, which is installed on the LAN PCs.
Router(config)# modem-pool dialoutfolks
Router(config-modem-pool)# pool-range 85-96
Router(config-modem-pool)# exit
Router(config)# line 85-96
Router(config-line)# refuse-message z [!NMM!] No Modems Available z
Router(config-line)# exec-timeout 0 0
Router(config-line)# autoselect during-login
Router(config-line)# autoselect ppp
Router(config-line)# modem inout
Router(config-line)# rotary 1
Router(config-line)# transport preferred telnet
Router(config-line)# transport input all
Router(config-line)# exit
Router(config)#
Step 3 Configure the group asynchronous interface, which assigns core protocol characteristics to all the
asynchronous interfaces in the system. Regardless of the direction that the modems are dialing, all
modems in the access server leverage this group asynchronous configuration.
Router(config)# interface group-async 1
Router(config-if)# ip unnumbered ethernet 0
Router(config-if)# encapsulation ppp
Router(config-if)# async mode interactive
Router(config-if)# ppp authentication chap pap paplocal
Router(config-if)# peer default ip address pool bidir_dial_pool
Router(config-if)# no cdp enable
Router(config-if)# no ip mroute cache
Router(config-if)# no ip route cache
Router(config-if)# async dynamic routing
Router(config-if)# async dynamic address
Router(config-if)# group range 1-96
Building configuration...
Router(config-if)# exit
Step 4 Create an IP address pool for all the dial-in clients and dial-out clients. Both types of clients borrow
addresses from this shared pool.
Router(config)# ip local pool bidir_dial_pool 10.4.1.1 10.4.1.96
Router(config)# ^z
Router# copy running-config startup-config
Step 5 (Optional) If you are using CiscoSecure AAA and a remote TACACS server, include the following
security statements on the access server:
Router(config)# aaa new-model
Router(config)# aaa authentication login default tacacs+
Router(config)# aaa authentication login noaaa local
Router(config)# aaa authentication login logintac tacacs+
Router(config)# aaa authentication ppp ppptac tacacs+
Router(config)# aaa authentication ppp paplocal local
Router(config)# aaa authorization exec tacacs+
Router(config)# aaa authorization network tacacs+
Router(config)# aaa authorization reverse-access tacacs+
Router(config)# aaa accounting exec start-stop tacacs+
Router(config)# aaa accounting network start-stop tacacs+
Router(config)# aaa accounting update newinfo
Router(config)# enable password cisco
You should also include the host name, timeout interval, and authentication key:
Router(config)# tacacs-server host 10.4.1.10
Router(config)# tacacs-server timeout 20
Router(config)# tacacs-server key nas1
Four PRI
or CE1 lines
Fast Ethernet
PSTN
dialing in to dialing in to
a leased POP a leased POP
Virtual partitioning essentially resells modem banks to customers, such as a small-sized ISP. However,
remember that modem pooling is a single-chassis solution, not a multichassis solution. Modem pooling
is not a solution for reselling ports on a large-scale basis.
The following procedure creates one modem pool on a Cisco AS5300 access server for two ISP
customers. The shared modem pool is called isp56kpool. However, both ISP customers are assigned
different DNIS numbers and are limited to a maximum number of simultaneous connections.
See Figure 22 for the network topology.
The following hardware configuration is used on the Cisco AS5300 access server:
• One 4-port T1 PRI card
• Two 48-port cards containing sixteen 6-port MICA 56K modem modules
Step 2 Create the shared modem pool for the 56K MICA modem services. This modem pool is called
isp56kpool, which spans sixteen 6-port MICA 56K modem modules.
Router(config)# modem-pool isp56kpool
Router(config-modem-pool)#
Step 3 Assign all the modems to the modem pool using the pool-range number-number command. Use the
show line EXEC command to determine your TTY line numbering scheme.
Router(config-modem-pool)# pool-range 1-96
Step 4 Assign a unique DNIS to each ISP customer using the called-number number [max-conn number]
command. In this example, the max-conn number option limits each ISP to 48 simultaneous
connections. The 49th user to dial either DNIS will get a busy signal.
Router(config-modem-pool)# called-number 5550101 max-conn 48
Router(config-modem-pool)# called-number 5550202 max-conn 48
Step 5 Return to EXEC mode by entering a Ctrl-Z sequence. Next, display the modem pool configuration using
the show modem-pool command. In the following example, all the 56K modems are in the isp56kpool
modem pool. The output also shows two DNIS numbers configured: 5550101 and 5550202.
Router(config-modem-pool)# ^Z
Router# show modem-pool
modem-pool: System-def-Mpool
modems in pool: 0 active conn: 0
0 no free modems in pool
modem-pool: isp56kpool
modems in pool: 96 active conn: 0
0 no free modems in pool
called_party_number: 5550101
max conn allowed: 48, active conn: 0
0 max-conn exceeded, 0 no free modems in pool
called_party_number: 5550202
max conn allowed: 48, active conn: 0
0 max-conn exceeded, 0 no free modems in pool
Router# copy running-config startup-config
Note The calltracker command, providing Call Tracker services, is supported for dial calls but not voice.
Calltracker is supported for dial calls on 5x platforms (5300, 5350, 5400, 5800, and 5850).
Record syslogs are available through configuration that will generate detailed information records for
all call terminations. This information can be sent to syslog servers for permanent storage and future
analysis.
Additionally, the status and diagnostic data that is routinely collected from MICA modems is expanded
to include new link statistics for active calls, such as the attempted transmit and receive rates, the
maximum and minimum transmit and receive rates, and locally and remotely issued retrains and
speedshift counters. For more detailed information on Call Tracker logs, refer to the TAC Tech Notes
document, Understanding Call Tracker Outputs, at the following URL:
http://www.cisco.com/warp/public/471/calltracker_view.html
To configure Call Tracker, perform the following steps:
Command Purpose
Step 1 Router(config)# calltracker enable Enables Call Tracker.
Step 2 Router(config)# calltracker call-record Enables Call Tracker syslog support for generating detailed
{terse|verbose} [quiet] Call Records.
Step 3 Router(config)# calltracker history max-size Sets the maximum number of call entries to store in the Call
number Tracker history table.
Step 4 Router(config)# calltracker history Sets the number of minutes for which calls are stored in the
retain-mins minutes Call Tracker history table.
Step 5 Router(config)# snmp-server packetsize Sets the maximum packet size allowed for SNMP server
byte-count requests and replies.
Step 6 Router(config)# snmp-server queue-length Sets the queue length for SNMP traps.
length
Step 7 Router(config)# snmp-server enable traps Enables Call Tracker to send traps whenever a call starts or
calltracker ends.
Step 8 Router(config)# snmp-server host host Specifies the name or Internet address of the host to send Call
community-string calltracker Tracker traps.
Command Purpose
Router# show call calltracker summary Verifies the Call Tracker configuration and current status.
Command Purpose
Router(config)# modem link-info poll Sets the polling interval at which link statistics for active
time seconds calls are retrieved from the modem.
Note The modem link-info poll time command consumes a substantial amount of memory, approximately
500 bytes for each MICA modem call. Use this command only if you require the specific data that it
collects; for instance, if you have enabled Call Tracker on your access server.
Command Purpose
Step 1 Router(config)# line line-number Specifies the number of modem lines to configure and
[ending-line-number] enters line configuration mode. If a range is entered, it
must be equal to the number of modems in the router.
Step 2 Router(config-line)# no flush-at-activation Improves PPP and SLIP startup.
Normally a router avoids line and modem noise by
clearing the initial data received within the first one or
two seconds. However, when the autoselect PPP
feature is configured, the router flushes characters
initially received and then waits for more traffic. This
flush causes timeout problems with applications that
send only one carriage return.
The Cisco IOS software offers additional interface commands that can be set to control modem interface
timing. Refer to the Cisco IOS command references for more information about the interface commands
described in the following paragraphs.
When a link goes down and comes back up before the timer set by the carrier-delay command expires,
the down state is effectively filtered, and the rest of the software on the switch is not aware that a
link-down event occurred. Therefore, a large carrier delay timer results in fewer link-up and link-down
events being detected. On the other hand, setting the carrier delay time to 0 means that every link-up and
link-down event is detected.
When the link protocol goes down (because of loss of synchronization, for example), the interface
hardware is reset and the data terminal ready (DTR) signal is held inactive for at least the specified
interval. Setting the pulse-time command enable pulsing DTR signal intervals on serial interfaces, and
is useful for handling encrypting or other similar devices that toggle the DTR signal to resynchronize.
Use the modem dtr-delay command to reduce the time that a DTR signal is held down after an
asynchronous line clears and before the DTR signal is raised again to accept new calls. Incoming calls
may be rejected in heavily loaded systems, even when modems are unused because the default DTR
hold-down interval may be too long. The modem dtr-delay command is designed for lines used for an
unframed asynchronous session such as Telnet. Lines used for a framed asynchronous session such as
PPP should use the pulse-time interface command.
Command Purpose
Router(config-line)# modem log {cts | dcd | dsr | Configures the types of EIA/TIA events that are stored in the
dtr | ri | rs323 | rts | tst} modem log. The default setting stores no EIA/TIA events.
or
Command Purpose
Step 1 Router(config)# modem poll time seconds Specifies the number of seconds between statistical modem
polling for Microcom modems. The default is 12 seconds. The
configuration range is from 2 to 120 seconds.
Step 2 Router(config)# modem poll retry number Sets the maximum number of polling attempts to Microcom
modems. The default is three polling attempts. The
configuration range is from 0 to 10 attempts.1
Step 3 Router(config)# modem status-poll Polls for status and statistics for a Microcom modem through the
modem’s out-of-band feature.
Step 4 Router(config)# modem buffer-size number Defines the number of modem events that each modem is able to
store. The default is 100 events for each modem. Use the show
modem log command to display modem events.
1. If the number of attempts to retrieve modem status or statistics exceeds the number you define, the out-of-band feature is removed from
operation. In this case, you must reset the modem hardware using the clear modem command.
Step 1 Perform a back-to-back modem test between two normal functioning modems. This example shows a
successful connection between modem 1/1 and modem 1/0, which verifies normal operating conditions
between these two modems:
After you enter the test modem back-to-back command, you must define the number of packets sent
between modems at the Repetitions prompt. The ideal range of packets to send and receive is from 1 to
100. The default is 1 packet that is 10 bytes large. The response message (for example, “success/packets
= 20/20”) tells you how many packets were sent in both directions compared to the total number of
packets attempted to be sent in both directions. Because the software reports the packet total in both
directions, the reported numbers are two times the number you originally specify.
When a known good modem is tested against a known bad modem, the back-to-back modem test fails.
In the following example, modem 1/3 is suspected or proven to be inoperable or bad:
Router# test modem back-to-back 1/1 1/3
Repetitions (of 10-byte packets) [1]: 10
Router#
%MODEM-5-BADMODEMS: Modems (1/3) and (1/1) failed back-to-back test: NOCARRIER
Step 2 You would need to manually mark modem 1/3 as an inoperable or bad modem. You mark the bad modem
by determining which line number corresponds with the modem. Use the show modem 1/3 EXEC
command to verify that TTY line number 4 (shown as TTY4) is used for modem 1/3:
Router# show modem 1/3
Mdm Typ Status Tx/Rx G Duration TX RX RTS CTS DSR DCD DTR
1/3 V34 Idle 28800/28800 0 00:00:00 x x x x x
Step 3 Enter line configuration mode and manually remove modem 1/3 from dial services by entering the
modem bad command on line 4:
Router# configure terminal
Router(config)# line 4
Router(config-line)# modem bad
Router(config-line)# exit
Router(config)# exit
Step 4 Enter the show modem EXEC command or the show modem slot/port command to display the bad
modem status.
Bad modems are marked with the letter B in the Mdm column of the show modem command display
output.
Router# show modem
Malfunctioning modems are also marked as Bad in the Status column of the show modem slot/port
command display output, as the following example shows:
Router# show modem 1/3
Mdm Typ Status Tx/Rx G Duration TX RX RTS CTS DSR DCD DTR
1/3 V34 Bad 28800/28800 0 00:00:00 x x x x x
The following example shows how to execute the clear modem at-mode command from a second Telnet
session while the first Telnet session is connected to the modem:
Router# clear modem at-mode 1/1
clear "modem at-mode" for modem 1/1 [confirm] <press Return>
Router#
The following output is displayed in the first Telnet session after the modem is cleared by the second
Telnet session:
Direct connect session cleared by vty0 (172.19.1.164)
Local disconnect reasons are listed across the top of the screen display (for example, wdogTimr,
compress, retrain, inacTout, linkFail, moduFail, mnpProto, and lapmProt). In the body of the screen
display, the number of times each modem disconnected is displayed (see the # column). For a particular
disconnect reason, the % column indicates the percent that a modem was logged for the specified
disconnect reason with respect to the entire modem pool for that given reason. For example, out of all
the times the rmtLink error occurred on all the modems in the system, the rmtLink error occurred
10 percent of the time on modem 0/22.
Malfunctioning modems are detected by an unusually high number of disconnect counters for a
particular disconnect reason. For example, if modem 1/0 had a high number of compression errors
compared to the remaining modems in system, modem 1/0 would likely be the inoperable modem.
To reset the counters displayed by the show modem call-stats command, enter the clear modem
counters command.
Note For a complete description of each error field displayed by the commands on this page, refer to the Cisco
IOS Dial Technologies Command Reference. Remote disconnect reasons are not described by the show
modem command output.
The following example displays output for the show modem call-stats command. Because of the screen
size limitation of most terminal screen displays, not all possible disconnect reasons are displayed at one
time. Only the top eight most frequently experienced disconnect reasons are displayed at one time.
Router# show modem call-stats
* 2/7 5 2 1 1 1 0 0 0 0 0 0 0 0 0 0 0
* 2/8 5 2 1 1 1 0 0 0 0 0 0 0 0 0 0 0
* 2/9 4 1 1 1 2 1 0 0 0 0 0 0 0 0 0 0
* 2/10 5 2 1 1 0 0 0 0 0 0 0 0 0 0 0 0
* 2/11 5 2 1 1 5 4 0 0 0 0 0 0 0 0 0 0
* 2/12 5 2 1 1 2 1 0 0 0 0 0 0 0 0 0 0
* 2/13 5 2 1 1 1 0 0 0 0 0 0 0 0 0 0 0
* 2/14 5 2 1 1 2 1 0 0 0 0 0 0 0 0 0 0
* 2/15 4 1 1 1 3 2 0 0 0 0 0 0 0 0 0 0
* 2/16 4 1 1 1 3 2 0 0 0 0 0 0 0 0 0 0
* 2/17 5 2 2 3 9 8 0 0 0 0 0 0 0 0 0 0
* 2/18 4 1 1 1 1 0 0 0 0 0 0 0 0 0 0 0
* 2/19 3 1 1 1 2 1 0 0 0 0 0 0 0 0 0 0
* 2/20 7 3 1 1 8 7 0 0 0 0 0 0 0 0 0 0
* 2/21 5 2 1 1 1 0 0 0 0 0 0 0 0 0 0 0
* 2/22 4 1 1 1 2 1 0 0 0 0 0 0 0 0 0 0
* 2/23 5 2 1 1 2 1 0 0 0 0 0 0 0 0 0 0
Total 233 59 110 0 0 0 0 0
* 2/17 5 5 0 0 0 0 0 0 0 0 0 0 0 0 0 0
* 2/18 5 5 0 0 0 0 0 0 0 0 0 0 0 0 0 0
* 2/19 3 3 0 0 0 0 0 0 0 0 0 0 0 0 0 0
* 2/20 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
* 2/21 4 4 0 0 0 0 0 0 0 0 0 0 0 0 0 0
* 2/22 2 2 0 0 0 0 0 0 0 0 0 0 0 0 0 0
* 2/23 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
Total 84 0 0 0 0 0 0 0
Command Purpose
Step 1 Router(config-line)# modem bad Removes and idles the modem from service and
indicates it as suspected or proven to be inoperable.
Step 2 Router(config-line)# modem hold-reset Resets and isolates the modem hardware for extensive
troubleshooting.
Step 3 Router(config-line)# modem shutdown Abruptly shuts down a modem from dial service.
Step 4 Router(config-line)# modem recovery-time minutes Sets the maximum amount of time for which the
call-switching module waits for a local modem to
respond to a request before it is considered locked in a
suspended state. The default is 5 minutes.
If you use the modem bad command to remove an idle modem from dial services and mark it as
inoperable, the letter B is used to identify the modem as bad. The letter B appears in the Status column
in the output of show modem slot/port command and in the far left column in the output of the show
modem command. Use the no modem bad command to unmark a modem as B and restore it for dialup
connection services. If the letter B appears next to a modem number, it means the modem was removed
from service with the modem shutdown command.
Note Only idle modems can be marked “bad” by the modem bad command. If you want to mark a modem
bad that is actively supporting a call, first enter the modem shutdown command, then enter the modem
bad command.
Use the modem hold-reset command if a router is experiencing extreme modem behavior (for example,
if the modem is uncontrollably dialing in to the network). This command prevents the modem from
establishing software relationships such as those created by the test modem back-to-back command.
The modem is unusable while the modem hold-reset command is configured. The modem hold-reset
command also resets a modem that is frozen in a suspended state. Disable the suspended modem with
the modem hold-reset command, and then restart hardware initialization with the no modem hold-reset
command.
The following example disables a suspended modem and resets its hardware initialization:
Router# configure terminal
Router(config)# line 4
Router(config-line)# modem hold-reset
Router(config-line)# no modem hold-reset
The following example gracefully disables the modem associated with line 1 from dialing and answering
calls. The modem is disabled only after all active calls on the modem are dropped.
Router# configure terminal
Router(config)# line 1
Router(config)# modem busyout
The following example abruptly shuts down the modem associated with line 2. All active calls on the
modem are dropped immediately.
Router# configure terminal
Router(config)# line 2
Router(config)# modem shutdown
In the following example, the modem using TTY line 3 is actively supporting a call (as indicated by the
asterisk). However, we want to mark the modem bad because it has poor connection performance. First,
abruptly shut down the modem and drop the call with the modem shutdown command, and then enter
the modem bad command to take the modem out of service.
Router# show modem
For more information about modem recovery procedures, refer to TAC Tech Notes Configuring MICA
Modem Recovery at http://www.cisco.com/warp/public/76/modem-recovery.html and Configuring
NextPort SPE Recovery at http://www.cisco.com/warp/public/76/spe-recovery.html.
Command Purpose
Step 1 Router(config)# line shelf/slot/port Specifies the line number, by specifying the shelf, slot, and port
numbers; you must type in the slashes. This command also
begins line configuration mode.
Step 2 Router(config-line)# modem busyout Having specified the modem to be busied out with the line
command, enter the modem busyout command to busy out the
modem. The command disables the modem associated with line
shelf/slot/port from dialing and answering calls.You need not
specify a shelf/slot/port number again in this command.
Step 3 Router(config-line)# modem shutdown Having specified the modem to be shut down with the line
command, enter the modem shutdown command to shut down
the modem, whether or not it has already been busied out. You
need not specify a shelf/slot/port number again in this command
because you have already done so with the line command.
Step 4 Router(config-line)# exit Exits line configuration mode and returns to global
configuration mode.
Step 5 Router(config)# modem busyout-threshold Specifies a threshold number using the modem
number busyout-threshold number command to balance the number of
DS0s with the number of modem lines. For more information,
refer to the Cisco IOS Dial Technologies Command Reference.
Step 6 Router(config)# exit Exits global configuration mode and returns to privileged EXEC
mode.
Step 7 Router# show busyout From privileged EXEC mode, verifies that the line is busied out.
If there are active calls, the software waits until the call
terminates before the line is busied out.
The modem busyout command disables the modem associated with a specified line from dialing and
answering calls. The modem busyout command can busy out and eventually terminate all 72 ports on
the Cisco AS5800 modem card.
configured lines. This feature is enabled and disabled through use of the CLI and MIBs. DS0
busyout traps are disabled by default and are supported on Cisco AS5300, Cisco AS5400, and
Cisco AS5800 universal access servers.
• Enabling ISDN PRI Requested Channel Not Available Traps—ISDN PRI channel not available traps
are generated when a requested DS0 channel is not available, or when there is no modem available
to take the incoming call. This feature is available only for ISDN PRI interfaces. This feature is
enabled and disabled through use of CLI for ISDN traps and the CISCO-ISDN-MIB. ISDN PRI
channel not available traps are disabled by default and are supported on the Cisco AS5300,
Cisco AS5400, and Cisco AS5800.
• Enabling Modem Health Traps—Modem health traps are generated when a modem port is bad,
disabled, reflashed, or shut down, or when there is a request to busy out the modem. This feature is
enabled and disabled through use of CLI and the CISCO-MODEM-MGMT-MIB. Modem health
traps are disabled by default and are supported on the Cisco AS5300, Cisco AS5400, and
Cisco AS5800.
• Enabling DS1 Loopback Traps—DS1 loopback traps are generated when a DS1 line goes into
loopback mode. This feature is enabled and disabled by CLI and the CISCO-POP-MGMT-MIB. DS1
loopback traps are disabled by default and are supported on the Cisco AS5300 and Cisco AS5400
only.
The CISCO-POP-MGMT-MIB supplies the DS0 busyout traps and the DS1 loopback traps. The
CISCO-MODEM-MGMT-MIB supplies additional modem health traps when the modem port becomes
non-functional. The CISCO-ISDN-MIB supplies additional traps for ISDN PRI channel not available.
To obtain lists of supported MIBs by platform and Cisco IOS release, and to download MIB modules,
go to the Cisco MIB website on Cisco.com at
http://www.cisco.com/public/sw-center/netmgmt/cmtk/mibs.shtml.
See the sections “Verifying Enabled Traps” and “Troubleshooting the Traps” to verify and troubleshoot
configuration. The section “NAS Health Monitoring Example” provides output of a configuration with
the NAS health monitoring features enabled.
Command Purpose
Router(config)# snmp-server enable traps Generates a trap when there is a request to busy out a DS0 or to
ds0-busyout indicate when busyout finishes.
Command Purpose
Router(config)# snmp-server enable traps isdn Generates a trap when the NAS rejects an incoming call on an ISDN
chan-not-avail PRI interface because the channel is not available.
Command Purpose
Router(config)# snmp-server enable traps Generates a trap when a modem port is bad, disabled, or prepared
modem-health for firmware download; when download fails; when placed in
loopback mode for maintenance; or when there is a request to busy
out the modem.
Command Purpose
Router(config)# snmp-server enable traps Generates a trap when the DS1 line goes into loopback mode.
ds1-loopback
Additionally, you can use the show controllers command with the timeslots keyword to display details
about the channel state. This feature shows whether the DS0 channels of a particular controller are in
idle, in-service, maintenance, or busyout state. This enhancement applies to both CAS and ISDN PRI
interfaces and is supported on the Cisco AS5300 and Cisco AS5400 only.
Check the resulting output to see that the SNMP trap information packet is being sent. The output will
vary based on the kind of packet sent or received:
SNMP: Packet received via UDP from 10.5.4.1 on Ethernet0
SNMP: Get-next request, reqid 23584, errstat 0, erridx 0
sysUpTime = NULL TYPE/VALUE
system.1 = NULL TYPE/VALUE
system.6 = NULL TYPE/VALUE
SNMP: Response, reqid 23584, errstat 0, erridx 0
sysUpTime.0 = 2217027
system.1.0 = Cisco Internetwork Operating System Software
system.6.0 =
SNMP: Packet sent via UDP to 10.5.4.1
You can also use trap monitoring and logging tools like snmptrapd, with debugging flags turned on, to
monitor output.
Current configuration:
! Last configuration change at 12:27:30 pacific Thu May 25 2000
version xx.x
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname router
!
aaa new-model
aaa authentication ppp default group radius
enable password <password>
!
spe 1/0 1/7
firmware location system:/ucode/mica_port_firmware
spe 2/0 2/7
firmware location system:/ucode/mica_port_firmware
!
resource-pool disable
!
clock timezone PDT -8
clock calendar-valid
no modem fast-answer
modem country mica usa
modem link-info poll time 60
modem buffer-size 300
ip subnet-zero
!
isdn switch-type primary-5ess
isdn voice-call-failure 0
!
controller T1 0
framing esf
clock source line primary
linecode b8zs
pri-group timeslots 1-24
!
controller T1 1
framing esf
linecode b8zs
ds0-group 0 timeslots 1-24 type e&m-fgb
cas-custom 0
!
controller T1 2
shutdown
clock source line secondary 2
!
controller T1 3
shutdown
clock source line secondary 3
!
controller T1 4
shutdown
clock source line secondary 4
!
controller T1 5
shutdown
clock source line secondary 5
!
controller T1 6
shutdown
clock source line secondary 6
!
controller T1 7
shutdown
clock source line secondary 7
!
interface Loopback0
ip address 10.5.4.1
!
interface Ethernet0
no ip address
shutdown
!
interface Serial0
no ip address
shutdown
!
interface Serial1
no ip address
shutdown
!
interface Serial2
no ip address
shutdown
!
interface Serial3
no ip address
shutdown
!
interface Serial0:23
no ip address
ip mroute-cache
isdn switch-type primary-5ess
isdn incoming-voice modem
no cdp enable
!
interface FastEthernet0
ip address 10.5.4.1
duplex full
speed auto
no cdp enable
!
interface Group-Async1
ip unnumbered FastEthernet0
encapsulation ppp
ip tcp header-compression passive
no ip mroute-cache
async mode interactive
peer default ip address pool swattest
no fair-queue
ppp authentication chap
ppp multilink
group-range 1 192
!
interface Dialer1
ip unnumbered FastEthernet0
encapsulation ppp
ip tcp header-compression passive
dialer-group 1
peer default ip address pool swattest
pulse-time 0
no cdp enable
!
ip local pool swattest 10.5.4.1
ip default-gateway 10.5.4.1
ip classless
!
dialer-list 1 protocol ip permit
snmp-server engineID local 00000009020000D058890CF0
snmp-server community public RO
snmp-server packetsize 2048
snmp-server enable traps ds0-busyout
snmp-server enable traps isdn chan-not-avail
snmp-server enable traps modem-health
snmp-server enable traps ds1-loopback
snmp-server host 10.5.4.1 public
!
radius-server host 10.5.4.1 auth-port 1645 acct-port 1646
radius-server retransmit 3
radius-server key <password>
!
line con 0
transport input none
line 1 192
autoselect ppp
modem InOut
transport preferred none
transport input all
transport output none
line aux 0
line vty 0 4
end
The following example displays connection speed information for modems running up to 33,600 bps:
Router# show modem connect-speeds 33600
Mdm 14400 16800 19200 21600 24000 26400 28800 31200 33600 TotCnt
* 0/0 0 0 0 0 0 0 4 4 1 9
* 0/1 2 0 0 0 0 0 3 3 1 9
0/2 2 0 0 0 0 1 2 4 1 10
* 0/3 0 0 0 1 0 0 3 4 1 9
* 0/4 1 0 0 0 0 2 2 1 1 7
* 0/5 0 0 0 0 0 0 4 4 1 9
* 0/6 0 0 0 0 0 1 3 3 1 8
* 0/7 0 0 0 2 0 0 4 3 1 10
* 0/8 2 0 0 0 0 0 3 4 1 10
* 0/9 0 0 0 0 0 0 4 3 0 7
* 0/10 1 0 0 0 0 1 3 2 1 8
* 0/11 0 0 0 0 0 0 4 3 1 8
0/12 1 0 0 0 0 0 4 2 1 8
* 0/13 0 0 0 0 0 0 4 2 1 7
* 0/14 1 0 0 0 0 1 2 2 1 7
* 0/15 0 0 0 0 0 0 4 2 1 7
* 0/16 0 0 0 1 0 0 3 2 1 7
* 0/17 1 0 0 0 0 0 4 2 1 8
* 0/18 1 0 0 0 0 0 3 3 1 8
* 0/19 0 0 0 0 0 0 5 3 1 9
* 0/20 0 0 0 0 0 0 4 2 1 7
* 0/21 1 0 0 0 0 0 4 2 0 7
* 0/22 0 0 0 0 0 0 7 9 1 17
* 0/23 0 0 0 0 0 2 2 3 1 8
* 2/0 0 0 0 1 0 0 3 3 1 8
* 2/1 0 0 0 0 0 0 5 2 1 8
* 2/2 0 0 0 1 0 0 4 1 1 7
* 2/3 1 0 0 0 0 0 4 2 1 8
* 2/4 0 0 0 0 0 0 5 2 1 8
* 2/5 0 0 0 0 0 0 4 3 1 8
* 2/6 0 0 0 0 0 0 3 2 1 6
* 2/7 1 0 0 0 0 1 3 2 0 7
* 2/8 1 0 0 0 0 0 3 2 1 7
* 2/9 0 0 0 0 0 1 3 2 1 7
* 2/10 2 0 0 0 0 2 1 0 1 6
* 2/11 0 0 0 1 0 1 3 5 1 11
* 2/12 0 0 0 0 0 0 5 2 1 8
* 2/13 1 0 0 0 0 0 5 0 1 7
* 2/14 1 0 0 0 0 0 3 3 1 8
* 2/15 1 0 0 0 0 1 2 3 1 8
* 2/16 0 0 0 0 0 0 4 3 1 8
* 2/17 0 0 0 0 0 0 5 11 0 16
* 2/18 0 0 0 1 0 1 1 2 1 6
* 2/19 0 0 0 0 0 0 2 3 1 6
* 2/20 1 0 0 0 0 2 3 9 1 16
* 2/21 1 0 0 0 0 0 4 1 1 7
* 2/22 0 0 0 1 0 0 2 3 1 7
* 2/23 0 0 0 0 0 1 3 3 1 8
Tot 23 0 0 9 0 18 165 141 44 400
Tot % 5 0 0 2 0 4 41 35 11
Mdm 14400 16800 19200 21600 24000 26400 28800 31200 33600 TotCnt
* 0/0 0 0 0 0 0 4 1 3 1 9
* 0/1 2 0 0 0 0 3 1 2 1 9
0/2 2 0 0 0 0 3 1 3 1 10
* 0/3 0 0 0 1 0 3 4 0 1 9
* 0/4 1 0 0 0 0 4 0 1 1 7
* 0/5 0 0 0 0 0 4 3 1 1 9
* 0/6 0 0 0 0 0 4 0 3 1 8
* 0/7 0 0 0 2 0 4 1 2 1 10
* 0/8 2 0 0 0 0 3 0 5 0 10
* 0/9 0 0 0 0 0 4 2 0 1 7
* 0/10 1 0 0 0 0 4 0 2 1 8
* 0/11 0 0 0 0 0 4 0 3 1 8
0/12 1 0 0 0 0 2 2 2 1 8
* 0/13 0 0 0 0 0 4 1 1 1 7
* 0/14 1 0 0 0 0 2 3 0 1 7
* 0/15 0 0 0 0 0 4 1 1 1 7
* 0/16 0 0 0 1 0 3 2 0 1 7
* 0/17 1 0 0 0 0 4 1 1 1 8
* 0/18 1 0 0 0 0 3 2 1 1 8
* 0/19 0 0 0 0 0 5 1 2 1 9
* 0/20 0 0 0 0 0 4 0 3 0 7
* 0/21 1 0 0 0 0 4 0 1 1 7
* 0/22 0 0 0 0 0 6 6 4 1 17
* 0/23 0 0 0 0 0 4 2 1 1 8
* 2/0 0 0 0 1 0 3 1 2 1 8
* 2/1 0 0 0 0 0 3 3 1 1 8
* 2/2 0 0 0 1 0 4 0 1 1 7
* 2/3 1 0 0 0 0 3 2 1 1 8
* 2/4 0 0 0 0 0 4 2 1 1 8
* 2/5 0 0 0 0 0 4 1 2 1 8
* 2/6 0 0 0 0 0 3 0 3 0 6
* 2/7 1 0 0 0 1 2 2 0 1 7
* 2/8 1 0 0 0 0 3 0 2 1 7
* 2/9 0 0 0 0 0 4 1 1 1 7
* 2/10 2 0 0 0 0 3 0 0 1 6
* 2/11 0 0 0 1 0 3 1 5 1 11
* 2/12 0 0 0 0 0 4 3 0 1 8
* 2/13 1 0 0 0 0 2 3 0 1 7
* 2/14 1 0 0 0 0 3 2 1 1 8
* 2/15 1 0 0 0 0 3 0 3 1 8
* 2/16 0 0 0 0 0 4 0 4 0 8
* 2/17 0 0 0 0 0 5 2 8 1 16
* 2/18 0 0 1 0 0 2 1 1 1 6
* 2/19 0 0 0 0 0 2 2 1 1 6
* 2/20 1 0 0 0 0 4 2 8 1 16
* 2/21 1 0 0 0 0 4 0 1 1 7
* 2/22 0 0 1 0 0 2 0 3 1 7
* 2/23 0 0 0 0 0 4 2 1 1 8
Tot 23 0 2 7 1 167 64 92 44 400
Tot % 5 0 0 1 0 41 16 23 11
Feature History
Release Description
12.2(2)XB This feature was introduced.
12.2(8)T This feature was integrated into the Cisco IOS Release 12.2(8)T.
The 1- and 2-port V.90 modem WAN interface cards (WICs) for Cisco 2600 and 3600 series multiservice
platforms provide low-density integrated modems to satisfy the market demand for remote management,
dial-backup, and low-density remote-access servers (RAS).
This document describes the 1-port and 2-port V.90 modem WIC feature and contains the following
sections:
• Feature Overview, page 135
• Supported Platforms, page 138
• Supported Standards, MIBs, and RFCs, page 138
• Configuration Tasks, page 138
• Command Reference, page 143
• Glossary, page 144
Feature Overview
Three applications are available for the V.90 modem WIC on the Cisco 2600 and Cisco 3600 series
multiservice platforms:
Benefits
The 1-port and 2-port V.90 modem WIC feature provides the following benefits:
• Integrated solution for ease of deployment
• Improved remote management
• Cost-effective alternative to leased lines or ISDN
Restrictions
Platform Memory Requirements
• Cisco 2600 ip —8M Flash, 32M DRAMM.
• Cisco 3620 ip plus—16M Flash, 48M DRAMM.
• Cisco 3620 enterprise—16M Flash, 64M DRAMM.
• Cisco 3640 ip plus—16M Flash, 64M DRAMM.
• Cisco 3640 enterprise—16M Flash, 64M DRAMM.
• Cisco 3660 ip plus—16M Flash and 64M DRAMM.
• Cisco 3660 enterprise—16M Flash and 64M DRAMM.
Caution Ensure that the RJ-11/CA11 telephone cable is disconnected from the modem WIC before installing or
removing the modem WIC from the router. The phone jack can have DC potential (up to 56.5 VDC) and
can have ring signal (up to 150 VAC) in the United States.
Caution Ensure that the router is powered OFF before installing or removing the modem WIC from the router.
The modem WICs do not support online insertion and removal (hot-swap).
Other than some currently unsupported commands, the V.90 modem WIC supports all commands
available for modem WICs as described in the Cisco IOS Wide Area Networking Configuration Guide
and the Cisco WAN Interface Cards Installation and Configuration Guide. For troubleshooting and
verification, use only the following commands:
debug modem
Related Documents
• WAN Interface Cards Hardware Installation Guide
http://www.cisco.com/univercd/cc/td/doc/product/access/acs_mod/cis3600/wan_mod/index.htm
• Modem-Router Connection Guide
http://www.cisco.com/warp/public/76/9.html
Supported Platforms
The following Cisco multiservice platforms are supported for the Cisco IOS Release 12.2(8)T:
• Cisco 2600 series
• Cisco 3600 series
MIBs
No new or modified MIBs are supported by this feature.
To obtain lists of MIBs supported by platform and Cisco IOS release and to download MIB modules, go
to the Cisco MIB web site on Cisco Connection Online (CCO) at
http://www.cisco.com/public/sw-center/netmgmt/cmtk/mibs.shtml.
RFCs
No new or modified RFCs are supported by this feature.
Configuration Tasks
Configuration tasks required for setting up the modem WIC for proper operation are:
• Asynchronous Interface Configuration
• Line Configuration
Command Purpose
Step 1 Router(config)# interface asynchronous number Enters the interface configuration mode for the
asynchronous serial interface. Enter the number of
the interface you want to configure.
Step 2 Router(config-if)# ip unnumbered type number Conserves IP addresses by configuring the
asynchronous interface as unnumbered, and
assigns the IP address of the interface type that
you want to leverage.
Step 3 Router(config-if)# encapsulation ppp Sets the encapsulation protocol for Point-to-Point
Protocol (PPP).
Step 4 Router(config-if)# dialer in-band [no-parity | Specifies that dial-on-demand routing (DDR) is to
odd-parity] be supported. This command specifies that chat
scripts will be used on asynchronous interfaces.
The parity keywords do not apply to asynchronous
interfaces.
Step 5 Router(config-if)# dialer string number Enters the dialer string (telephone) number.
Step 6 Router(config-if)# dialer-group group-number Controls access by configuring the interface to
belong to a specific dialing group. The number to
which the dialer access group belongs is defined
with the dialer-list command. Acceptable values
are within the range from 1 to 10.
Step 7 Router(config-if)# asynchronous mode interactive Configures interactive mode on the asynchronous
interface.
Step 8 Router(config-if)# peer default ip address pool Assigns dial-in clients IP addresses from an
poolname address pool. To create an IP address pool, use the
ip local pool global configuration command.
Example:
Router(config)# interface asyn 33
Router(config-if)# ip unnumbered f0/0
Router(config-if)# encapsulation ppp
Router(config-if)# dialer in-band
Router(config-if)# dialer string 14085551234
Router(config-if)# dialer-group 1
Router(config-if)# asyn mode interactive
Router(config-if)# peer default ip address pool pool123
Note pool123 is a name chosen for the pool used for defining the range of IP addresses for remote clients.
Line Configuration
To configure the line on the V.90 modem WIC, use the following commands, starting in global
configuration mode:
Command Purpose
Step 1 Router(config)# interface asynchronous number Enters the interface configuration mode for the
asynchronous serial interface. Enter the number of
the interface you want to configure.
Step 2 Router(config-if)# line number Enters interface mode line configuration submode.
Note The number entered here must be the same
as the number entered for the
asynchronous serial interface when the
interface configuration mode was first
entered.
Step 3 Router(config-line)# modem inout Configures the line for both incoming and
outgoing calls.
Step 4 Router(config-line)# autoselect {arap | ppp | slip | Configures the line to automatically start an ARA,
during login} PPP, or SLIP session. For this feature, ppp is
recommended.
Step 5 Router(config-line)# transport input {all | lat | mop | Defines which protocols can be used to connect to
nasi | none | pad | rlogin | telnet | v120} the line. For this feature, all is recommended.
Example:
Router(config-if)# line 33
Router(config-line)# modem inout
Router(config-line)# autoselect ppp
Router(config-line)# transport input all
interface Async33
ip address 51.1.1.2 255.255.255.0
encapsulation ppp
dialer in-band
dialer map ip 51.1.1.1 name m1_2621_33 modem-script cisco-default 101
dialer-group 1
ppp authentication chap
async mode interactive
!
router eigrp 100
redistribute static
network 10.0.0.0
network 70.0.0.0
!
ip route 10.0.0.0 255.0.0.0 51.1.1.2 180
!/very important/
line 33
autoselect ppp
modem InOut
flowcontrol hardware
transport input all
In this example, the interface S2/0 is configured as a primary link. Configuring the route through the
backup interface (the V.90 modem WIC in this case) is very important. 10.0.0.0 in the IP route indicates
the network number of the remote end. Thus, all packets for the destination IP are routed through the
backup link if the primary link goes down. The 180 in the route command indicates the cost of the route
taken (It should be more than the cost of the primary route). This avoids the packets taking the backup
link when the primary link is up.
The show modem [slot/port | group number] command shows various performance statistics for a
modem or group of modems.
Example:
3640-Router# show modem 1/0
Mdm Typ Status Tx/Rx G Duration TX RX RTS CTS DSR DCD DTR
1/0 V34 Idle 33600 /33600 0 00:02:41 - - x x - x
Command Reference
This feature uses no new or modified commands. To see the command pages for the commands used with
this feature, go to the Cisco IOS Master Commands List, Release 12.4, at http://www.cisco.com/
univercd/cc/td/doc/product/software/ios124/124mindx/124index.htm. Also see the Related Documents
section for more information.
Glossary
baud rate—bits per second data rate of an asynchronous interface.
DDR—dial-on-demand routing. Also known as direct data routing or dial-up routing (PPP or IP).
DRAMM—Dynamic Random Access Memory Module.
DS0—A single 64 kbps channel of a T1 span.
DSP—digital signal processor.
DSPM—digital signal processing module—voice module card.
IOS—Internet Operating System.
ISDN—Integrated Services Digital Network.
NM—network module.
MAR—modular access router.
MLP—Multilink PPP.
OIR—Online insertion and removal (hot swap).
POTS—Plain old telephone service.
PPP—Point-to-Point Protocol.
PSTN—Public Switched Telephone Network.
RAS—remote access server.
TDM—time-division multiplexing. Also used to describe a single channel on a TDM bus.
VFC—voice feature card.
VIC—voice interface card.
WIC—WAN interface card.
Note For a list of other internetworking terms, see the Internetworking Terms and Acronyms document
available on the Documentation CD-ROM and Cisco Connection Online (CCO) at the following URL:
http://www.cisco.com/univercd/cc/td/doc/cisintwk/ita/index.htm.
Feature History
Release Modification
12.2(11)T This feature was introduced.
This document describes the Call Tracker show Commands Extensions feature in Cisco IOS
Release 12.2(11)T and includes the following sections:
• Feature Overview, page 145
• Supported Platforms, page 146
• Supported Standards, MIBs, and RFCs, page 146
• Prerequisites, page 147
• Configuration Tasks, page 147
• Configuration Examples, page 147
• Command Reference, page 147
• Glossary, page 148
Feature Overview
Before Cisco IOS Release 12.2(11)T, the show calltracker active and show calltracker history
commands provided a simple way to examine the Call Tracker active table and Call Tracker history table
in chronological order. The extensions to these commands available in Cisco IOS Release 12.2(11)T
allow the command output to be reverse collated (output from most recent to least recent) or to be filtered
by call category or service type. Historical data for disconnected call sessions can be filtered by
subsystem type.
Benefits
The command enhancements allow the user more control over the quantity and type of information that
is displayed from the show calltracker active and show calltracker history commands. Streamlined
command output simplifies troubleshooting, especially for newer platforms where the number of ports
is in the several hundreds, or even thousands.
Supported Platforms
• Cisco AS5300
• Cisco AS5350
• Cisco AS5400
• Cisco AS5800
• Cisco AS5850
MIBs
No new or modified MIBs are supported by this feature.
To obtain lists of supported MIBs by platform and Cisco IOS release, and to download MIB modules,
go to the Cisco MIB website on Cisco.com at the following URL:
http://www.cisco.com/public/sw-center/netmgmt/cmtk/mibs.shtml
RFCs
No new or modified RFCs are supported by this feature.
Prerequisites
Ensure that Call Tracker has been configured with adequate memory to hold history records for
completed calls sufficiently long enough to be useful, as determined by the peak call completion rate and
polling interval. For more information on setting up the Call Tracker feature, refer to the “Configuring
and Managing Integrated Modems” section in the “Modem and Dial Shelf Configuration and
Management” chapter of the Release 12.2 Cisco IOS Dial Technologies Configuration Guide.
Configuration Tasks
None
Configuration Examples
None
Command Reference
The following modified commands are pertinent to this feature. To see the command pages for these
commands and other commands used with this feature, go to the Cisco IOS Master Commands List,
Release 12.4, at http://www.cisco.com/univercd/cc/td/doc/product/software/ios124/124mindx/
124index.htm.
• show call calltracker active
• show call calltracker history
Glossary
CHAP—Challenge Handshake Authentication Protocol. Security feature supported on lines using PPP
encapsulation that prevents unauthorized access. CHAP does not itself prevent unauthorized access, but
merely identifies the remote end. The router or access server then determines whether that user is
allowed access.
DSP—digital signal processor. A DSP segments the voice signal into frames and stores them in voice
packets.
NAS—network access server. Cisco platform (or collection of platforms, such as an AccessPath system)
that interfaces between the packet world (for example, the Internet) and the circuit world (for example,
the Public Switched Telephone Network).
VPN—Virtual Private Network. Enables IP traffic to travel securely over a public TCP/IP network by
encrypting all traffic from one network to another. A VPN uses tunneling to encrypt all information at
the IP level.
The Cisco NM-8AM-V2 and NM-16AM-V2 Analog Modem Network Modules with V.92 serve as
integrated analog modem network modules (NMs) for the modular access routers (MARS) family of
routers. These network modules terminate either 8 or 16 analog modem connections through POTS
interfaces.
For information on new features and Cisco IOS commands supported by software for the Cisco
NM-8AM-V2 and NM-16AM-V2 network modules, see the “Additional References” section on
page 156.
Finding Support Information for Platforms and Cisco IOS Software Images
Use Cisco Feature Navigator to find information about platform support and Cisco IOS software image
support. Access Cisco Feature Navigator at http://www.cisco.com/go/fn. You must have an account on
Cisco.com. If you do not have an account or have forgotten your username or password, click Cancel at
the login dialog box and follow the instructions that appear.
Contents
• Information About Cisco NM-8AM-V2 and NM-16AM-V2 Network Modules, page 150
• How to Configure the Cisco NM-8AM-V2 and NM-16AM-V2 Network Modules, page 153
• Configuration Examples for Cisco NM-8AM-V2 and NM-16AM-V2 Network Modules, page 156
• Additional References, page 156
• Command Reference, page 157
• Glossary, page 158
Overview
Two new analog modem network modules, the Cisco NM-8AM-V2 and NM-16AM-V2 network
modules, support basic telephone service connections on Cisco 2600XM series routers, Cisco 3600
series, and Cisco 3700 series. These network modules allow the following:
• Standard telephone connections on RJ-11 connectors
• Up to 16 remote analog modem users to connect to a Cisco 2600XM series
• Up to 32 remote analog modem users to connect to a Cisco 3725
• Up to 64 remote analog modem users to connect to a Cisco 3745
• Up to 96 remote analog modem users to connect to a Cisco 3660
Combined with the differentiated services delivered through Cisco IOS software, users of
Cisco 2600XM series, Cisco 3600 series, and Cisco 3700 series routers have best-of-breed scalability,
flexibility, and investment protection, all in cost-effective, multifunctional platforms.
• Virtual private network (VPN) support—This feature allows for cost-effective connections for a
geographically dispersed user base. It can reduce access cost support and allow remote users
straightforward access to their office LAN through a local Internet service provider (ISP), while
maintaining a high degree of end-to-end security.
• Robust security features—Utilizing TACACS+, Challenge Handshake Authentication
Protocol/Password Authentication Protocol (CHAP/PAP), Triple Data Encryption Standard (3-DES)
encryption, and the built-in firewall capabilities of Cisco IOS software allows secure access for a
wide variety of remote users to sensitive company data.
Network Management
• CiscoWorks—Allows centralized management of multiple Cisco 2600XM, Cisco 3600, and
Cisco 3700 routers.
• In-band and out-of-band management via TCP/IP and SNMP, including MIB II and other
extensions, over TCP/IP.
• TCP/IP addresses can be assigned via DHCP, per user, or via an internal address pool, or they can
be selected remotely.
• Maintains a detailed activity log for accounting, billing, and troubleshooting.
• Ability to download image and configuration across routers.
Security
• Username, password, and dial-back security
• Multilevel administration password support
• CHAP and PAP support
• Centralized authentication via AAA
• IP device and network filtering
• AppleTalk zone and device filtering
Modem Management
The Cisco 2600XM series, Cisco 3600 series, and Cisco 3700 series routers ship with general network
management capabilities.
Note • The analog modem network module is being submitted for approval worldwide, but because of
specific in-country approval processes, approval dates vary. For the latest availability status, please
check online at http://www.cisco.com.
• For more information on the AT command set used by these modems, please check online at
http://www.cisco.com.
Chat Script
The Cisco NM-8AM-V2 and NM-16AM-V2 network modules support chat script like other Cisco
modem modules. There is no need to put a factory reset parameter in the chat script because this will
interfere with the modem settings configured internally by the Cisco NM-xAM-V2 firmware. If a factory
reset parameter is included, the parameter may interfere with how the connection speed is collected and
the modem may be unreliable in any reports on the speed.
When using the AT&F reset parameter in a chat-script with Cisco NM-8AM-V2 and NM-16AM-V2
network modules, the reset parameter should be used in conjunction with the connect string setting. For
example:
AT&F\\v1s0=1
This setting gives a factory reset, a long connect string, and answers after one ring. For more
information, refer to the documentation at:
http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122cgcr/fdial_c/fnsprt2/dafmchat.ht
m
SUMMARY STEPS
1. enable
2. configure terminal
3. modem country smart_acf country-name
4. end
DETAILED STEPS
Example:
Router# configure terminal
Step 3 modem country smart_acf country-name Sets the modem firmware to use settings for the country of
deployment.
Example:
Router(config)# modem country smart_acf usa
Step 4 end Exits global configuration mode and returns to privileged
EXEC mode.
Example:
Router(config)# end
SUMMARY STEPS
1. enable
2. show modem version
3. debug modem
4. show modem version
5. exit
DETAILED STEPS
Example:
Router# debug modem
Step 4 show modem version Displays the modem firmware version, the datapump
version, and the firmware log.
Example:
Router# show modem version
Step 5 exit Exits privileged EXEC mode.
Router# exit
Troubleshooting Tips
Use the following debug commands to troubleshoot the modem:
• debug async state
• debug dialer
• debug dialer forwarding
• debug dialer map
• debug dialer packets
• debug modem
• debug ppp events
• debug ppp forwarding
• debug ppp negotiation
• debug ppp packet
Use the debug modem and debug dialer commands to troubleshoot the Cisco NM-8AM-V2 and
NM-16AM-V2 network modules.
Router# debug modem
Router# debug dialer
Router# ping 10.1.1.1
Additional References
The following sections provide references related to Cisco NM-8AM-V2 and NM-16AM-V2 network
modules.
Related Documents
Related Topic Document Title
AT Commands AT Command Set and Register Summary for V.90 WIC-1AM and
WIC-2AM Analog Modem WAN Interface Cards
NM-8AM or NM-16AM Analog Modem Module Configuring Dialin with the NM-8AM or NM-16AM Analog Modem
Configuration Module
Data Sheet on Network Modules Integrated V.92 Analog Modem Network Modules for Cisco 2600
Series, 3660, and 3700 Series Routers
Standards
Standards Title
No new or modified standards are supported by this
feature, and support for existing standards has not been
modified by this feature.
MIBs
MIBs MIBs Link
No new or modified MIBs are supported by this To locate and download MIBs for selected platforms, Cisco IOS
feature, and support for existing MIBs has not been releases, and feature sets, use Cisco MIB Locator found at the
modified by this feature. following URL:
http://www.cisco.com/go/mibs
RFCs
RFCs Title
No new or modified RFCs are supported by this
feature, and support for existing RFCs has not been
modified by this feature.
Technical Assistance
Description Link
Technical Assistance Center (TAC) home page, http://www.cisco.com/public/support/tac/home.shtml
containing 30,000 pages of searchable technical
content, including links to products, technologies,
solutions, technical tips, and tools. Registered
Cisco.com users can log in from this page to access
even more content.
Command Reference
The following modified command is pertinent to this feature. To see the command pages for this
command and other commands used with this feature, go to the Cisco IOS Master Commands List,
Release 12.4, at http://www.cisco.com/univercd/cc/td/doc/product/software/ios124/124mindx/
124index.htm.
• modem country smart_acf
Glossary
DHCP—Dynamic Host Configuration Protocol.
MARS— modular access routers family of routers.
Note Refer to Internetworking Terms and Acronyms for terms not included in this glossary.
Feature History
Release Modification
12.1(13) The commands show tech-support modem (for the Cisco AS5300 and AS5800
access servers) and show tech-support spe (for the Cisco AS5350, AS5400, AS5800,
and AS5850 access servers) were introduced.
12.2(11)T The commands were migrated to Cisco IOS Release 12.2(11)T.
This document describes the MICA and NextPort Modem Tech-Support Command Additions and
includes the following sections:
• Feature Overview, page 159
• Supported Platforms, page 160
• Supported Standards, MIBs, and RFCs, page 161
• Configuration Tasks, page 161
• Configuration Examples, page 163
• Command Reference, page 165
Feature Overview
When information was required to troubleshoot a problem with modems in the field before these
commands were introduced, customers were asked to send the output of a number of Cisco IOS EXEC
commands. Collecting this data is cumbersome for both customers and the engineers requesting the
information. The show tech-support modem and show tech-support spe commands allow customers
to collect an extensive report detailing modem functionality by entering a single command.
Benefits
The show tech-support modem and show tech-support spe commands are useful to the Cisco customer
and Cisco customer support personnel alike. For example, when a quality assurance technician gathers
troubleshooting information, rather than typing in a series of commands, the technician can simply add
the output of the show tech-support modem and show tech-support spe command to his report.
Development engineers can then have a consistent output for reference when troubleshooting problems.
Restrictions
The show tech-support modem and show tech-support spe commands are available on Cisco AS5300,
AS5350, AS5400, AS5800, and AS5850 platforms that support the modem ISDN channel aggregation
(MICA technologies) and NextPort service processing element (SPE) modems.
Related Documents
For more information about managing the Cisco MICA and SPE modems, refer to the following
documents:
• Cisco IOS Dial Technologies Command Reference, Release 12.2
• Cisco IOS Dial Technologies Configuration Guide, Release 12.2. Refer to the chapter “Configuring
and Managing Integrated Modems” in the part “Modem and Dial Shelf Configuration and
Management.”
Supported Platforms
• Cisco AS5300
• Cisco AS5350
• Cisco AS5400
• Cisco AS5800
• Cisco AS5850
To access Cisco Feature Navigator, you must have an account on Cisco.com. If you have forgotten or
lost your account information, send a blank e-mail to [email protected]. An automatic check
will verify that your e-mail address is registered with Cisco.com. If the check is successful, account
details with a new random password will be e-mailed to you. Qualified users can establish an account
on Cisco.com by following the directions at http://www.cisco.com/register.
Cisco Feature Navigator is updated regularly when major Cisco IOS software releases and technology
releases occur. For the most current information, go to the Cisco Feature Navigator home page at the
following URL:
http://www.cisco.com/go/fn
MIBs
None
To obtain lists of supported MIBs by platform and Cisco IOS release, and to download MIB modules,
go to the Cisco MIB website on Cisco.com at the following URL:
http://www.cisco.com/public/sw-center/netmgmt/cmtk/mibs.shtml
RFCs
None
Configuration Tasks
No configuration is required to create a modem functionality report. The tasks to start the modem reports
are described in the following sections:
• Using the show tech-support Modem EXEC Commands
• Creating a Modem Report
Command Purpose
Router# show tech-support modem Runs a basic list of modem reports for the Cisco AS5300 and AS5800.
Router# show tech-support modem detail Runs a detailed list of modem reports for the Cisco AS5300 and AS5800.
Router# show tech-support spe Runs a basic list of modem reports for the Cisco AS5350, AS5400, AS5800,
and AS5850.
Router# show tech-support spe detail Runs a detailed list of modem reports for the Cisco AS5350, AS5400, AS5800,
and AS5850.
Table 13 Commands Run by show tech-support modem and show tech-support spe
Commands
Commands run by the show tech-support modem Commands run by the show tech-support spe
command: command:
show version show version
show running-config show running-config
show modem version show spe version
show modem show spe
show modem summary show spe modem summary
show spe version show spe modem csr summary
show controllers t1 call-counters show spe modem disconnect-reason summary
show controllers e1 call-counters show spe recovery
show modem connect-speeds show csm call-rate
show modem mapping show nextport mm
show line show controllers e1 call-counters
show caller show controllers t1 call-counters
show users all show line
Additional commands run by the show caller
show tech-support modem detail command:
show modem configuration show users all
show modem operational-status Additional commands run by the
show tech-support spe detail command:
show modem mica all show csm modem
show modem csm show spe log
show modem log show port modem log
Configuration Examples
The reports displayed by the show tech-support modem and show tech-support spe commands are the
successive output of many commands. The reports take some time to run and, when captured in a buffer,
can be over 100 pages in length. A truncated example is provided in this section to show the extent of
the information provided by these reports; however, providing a sample report for each of these
commands would take too many pages to provide.
The following example shows partial output of the show tech-support modem command on a
Cisco AS5300:
Router# show tech-support modem
cisco AS5300 (R4K) processor (revision A.14) with 65536K/16384K bytes of memory.
Processor board ID 05433558
R4700 CPU at 150Mhz, Implementation 33, Rev 1.0, 512KB L2 Cache
Channelized E1, Version 1.0.
.
.
.
128 Serial network interface(s)
120 terminal line(s)
4 Channelized E1/PRI port(s)
128K bytes of non-volatile configuration memory.
16384K bytes of processor board System flash (Read/Write)
4096K bytes of processor board Boot flash (Read/Write)
Building configuration...
.
.
end
Codes:
d - DSP software download is required for achieving K56flex connections
Slot 1:
Carrier card:
number_of_ports= 60, max_modules= 10
Manufacture Cookie Info:
EEPROM Type 0x0001, EEPROM Version 0x01, Board ID 0x47,
Board Hardware Version 1.0, Item Number 73-2393-03,
Board Revision A0, Serial Number 10081386,
PLD/ISP Version 5.9, Manufacture Date 12-Oct-1998.
Modem Module 0
Manufacture Cookie Info:
EEPROM Type 0x0101, EEPROM Version 0x01, Board ID 0x06,
Board Hardware Version 1.0, Item Number 73-2522-02,
Board Revision C48, Serial Number 09828503,
PLD/ISP Version <unset>, Manufacture Date 25-Oct-1998.
Modem Module 1
Manufacture Cookie Info:
EEPROM Type 0x0101, EEPROM Version 0x01, Board ID 0x06,
Board Hardware Version 1.0, Item Number 73-2522-02,
Board Revision C48, Serial Number 08559439,
PLD/ISP Version <unset>, Manufacture Date 21-Oct-1998.
Codes:
* - Modem has an active call
C - Call in setup
T - Back-to-Back test in progress
R - Modem is being Reset
p - Download request is pending and modem cannot be used for taking calls
D - Download in progress
B - Modem is marked bad and cannot be used for taking calls
b - Modem is either busied out or shut-down
d - DSP software download is required for achieving K56flex connections
! - Upgrade request is pending
Command Reference
The following new commands are pertinent to this feature. To see the command pages for these
commands and other commands used with this feature, go to the Cisco IOS Master Commands List,
Release 12.4, at http://www.cisco.com/univercd/cc/td/doc/product/software/ios124/124mindx/
124index.htm.
• show tech-support modem
• show tech-support spe
Feature History
Release Modification
12.1(2)XH This feature was introduced.
12.2(2)XA New Modem States and Link Information Parameters were added for
Version 2.1 (supported on Cisco AS5300 universal access servers only).
12.2(2)XB1 This feature was supported on Cisco AS5800 platforms.
12.2(11)T This feature was integrated into Cisco IOS Release 12.2(11)T.
This document describes the Personal Handyphone Internet Access Forum Standard (PIAFS), Version
2.1 feature using Cisco MICA modems for Cisco AS5300 and Cisco AS5800 universal access servers.
PIAFS Version 2.1 is supported with Cisco IOS Software Release 12.2(2)XB1 or 12.2(11)T.
This document includes the following sections:
• Feature Overview, page 167
• Supported Platforms, page 172
• Supported Standards, MIBs, and RFCs, page 173
• Prerequisites, page 173
• Configuration Tasks, page 174
• Configuration Examples, page 177
• Command Reference, page 177
• Glossary, page 178
Feature Overview
This feature adds support for the PIAFS 2.1 protocol (T1 only) with Cisco MICA modems on
Cisco AS5300 Cisco AS5800 universal access servers. PIAFS provides data connectivity between a client
computer and a remote access server (RAS) using the Personal-Handyphone-System (PHS) digital cellular
telephone system. PIAFS 2.1 allows the modem to shift speed during a connection between 32,000 and
64,000 bps when initiated by a remote terminal adapter (TA). PIAFS provides data connectivity between
a client computer and remote access server (RAS) using the PHS digital cellular telephone system. Figure 23
shows a typical PIAFS RAS environment.
Japanese
ISDN
ISDN network ISDN Digital I/F
Access server PRI BRI PIAFS (PCMCIA
37402
w/ PIAFS support TA serial, USB)
Note Cisco MICA Portware Version 8.2.x.x does not support modem modulations (for example, V.90), V.110,
or fax. If non-PIAFS features are desired, other portware images, such as Cisco MICA Portware Version
2.7.3.0 can be loaded onto other Hex Modem Modules (HMMs) or Double Density Modem Modules
(DMMs) in your Cisco AS5x00 universal access server. See the Restrictions section for more
information.
The following PIAFS 2.1 features are supported on the Cisco AS5x00 platforms:
• In-band negotiation and synchronization of variable-speed Type 2 data transmission. This allows
variable Type 2 devices such as Cisco MICA modems to connect with Type 1 and Type 2 initiating
devices. A PIAFS 2.1 connection can be with two Type 2 devices, two Type 1 devices, or a Type 1
and a Type 2 device. Operational Cisco MICA is always Type 2, but it can communicate with Type 1
and Type 2 devices as well as with systems running PIAFS 1.x and 2.0.
A Type 2 device cannot directly sense traffic channels (TCH). The TCH is the number of 32k
channels bound to a call. If the Type 2 device loses synchronization, the device assumes that the
speed has changed, so the device periodically switches its I.460 (1988 ITU-T standard) intermediate
rate adaptation function on and off while it is out of synchronization until it achieves sync or fails
to resynchronize. An originating Type 2 device switches every 1.6 to 1.8 seconds; a receiving Type 2
device switches every 200 milliseconds. A Type 2 device is notified of speed changes from within
the PIAFS protocol.
A Type 1 device directly senses the number of 32k radio frequency (RF) channels bound to a call.
It can either sense the total number of channels that are currently bound (TCH) or issue an early
warning of TCH change (a Preliminary Signal, or PS). If a Type 1 device senses a TCH speed
change, it will directly switch to the new speed, turning its I.460 intermediate rate adaptation on or
off as necessary. If a PS change is sensed, the device sends a protocol message before switching its
I.460 logic. Both the originating and the receiving device can be Type 1, depending on whether each
device can sense TCH or PS.
• Fixed user rate negotiation with PIAFS 2.0 and 1.X clients.
• Real-time statistics for negotiated parameters and speed changes.
• Mixed Cisco MICA (PIAFS and modem/fax/data) images on a DFC. A Cisco AS5300 universal
access server running Cisco IOS Release 12.2.(2)XA will support both PIAFS 2.1 and modem calls
together, on different SPEs in a multiple SPE configuration. See the Restrictions section for more
information.
PIAFS Protocol
The PHS PIAFS feature specifies a transmission system that uses the PHS 64,000 bps/32,000 bps
unrestricted digital bearer, which allows dynamic data rate change between 32 and 64 kbps during a call.
The PIAFS protocol allows for these dynamic data rate changes. The PIAFS terminal adapter (TA)
module works like a modem or a V.110 module by using the same call-setup Q.931 message, but differs
by its use of the 32k and 64k user rate and the ability to support ISDN bearer channel capability and
calling party subaddress.
Note PIAFS Version 2.1 with Cisco IOS Release 12.2(2)XA, 12.2(2)XB1, or 12.2(11)T requires Cisco IOS
Plus images. See the Restrictions section.
With the PIAFS protocol, a call is initiated from the client computer or personal digital assistant (PDA)
through a terminal adapter (TA), which is typically connected to the computer using a PCMCIA slot,
serial interface, or USB interface. The TA contains PIAFS functionality and either is connected (or
integrated) with a PHS handset for wireless communications, or is connected directly to the telco
network using an ISDN BRI line. For wireless operation, the PHS base station allocates either a 32- or
64-kbps (user rate) channel for the connection with the client TA. The client and RAS perform PIAFS
synchronization and feature negotiation to set up an error-correcting communication channel with
optional V.42bis data compression.
PHS manages the user channel capacity based on the aggregate bandwidth used at the local base station
to maximize the number of supported users. In return, the channel capacity for each user is reduced.
PIAFS 2.1 allows the user rate to change during a call as base station use changes. In previous PIAFS
versions, the data rate was established at call setup and remained fixed during the call. The dynamic user
rate change capability introduced in PIAFS 2.1 uses RF channel capacity more efficiently and reduces
the occurrence of call denial in heavily utilized cells.
Note Some TAs support both PIAFS 2.0 and 2.1 protocols, but the negotiation message that is sent to the
initiated server unit can indicate a preference for 2.0. Cisco MICA might create a 2.0 connection rather
than a 2.1 connection, if a 2.0 preference is indicated. This is a normal Cisco MICA occurrence.
Cisco MICA continues to support earlier protocol versions and works with older PHSs and TAs.
Benefits
New Link Information Parameters
The Connect Protocol (in the Static group and also accessed by entering the
show modem operational-status command) now differentiates between PIAFS 1.x or 2.0 and PIAFS
2.1.
No Changes to Configuration
There are no new configuration parameters necessary to use the PIAFS 2.1 capabilities.
Restrictions
Cisco MICA Portware Version 8.2.x.x supports the PIAFS protocol only and does not support modem
modulations (for example, V.90), V.110, or fax. Similarly, standard (non-PIAFS) Cisco MICA portware
versions cannot support the PIAFS protocol.
The following additional restrictions apply to this release:
• PIAFS Version 2.1 with Cisco IOS Release 12.2(2)XAm 12.2(2)XB1, or 12.2(11)T requires
Cisco IOS Plus images. The following Cisco IOS Plus images are supported with this feature:
– Desktop Plus
– Desktop Voice Plus
– Enterprise Plus
– Enterprise Plus IPSEC 56
– Enterprise Voice Plus
– IP Plus
– IP Plus IPSEC 56
– IP/Voice Plus
• PIAFS and non-PIAFS functionality cannot be mixed on the same SPE. Each SPE can only support
one version of Cisco MICA portware at a time. A single SPE (6 Cisco MICA modem sessions with
an HMM, or 12 Cisco MICA modem sessions with a DMM) can support only one of the following:
– PIAFS 2.1 calls with Portware Version 8.2.3.0
Or
– Modem modulations using standard (non-PIAFS) Cisco MICA modem portware releases (for
example, Version 2.7.3.0).
The portware you are running determines SPE functionality.
• PIAFS 2.1 is only supported over a T1 Interface with isdn switch-type set to primary-ntt.
• Resource services must be used with Cisco MICA modems.
• Modem pooling and resource pool management are not compatible.
• Only the V.42bis data compression protocol is supported.
• Real-Time Transport Protocol (RTP), user-control frames, and continuous frames are not supported.
• The PIAFS protocol is contained in a special Cisco MICA PIAFS only image with no modem/fax
support.
Related Documents
• AT Command Set and Register Summary for Cisco MICA Six-Port Modules with PIAFS
• Cisco IOS Release 12.2 Master Indexes
• Configuring the NAS for Basic Dial Access
• Release Notes for Cisco MICA Portware Version 8.2.3.0 on Cisco AS5x00 Universal Access Servers
• SPE and Firmware Download Enhancements
• Cisco AS5300 universal access servers Cisco MICA release notes index page
• Configuration documents for Cisco AS5800
• Cisco AS5x00 Cisco MICA 6-Port and 12-Port Modem Module Portware/Cisco IOS Software
Compatibility Matrixes
• Cisco AS5300 access servers, Appendix A, “Managing Modems,” and Appendix B, “Rom Monitor,”
in the Cisco AS5300 Universal Access Server Software Configuration Guide
• Modem Management Commands
• Cisco IOS Dial Services Command Reference for Cisco IOS Software Release 12.2
• Cisco IOS Dial Technologies Configuration Guide, Release 12.2
• Quick Start Guide, Cisco AS5300 Universal Access Server Install and Configure
• V.90 and RFC-2217 dialout support for fax/data
Note The Cisco DialOut Utility (CDU) is no longer supported. Refer to the Sample NAS
Configurations for Cisco DialOut Utility document for information about RFC-2217 reverse
TELNET support.
Supported Platforms
• Cisco AS5300
• Cisco AS5800
Cisco Feature Navigator is updated regularly when major Cisco IOS software releases and technology
releases occur. For the most current information, go to the Cisco Feature Navigator home page at the
following URL:
http://www.cisco.com/go/fn
MIBs
• CISCO-MODEM-MGMT-MIB
• CISCO-CALL-RESOURCE-POOL-MIB
To locate and download MIBs for selected platforms, Cisco IOS releases, and feature sets, use
Cisco MIB Locator found at the following URL:
http://tools.cisco.com/ITDIT/MIBS/servlet/index
If Cisco MIB Locator does not support the MIB information that you need, you can also obtain a list of
supported MIBs and download MIBs from the Cisco MIBs page at the following URL:
http://www.cisco.com/public/sw-center/netmgmt/cmtk/mibs.shtml
To access Cisco MIB Locator, you must have an account on Cisco.com. If you have forgotten or lost your
account information, send a blank e-mail to [email protected]. An automatic check will verify
that your e-mail address is registered with Cisco.com. If the check is successful, account details with a
new random password will be e-mailed to you. Qualified users can establish an account on Cisco.com
by following the directions found at this URL:
http://www.cisco.com/register
RFCs
No new or modified RFCs are supported by this feature.
Prerequisites
• You must have Cisco MICA Portware Version 8.2.3.0 or higher.
• You must be running Cisco IOS Release 12.2(2)XA, 12.2(2)XB1, or 12.2(11)T.
• A minimum of 64 MB must be available on the DMM cards.
• PHS 64,000 bps requires the allocation of two 32k channels.
• PIAFS portware images are not bundled with Cisco IOS software, so you must copy the image to
Flash memory, and specify the image to use using spe commands.
Refer to the Cisco document, SPE and Firmware Download Enhancements for more information
about using the spe commands to download portware images.
Note The Cisco AS5300 requires 128MB of memory for systems using Cisco IOS Release12.1(5)T and later
releases.
Configuration Tasks
See the following sections for configuration tasks for the PIAFS feature. Each task in the list is identified
as either required or optional.
• Configuring PIAFS (required)
• Verifying PIAFS (optional)
• Configuring a Resource-Pool Group Resource (optional)
• Verifying Resource-Pool Group Resource (optional)
Note When configuring a voice port, use the following configuration designations:
For the Cisco AS5300, port designation is port.
Configuring PIAFS
To configure PIAFS, use the following commands in interface configuration mode.
Command Purpose
Step 1 Router(config)# interface serial controller:channel Enters interface configuration mode for a
D-channel serial interface.
Step 2 Router(config-if)# isdn piafs-enabled Enables the Primary Rate Interface (PRI) to take
PIAFS calls on Cisco MICA modems.
Step 3 Router(config-if)# exit Exits interface configuration mode.
Verifying PIAFS
Use the following show commands in privileged EXEC mode:
Step 1 Enter the show modem operational-status slot/port command to view PIAFS call information.
piafs_diald# show mod op 1/3
Modem(1/3) Operational-Status:
Step 2 Enter the show modem log command in privileged EXEC mode:
piafs_diald# show mod log 1/3
Modem 1/3 Events Log:
*Mar 30 01:48:42.207: ISDN incoming called number: 2015551111
*Mar 30 01:48:42.563: Modem State event:
State: Call Setup
*Mar 30 01:48:42.563: Modem State event:
State: Connect
*Mar 30 01:48:42.563: Modem State event:
State: Link
*Mar 30 01:48:42.563: Modem State event:
State: Train Up
*Mar 30 01:48:42.563: Modem State event:
State: EC Negotiating
*Mar 30 01:48:54.567: Modem State event:
State: Steady
*Mar 30 01:48:54.567: Static event:
Connect Protocol: PIAFS 2.1
Compression: V.42bis both
Command Purpose
Step 1 Router(config)# resource-pool group resource piafs Creates a resource group (piafs) for resource
management.
Step 2 Router(config-resource)# exit Exits configuration mode.
Configuration Examples
The following example shows common PIAFS and resource-pool group configuration output from
entering the show running-configuration command:
version 12.2
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
!
hostname travis-nas-01
!
aaa new-model
aaa authentication login default local
aaa authentication login NO_AUTHENT none
aaa authorization exec default local if-authenticated
aaa authorization exec NO_AUTHOR none
aaa authorization commands 15 default local if-authenticated
aaa authorization commands 15 NO_AUTHOR none
aaa accounting exec default start-stop group tacacs+
aaa accounting exec NO_ACCOUNT none
aaa accounting commands 15 default stop-only group tacacs+
aaa accounting commands 15 NO_ACCOUNT none
enable secret 5 $1$LsoW$K/qBH9Ih2WstUxvazDgmY/
!
username admin privilege 15 password 7 06455E365E471D1C17
username gmcmilla password 7 071824404D06140044
username krist privilege 15 password 7 0832454D01181118
!
!
!
!
call rsvp-sync
shelf-id 0 router-shelf
shelf-id 1 dial-shelf
!
!
!
resource-pool disable
!
resource-pool group resource piafs
Command Reference
The following modified commands are pertinent to this feature. To see the command pages for these
commands and other commands used with this feature, go to the Cisco IOS Master Commands List,
Release 12.4, at http://www.cisco.com/univercd/cc/td/doc/product/software/ios124/124mindx/
124index.htm.
• isdn piafs-enabled
Glossary
CSM—Call Switching Module.
DMM—Double Density Modem Module. A Cisco MICA hardware package with 12 modems on a
daughter board unit.
E1—European equivalent of T1. Thirty two channels of 64000 Hz—one for framing, one for signaling.
HMM—Hex Modem Module. A Cisco MICA hardware package with six modems on a daughter board
unit.
I.460—(1988 ITU-T standard). Specifies procedures used to adapt a PIAFS 32k stream to a 64k ISDN
B-channel.
IR—intermediate rate. Data rate used to communicate between the PHS base station and the client TA.
The two rates supported are 32 and 64 kbps.
ISDN—Integrated Services Digital Network.
LLC—logical link control.
MICA—Modem ISDN channel aggregation.
PDA—personal digital assistant
PHS—Personal-Handyphone-System.
PIAFS—PHS Internet Access Forum Standard. ITU-T standard for support by ISDN of data terminal
equipment with V-series type interfaces.
Portware—Software that runs on the Cisco MICA HMM or DMM.
PPP—Point-to-Point Protocol.
PRI—Primary Rate Interface.
PS—preliminary signal. This signal, if present, gives advance notice of speed changes to a Type 1
device.
Q.931—ISDN User-Network Interface Layer 3 specification for basic call control.
RAS—remote access server.
TCH—traffic channel. The 32k bearer channel for user data. PIAFS 2.1 can bundle up to 2 channels of
data for a total data rate of 64k. For PIAFS 2.1, the total number of channels can be shifted up or down
dynamically during a call. PIAFS 2.1 on Cisco MICA, however, cannot sense the total number of TCHs,
seeing only the loss of synchronization that occurs when the channels shift. Standard PIAFS algorithms
(switching IR every 200 msec) allow PIAFS 2.1 on Cisco MICA to synchronize to a new speed without
sensing the total number of TCHs. When PIAFS 2.1 on Cisco MICA is originating PIAFS 2.1 calls
(TEST), it locks to a particular IR, simulating a TCH change. PIAFS 2.1 on Cisco MICA is not intended
to originate calls in an operational mode, so TCH sensing and T010/T011 timers are not implemented.
The V.92 and V.44 Support for Digital Modems feature supports the V.92 Modem on Hold and V.92
Quick Connect portions of the new V.92 modem standard, and the new V.44 LZJH compression standard
based on Lempel-Ziv, on the Cisco 3600 and 3700 router platforms.
Feature Specifications for V.92 and V.44 Support for Digital Modems
Feature History
Release Modification
12.2(11)YT This feature was introduced.
12.2(15)T This feature was integrated into Cisco IOS Release 12.2(15)T.
Supported Platforms
Cisco 3620; Cisco 3640; Cisco 3640A; Cisco 3660; Cisco 3725; Cisco 3745
Finding Support Information for Platforms and Cisco IOS Software Images
Use Cisco Feature Navigator to find information about platform support and Cisco IOS software image
support. Access Cisco Feature Navigator at http://www.cisco.com/go/fn. You must have an account on
Cisco.com. If you do not have an account or have forgotten your username or password, click Cancel at
the login dialog box and follow the instructions that appear.
Contents
• Prerequisites for V.92 and V.44 Support for Digital Modems, page 180
• Restrictions for V.92 Support for Digital Modems, page 180
• Information About V.92 and V.44 Support for Digital Modems, page 180
• How to Use the V.92 and V.44 Support for Digital Modems Feature, page 186
• Additional References, page 186
• Command Reference, page 189
Note Many client modems used in Europe are known to have problems with the MOH feature. The vendors
are aware of the issue and are working to correct it. If you are a customer having trouble with the MOH
feature in Europe, we suggest that you contact the client modem vendor to verify that the modem
complies with the telephony signaling for call waiting, caller ID, and three-way calling in their particular
country.
Note This feature is designed for use on telephone lines that are configured for the call-waiting service;
call-waiting signals trigger the suspension of the modem session. If call-waiting service is not present
on the subscriber’s line, callers receive a busy signal, and the modem session is not interrupted.
Use of the V.92 Modem on Hold feature for Cisco MICA portware can be controlled globally using AT
commands (modemcaps) or can be controlled on a per-caller basis using the RADIUS distributed
client/server system. (You are not required to have a RADIUS server to use the V.92 Modem on Hold
feature.)
V.92 Modem on Hold is disabled by default and is controlled with standard AT commands and
S-registers. V.92 is enabled and disabled with the S29 S-register (S29 = 12), and MOH is controlled with
the S62 S-register (S62 must be set to enable MOH). AT commands download the configuration to the
modem at the end of every call. The ATSn=v and ATSn? AT commands are used to configure the V.92
Modem on Hold feature on Cisco MICA platforms. Table 14 lists additional S-register parameters used
to enable and disable the feature.
To disable V.92 Modem on Hold, you can use a modemcap (for example, s62=0s63=3s21=15s29=12) or
set the S29 register to any number other than 12. You can also use the RADIUS VSA to disable MOH if
the feature was initially enabled by the default value (modemcap).
Note If the feature is enabled using S29=12 and V.92 Modem on Hold is disabled using S62=0, statistics for
the number of times a dial-in customer requests an on-hold function are tracked in the MOH link
information parameters. However, completely disabling the feature by setting S29 to a value other than
12 disables the reporting of all MOH statistics.
For detailed information about the AT commands and S-registers used to control V.92 on Cisco MICA
platforms, refer to the AT Command Set and Register Summary for MICA 6-Port Modules.
RADIUS Authorization
Per-user control of V.92 Modem on Hold can be configured for caller authorization using a RADIUS
server. RADIUS servers use the VSA capability to configure MOH for individual users. The current
attribute=value protocol syntax has been extended with the new Modem on Hold attribute. You can enter
an unsigned integer in the range from 0 through 65,535 that represents the maximum number of seconds
that a modem may remain on hold, and which can extend from 10 seconds to an unlimited number of
minutes.
Note Although the integer attribute values can be specified as any value in a contiguous range, V.92
specifications limit configuration to a limited set of values. Attribute values are rounded down to the next
permitted value when they are used to configure a modem.
Alternatively, you can enter the inf keyword, which allows the modem to remain on hold indefinitely.
If the V.92 Modem on Hold configuration is not present, or if it is not syntactically correct, the modem
uses its default configuration for MOH. The default operation can be modified by using a modemcap
string. Following authentication of a dial-in user, an additional control command is sent to the modem
if the dial-in user does not have a default MOH configuration.
Note Code space requirements for RADIUS support is less than 2 KBs. There are no additional data space
requirements.
V.92 Modem on Hold running on systems using RADIUS authorization increases the length of RADIUS
response packets by approximately 20 bytes. RADIUS databases increase in size by approximately the
same amount for each dial-in user with a nondefault MOH attribute value.
With RADIUS, authentication and authorization occur as part of the same process. When a caller
connects to the access server, the caller enters a user ID and password in response to prompts from the
access server. This information is formatted as a RADIUS request packet and is sent to the appropriate
RADIUS server. If the user ID is valid and the password matches, the RADIUS server responds with a
packet containing authorization data for the connection. This authorization data contains the MOH
configuration if it is present in the RADIUS database.
The access server interprets the response from the RADIUS server and performs any actions associated
with the authorization data. For V.92 Modem on Hold, a command is sent from the Cisco IOS host to the
Cisco MICA channel to set the MOH parameters. No confirmation from the channel is required.
When the client modem requests a V.92 Modem on Hold operation, the modem switches to an on-hold state,
which prevents further data from being queued to the connection. When the Cisco IOS software receives the
request to go on hold, any transmit packets queued to local Cisco IOS queues (packets not already posted to
the queues shared between the Cisco IOS software and the modem) are discarded. This mechanism reduces
the possibility that stale data will be transmitted to the modem when the connection is reactivated. It also
reduces the number of buffer resources that are unavailable while a modem is on hold.
Note When a RADIUS server is used, placement of commas is important. The asterisk in the modem-on-hold
attribute indicates that the attribute is optional. If a modem does not support V.92 Modem on Hold, then
the call might continue anyway. If the asterisk is replaced by an equal sign (=), the attribute is required,
and modems that do not support MOH terminate the calls following authentication. The value of the
attribute is the number of seconds allowed for the on-hold state. This value is rounded down by the
Cisco IOS software to one of the permissible values. The number can be replaced with the inf command,
which allows unlimited on-hold time. Case is significant for both attribute names and values.
Note If your router is configured for RADIUS, the RADIUS server must be accessible to the router. The server
must also be capable of responding to authentication requests with VSA attributes.
V.92 Quick Connect is enabled by default and is controlled with standard AT commands and S-registers.
S29 is used to enable V.92 sequence detection and S63 is used to enable V.92 Quick Connect, both of
which are enabled by default. The S63 S-register controls the feature through the ANSpcm signal. You
can choose the power level of the ANSpcm signal, which defaults to –12 dBm (the transmit power level
for the United States). The ATSn=v and ATSn? AT commands are used to configure V.92 Quick Connect
on Cisco MICA platforms.
To disable V.92 Quick Connect or to set a different ANSpcm value, you can use a modemcap (for
example, v92_v44:MSC=s62=8s63=0s21=15s29=12), or you can set the S29 register to any number
other than 12. Table 15 lists the S-registers used to enable and disable the V.92 Quick Connect feature.
Note If the V.92 Modem on Hold feature is enabled using S29=12, and QC is disabled using S63=0, then the
QC Exchange Link Information Parameter is updated to show if QC was requested. However, completely
disabling the feature by setting S29 to a value other than 12 disables the reporting of QC requests.
For detailed information about the AT commands and S-registers that are used to configure the V.92
Quick Connect feature on Cisco MICA platforms, refer to the AT Command Set and Register Summary
for MICA 6-Port Modules.
V.44 is globally controlled through dialed number identification service (DNIS), calling line
identification (CLID), and resource pool manager server (RPMS) virtual groups, and performance
improvement is determined by the LZJH algorithms.
To support V.44 LZJH compression, the control switch module (CSM) has been modified. MIBs that
show the status of V.42bis have been extended to show V.44 configuration status. New disconnect
reasons help manage V.44 session status and debugging.
How to Use the V.92 and V.44 Support for Digital Modems
Feature
Cisco IOS software is responsible for controlling the features and displaying the new statistics. There
are no tasks associated with configuring this feature. However, you may find the following table listing
commands for monitoring digital modems that support the V.92 and V.44 modem standards useful.
• Monitoring Cisco Modems, page 186
Command Purpose
Router# show modem Displays a high-level performance report for all the modems or a
single modem.
Router# show modem call-stats Displays the local disconnect reasons for all modems inside an
access server or router.
Router# show modem configuration Displays the current modem configuration for digital Cisco MICA
technologies modems.
Router# show modem log Displays the modem event log with oldest event first.
Router# show modem operational-status Displays the operational status of the specified ports or the specified
port range.
Configuration Examples
None. See the “Command Reference” section on page 189. The show modem and show modem
call-stats EXEC commands have been modified to display reports about the digital modems that support
the V.92 and V.44 modem standards.
Additional References
For additional information related to V.92 and V.44 Support for Digital Modems feature, refer to the
following references:
Related Documents
Related Topic Document Title
Modem commands Cisco IOS Dial Technologies Command Reference, Release 12.2
Modem configuration and management Cisco IOS Dial Technologies Configuration Guide, Release 12.2;
refer to the part “Modem and Dial Shelf Configuration and
Management”
AT Commands and S Registers AT Command Set and Register Summary for MICA 6-Port Modules
Standards
Standards1 Title
ITU-T V.92 — “Enhancements to Recommendation V.90”
ITU-T V.44 — “Data Compression Procedures”
1. Not all supported standards are listed.
MIBs
MIBs MIBs Link
Table 18, Table 19, and Table 20 provide Cisco MIBs To obtain lists of supported MIBs by platform and Cisco IOS
for the V.92 Modem on Hold and V.44 MIBs. release, and to download MIB modules, go to the Cisco MIB website
on Cisco.com at the following URL:
http://www.cisco.com/public/sw-center/netmgmt/cmtk/mibs.shtml
To locate and download MIBs for selected platforms, Cisco IOS releases, and feature sets, use Cisco
MIB Locator found at the following URL:
http://tools.cisco.com/ITDIT/MIBS/servlet/index
To obtain lists of supported MIBs by platform and Cisco IOS release, and to download MIB modules,
go to the Cisco MIB website on Cisco.com at the following URL:
http://www.cisco.com/public/sw-center/netmgmt/cmtk/mibs.shtml
To access Cisco MIB Locator, you must have an account on Cisco.com. If you have forgotten or lost your
account information, send a blank e-mail to [email protected]. An automatic check will verify
that your e-mail address is registered with Cisco.com. If the check is successful, account details with a
new random password will be e-mailed to you.
Qualified users can establish an account on Cisco.com by following the directions found at this URL:
http://www.cisco.com/register
RFCs
RFCs Title
None —
Technical Assistance
Description Link
Technical Assistance Center (TAC) home page, http://www.cisco.com/public/support/tac/home.shtml
containing 30,000 pages of searchable technical
content, including links to products, technologies,
solutions, technical tips, tools, and lots more.
Registered Cisco.com users can log in from this page to
access even more content.
Command Reference
This section documents modified commands. All other commands used with this feature are documented
in the Cisco IOS Release 12.2 command reference publications.
• show modem
• show modem call-stats
Feature History
Release Modification
12.2(2)XA This feature was introduced on Cisco AS5350 and Cisco AS5400
universal gateways running NextPort firmware.
This feature was introduced on the Cisco AS5300 universal access server
running Cisco MICA Portware Version 2.9.1.0.
12.2(2)XB This feature was supported with Cisco IOS Release 12.2(2)XB.
12.2(2)XB1 This feature was supported on Cisco AS5800 universal access servers.
12.2(11)T This feature was integrated into Cisco IOS Release 12.2(11)T and support
was added for the Cisco AS5300 and Cisco AS5800 platforms.
This feature module introduces the V.92 International Telecommunication Union Telecommunication
Standardization Sector (ITU-T) standard Modem on Hold (MOH) feature with Cisco MICA portware for
use with Cisco IOS Release 12.2(2)XB1 and 12.2(11)T.
This document includes the following sections:
• Feature Overview, page 192
• Supported Platforms, page 200
• Supported Standards, MIBs, and RFCs, page 201
• Prerequisites, page 202
• Configuration Tasks, page 202
• Monitoring and Maintaining Modem on Hold, page 202
• Configuration Examples, page 202
• Command Reference, page 202
• Glossary, page 203
Feature Overview
V.92
To remain current with industry needs, the ITU-T V.90 modem standard recommendations have been
enhanced. The new standard, V.92, meets the need for a digital modem and analog modem pair on the
Public Switched Telephone Network (PSTN). V.92 improves the upstream data signaling rate and adds new
features that enhance modem usability.
This feature module introduces the V.92 Modem on Hold feature on Cisco AS5300 and Cisco AS5800
universal access servers with Cisco MICA Portware Version 2.9.1.0 and higher.
Note The other feature introduced with the new V.92 standard is V.92 Quick Connect, which is documented
in the V.92 Quick Connect for Cisco AS5300 and Cisco AS5800 Universal Access Servers feature
module. V.92 Modem On Hold and V.92 Quick Connect can be enabled independently of each other.
V.92 is implemented at the modem level as new modem protocols and standards. The new V.92 features
co-reside with existing portware features and have no impact on the hardware configuration of either the
HMM or DMM (including memory requirements). Cisco IOS software is responsible for controlling the
features and displaying the new statistics. V.92 and V.44 support is bound with the rest of the Cisco IOS
device driver components.
Note V.92 is packaged with V.44 in Cisco IOS software. For more information about V.44, refer to the
V.44 LZJH Compression for Cisco AS5300 and Cisco AS5800 Universal Access Servers feature module.
Note This feature does not support pulse code modulation (PCM) upstream as defined in the V.92 ITU
standard. This feature does, however, interoperate with modems that support PCM upstream.
Modem on Hold
V.92 Modem on Hold allows a dial-in customer to suspend a modem session to answer an incoming voice
call or to place an outgoing call while engaged in a modem session. When the dial-in customer uses
Modem on Hold to suspend an active modem session to engage in an incoming voice call, the Internet
service provider (ISP) modem listens to the original modem connection and waits for the dial-in
customer’s modem to resume the connection. When the voice call ends, the modem signals the telephone
system to end the second call and return to the original modem connection, then the modem signals the
ISP modem that it is ready to resume the modem call. Both modems renegotiate the connection, and the
original exchange of data continues.
Note This feature is designed for use on telephone lines that are configured for call-waiting service;
call-waiting signals trigger the suspension of the modem session. If call-waiting service is not present
on the subscriber’s line, callers receive a busy signal, and the modem session is not interrupted.
Telephone
AS5300
Telco switch with
on-hold and call-
Modem with V.32 waiting capabilites
PC with MoH and OC
application
software
Telephone
63381
Use of the V.92 Modem on Hold feature for Cisco MICA portware can be controlled globally using AT
commands (modemcaps) or can be controlled on a per-caller basis using the RADIUS distributed
client/server system.
Note You are not required to have a RADIUS server to use the Modem on Hold feature.
The following sections contain information about controlling the V.92 Modem on Hold feature:
• AT Commands (Modemcaps) and S-Registers
• RADIUS Authorization
Note If the feature is enabled using S29=12 and Modem on Hold is disabled using S62=0, statistics for the
number of times a dial-in customer requests an on-hold are tracked in the MOH link information
parameters. However, completely disabling the feature by setting S29 to a value other than 12 disables
the reporting of all MOH statistics.
For detailed information about the AT commands and S-registers used to control V.92 on Cisco MICA
platforms, refer to the AT Command Set and Register Summary for MICA 6-Port Modules.
RADIUS Authorization
Per-user control of Modem on Hold can be configured for caller authorization using a RADIUS server.
RADIUS servers use the vendor-specific attribute (VSA) capability to configure Modem on Hold for
individual users. The current attribute=value protocol syntax has been extended with the new
Modem on Hold attribute. You can enter the following value for this attribute:
• An unsigned integer in the range 0 through 65,535—Represents the maximum number of seconds
that a modem may remain on hold, which can range from ten seconds to an unlimited number of
minutes.
Note Although the integer attribute values can be specified as any value in a contiguous range, V.92
specifications limit configuration to a limited set of values. Attribute values are rounded down to the next
permitted value when they are used to configure a modem.
Alternatively, you can enter the inf keyword, which allows the modem to remain on hold indefinitely.
If the Modem on Hold configuration is not present, or if it is not syntactically correct, the modem uses
its default configuration for Modem on Hold. The default operation can be modified by using a
modemcap string. Following authentication of a dial-in user, an additional control command is sent to
the modem if the dial-in user does not have a default Modem on Hold configuration.
Note Code space requirements for RADIUS support is less than 2KBs. There are no additional data space
requirements.
V.92 Modem on Hold running on systems using RADIUS authorization increases the length of RADIUS
response packets by approximately 20 bytes. RADIUS databases increase in size by approximately the
same amount for each dial-in user with a nondefault Modem on Hold attribute value.
With RADIUS, authentication and authorization occur as part of the same process. When a caller
connects to the access server, the caller enters a user ID and password in response to prompts from the
access server. This information is formatted as a RADIUS request packet and is sent to the appropriate
RADIUS server. If the user ID is valid and the password matches, the RADIUS server responds with a
packet containing authorization data for the connection. This authorization data contains the Modem on
Hold configuration if it is present in the RADIUS database.
The access server interprets the response from the RADIUS server and performs any actions associated
with the authorization data. For Modem on Hold, a command is sent from the Cisco IOS host to the
Cisco MICA channel to set the Modem on Hold parameters. No confirmation from the channel is
required.
When the client modem requests a Modem on Hold operation, the modem switches to an on-hold state, which
prevents further data from being queued to the connection. When the Cisco IOS software receives the request
to go on hold, any transmit packets queued to local Cisco IOS queues (packets not already posted to the
queues shared between the Cisco IOS software and the modem) are discarded. This mechanism reduces the
possibility that stale data will be transmitted to the modem when the connection is reactivated. It also reduces
the number of buffer resources that are tied up while a modem is on hold.
Note When using a RADIUS server, placement of commas is important. The asterisk in the modem-on-hold
attribute indicates that the attribute is optional. If a modem does not support Modem on Hold, then the
call might continue anyway. If the asterisk is replaced by an “=”, the attribute is required, and modems
that do not support Modem on Hold terminate the calls following authentication.
The value of the attribute is the number of seconds allowed for the on-hold state. This value is rounded
by the Cisco IOS software to one of the permissible values. The number can be replaced with the inf
command, which allows unlimited on-hold time. Case is significant for both attribute names and values.
Note If your router is configured for RADIUS, the RADIUS server must be accessible to the router. The server
must also be capable of responding to authentication requests with VSA attributes.
Note The examples shown below were established on the Cistron open-source server. Your server syntax may
vary.
Cisco-AVPair = "modem-on-hold*60"
Note The service type defines when the AVPair is applied. For different RADIUS servers, the Cisco-AVPair
syntax might be different, but the value in quotes does not change. Case is important: The entire text in
quotes must be lowercase.
For more information about using RADIUS, refer to the Configuring RADIUS documentation.
Disconnect Reasons
V.92 Modem on Hold Disconnect Reasons is the method by which a modem tells the Cisco IOS software
(host) why it has terminated its session with a client through the Modem on Hold cleardown by modem
and the Modem on Hold timeout values. Table 22 lists the new Modem on Hold Disconnect Reasons.
Name Description
DR_MOH_CLRD Modem On Hold cleardown by modem
DR_MOH_TIMEOUT Modem On Hold timeout value reached
Name Description
MOH Status 0: Modem is not on hold
1: Modem is on hold
MOH Count Number of times the modem is on hold
Name Description
MOH Request Count Number of times the modem received Modem on Hold requests.
Total MOH Time Total holding time: 65,535 seconds maximum
Current MOH Time Current holding time: 65,535 seconds maximum
Call Waiting Retrains Number of times a retrain occurred due to a call-waiting signal
Modem States
This feature supports modem states, which are discrete states that a modem transitions through, during,
and after negotiation with a client modem. These states include the Modem on Hold input state, the
Steady input state, and the Steady, Steady Retrain, and Terminate output states.
Benefits
Allows Voice Calls Without Interruption of Existing Modem Connection
V.92 Modem on Hold allows the origination and reception of voice calls without disturbing preexisting
modem sessions. With Modem on Hold, calls can ring through to the dial-in user without requiring the
expense of a second telephone line.
Per-Use Enabling
Service providers can enable Modem on Hold on a per-user basis for premium service opportunities.
V.92 Compatibility
Modems that support V.92 are fully compatible with modems that do not support it. If a modem that
supports Modem on Hold connects with a modem that does not support it, the modems will connect
normally. However, the Modem on Hold function is not available for that call.
Restrictions
• Client modem vendors must supply their own utilities to enable Modem on Hold with each client
modem.
• There is no standard method for notifying remote or user applications that a modem session has been
placed on hold. Extending timeouts or increasing the maximum number of attempts to perform
certain operations might be necessary. No e-mail data should be lost because of on-hold times.
• When a Modem on Hold transaction returns to the data-connected state, it retains the same IP
network connection. Any other connected applications might not be returned to their prior state,
depending on the application’s data transaction requirements during the Modem on Hold active
state.
• Configuration of these features using S-registers is carried out by using modemcaps (AT
commands). Cisco IOS software does not check these values to guarantee that they are valid. The
behavior of invalid values is determined by the module.
• Authorization of Modem on Hold is not provided as a standard service by RADIUS. However,
RADIUS provides a vendor-specific attribute (VSA) capability that can be used to extend
authorization mechanisms. This capability is already used by Cisco routers to provide other custom
services.
• Cisco IOS software is packaged as multiple program image types with varying capabilities. Because
not all modem interfaces support Modem on Hold and because images may be built to support
specific modem types, not all software images contain functions to control Modem on Hold. In
addition, the modems that do support Modem on Hold implement their control functions differently.
Therefore, registry functions are used to interface between RADIUS, local authorization, and
Modem on Hold control for modems.
• Server-initiated Modem on Hold is not supported.
• During a suspended modem session, some data might be dropped. The ISP idle timer, which
disconnects a dial-in user if there is no data exchanged for a period of time, should be reset and
suspended while a connection is on hold.
Note Many client modems used in Europe are known to have problems with the Modem on Hold feature. The
vendors are aware of the issue and are working to correct it. If you are having trouble with the Modem
on Hold feature in Europe, it is suggested that the customer contact the client modem vendor to verify
that the modem complies with the telephony signaling for call waiting, caller ID, and 3-way calling in
their particular country.
Related Documents
• AT Command Set and Register Summary for MICA Six-Port Modules
• Call Tracker plus ISDN and AAA Enhancements for the Cisco AS5300
• Cisco AS5300 documentation index
• Cisco AS5800 documentation index
• Cisco IOS Release 12.2 Master Indexes
• Comparing NextPort SPE Commands to MICA Modem Commands
• New Features in Release 12.2(2)XB
• Release Notes for Cisco AS5300 Universal Access Servers, Cisco IOS Release 12.2(2)XA
• Release Notes for Cisco AS5300 Universal Access Servers, Cisco IOS Release 12.2(2)XB
• Cisco IOS Release 12.2T Cross-Platform Release Notes
• Cisco AS5800 Universal Access Server Release Notes
• Release Notes for Cisco MICA Portware Version 2.9.1.0 on Cisco AS5300 Universal Access Servers
• SPE and Firmware Download Enhancements
• V.44 LZJH Compression for Cisco AS5300 and Cisco AS5800 Universal Access Servers
• V.92 Quick Connect for Cisco AS5300 and Cisco AS5800 Universal Access Servers
Supported Platforms
• Cisco AS5300
• Cisco AS5800
Table 24 Cisco IOS Release and Platform Support for this Feature
To access Cisco Feature Navigator, you must have an account on Cisco.com. If you have forgotten or
lost your account information, send a blank e-mail to [email protected]. An automatic check
will verify that your e-mail address is registered with Cisco.com. If the check is successful, account
details with a new random password will be e-mailed to you. Qualified users can establish an account
on Cisco.com by following the directions at http://www.cisco.com/register.
Cisco Feature Navigator is updated regularly when major Cisco IOS software releases and technology
releases occur. For the most current information, go to the Cisco Feature Navigator home page at the
following URL:
http://www.cisco.com/go/fn
MIBs
• CISCO-MODEM-MGMT-MIB
• CISCO-CALL-TRACKER-MODEM-MIB
To locate and download MIBs for selected platforms, Cisco IOS releases, and feature sets, use
Cisco MIB Locator found at the following URL:
http://tools.cisco.com/ITDIT/MIBS/servlet/index
If Cisco MIB Locator does not support the MIB information that you need, you can also obtain a list of
supported MIBs and download MIBs from the Cisco MIBs page at the following URL:
http://www.cisco.com/public/sw-center/netmgmt/cmtk/mibs.shtml
To access Cisco MIB Locator, you must have an account on Cisco.com. If you have forgotten or lost your
account information, send a blank e-mail to [email protected]. An automatic check will verify
that your e-mail address is registered with Cisco.com. If the check is successful, account details with a
new random password will be e-mailed to you. Qualified users can establish an account on Cisco.com
by following the directions found at this URL:
http://www.cisco.com/register
RFCs
No new or changed RFCs are supported by this feature.
Prerequisites
• Cisco IOS Release 12.2(2)XA, 12.2(2)XB, or 12.2(11)T
• V.92 MOH Portware DSP program memory required (in 16-bit words): 500
• Less than 50k bytes needed for CP memory
• Basic configuration of the Cisco AS5300 or Cisco AS5800 universal access server
• Upgraded modem firmware (Cisco MICA portware 2.9.1.0)
• Modems must be capable of supporting Modem on Hold
Configuration Tasks
None
Command Purpose
Router# show modem configuration Displays the current modem configuration for
digital Cisco MICA technologies modems.
Router# show modem log Displays the event log with oldest event first.
Router# show modem operational-status Displays the operational status of the specified
ports or the specified port range.
Configuration Examples
None
Command Reference
The following new and modified commands are pertinent to this feature. To see the command pages for
these commands and other commands used with this feature, go to the Cisco IOS Master Commands List,
Release 12.4, at http://www.cisco.com/univercd/cc/td/doc/product/software/ios124/124mindx/
124index.htm.
• show modem configuration
• show modem log
• show modem operational-status
Glossary
CLI—command-line interface.
CSMv6—Mindspeed modem hardware solution.
CSR—call success rate.
DFC—dial feature card.
DSP—Digital Signal Processor. Microprocessor on which the modulation/demodulation process is
carried out.
ISP—Internet service provider.
ITU-T—International Telecommunication Union Telecommunication Standardization Sector.
LZJH—Lempel-Ziv-Jeff-Heath data compression algorithm used in V.44.
MICA—Modem ISDN channel aggregation. Used as a generic term to describe the Dial Technology
Division (DTD) high-density modem technology.
MOH—Modem on Hold functionality specified in V.92.
NextPort—Device driver architecture for Cisco IOS software that supports the NextPort hardware and
software interfaces. Supports the Universal Port concept.
PCM—pulse code modulation.
PSTN—Public Switched Telephone Network.
RADIUS—Remote Dial-In User Service. Database for authenticating modem and ISDN connections
and for tracking connection time.
SPE—service processing element.
universal port—Concept of a single device that can terminate one digital signaling level zero (DS0)
with a data modem, fax modem, ISDN, or voice solution.
QC—Quick Connect functionality specified in V.92.
V.44—ITU modem standard for LZJH data compression algorithm.
V.92—ITU modem standard that contains Quick Connect, Modem On Hold, and PCM upstream.
VSA—vendor-specific attribute (as used with RADIUS).
Feature History
Release Modification
12.2(2)XA This feature was introduced on Cisco AS5350 and Cisco AS5400
universal gateways running NextPort firmware.
12.2(2)XB This feature was supported with Cisco IOS Software Release 12.2(2)XB.
12.2(2)XB1 This feature was supported on Cisco AS5800 universal access servers and
Cisco AS5850 universal gateways.
12.2(11)T This feature was integrated into Cisco IOS Release 12.2(11)T and support
was added for the Cisco AS5350, Cisco AS5400, Cisco AS5800, and
Cisco AS5850 platforms.
This feature module introduces the V.92 International Telecommunication Union Telecommunication
Standardization Sector (ITU-T) standard Modem on Hold (MOH) feature on
NextPort/DFC-108NP-bearing platforms for use with Cisco IOS Releases 12.2(2)XB1 and 12.2(11)T.
This document includes the following sections:
• Feature Overview, page 208
• Supported Platforms, page 216
• Supported Standards, MIBs, and RFCs, page 217
• Prerequisites, page 218
• Configuration Tasks, page 218
• Monitoring and Maintaining Modem on Hold, page 218
• Configuration Examples, page 219
• Command Reference, page 219
• Glossary, page 220
Feature Overview
V.92
To remain current with industry needs, the ITU-T V.90 modem standard recommendations have been
enhanced. The new standard, V.92, meets the need for a digital modem and analog modem pair on the
Public Switched Telephone Network (PSTN). V.92 improves the upstream data signaling rate and adds new
features that enhance modem usability. These new modem protocols and standards are implemented at the
modem level.
This feature module introduces the V.92 Modem on Hold feature on Cisco AS5350, Cisco AS5400, and
Cisco AS5850 universal gateways and Cisco AS5800 universal access servers.
Note The other feature introduced with the new V.92 standard is V.92 Quick Connect, which is documented
in the V.92 Quick Connect for Cisco AS5350, Cisco AS5400, and Cisco AS5850 Universal Gateways and
Cisco AS5800 Universal Access Servers feature module. V.92 Modem On Hold and V.92 Quick Connect
can be enabled independently of each other.
NextPort firmware provides V.92 capabilities bundled with existing NextPort features. The NextPort
Dial Feature Card (DFC-108NP) is responsible for the ITU implementation of V.92 and the collection
of statistics related to the new features, including the new Modem States that occur with the additional
negotiations for V.92. The statistics are collected by the dial feature card (DFC) but are passed to and
stored in Cisco IOS software. Cisco IOS software is responsible for controlling the features and
displaying the new statistics.
The Cisco AS5800 uses the NextPort high density dial termination card to implement this feature. Both
voice and dial technologies are supported when used in a Cisco 5850 universal gateway.
Note V.92 is packaged with V.44 in Cisco IOS software. For more information about V.44, refer to theV.44
LZJH Compression for Cisco AS5350, Cisco AS5400, and Cisco AS5850 Universal Gateways and Cisco
AS5800 Universal Access Servers feature module.
Modem on Hold
V.92 Modem on Hold allows a dial-in customer to suspend a modem session to answer an incoming voice
call or to place an outgoing call while engaged in a modem session. When the dial-in customer uses
Modem on Hold to suspend an active modem session to engage in an incoming voice call, the Internet
service provider (ISP) modem listens to the original modem connection and waits for the dial-in
customer’s modem to resume the connection. When the voice call ends, the modem signals the telephone
system to end the second call and return to the original modem connection, then the modem signals the
ISP modem that it is ready to resume the modem call. Both modems renegotiate the connection, and the
original exchange of data continues.
Note This feature is designed for use on telephone lines that are configured for call-waiting service;
call-waiting signals trigger the suspension of the modem session. If call-waiting service is not present
on the subscriber’s line, other callers receive a busy signal, and the modem session is not interrupted.
Use of the V.92 Modem on Hold feature for Cisco NextPort firmware can be controlled globally using
AT commands (modemcaps) or can be controlled on a per-caller basis using the RADIUS distributed
client/server system.
Note You are not required to have a RADIUS server to use the Modem on Hold feature.
The following sections contain information about controlling the V.92 Modem on Hold feature:
• AT Commands (Modemcaps) and S-Registers
• RADIUS Authorization
Note If the feature is enabled using S29=12 and Modem on Hold is disabled using S62=0, statistics for the
number of times a dial-in customer requests an on-hold are tracked in the MOH link information
parameters. However, completely disabling the feature by setting S29 to a value other than 12 disables
the reporting of all MOH statistics.
For detailed information about the AT commands and S-registers used to control V.92 on NextPort
platforms, refer to the AT Command Set and Register Summary for NextPort Platforms.
RADIUS Authorization
Per-user control of Modem on Hold can be configured for caller authorization using a RADIUS server.
RADIUS servers use the vendor-specific attribute (VSA) capability to configure Modem on Hold for
individual users. The current attribute=value protocol syntax has been extended with the new
Modem on Hold attribute. You can enter the following value for this attribute:
• An unsigned integer in the range 0 through 65,535—Represents the maximum number of seconds
that a modem may remain on hold, which can range from ten seconds to an unlimited number of
minutes.
Note Although the integer attribute values can be specified as any value in a contiguous range, V.92
specifications limit configuration to a limited set of values. Attribute values are rounded down to the next
permitted value when they are used to configure a modem.
Alternatively, you can enter the inf keyword, which allows the modem to remain on hold indefinitely.
If the Modem on Hold configuration is not present, or if it is not syntactically correct, the modem uses
its default configuration for Modem on Hold. The default operation can be modified by using a
modemcap string. Following authentication of a dial-in user, an additional control command is sent to
the modem if the dial-in user does not have a default Modem on Hold configuration.
Note Code space requirements for RADIUS support is less than 2KBs. There are no additional data space
requirements.
V.92 Modem on Hold running on systems using RADIUS authorization increases the length of RADIUS
response packets by approximately 20 bytes. RADIUS databases increase in size by approximately the
same amount for each dial-in user with a nondefault Modem on Hold attribute value.
With RADIUS, authentication and authorization occur as part of the same process. When a caller
connects to the access server, the caller enters a user ID and password in response to prompts from the
access server. This information is formatted as a RADIUS request packet and is sent to the appropriate
RADIUS server. If the user ID is valid and the password matches, the RADIUS server responds with a
packet containing authorization data for the connection. This authorization data contains the Modem on
Hold configuration if it is present in the RADIUS database.
The access server interprets the response from the RADIUS server and performs any actions associated
with the authorization data. For Modem on Hold, a command is sent from the Cisco IOS host to the
NextPort channel to set the Modem on Hold parameters. No confirmation from the channel is required.
When the client modem requests a Modem on Hold operation, the modem switches to an on-hold state, which
prevents further data from being queued to the connection. When the Cisco IOS software receives the request
to go on hold, any transmit packets queued to local Cisco IOS queues (packets not already posted to the
queues shared between the Cisco IOS software and the modem) are discarded. This mechanism reduces the
possibility that stale data will be transmitted to the modem when the connection is reactivated. It also reduces
the number of buffer resources that are tied up while a modem is on hold.
Note When using a RADIUS server, placement of commas is important. The asterisk in the modem-on-hold
attribute indicates that the attribute is optional. If a modem does not support Modem on Hold, then the
call might continue anyway. If the asterisk is replaced by an “=”, the attribute is required, and modems
that do not support Modem on Hold terminate the calls following authentication.
The value of the attribute is the number of seconds allowed for the on-hold state. This value is rounded
by the Cisco IOS software to one of the permissible values. The number can be replaced with the inf
command, which allows unlimited on-hold time. Case is significant for both attribute names and values.
Note If your router is configured for RADIUS, the RADIUS server must be accessible to the router. The server
must also be capable of responding to authentication requests with VSA attributes.
Note The examples shown below were established on the Cistron open-source server. Your server syntax may
vary.
Note The service type defines when the AVPair is applied. For different RADIUS servers, the Cisco-AVPair
syntax might be different, but the value in quotes does not change. Case is important: The entire text in
quotes must be lowercase.
For more information about using RADIUS, refer to the Configuring RADIUS documentation.
Disconnect Reasons
V.92 Modem on Hold Disconnect Reasons is the method by which a modem tells the Cisco IOS software
(host) why it has terminated its session with a client through the Modem on Hold cleardown by modem
and the Modem on Hold timeout values. Table 26 lists the new Modem on Hold Disconnect Reasons.
Name Description
DR_MOH_CLRD Modem On Hold cleardown by modem
DR_MOH_TIMEOUT Modem On Hold timeout value reached
Name Description
MOH Status 0: Modem is not on hold
1: Modem is on hold
MOH Count Number of times the modem is on
hold
MOH Request Count Number of times the modem
received Modem on Hold requests.
Total MOH Time Total holding time: 65,535 seconds
maximum
Name Description
Current MOH Time Current holding time: 65,535
seconds maximum
Call Waiting Retrains Number of times a retrain occurred
due to a call-waiting signal
Modem States
This feature supports modem states, which are discrete states that a modem transitions through, during,
and after negotiation with a client modem. These states include the Modem on Hold input state, the
Steady input state, and the Steady, Steady Retrain, and Terminate output states.
Benefits
Allows Voice Calls Without Interruption of Existing Modem Connection
V.92 Modem on Hold allows the origination and reception of voice calls without disturbing preexisting
modem sessions. With Modem on Hold, calls can ring through to the dial-in user without requiring the
expense of a second telephone line.
Per-Use Enabling
Service providers can enable Modem on Hold on a per-user basis for premium service opportunities.
V.92 Compatibility
Modems that support V.92 are fully compatible with modems that do not support it. If a modem that
supports Modem on Hold connects with a modem that does not support it, the modems will connect
normally. However, the Modem on Hold function is not available for that call.
Restrictions
• Client modem vendors must supply their own utilities to enable Modem on Hold with each client
modem.
• There is no standard method for notifying remote or user applications that a modem session has been
placed on hold. Extending timeouts or increasing the maximum number of attempts to perform
certain operations might be necessary. No e-mail data should be lost because of on-hold times.
• When a Modem on Hold transaction returns to the data-connected state, it retains the same IP
network connection. Any other connected applications might not be returned to their prior state,
depending on the application’s data transaction requirements during the Modem on Hold active
state.
• Configuration of these features using S-registers is carried out by using modemcaps (AT
commands). Cisco IOS software does not check these values to guarantee that they are valid. The
behavior of invalid values is determined by the module.
• Authorization of Modem on Hold is not provided as a standard service by RADIUS. However,
RADIUS provides a vendor-specific attribute (VSA) capability that can be used to extend
authorization mechanisms. This capability is already used by Cisco routers to provide other custom
services.
• Cisco IOS software is packaged as multiple program image types with varying capabilities. Because
not all modem interfaces support Modem on Hold and because images may be built to support
specific modem types, not all software images contain functions to control Modem on Hold. In
addition, the modems that do support Modem on Hold implement their control functions differently.
Therefore, registry functions are used to interface between RADIUS, local authorization, and
Modem on Hold control for modems.
• Server-initiated Modem on Hold is not supported
• During a suspended modem session, some data might be dropped. The ISP idle timer, which
disconnects a dial-in user if there is no data exchanged for a period of time, should be reset and
suspended while a connection is on hold.
Note Many client modems used in Europe are known to have problems with the Modem on Hold feature. The
vendors are aware of the issue and are working to correct it. If you are having trouble with the Modem
on Hold feature in Europe, it is suggested that the customer contact the client modem vendor to verify
that the modem complies with the telephony signaling for call waiting, caller ID, and 3-way calling in
their particular country.
Related Documents
• AT Command Set and Register Summary for NextPort Platforms
• Cisco AS5350 documentation index
Supported Platforms
• Cisco AS5350
• Cisco AS5400
• Cisco AS5800
• Cisco AS5850
Table 28 Cisco IOS Release and Platform Support for this Feature
Cisco Feature Navigator is a web-based tool that enables you to quickly determine which Cisco IOS
software images support a specific set of features and which features are supported in a specific
Cisco IOS image. You can search by feature or release. Under the release section, you can compare
releases side by side to display both the features unique to each software release and the features in
common.
To access Cisco Feature Navigator, you must have an account on Cisco.com. If you have forgotten or
lost your account information, send a blank e-mail to [email protected]. An automatic check
will verify that your e-mail address is registered with Cisco.com. If the check is successful, account
details with a new random password will be e-mailed to you. Qualified users can establish an account
on Cisco.com by following the directions at http://www.cisco.com/register.
Cisco Feature Navigator is updated regularly when major Cisco IOS software releases and technology
releases occur. For the most current information, go to the Cisco Feature Navigator home page at the
following URL:
http://www.cisco.com/go/fn
MIBs
• CISCO-MODEM-MGMT-MIB
• CISCO-CALL-TRACKER-MODEM-MIB
To locate and download MIBs for selected platforms, Cisco IOS releases, and feature sets, use
Cisco MIB Locator found at the following URL:
http://tools.cisco.com/ITDIT/MIBS/servlet/index
If Cisco MIB Locator does not support the MIB information that you need, you can also obtain a list of
supported MIBs and download MIBs from the Cisco MIBs page at the following URL:
http://www.cisco.com/public/sw-center/netmgmt/cmtk/mibs.shtml
To access Cisco MIB Locator, you must have an account on Cisco.com. If you have forgotten or lost your
account information, send a blank e-mail to [email protected]. An automatic check will verify
that your e-mail address is registered with Cisco.com. If the check is successful, account details with a
new random password will be e-mailed to you. Qualified users can establish an account on Cisco.com
by following the directions found at this URL:
http://www.cisco.com/register
RFCs
No new or changed RFCs are supported by this feature.
Prerequisites
• Cisco IOS Release 12.2(2)XB1 or 12.2(11)T.
• Minimum of 32K memory needed for bundled Cisco NextPort firmware
• Additional data space needed on the modem module (refer to Cisco NextPort documentation)
• Basic configuration of the Cisco AS5350, Cisco AS5400, Cisco AS5800, or Cisco AS5850
• Upgraded modem firmware
• NextPort DFC installed
• Modems must be capable of supporting Modem on Hold
Configuration Tasks
None
For additional information, refer to the following documents:
• V.44 LZJH Compression for Cisco AS5350, Cisco AS5400, and Cisco AS5850 Universal Gateways
and Cisco AS5800 Universal Access Servers
• V.92 Quick Connect for Cisco AS5350, Cisco AS5400, and Cisco AS5850 Universal Gateways and
Cisco AS5800 Universal Access Servers
Command Purpose
Router# show spe modem active Displays the modem service statistics of all active
calls on specified service processing elements
(SPEs).
Router# show spe modem disconnect-reason Displays the digital disconnect reasons for the
specified SPE or SPE range.
Router# show port operational-status Displays the operational status of the specified
ports or the specified port range.
Router# show port modem log Displays the event log with oldest event first.
Router# show port configuration Displays the configuration information for
specified ports or the specified port range.
Router# show spe modem csr Displays the call success rate (CSR) for the
specified SPEs.
Command Purpose
Router# show spe modem summary Displays the modem service history statistics for
specified SPEs.
Router# show call calltracker active Displays the port level information stored within
the Call Tracker active database for all active
modem calls.
Configuration Examples
None
Command Reference
This section documents new or modified commands. All other commands used with this feature are
documented in the Cisco IOS Release 12.2 command reference publications.
• show call calltracker active
• show port configuration
• show port modem log
• show port operational-status
• show spe modem active
• show spe modem csr
• show spe modem disconnect-reason
• show spe modem summary
Glossary
CLI—command-line interface.
CSMv6—Mindspeed modem hardware solution.
CSR—call success rate.
DFC—dial feature card.
DSP—Digital Signal Processor. Microprocessor on which the modulation/demodulation process is
carried out.
ISP—Internet service provider.
ITU-T—International Telecommunication Union Telecommunication Standardization Sector.
LZJH—Lempel-Ziv-Jeff-Heath data compression algorithm used in V.44.
MICA—Modem ISDN channel aggregation. Used as a generic term to describe the Dial Technology
Division (DTD) high-density modem technology.
MOH—Modem on Hold functionality specified in V.92.
NextPort—Device driver architecture for Cisco IOS software that supports the NextPort hardware and
software interfaces. Supports the Universal Port concept.
PCM—pulse code modulation.
PPP—Point-to-Point Protocol.
PSTN—Public Switched Telephone Network.
SPE—service processing element.
universal port—Concept of a single device that can terminate one digital signaling level zero (DS0)
with a data modem, fax modem, ISDN, or voice solution.
QC—Quick Connect functionality specified in V.92.
V.44—ITU modem standard for LZJH data compression algorithm.
V.92—ITU modem standard that contains Quick Connect and Modem On Hold.
VSA—vendor specific attribute (RADIUS).
Feature History
Release Modification
12.2(2)XA This feature was introduced on the Cisco AS5350 and Cisco AS5400
running NextPort firmware.
Note As of July 18, 2001, this feature was introduced on the
Cisco AS5300 running Cisco MICA Portware Version 2.9.1.0.
12.2(2)XB This feature was supported with Cisco IOS Release 12.2(2)XB.
12.2(2)XB1 This feature was supported on Cisco AS5800.
12.2(11)T This feature was integrated into Cisco IOS Release 12.2(11)T and support
was added for the Cisco AS5300 and Cisco AS5800 platforms.
This feature module describes the V.92 International Telecommunication Union Telecommunication
Standardization Sector (ITU-T) standard Quick Connect (QC) feature with Cisco MICA portware
platforms using Cisco IOS Software Releases 12.2(2)XB1 and 12.2(11)T.
This document includes the following sections:
• Feature Overview, page 220
• Supported Platforms, page 224
• Supported Standards, MIBs, and RFCs, page 225
• Prerequisites, page 225
• Configuration Tasks, page 225
• Configuration Examples, page 225
• Command Reference, page 226
• Glossary, page 227
Feature Overview
V.92
To remain current with industry needs, the ITU-T V.90 modem standard recommendations have been
enhanced. The new standard, V.92, meets the need for a digital modem and analog modem pair on the
Public Switched Telephone Network (PSTN). V.92 improves the upstream data signaling rate and adds new
features that enhance modem usability. These new modem protocols and standards are implemented at the
modem level.
This feature module introduces the V.92 Quick Connect feature on Cisco AS5300 and Cisco AS5800
universal access servers with Cisco MICA Portware Version 2.9.1.0.
Note The other feature introduced with the new V.92 standard is V.92 Modem on Hold, which is documented
in the V.92 Modem on Hold for Cisco AS5300 and Cisco AS5800 Universal Access Servers feature
module. V.92 Modem On Hold and V.92 Quick Connect can be enabled independently of each other.
V.92 is implemented at the modem level as new modem protocols and standards. The new V.92 features
co-reside with existing portware features and have no impact on the hardware configuration of either the Hex
Modem Module (HMM) or Double Density Modem Module (DMM), including memory requirements.
Cisco IOS software is responsible for controlling the features and displaying the new statistics. V.92 and
V.44 support is bound with the rest of the Cisco IOS device driver components.
Note V.92 and V.44 are packaged together with Cisco IOS software. For more information about V.44, refer
to the V.44 LZJH Compression for Cisco AS5300 and Cisco AS5800 Universal Access Servers feature
module.
Note This feature does not support pulse code modulation (PCM) upstream as defined in the V.92 ITU
standard. This feature does, however, interoperate with modems that support PCM upstream.
Quick Connect
V.92 Quick Connect speeds up the client-to-server startup negotiation, reducing the overall connect time
up to 30 percent. The client modem retains line condition information and characteristics of the
connection to the Internet service provider (ISP), which reduces connect time by avoiding some of the
initial signal handshaking.
Telephone
AS5300
Telco switch with
on-hold and call-
Modem with V.32 waiting capabilites
PC with MoH and OC
application
software
Telephone
63381
Disconnect reasons and modem states and statistics (link information) have been added or modified to
support V.92 Quick Connect. Table 29 lists the new V.92 Quick Connect states, and Table 30 lists the
new link information parameters.
Name Description
Quick Connect Phase 1 V.92 Quick Connect is being negotiated.
Steady QC V.92 Quick Connect is being used to reconnect after a V.92 Modem on Hold
exchange.
V.8bis Exchange A V.8bis exchange is taking place.
Ranging A full phase 2 trainup is taking place.
Ranging Short A shortened phase 2, using V.92 Quick Connect, is taking place.
Half Duplex Train Adaptive equalizer training has begun.
Name Value
QC Exchange 0: No QC
1: QC Requested
2: QC Short Train Fail
3: QC Full Train Success
4: QC Short Train Success
can choose the power level of the ANSpcm signal, which defaults to -12dBm (the transmit power level
for the United States). The ATSn=v and ATSn? AT commands are used to configure V.92 Quick Connect
on Cisco MICA platforms.
To disable V.92 Quick Connect or to set a different ANSpcm value, you can use a modemcap (for
example, v92_v44:MSC=s62=8s63=0s21=15s29=12), or you can set the S29 register to any number
other than 12. Table 31 lists the S-registers used to enable and disable the V.92 Quick Connect feature.
,
Table 31 Configuring V.92 Quick Connect with S-Registers
Note If the V.92 Quick Connect feature is enabled using S29=12, and QC is disabled using S63=0, then the
QC Exchange Link Information Parameter is updated to show if QC was requested. However, completely
disabling the feature by setting S29 to a value other than 12 disables the reporting of QC requests.
For detailed information about the AT commands and S-registers that are used to configure the V.92
Quick Connect feature on Cisco MICA platforms, refer to the AT Command Set and Register Summary
for MICA 6-Port Modules.
Benefits
Improved Port Use
This feature improves ISP port usage because of the reduction in connect time.
Restrictions
• Configuration of these features using S-registers is carried out by using modemcaps (AT
commands). Cisco IOS software does not check these values to guarantee that they are valid. The
behavior of invalid values is determined by the module.
• Cisco IOS software is packaged as multiple program image types with varying capabilities. Because
not all modem interfaces support Quick Connect and because images may be built to support specific
modem types, not all software images contain functions to control Quick Connect. In addition, the
modems that do support Quick Connect implement their control functions differently. Therefore,
registry functions are used to interface between local authorization and Quick Connect control for
modems.
Related Documents
• AT Command Set and Register Summary for MICA Six-Port Modules
• Call Tracker plus ISDN and AAA Enhancements for the Cisco AS5300
• Cisco AS5300 documentation index
• Cisco AS5800 documentation index
• Cisco IOS Release 12.2 Master Indexes
• Release Notes for Cisco AS5300 Universal Access Servers, Cisco IOS Release 12.2(2)XA
• Release Notes for Cisco AS5300 Universal Access Servers, Cisco IOS Release 12.2(2)XB
• Cisco IOS Release 12.2T Cross-Platform Release Notes
• Cisco AS5800 Universal Access Server Release Notes
• Comparing NextPort SPE Commands to MICA Modem Commands
• Release Notes for Cisco MICA Portware Version 2.9.1.0 on Cisco AS5300 Universal Access Servers
• New Features in Release 12.2(2)XB
• SPE and Firmware Download Enhancements
• V.44 LZJH Compression for Cisco AS5300 and Cisco AS5800 Universal Access Servers
• V.92 Modem on Hold for Cisco AS5300 and Cisco AS5800 Universal Access Servers
Supported Platforms
This feature is supported on the following Cisco platforms:
• Cisco AS5300
• Cisco AS5800
Table 32 Cisco IOS Release and Platform Support for this Feature
MIBs
• CISCO-MODEM-MGMT-MIB
• CISCO-CALL-TRACKER-MODEM-MIB
To locate and download MIBs for selected platforms, Cisco IOS releases, and feature sets, use
Cisco MIB Locator found at the following URL:
http://tools.cisco.com/ITDIT/MIBS/servlet/index
If Cisco MIB Locator does not support the MIB information that you need, you can also obtain a list of
supported MIBs and download MIBs from the Cisco MIBs page at the following URL:
http://www.cisco.com/public/sw-center/netmgmt/cmtk/mibs.shtml
To access Cisco MIB Locator, you must have an account on Cisco.com. If you have forgotten or lost your
account information, send a blank e-mail to [email protected]. An automatic check will verify
that your e-mail address is registered with Cisco.com. If the check is successful, account details with a
new random password will be e-mailed to you. Qualified users can establish an account on Cisco.com
by following the directions found at this URL:
http://www.cisco.com/register
RFCs
No new or changed RFCs are supported by this feature.
Prerequisites
• Cisco IOS Release 12.2(2)XA, 12.2(2)XB, or 12.2(11)T
• Basic configuration of the Cisco AS5300 or Cisco AS5800
• Upgraded modem firmware (Cisco MICA portware 2.9.1.0)
Configuration Tasks
None
Configuration Examples
None
Command Reference
This feature uses no new or modified commands. To see the command pages for the commands used with
this feature, go to the Cisco IOS Master Commands List, Release 12.4, at http://www.cisco.com/
univercd/cc/td/doc/product/software/ios124/124mindx/124index.htm.
Also see the following documentation for further information about V.92 and V.44 using Cisco MICA
technology:
• V.44 LZJH Compression for Cisco AS5300 and Cisco AS5800 Universal Access Servers
• V.92 Modem on Hold for Cisco AS5300 and Cisco AS5800 Universal Access Servers
Glossary
CLI—command-line interface.
CSMv6—Mindspeed modem hardware solution.
CSR—call success rate.
DFC—dial feature card.
DSP—Digital Signal Processor. Microprocessor on which the modulation/demodulation process is
carried out.
ISP—Internet service provider.
ITU-T—International Telecommunication Union Telecommunication Standardization Sector.
LZJH—Lempel-Ziv-Jeff-Heath data compression algorithm used in V.44.
MICA—Multi-service IOS Channel Aggregation. Used as a generic term to describe the Dial
Technology Division (DTD) high density modem technology.
MOH—Modem on Hold functionality specified in V.92.
NextPort—Device driver architecture for Cisco IOS software that supports the NextPort hardware and
software interfaces. Supports the universal port concept.
PCM—pulse code modulation.
PSTN—Public Switched Telephone Network.
RADIUS—Remote Dial-In User Service. Database for authenticating modem and ISDN connections
and for tracking connection time.
SPE—service processing element.
QC—Quick Connect functionality specified in V.92
universal port—Concept of a single device that can terminate one digital signaling level zero (DS0)
with a data modem, fax modem, ISDN, or voice solution.
V.44—ITU modem standard for LZJH data compression algorithm.
V.92—ITU modem standard that contains Quick Connect, Modem On Hold, and PCM upstream.
VSA—vendor specific attribute (as used with RADUIS).
Feature History
Release Modification
12.2(2)XA1 and 2 This feature was introduced on Cisco AS5350 and Cisco AS5400
universal gateways running NextPort firmware.
12.2(2)XB1 and 2 This feature was supported with Cisco IOS Software Release 12.2(2)XB1
and 2.
12.2(11)T This feature was integrated into Cisco IOS Release 12.2(11)T and support
was added for the Cisco AS5350, Cisco AS5400, Cisco AS5800, and
Cisco AS5850 platforms.
This feature module introduces the V.92 International Telecommunication Union Telecommunication
Standardization Sector (ITU-T) standard Quick Connect (QC) feature on NextPort/DFC108-bearing
platforms using Cisco IOS Software Releases 12.2(2)XA, 12.2(2)XB, and 12.2(11)T.
This document includes the following sections:
• Feature Overview, page 230
• Supported Platforms, page 234
• Supported Standards, MIBs, and RFCs, page 235
• Prerequisites, page 236
• Configuration Tasks, page 236
• Configuration Examples, page 236
• Command Reference, page 236
• Glossary, page 237
Feature Overview
V.92
To remain current with industry needs, the ITU-T V.90 modem standard recommendations have been
enhanced. The new standard, V.92, meets the need for a digital modem and analog modem pair on the
Public Switched Telephone Network (PSTN). V.92 improves the upstream data signaling rate and adds new
features that enhance modem usability. These new modem protocols and standards are implemented at the
modem level.
This feature module introduces the V.92 Quick Connect feature on Cisco AS5350, Cisco AS5400, and
Cisco AS5850 universal gateways and Cisco AS5800 universal access servers.
Note The other feature introduced with the new V.92 standard is V.92 Modem on Hold, which is documented
in the V.92 Modem on Hold for Cisco AS5350, Cisco AS5400, and Cisco AS5850 Universal Gateways
and Cisco AS5800 Universal Access Servers feature module. V.92 Modem On Hold and V.92 Quick
Connect can be enabled independently of each other.
V.92 provides new modem protocols and standards that are implemented at the modem level.
NextPort firmware provides V.92 capabilities bundled with existing NextPort features. The NextPort
Dial Feature Card (DFC-108NP) is responsible for the ITU implementation of V.92 and the collection
of statistics related to the new features, including the new modem states that occur with the additional
negotiations for V.92. The statistics are collected by the DFC but are passed to and stored in Cisco IOS
software. Cisco IOS software is responsible for controlling the features and displaying the new statistics.
The Cisco AS5800 uses the NextPort high density dial termination card to implement this feature. Both
voice and dial technologies are supported when used in a Cisco 5850 universal gateway.
Note V.92 and V.44 are packaged together with Cisco IOS software. For more information about V.44, refer
to the V.44 LZJH Compression for Cisco AS5350, Cisco AS5400, and Cisco AS5850 Universal Gateways
and Cisco AS5800 Universal Access Server feature module.
Quick Connect
V.92 Quick Connect speeds up the client-to-server startup negotiation, reducing the overall connect time
up to 30 percent. The client modem retains line condition information and characteristics of the
connection to the Internet service provider (ISP), which reduces connect time by avoiding some of the
initial signal handshaking.
Disconnect reasons and modem states and statistics (link information) have been added or modified to
support V.92 Quick Connect. Table 33 lists the new V.92 Quick Connect states, and Table 34 lists the
new link information parameters.
Name Description
Quick Connect Phase 1 V.92 Quick Connect is being negotiated.
Steady QC V.92 Quick Connect is being used to reconnect after a V.92 Modem on Hold
exchange.
V.8bis Exchange A V.8bis exchange is taking place.
Ranging A full phase 2 trainup is taking place.
Ranging Short A shortened phase 2, using V.92 Quick Connect, is taking place.
Half Duplex Train Adaptive equalizer training has begun.
Name Value
QC Exchange 0: No QC
1: QC Requested
2: QC Short Train Fail
3: QC Full Train Success
4: QC Short Train Success
Note If the V.92 Quick Connect feature is enabled using S29=12, and QC is disabled using S63=0, then the
QC Exchange Link Information Parameter is updated to show if QC was requested. However, completely
disabling the feature by setting S29 to a value other than 12 disables the reporting of QC requests.
For detailed information about the AT commands and S-registers that are used to configure the V.92
Quick Connect feature supported by NextPort services, refer to the AT Command Set and Register
Summary for NextPort Platforms.
Benefits
Improved Port Use
This feature improves ISP port usage because of the reduction in connect time.
Restrictions
• Minimum of 32K memory is needed for bundled NextPort firmware.
• Additional data space is needed on the modem module (refer to NextPort documentation).
• Configuration of these features using S-registers is carried out by using modemcaps (AT
commands). Cisco IOS software does not check these values to guarantee that they are valid.
• Cisco IOS software is packaged as multiple program image types with varying capabilities. Because
not all modem interfaces support Quick Connect and because images may be built to support specific
modem types, not all software images contain functions to control Quick Connect. In addition, the
modems that do support Quick Connect implement their control functions differently. Therefore,
registry functions are used to interface between local authorization and Quick Connect control for
modems.
Related Documents
• AT Command Set and Register Summary for NextPort Platforms
• Cisco AS5350 documentation index
• Cisco AS5400 documentation index
• Cisco AS5800 documentation index
• Cisco AS5850 documentation index
• Cisco AS5800 Universal Access Server Release Notes
• Cisco IOS Release 12.2 Master Indexes
• Comparing NextPort SPE Commands to MICA Modem Commands
• Managing Port Services on the Cisco AS5400 Universal Gateway
• Managing and Troubleshooting the NextPort Dial Feature Card
• New Features in Release 12.2(2)XB
• NextPort Port Service Management for the Cisco AS5400 Universal Gateways
• Release Notes for Cisco AS5350 Universal Gateways for Cisco IOS Release 12.2 XA
• Release Notes for Cisco AS5350 and AS5350HPX Universal Gateways for Cisco IOS Release 12.2
XB
• SPE and Firmware Download Enhancements
• V.44 LZJH Compression for Cisco AS5350 and Cisco AS5400 Universal Gateways
• V.92 Modem on Hold for Cisco AS5350 and Cisco AS5400 Universal Gateways
Supported Platforms
• Cisco AS5350
• Cisco AS5400
• Cisco AS5800
• Cisco AS5850
Table 36 Cisco IOS Release and Platform Support for this Feature
Cisco Feature Navigator is a web-based tool that enables you to determine which Cisco IOS software
images support a specific set of features and which features are supported in a specific Cisco IOS image.
You can search by feature or release. Under the release section, you can compare releases side by side
to display both the features unique to each software release and the features in common.
To access Cisco Feature Navigator, you must have an account on Cisco.com. If you have forgotten or
lost your account information, send a blank e-mail to [email protected]. An automatic check
will verify that your e-mail address is registered with Cisco.com. If the check is successful, account
details with a new random password will be e-mailed to you. Qualified users can establish an account
on Cisco.com by following the directions at http://www.cisco.com/register.
Cisco Feature Navigator is updated regularly when major Cisco IOS software releases and technology
releases occur. For the most current information, go to the Cisco Feature Navigator home page at the
following URL:
http://www.cisco.com/go/fn
MIBs
• CISCO-MODEM-MGMT-MIB
• CISCO-CALL-TRACKER-MODEM-MIB
To obtain lists of supported MIBs by platform and Cisco IOS release, and to download MIB modules,
go to the Cisco MIB web site on Cisco.com at the following URL
http://www.cisco.com/public/sw-center/netmgmt/cmtk/mibs.shtml
RFCs
No new or changed RFCs are supported by this feature.
Prerequisites
• Cisco IOS Release 12.2(2)XA, 12.2(2)XB, or 12.2(11)T
• Minimum of 32K memory needed for bundled Cisco NextPort firmware
• Additional data space needed on the modem module (refer to NextPort documentation)
• Basic configuration of the Cisco AS5350, Cisco AS5400, Cisco AS5850, or Cisco AS5800
• Upgraded modem firmware
• NextPort DFC installed
Configuration Tasks
None
For information about configuration, refer to the following documents:
• V.92 Modem on Hold for Cisco AS5350, Cisco AS5400, and Cisco AS5850 Universal Gateways and
Cisco AS5800 Universal Access Servers
• V.44 LZJH Compression for Cisco AS5350, Cisco AS5400, Cisco AS5850 Universal Gateways and
Cisco AS5800 Universal Access Servers
Configuration Examples
None
Command Reference
BILL OR CLYDE: I’VE ALREADY REPLACED THE LEAD-IN PARA SO YOU DON’T NEED TO DO THIS.
THANKS. BARBARA
This feature uses no new or modified commands. To see the command pages for the commands used with
this feature, go to the Cisco IOS Master Commands List, Release 12.4, at http://www.cisco.com/
univercd/cc/td/doc/product/software/ios124/124mindx/124index.htm.
Glossary
CLI—command-line interface.
CSMv6—Mindspeed modem hardware solution.
DFC—dial feature card.
DSP—Digital Signal Processor. Microprocessor on which the modulation/demodulation process is
carried out.
ISP—Internet service provider.
ITU-T—International Telecommunication Union Telecommunication Standardization Sector.
LZJH—Lempel-Ziv-Jeff-Heath data compression algorithm used in V.44.
MOH—Modem on Hold functionality specified in V.92.
NextPort—Device driver architecture for Cisco IOS software that supports the NextPort hardware and
software interfaces. Supports the universal port concept.
PCM—pulse code modulation.
PSTN—Public Switched Telephone Network.
QC—Quick Connect functionality specified in V.92.
universal port—Concept of a single device that can terminate one digital signaling level zero (DS-0)
with a data modem, fax modem, ISDN, or voice solution.
V.44—ITU modem standard for LZJH data compression algorithm.
V.92—ITU modem standard that contains Quick Connect and Modem On Hold.
The V.92 Reporting Using RADIUS Attribute v.92-info feature provides the ability to track V.92 call
information, such as V.92 features that are supported, the Quick Connect feature set that was attempted,
the duration for which the original call was put on hold, and how many times Modem On Hold was
initiated. The vendor-specific attribute (VSA) v.92-info is included in accounting “start” and “stop”
records when modems negotiate a V.92 connection.
Feature Specifications for the V.92 Reporting Using RADIUS Attribute v.92-info Feature
Feature History
Release Modification
12.3(1) This feature was introduced.
Supported Platforms
Cisco AS5300, Cisco AS5350, Cisco AS5400, Cisco AS5800, Cisco AS5850
Finding Support Information for Platforms and Cisco IOS Software Images
Use Cisco Feature Navigator to find information about platform support and Cisco IOS software image
support. Access Cisco Feature Navigator at http://www.cisco.com/go/fn. You must have an account on
Cisco.com. If you do not have an account or have forgotten your username or password, click Cancel at
the login dialog box and follow the instructions that appear.
Contents
• Prerequisites for V.92 Reporting Using RADIUS Attribute v.92-info, page 240
• Restrictions for V.92 Reporting Using RADIUS Attribute v.92-info, page 240
• Information About V.92 Reporting Using RADIUS Attribute v.92-info, page 240
• Monitoring V.92 Call Information, page 241
• Verifying V.92 Call Information, page 249
• Additional References, page 253
• Command Reference, page 254
VSA v.92-info
The VSA v.92-info information in RADIUS accounting “start” and “stop” records can help you track
V.92 feature set information. The VSA is enabled by default for all sessions that reside over a modem
call that is connected using V.92 model modulation.
The VSA information is displayed in the “start” and “stop” records as follows:
v92-info=<V.92 features supported>/<QC Exchange>/<Total MOH time>/<MOH count>
The VSA v92-info has the following four subfields:
• V.92 features supported—All features that are available for the V.92 modem user who is dialing in.
These features include QC, MoH, and PCM Upstream.
• QC Exchange—If QC was initiated, this subfield states what feature set (within QC) was attempted.
• Total MOH time—If MoH was initiated, this subfield indicates the duration for which the original
call was put on hold.
• MOH count—If MOH was initiated, this field indicates how many times the MOH was initiated.
The following is an example of VSA v92-info information displayed in an accounting record:
v92-info=V.92 QC MOH/QC Requested/60/1
SUMMARY
1. enable
2. debug aaa accounting
3. debug aaa authentication
4. debug aaa authorization
5. debug isdn event
6. debug modem csm [slot/port | group group-number]
7. debug ppp {negotiation | authentication}
8. debug radius
DETAILED STEPS
Example:
Router# debug aaa authentication
Step 4 debug aaa authorization Displays information about AAA and TACACS+
authorization.
Example:
Router# debug aaa authorization
Step 5 debug isdn event Displays ISDN events occurring on the user side (on the
router) of the ISDN interface.
Example:
Router# debug isdn event
Step 6 debug modem csm [slot/port | group Displays call switching module (CSM) modem call
group-number] information.
Example:
Router# debug modem csm 1/0 group 1
Step 7 debug ppp {negotiation | authentication} Displays information on traffic and exchanges in an
internetwork that is implementing the PPP.
Example:
Router# debug ppp authentication
Step 8 debug radius Displays information associated with RADIUS.
Example:
Router# debug radius
Examples
The following sample debug outputs display information about a V.92 reporting situation:
Debug Output 1
01:39:19: ISDN Se7/6:23: RX <- SETUP pd = 8 callref = 0x42A0
01:39:19: Bearer Capability i = 0x9090A2
01:39:19: Channel ID i = 0xA18396
01:39:19: Progress Ind i = 0x8183 - Origination address is non-ISDN
01:39:19: Calling Party Number i = 0xA1, '60112', Plan:ISDN, Type:National
Debug Output 2
01:40:50: ISDN Se7/6:23: RX <- DISCONNECT pd = 8 callref = 0x42A0
01:40:50: Cause i = 0x8190 - Normal call clearing
01:40:50: ISDN Se7/6:23: LIF_EVENT: ces/callid 1/0x38 CALL_DISC
01:40:50: EVENT_FROM_ISDN: dchan_idb=0x63B3D334, call_id=0x38, ces=0x0
bchan=0x15, event=0x0, cause=0x10
01:40:50: EVENT_FROM_ISDN:(0038): DEV_IDLE at slot 1 and port 5
01:40:50: CSM_PROC_IC7_OC6_CONNECTED: CSM_EVENT_ISDN_DISCONNECTED at slot 1, port 5
01:40:50: CSM DSPLIB(1/5): np_dsplib_call_hangup reason 14
01:40:50: CSM(1/5): Enter csm_enter_disconnecting_state
01:40:50: VDEV_DEALLOCATE: slot 1 and port 5 is deallocated
SUMMARY
DETAILED STEPS
Example:
Router# show port modem log
Step 3 show users [all] Displays information about the active lines on the router.
Example:
Router# show users
Examples
The following V.92 reporting outputs are from the show port modem log and show users commands:
Show Output 1
Router# show port modem log 1/05
Show Output 2
Router# show users
Troubleshooting Tips
If you see that V.92 call information is not being reported by AAA, ensure that the call is a V.92 call by
using the show modem command or by looking at the modem logs by using the show modem log
command.
Additional References
For additional information related to the V.92 Reporting Using RADIUS Attribute v.92-info feature,
refer to the following references:
Related Documents
Related Topic Document Title
AAA accounting The chapters “AAA Overview” and “Configuring Accounting” in
the “Authentication, Authorization, and Accounting” section of the
Cisco IOS Security Configuration Guide, Release 12.3.
AAA accounting commands The Cisco IOS Security Command Reference, Release 12.3.
V.92 Quick Connect feature V.92 Quick Connect for Cisco AS5300 and Cisco AS5800 Universal
Access Servers
V.92 Modem on Hold feature V.92 Modem on Hold for Cisco AS5300 and Cisco AS5800 Universal
Access Servers
Standards
Standards Title
No new or modified standards are supported by this —
feature, and support for existing standards has not been
modified by this feature.
MIBs
MIBs MIBs Link
No new or modified MIBs are supported by this To locate and download MIBs for selected platforms, Cisco IOS
feature, and support for existing MIBs has not been releases, and feature sets, use Cisco MIB Locator found at the
modified by this feature. following URL:
http://www.cisco.com/go/mibs
RFCs
RFCs Title
No new or modified RFCs are supported by this —
feature, and support for existing RFCs has not been
modified by this feature.
Technical Assistance
Description Link
Technical Assistance Center (TAC) home page, http://www.cisco.com/public/support/tac/home.shtml
containing 30,000 pages of searchable technical
content, including links to products, technologies,
solutions, technical tips, and tools. Registered
Cisco.com users can log in from this page to access
even more content.
Command Reference
This feature uses no new or modified commands. To see the command pages for the commands used with
this feature, go to the Cisco IOS Master Commands List, Release 12.4, at http://www.cisco.com/
univercd/cc/td/doc/product/software/ios124/124mindx/124index.htm.
This chapter describes configuration and monitoring tasks for the Cisco AS5800 and AS5400 access
servers, including dial shelves and dial shelf controllers on the Cisco AS5800 access servers in the
following main sections:
• Cisco AS5800 Dial Shelf Architecture and DSIP Overview
• How to Configure Dial Shelves
• Port Management Services on Cisco Access Servers
• Upgrading and Configuring SPE Firmware
For further information and configuration examples for the Cisco AS5400, refer to the Cisco AS5400
Universal Access Server Software Configuration Guide.
For further information and configuration examples for the Cisco AS5800, refer to the Cisco AS5800
Universal Access Server Operations, Administration, Maintenance, and Provisioning Guide.
For more information on the Cisco access servers, go to the Cisco Connection Documentation site on
Cisco.com, or use the Cisco Documentation CD-ROM.
To identify the hardware platform or software image information associated with a feature, use the
Feature Navigator on Cisco.com to search for information about the feature or refer to the software
release notes for a specific release. For more information, see the “Finding Additional Feature Support
Information” section on page lxxvii in the “Using Cisco IOS Software for Release 12.4” chapter.
For a complete description of the commands in this chapter, refer to the Cisco IOS Dial Technologies
Command Reference. To locate documentation of other commands that appear in this chapter, use the
command reference master index or search online.
Note For more information about split dial shelf configuration, refer to the hardware installation guides that
accompanied your Cisco AS5800 Universal Access Server and the Cisco AS5800 Universal Access
Server Software Installation and Configuration Guide.
The Dial Shelf Interconnect Protocol (DSIP) is used for communication between router shelf and dial
shelf on an AS5800. Figure 24 diagrams the components of the architecture. The router shelf is the host
for DSIP commands, which can be run remotely on the feature boards of the dial shelf using the
command, execute-on. DSIP communicates over the packet backplane via the dial shelf interconnect
(DSI) cable.
Router shelf
DSIP
15013
DSIP DSIP DSIP
Caution You must reload the Cisco AS5800 for the new shelf number to take effect. Because the shelf number is
part of the interface names when you reload, all NVRAM interface configuration information is lost.
Normally you do not need to change the shelf IDs; however, if you do, we recommend that you change
the shelf number when you initially access the setup facility. For information on the setup facility, refer
to the Cisco AS5800 Universal Access Server Software Installation and Configuration Guide.
If you are booting the router shelf from the network (netbooting), you can change the shelf numbers
using the shelf-id command.
To configure the dial shelf, you save and verify the configuration in EXEC mode, and enter shelf-id
commands in global configuration mode, as indicated in the following steps:
Command Purpose
Step 1 Router# copy startup-configure tftp Saves your current configuration. Changing the shelf
number removes all interface configuration information
when you reload the Cisco AS5800.
Step 2 Router# configure terminal Begins global configuration mode.
Step 3 Router(config)# shelf-id number router-shelf Specifies the router shelf ID.
Step 4 Router(config)# shelf-id number dial-shelf Specifies the dial shelf ID.
Step 5 Router(config)# exit Exits global configuration mode.
Step 6 Router# copy running-config startup-config Saves your configuration. This step is optional.
Step 7 Router# show version Verifies that the correct shelf number will be changed after
the next reload.
Step 8 Router# reload components all Instructs the DSC (or DSCs in a redundant configuration) be
reloaded at the same time as a reload on the router shelf.
Type “yes” to the “save config” prompt.
Configure one interface so that its router shelf has
connectivity to the server with the configuration.
Step 9 Router# copy tftp startup-config Because changing the shelf number removes all interface
configuration information when you reload the
Cisco AS5800, edit the configuration file saved in step 1 and
download it.
If you are booting the router shelf from Flash memory, use the following commands beginning in EXEC
mode:
Command Purpose
Step 1 Router# copy running-config tftp Saves your current (latest) configuration to a server.
or
Router# copy startup-config tftp
Step 2 Router# configure terminal Begins global configuration mode.
Step 3 Router(config)# shelf-id number router-shelf Configures the router shelf ID.
Step 4 Router(config)# shelf-id number dial-shelf Configures the dial shelf ID.
Step 5 Router(config)# exit Exits global configuration mode.
Step 6 Router> copy running-config startup-config Saves your configuration. This step is optional. If this step
is skipped, type “No” at the “save configuration” prompt.
Step 7 Router> show version Allows verification that the correct shelf number will be
changed after the next reload.
Edit the configuration file saved in Step 1.
Step 8 Router> copy tftp startup-config Copies the edited configuration to NVRAM on the
Cisco AS5800.
Step 9 Router# reload components all Instructs the DSC (or DSCs in a redundant configuration) to
be reloaded at the same time as a reload on the router shelf.
Command Purpose
Step 1 Router(config)# dial-tdm-clock priority value Configures the trunk card clock priority. Priority range is a
value between 1 and 50.
Step 2 Router(config)# dial-tdm-clock priority X Selects the T1/E1 trunk slot and port that is providing the
{trunk-slot Y port Z} external {t1 | e1} clocking source. T1/E1 selection is based on the incoming
[120-ohm]
signal. Select the impedance. The default impedance is
75-ohm.
Step 3 Router(config)# dial-tdm-clock priority value Configures the T1/E1 external clock on the dial shelf
external t1 controller front panel. T1/E1 selection is based on the signal
or coming in. Priority range is a value between 1 and 50.
Router(config)# dial-tdm-clock priority value
external e1
Step 4 Router(config)# Ctrl-Z Verifies your command registers when you press the return
Router# key. Enter Ctrl-Z to return to privileged EXEC mode.
Step 5 Router# copy running-config startup-config Saves your changes.
Slot 12:
System primary is 1/2/0 of priority 202
TDM Bus Master Clock Generator State = NORMAL
Backup clocks:
Source Slot Port Priority Status State
-------------------------------------------------------
Trunk 2 1 208 Good Default
Slot Type 11 10 9 8 7 6 5 4 3 2 1 0
2 T1 G G G G G G G G G G G G
For more information on configuring external clocks, refer to the Cisco document Managing Dial
Shelves.
To configure a router for split dial shelf operation, perform the following steps:
Step 1 Ensure that both DSCs and both router shelves are running the same Cisco IOS image.
Note Having the same version of Cisco IOS running on both DSCs and both router shelves is not
mandatory; however, it is a good idea. There is no automatic checking that the versions are the
same.
Step 2 Schedule a time when the Cisco AS5800 can be taken out of service without unnecessarily terminating
calls in progress. The entire procedure for transitioning from normal mode to split mode should require
approximately one hour if all the hardware is already installed.
Step 3 Busy out all feature boards and wait for your customers to log off.
Step 4 Reconfigure the existing router shelf to operate in split mode.
Step 5 Enter the dial-shelf split slots command, specifying the slot numbers that are to be owned by the existing
router shelf.
Step 6 Configure the new router shelf to operate in split mode on other feature boards.
Step 7 Enter the dial-shelf split slots command, specifying the slot numbers that are to be owned by the new
router shelf. Do not specify any of the slot numbers that you specified in Step 6. The range of valid slot
numbers is 0 through 11.
To perform this step, enter the following command in global configuration mode:
Command Purpose
Router(config)# dial-shelf split slots Enter list of slot numbers, for example:
slot-numbers
dial-shelf split slots 0 1 2 6 7 8
In this example, the other router shelf could be configured to own the
other slots: 3 4 5 9 10 11.
Normal mode: This command changes the router shelf to split mode
with ownership of the slots listed.
In case of conflicting slot assignments, the command is rejected and
a warning message is issued. Issue a show dial-shelf split slots
command to the other router shelf to display its list of owned dial
shelf slots.
Online insertion and removal (OIR) events on all slots are detected
by both DSCs and added to the list of feature boards physically
present in the dial shelf; however, OIR event processing is done only
for assigned slots.
Split mode: This command adds the dial shelf slots listed to the
router shelf’s list of owned dial shelf slots.
Step 8 Install the second DSC, if it has not already been installed.
Step 9 Connect the DSIP cable from the second DSC to the new router shelf.
Command Purpose
Router (config)# dial-shelf split slots remove Removes the dial shelf slots listed from the router shelf’s list of
slot-numbers owned dial shelf slots. The effect of multiple commands is
cumulative.
Router(config)# dial-shelf split slots slot-numbers Adds the dial shelf slots listed to the router shelf’s list of owned
dial shelf slots.
If the other router shelf and the other DSC claim ownership of the same slot, the command adding the
slot should be rejected. However, should a configuration conflict exist, error messages are sent to both
routers and the card is not reset until one of the other router shelves and its DSC stop claiming ownership
of the slot. Normally, this will not happen until you issue a dial-shelf split slots remove command
surrendering the ownership claim on the slot by one of the routers.
The normal mode configuration of the Cisco AS5800 requires the dial shelf and router shelf IDs to be
different. In a split system, four unique shelf IDs are desirable, one for each router shelf and one for each
of the slot sets; however, a split system will function satisfactorily if the router shelf IDs are the same.
If a system controller is used to manage a split dial shelf configuration, the two routers must have distinct
shelf IDs, just as they must when each router has its own dial shelf.
You can download software configurations to any Cisco AS5800 using SNMP or a Telnet connection.
The system controller also provides performance monitoring and accounting data collection and logging.
In addition to the system controller, a network management system with a graphical user interface (GUI)
runs on a UNIX SPARC station and includes a database management system, polling engine, trap
management, and map integration.
To manage a split dial shelf, enter the following commands in EXEC mode as needed:
Command Purpose
Router# show dial-shelf split Displays the slots assigned to each of the router shelves and the
corresponding feature boards in ‘orphan’ slots (slots not
currently assigned to either router).
Router# show dial-shelf Displays information about the dial shelf, including clocking
information.
Router# show context Displays information about the dial shelf, including clocking
information, but works only for owned slots. Use show context all
to display all the information available about any slot. This is
intended to cover the case where ownership of a feature board is
moved from one router shelf to the other after a crash.
Command Purpose
Router# execute-on slot slot command Executes a command from the router shelf on a specific slot in
the dial shelf.
Router# execute-on all command Executes a command from the router shelf on all cards in the dial
shelf.
Router#
Command Purpose
Router# hw-module shelf/slot {start|stop} Stops the target DSC remotely from the router console. Restart the
DSC if it has been stopped.
Router# show redundancy [history] Displays the current or history status for redundant DSC.
Router# debug redundancy {all|ui|clk|hub} Use this debug command if you need to collect events for
troubleshooting, selecting the appropriate required key word.
Router# show debugging Lists the debug commands that are turned on, including those for
redundant DSC.
Troubleshooting DSIP
There are a number of show commands available to aid in troubleshooting dial shelves. Use the
following EXEC mode commands to monitor DSI and DSIP activity as needed:
Command Purpose
Router# clear dsip tracing Clears tracing statistics for the DSIP.
Router# show dsip Displays all information about the DSIP.
Router# show dsip clients Displays information about DSIP clients.
Router# show dsip nodes Displays information about the processors running the DSIP.
Router# show dsip ports Displays information about local and remote ports.
Router# show dsip queue Displays the number of messages in the retransmit queue waiting for
acknowledgment.
Router# show dsip tracing Displays DSIP tracing buffer information.
Command Purpose
Router# show dsip transport Displays information about the DSIP transport statistics for the
control/data and IPC packets and registered addresses.
Router# show dsip version Displays DSIP version information.
The privileged EXEC mode show dsi command can also be used to troubleshoot, as it displays the status
of the DSI adapter, which is used to physically connect the router shelf and the dial shelf to enable DSIP
communications.
The following is an example troubleshooting scenario:
Problem: The router shelf boots, but there is no communication between the router and dial shelves.
Diagnosis: If an entry for a particular dial shelf slot is not found among the registered addresses, but
most of other card entries are present, the problem is most likely with that dial shelf slot. The DSI
hardware on that feature board is probably bad.
• Supports all modem standards (such as V.34 and V.42bis) and features, including dial-in and
dial-out.
• Supports online insertion and removal (OIR), a feature that allows you to remove and replace UPCs
while the system is operating. A UPC can be removed without disrupting the operation of other cards
and their associated calls. If a UPC is removed while the system is operating, connections or current
calls on that card are dropped. Calls being handled by other cards are not affected.
Note The following procedure can be used for either a Cisco AS5400 or AS5800 access server.
Downloading SPE Firmware from the Cisco.com FTP Server to a Local TFTP
Server
Note You must be a registered Cisco user to log in to the Cisco Software Center.
You can download software from the Cisco Systems Cisco.com FTP server using an Internet browser or
using an FTP application. Both procedures are described.
Step 3 Click Access Software (under Cisco Software Products) to open the Access Software window.
Step 4 Click Cisco AS5400 Series or Cisco AS5800 Series software.
Step 5 Click the SPE firmware you want and download it to your workstation or PC. For example, to download
SPE firmware for the universal access server, click Download Universal Images.
Step 6 Click the SPE firmware file you want to download, and then follow the remaining download instructions.
If you are downloading the SPE firmware file to a PC, make sure that you download the file to the
c:/tftpboot directory; otherwise, the download process does not work.
Step 7 When the SPE firmware is downloaded to your workstation, transfer the file to a Trivial File Transfer
Protocol (TFTP) server in your LAN using a terminal emulation software application.
Step 8 When the SPE firmware is downloaded to your workstation, transfer the file to a TFTP server somewhere
in your LAN using a terminal emulation software application.
Note The directory path leading to the SPE firmware files on cco.cisco.com is subject to change without
notice. If you cannot access the files using an FTP application, try the Cisco Systems URL
http://www.cisco.com/cgi-bin/ibld/all.pl?i=support&c=3.
Step 2 Enter your registered username and password (for example, harry and letmein):
Name (cco.cisco.com:harry): harry
331 Password required for harry.
Password: letmein
230-#############################################################
230-# Welcome to the Cisco Systems CCO FTP server.
230-# This server has a number of restrictions. If you are not familiar
230-# with these, please first get and read the /README or /README.TXT file.
230-# http://www.cisco.com/acs/info/cioesd.html for more info.
230-#############################################################
Step 3 Specify the directory path that holds the SPE firmware you want to download. For example, the directory
path for the Cisco AS5400 SPE firmware is /cisco/access/5400:
ftp> cd /cisco/access/5400
250-Please read the file README
250- it was last modified on Tue May 27 10:07:38 1997 - 48 days ago
250-Please read the file README.txt
250- it was last modified on Tue May 27 10:07:38 1997 - 48 days ago
250 CWD command successful.
Step 6 Copy the SPE firmware files from the access server to your local environment with the get command.
Step 8 Enter the ls -al command to verify that you successfully transferred the files to your local directory:
server% ls -al
total 596
-r--r--r-- 1 280208 Jul 10 18:08 np-spe-upw-10.0.1.2.bin
server% pwd
/auto/tftpboot
Step 9 Transfer these files to a local TFTP or remote copy protocol (RCP) server that your access server or
router can access.
Copying the SPE Firmware File from the Local TFTP Server to the SPEs
The procedure for copying the SPE firmware file from your local TFTP server to the Cisco AS5400
NextPort DFCs or Cisco AS5800 UPCs is a two-step process. First, transfer the SPE firmware to the
access server’s Flash memory. Then, configure the SPEs to use the upgrade firmware. The upgrade
occurs automatically, either as you leave configuration mode, or as specified in the configuration.
These two steps are performed only once. After you copy the SPE firmware file into Flash memory for
the first time, you should not have to perform these steps again.
Note Because the SPE firmware is configurable for individual SPEs or ranges of SPEs, the Cisco IOS software
automatically copies the SPE firmware to each SPE each time the access server restarts.
To transfer SPE Firmware to Flash memory, perform the following task to download the Universal SPE
firmware to Flash memory:
Step 2 Enter the copy tftp flash command to download the code file from the TFTP server into the access server
Flash memory. You are prompted for the download destination and the remote host name.
Router# copy tftp flash
Step 3 Enter the show flash command to verify that the file has been copied into the access server Flash
memory:
Router# show flash
Command Purpose
Router(config)# spe country country Specifies the country to set the UPC or DFC parameters
name (including country code and encoding). If you do not specify
a country, the interface uses the default. If the access server
is configured with T1 interfaces, the default is usa. If the
access server is configured with E1 interfaces, the default is
e1-default. Use the no form of this command to set the
country code to the default of the domestic country.
Note All sessions in all UPCs or DFCs in all slots must be
in the idle state for this command to execute.
The options for this command come in pairs, and vary according to the desired configuration. You will
need to log in to each router shelf and separately configure the routers for the intended load. In most
circumstances it is recommended that the predefined options are selected. These options are designed to
be matched pairs as seen below.
The dial-shelf split slot 0 3 4 5 command must be defined for the dial-shelf split backplane-ds0 option
command to be active. You may also select the user defined option to define your own split.
Even if your system is already using a split dial shelf configuration, configuring one router shelf to
handle two T3 trunks and the other router to handle the third trunk requires you to take the entire access
server out of service. Busyout all connections before attempting to reconfigure. The configuration must
be changed to setup one pool of TDM resources that can be used by either DMM cards or UPCs, and a
second pool of two streams that contains TDM resources that can only be used by UPCs.
You may have more trunk capacity than 2048 calls. It is your decision how to provision the trunks so the
backplane capacity is not exceeded. If more calls come in than backplane DS0 capacity for that half of
the split, the call will be rejected and an error message printed for each call. This cannot be detected
while a new configuration is being built because the router cannot tell which T1 trunks are provisioned
and which are not. The user may want some trunks in hot standby.
The DMM, HMM, and VoIP cards can only use 1792 DS0 of the available 2048 backplane DS0. The
UPC and trunk cards can use the full 2048 backplane DS0. The show tdm splitbackplane command will
show the resources in two groups, the first 1792 accessible to all cards, and the remaining 256 accessible
only to UPC and trunk cards.
For more information about split dial shelf configuration, refer to the Cisco AS5800 Universal Access
Server Split Dial Shelf Installation and Configuration Guide and the hardware installation guides that
accompanied your Cisco AS5800 Universal Access Server.
Command Purpose
Step 1 Router# show spe version Displays SPE firmware versions to obtain the On-Flash
firmware filename.
Step 2 Router# configure terminal Enters global configuration mode.
Step 3 AS5400: Enters the SPE configuration mode. You can choose to
Router(config)# spe slot/spe configure a range of SPEs by specifying the first and last
or SPE in the range.
Router(config)# spe slot/spe slot/spe
AS5800:
Router(config)# spe shelf/slot/spe
or
Router(config)# spe shelf/slot/spe
shelf/slot/spe
Step 4 Router(config-spe)# firmware upgrade {busyout | Specifies the upgrade method.
download-maintenance | reboot}
Three methods of upgrade are available. The busyout
keyword waits until all calls are terminated on an SPE
before upgrading the SPE to the designated firmware. The
download-maintenance keyword upgrades the firmware
during the download maintenance time. The reboot
keyword requests the access server to upgrade firmware at
the next reboot.
Command Purpose
Step 5 Router(config-spe)# firmware location filename Specifies the SPE firmware file in Flash memory to use for
the selected SPEs. Allows you to upgrade firmware for
SPEs after the new SPE firmware image is copied to your
Flash memory.
Enter the no firmware location command to revert back to
the default Cisco IOS bundled SPE firmware.
Step 6 Router(config-spe)# exit Exits SPE configuration mode.
Step 7 Router# exit Exits global configuration mode.
Step 8 Router# copy running-config startup-config Saves your changes.
Note The copy ios-bundled command is not necessary with UPCs or NextPort DFCs. By default, the version
of SPE firmware bundled with the Cisco IOS software release transfers to all SPEs not specifically
configured for a different SPE firmware file.
Disabling SPEs
To disable specific SPEs in the Cisco AS5400 NextPort DFCs or Cisco AS5800 UPCs, use the following
commands starting in global configuration mode:
Command Purpose
Step 1 Cisco AS5400 Series Routers Enters SPE configuration mode. You can also configure
Router(config)# spe slot/spe SPEs specifying the first and last SPE in a range.
or
Router(config)# spe slot/spe slot/spe
Command Purpose
Step 2 Router(config-spe)# busyout Gracefully disables an SPE by waiting for all the active
services on the specified SPE to terminate.
You can perform auto-diagnostic tests and firmware
upgrades when you put the SPEs in the Busy out state.
Active ports on the specified SPE will change the state of
the specified range of SPEs to the BusyoutPending state.
The state changes from BusyoutPending to Busiedout when
all calls end. Use the show spe command to see the state of
the range of SPEs.
Use the no form of this command to re-enable the SPEs.
Step 3 Router(config-spe)# shutdown Clears active calls on all ports on the SPE. Calls can no
longer be placed on the SPE because the SPE state is
changed to Busiedout.
Use the no form of this command to re-enable the ports on
the SPE.
Rebooting SPEs
To reboot specified SPEs, use the following command in privileged EXEC mode:
Command Purpose
Cisco AS5400 Series Routers Allows manual recovery of a port that is frozen in a
Router# clear spe slot/spe suspended state. Reboots SPEs that are in suspended or Bad
state. Downloads configured firmware to the specified SPE
Cisco AS5800 Series Routers or range of SPEs and power-on self test (POST) is executed.
Router# clear spe shelf/slot/spe Note Depending on the problem, sometimes
downloading the SPE firmware may not help
recover a bad port or an SPE.
Configuring Lines
To configure the lines to dial in to your network, use the following commands beginning in global
configuration mode:
Command Purpose
Step 1 Cisco AS5400 Series Routers Enters the line configuration mode. You can specify a range
Router(config)# line slot/port slot/port of slot and port numbers to configure.
On the Cisco AS5400 access server, the NextPort DFC slot
Cisco AS5800 Series Routers
is defined as a value between 1 and 7. Slot 0 is reserved for
Router(config)# line shelf/slot/port the motherboard. Each NextPort DFC provides 18 SPEs.
shelf/slot/port
The SPE value ranges from 0 to 17. Since each SPE has six
ports, the NextPort DFC has a total of 108 ports. The port
value ranges from 0 to 107. To configure 108 ports on slot 3,
you would enter line 3/00 3/107. If you wish to configure
324 ports on slots 3-5, you would enter line 3/00 5/107.
On the Cisco AS5800 access server, the UPC slot is defined
as a value between 2 and 11. Each UPC provides 54 SPEs.
The SPE value ranges from 0 to 53. Because each SPE has
six ports, the UPC has a total of 324 ports. The port value
ranges from 0 to 323. To configure 324 ports on slot 3, you
would enter line 1/3/00 1/3/323. If you want to configure
972 ports on slots 3-5, you would enter line 1/3/00 1/5/323.
Step 2 Router(config-line)# transport input all Allows all protocols when connecting to the line.
Step 3 Router(config-line)# autoselect ppp Enables remote IP users running a PPP application to dial in,
bypass the EXEC facility, and connect directly to the
network.
Step 4 Router(config-line)# modem inout Enables incoming and outgoing calls.
Step 5 Router(config-line)# modem autoconfigure type Configures the attached modem using the entry for name.
name
Configuring Ports
This section describes how to configure Cisco AS5800 UPC or Cisco AS5400 NextPort DFC ports. You
need to be in port configuration mode to configure these ports. The port configuration mode allows you
to shut down or put individual ports or ranges of ports in busyout mode. To configure Cisco AS5800 UPC
or Cisco AS5400 NextPort DFC ports, perform the following tasks beginning in global configuration
mode:
Command Purpose
Step 1 Cisco AS5400 Series Routers Enters port configuration mode. You can choose to
Router(config)# port slot/spe configure a single port or range of ports.
or
Router(config)# port slot/spe slot/spe
Step 3 Router(config-port)# shutdown (Optional) Clears active calls on the port. No more calls can
be placed on the port in the shutdown mode. Use the no
form of this command to re-enable the ports.
Note When a port is in shutdown mode, the state of the
SPE is changed to the consolidated states of all the
underlying ports on that SPE.
Step 1 Enter the show spe command to display a summary for all the lines and ports:
Router# show spe
Step 2 Enter the show line command to display a summary for a single line.
AS5400
Router# show line 1/1
AS5800
Router# show line 1/2/10
Note If you are having trouble, make sure that you have turned on the protocols for If you are having
trouble, make sure that you have turned on the protocols for connecting to the lines (transport
input all) and that your access server is configured for incoming and outgoing calls (modem
inout).
Command Purpose
Router(config)# spe call-record modem max-userid Requests the access server to generate a modem call record after
a call is terminated. To disable this function, use the no form of
this command.
Router(config)# spe log-size number Sets the maximum size of the history event queue log entry for
each port. The default is 50 events per port.
Command Purpose
Router# clear spe log Clears all event entries in the slot history event log.
Router# clear spe counters Clears statistical counters for all types of services for the specified
SPE, a specified range of SPEs, or all SPEs. If you do not specify the
range of SPEs or an SPE, the statistics for all SPEs are cleared.
Router# clear port log Clears all event entries in the port level history event log. You cannot
remove individual service events from the port log.
Troubleshooting SPEs
This section provides troubleshooting information for your SPEs regardless of service type mode.
Note SPE ports that pass the diagnostic test are marked as Pass, Fail, and Unkn. Ports that fail the
diagnostic test are marked as Bad. These ports cannot be used for call connections. Depending
on how many ports are installed, the diagnostic tests may take from 5 to 10 minutes to complete.
• Enter the port modem startup-test command to perform diagnostic testing for all modems during
the system's initial startup or rebooting process. To disable the test, enter the no port modem
startup-test command.
• Enter the port modem autotest command to perform diagnostic testing for all ports during the
system’s initial startup or rebooting process.To disable the test, enter the no port modem autotest
command.
You may additionally configure the following options:
– Enter the port modem autotest minimum ports command to define the minimum number of
free ports available for autotest to begin.
– Enter the port modem autotest time hh:mm interval command to enable autotesting time and
interval.
– Enter the port modem autotest error threshold command to define the maximum number of
errors detected for autotest to begin.
• Enter the show port modem test command to displays results of the SPE port startup test and SPE
port auto-test.
When an SPE port is tested as Bad, you may perform additional testing by conducting a series of internal
back-to-back connections and data transfers between two SPE ports. All port test connections occur
inside the access server. For example, if mobile users cannot dial into port 2/5 (which is the sixth port
on the NextPort DFC in the second chassis slot), attempt a back-to-back test with port 2/5 and a
known-functioning port such as port 2/6.
• Enter the test port modem back-to-back slot/port slot/port command to perform internal
back-to-back port tests between two ports sending test packets of the specified size.
Note You might need to enable this command on several different combinations of ports to determine
which one is not functioning properly. A pair of operable ports successfully connects and
completes transmitting data in both directions. An operable port and an inoperable port do not
successfully connect with each other.
Tip You may reboot the port that has problems using the clear spe EXEC command.
• Enter the spe recovery {port-action {disable | recover | none} | port-threshold num-failures}
command to perform automatic recovery (removal from service and reloading of SPE firmware) of
ports on an SPE at any available time.
An SPE port failing to connect for a certain number of consecutive times indicates that a problem
exists in a specific part or the whole of SPE firmware. Such SPEs have to be recovered by
downloading firmware. Any port failing to connect num-failures times is moved to a state based on
the port-action value, where you can choose to disable (mark the port as Bad) or recover the port
when the SPE is in the idle state and has no active calls. The default for num-failures is 30
consecutive call failures.
Tip You may also schedule recovery using the spe download maintenance command.
• Enter the spe download maintenance time hh:mm | stop-time hh:mm | max-spes number | window
time-period | expired-window {drop-call | reschedule} command to perform a scheduled recovery
of SPEs.
The download maintenance activity starts at the set start time and steps through all the SPEs that
need recovery and the SPEs that need a firmware upgrade and starts maintenance on the maximum
number of set SPEs for maintenance. The system waits for the window delay time for all the ports
on the SPE to become inactive before moving the SPE to the Idle state. Immediately after the SPE
moves to Idle state, the system starts to download firmware. If the ports are still in use by the end of
window delay time, depending upon the expired-window setting, connections on the SPE ports are
shutdown and the firmware is downloaded by choosing the drop-call option, or the firmware
download is rescheduled to the next download maintenance time by choosing the reschedule option.
This process continues until the number of SPEs under maintenance is below max-spes, or until
stop-time (if set), or until all SPEs marked for recovery or upgrade have had their firmware
reloaded.
Command Purpose
Cisco AS5400 series routers Displays the SPE status for the specified range of SPEs.
Router# show spe slot/spe
Port Statistics
To view port statistics for the Cisco AS5400 NextPort DFCs or Cisco AS5800 UPCs, use the following
commands in privileged EXEC mode as needed:
Command Purpose
Cisco AS5400 series routers Displays the configuration information for specified ports or the
Router# show port config {slot | slot/port} specified port range. The port should have an active session
associated at the time the command is executed.
Cisco AS5800 series routers
Router# show port config {slot |
shelf/slot/port}
Cisco AS5400 series routers Displays the digital data event log.
Router# show port digital log [reverse
slot/port] [slot | slot/port]
Command Purpose
Cisco AS5400 series routers Displays the port history event log.
Router# show port modem log [reverse slot/port]
[slot | slot/port]
Command Purpose
Router# show spe digital [slot | slot/spe] Displays history statistics of all digital SPEs.
Router# show spe digital active [slot | Displays active digital statistics of a specified SPE, the specified
slot/spe] range of SPEs, or all the SPEs.
Router# show spe digital csr [summary | slot | Displays the digital call success rate statistics for a specific SPE, a
slot/spe] range of SPEs, or all the SPEs.
Router# show spe digital disconnect-reason Displays the digital disconnect reasons for the specified SPE or
[summary | slot | slot/spe] range of SPEs. The disconnect reasons are displayed with Class
boundaries.
Router# show spe digital summary [slot | Displays digital history statistics of all SPEs, a specified SPE, or the
slot/spe] specified range of SPEs for all service types.
Command Purpose
Cisco AS5400 series routers Displays the active statistics of a specified SPE, a specified range of
Router# show spe modem active {slot | slot/spe} SPEs, or all the SPEs serving modem traffic.
Command Purpose
Cisco AS5400 series routers Displays the total number of connections within each high
Router# show spe modem low standard {summary | modulation or codec for a specific range of SPEs.
slot | slot/spe}
This chapter describes how to configure externally connected modems. These tasks are presented in the
following main sections:
• External Modems on Low-End Access Servers
• Automatically Configuring an External Modem
• Manually Configuring an External Modem
• Supporting Dial-In Modems
• Testing the Modem Connection
• Managing Telnet Sessions
• Modem Troubleshooting Tips
• Checking Other Modem Settings
To identify the hardware platform or software image information associated with a feature, use the
Feature Navigator on Cisco.com to search for information about the feature or refer to the software
release notes for a specific release. For more information, see the “Finding Additional Feature Support
Information” section on page lxxvii in the “Using Cisco IOS Software for Release 12.4” chapter.
For a complete description of the modem support commands in this chapter, refer to the Cisco IOS Dial
Technologies Command Reference. To locate documentation of other commands that appear in this
chapter, use the command reference master index or search online.
Cisco AS2511-RJ
Modem
Modem
14479
When you configure modems to function with your access server, you must provide initialization strings
and other settings on the modem to tell it how to function with the access server.
This section assumes that you have already physically attached the modem to the access server. If not,
refer to the user guide or installation and configuration guide for your access server for information
about attaching modems.
Step 1 Use the modemcap edit command to define your own modemcap entry.
The following example defines modemcap MODEMCAPNAME:
Router(config)# modemcap edit MODEMCAPNAME miscellaneous &FS0=1&D3
Step 2 Apply the modemcap to the modem lines as shown in the following example:
Router# terminal monitor
Router# debug confmodem
Modem Configuration Database debugging is on
Router# configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Router(config)# line 33 34
Router(config-line)# modem autoconfigure type MODEMCAPNAME
Router(config-line)#
Jan 16 18:12:59.643: TTY34: detection speed (115200) response ---OK---
Jan 16 18:12:59.643: TTY34: Modem command: --AT&FS0=1&D3--
Jan 16 18:12:59.659: TTY33: detection speed (115200) response ---OK---
Jan 16 18:12:59.659: TTY33: Modem command: --AT&FS0=1&D3--
Jan 16 18:13:00.227: TTY34: Modem configuration succeeded
Jan 16 18:13:00.227: TTY34: Detected modem speed 115200
Jan 16 18:13:00.227: TTY34: Done with modem configuration
Jan 16 18:13:00.259: TTY33: Modem configuration succeeded
Jan 16 18:13:00.259: TTY33: Detected modem speed 115200
Jan 16 18:13:00.259: TTY33: Done with modem configuration
If you prefer the modem software to use its autoconfigure mechanism to configure the modem, use the
modem autoconfigure discovery command.
The following example shows how to configure modem autoconfigure discovery mode:
Router# terminal monitor
Router# debug confmodem
Modem Configuration Database debugging is on
Router# configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Router(config)# line 33 34
Router(config-line)# modem autoconfigure discovery
Jan 16 18:16:17.724: TTY33: detection speed (115200) response ---OK---
Jan 16 18:16:17.724: TTY33: Modem type is default
Jan 16 18:16:17.724: TTY33: Modem command: --AT&F&C1&D2S0=1H0--
Jan 16 18:16:17.728: TTY34: detection speed (115200) response ---OK---
Jan 16 18:16:17.728: TTY34: Modem type is default
Jan 16 18:16:17.728: TTY34: Modem command: --AT&F&C1&D2S0=1H0--
Timesaver You must first create a direct Telnet or connection session to the modem before you can send an
initialization string. You can use AT&F as a basic modem initialization string in most cases. To establish
a direct Telnet session to an external modem, determine the IP address of your LAN (Ethernet) interface,
and then enter a Telnet command to port 2000 + n on the access server, where n is the line number to
which the modem is connected. See the sections “Testing the Modem Connection” and “Managing
Telnet Sessions” for more information about making Telnet connections.
Note Make sure to turn off automatic baud rate detection because the modem speeds must be set to a fixed
value.
The port speed must not change when a session is negotiated with a remote modem. If the speed of the
port on the access server is changed, you must establish a direct Telnet session to the modem and send
an at command so that the modem can learn the new speed.
Modems differ in the method that they use to lock the EIA/TIA-232 (serial) port speed. In the modem
documentation, vendors use terms such as port-rate adjust, speed conversion, or buffered mode. Enabling
error correction often puts the modem in the buffered mode. Refer to your modem documentation to
learn how your modem locks speed (check the settings &b, \j, &q, \n, or s-register settings).
RTS and CTS signals must be used between the modem and the access server to control the flow of data.
Incorrectly configuring flow control for software or setting no flow control can result in hung sessions
and loss of data. Modems differ in the method that they use to enable hardware flow control. Refer to
your modem documentation to learn how to enable hardware flow control (check the settings &e, &k,
&h, &r, or s-register).
The modem must use the DCD wire to indicate to the access server when a session has been negotiated
and is established with a remote modem. Most modems use the setting &c1. Refer to your modem
documentation for the DCD settings used with your modem.
The modem must interpret a toggle of the DTR signal as a command to drop any active call and return
to the stored settings. Most modems use the settings &d2 or &d3. Refer to your modem documentation
for the DTR settings used with your modem.
If a modem is used to service incoming calls, it must be configured to answer a call after a specific
number of rings. Most modems use the setting s0=1 to answer the call after one ring. Refer to your
modem documentation for the settings used with your modem.
Command Purpose
Router(config-line)# modem callin Configures a line for a dial-in modem.
Figure 26 illustrates the modem callin command. When a modem dialing line is idle, it has its DTR
signal at a low state and waits for a transition to occur on the data set ready (DSR) input. This transition
causes the line to raise the DTR signal and start watching the CTS signal from the modem. After the
modem raises CTS, the Cisco IOS software creates an EXEC session on the line. If the timeout interval
(set with the modem answer-timeout command) passes before the modem raises the CTS signal, the
line lowers the DTR signal and returns to the idle state.
Idle state
DTR low,
watching
CTS
Ring transition
Raise DTR
Lower DTR
Answer
timeout
DTR high,
Hang up DTR low watching Ringing
CTS
Lower DTR
close connection
CTS raised
Create EXEC
CTS lowered
or exit
DTR high
S1001a
Note The modem callin and modem cts-required line configuration commands are useful for SLIP
operation. These commands ensure that when the line is hung up or the CTS signal drops, the line reverts
from Serial Line Internet Protocol (SLIP) mode to normal interactive mode. These commands do not
work if you put the line in network mode permanently.
Although you can use the modem callin line configuration command with newer modems, the modem
dialin line configuration command described in this section is more appropriate. The modem dialin
command frees up CTS input for hardware flow control. Modern modems do not require the assertion
of DTR to answer a phone line (that is, to take the line off-hook).
If the modem does not reply to the at command, perform the following steps:
Step 1 Enter the show users EXEC command and scan the display output. The output should not indicate that
the line is in use. Also verify that the line is configured for modem inout.
Step 2 Enter the show line EXEC command. The output should contain the following two lines:
Modem state: Idle
Modem hardware state: CTS noDSR DTR RTS
If the output displays “no CTS” for the modem hardware state, the modem is not connected, is not
powered up, is waiting for data, or might not be configured for hardware flow control.
Step 3 Verify the line speed and modem transmission rate. Make sure that the line speed on the access server
matches the transmission rate, as shown in Table 37.
To verify the line speed, use the show run EXEC command. The line configuration fragment appears at
the tail end of the output.
The following example shows that lines 7 through 9 are transmitting at 115200 bits per second (bps).
Sixteen 28800-kbps modems are connected to a Cisco AS2511-RJ access server via a modem cable.
Router# show run
Building configuration...
Current configuration:
. . .
!
line 1 16
login local
modem InOut
speed 115200
transport input all
flowcontrol hardware
script callback callback
autoselect ppp
autoselect during-login
Step 4 The speeds of the modem and the access server are likely to be different. If so, switch off the modem,
and then switch it back on. This action should change the speed of the modem to match the speed of the
access server.
Step 5 Check your cabling and the modem configuration (echo or result codes might be off). Enter the
appropriate at modem command to view the modem configuration, or use the at&f command to return
to factory defaults. Refer to your modem documentation to learn the appropriate at command to view
your modem configuration.
Note See the section “Configuring Cisco Integrated Modems Using Modem Attention Commands” in the “”
chapter for information about modem attention commands for the Cisco internal modems.
Note Before attempting to allow inbound connections, make sure that you close all open connections to the
modems attached to the access server. If you have a modem port in use, the modem will not accept a call
properly.
To establish a direct Telnet session to an external modem, determine the IP address of your LAN
(Ethernet) interface, and then enter a Telnet command to port 2000 + n on the access server, where n is
the line number to which the modem is connected. For example, to connect to the modem attached to
line 1, enter the following command from an EXEC session on the access server:
Router# telnet 172.16.1.10 2001
Trying 172.16.1.10, 2001 ... Open
This example enables you to communicate with the modem on line 1 using the AT (attention) command
set defined by the modem vendor.
Timesaver Use the ip host configuration command to simplify direct Telnet sessions with modems. The ip host
command maps an IP address of a port to a device name. For example, the modem1 2001 172.16.1.10
command enables you to enter modem1 to initiate a connection with the modem, instead of repeatedly
entering telnet 172.16.1.10 2001 each time you want to communicate with the modem.
You can also configure asynchronous rotary line queueing, which places Telnet login requests in a queue
when lines are busy. See the section “Configuring Asynchronous Rotary Line Queueing” in the “”
chapter for more information.
Note Ensure that you can reliably issue the escape sequence to suspend a Telnet session. Some
terminal emulation packages have difficulty sending the Ctrl-Shift-6 x sequence. Refer to your
terminal emulation documentation for more information about escape sequences.
Step 2 Enter the where EXEC command to check the connection numbers of open sessions:
Router# where
Conn Host Address Byte Idle Conn Name
* 1 172.16.1.10 172.16.1.10 0 0 172.16.1.10
2 172.16.1.11 172.16.1.11 0 12 modem2
Step 3 When you have suspended a session with one modem, you can connect to another modem and suspend it:
Router# telnet modem2
Trying modem2 (172.16.1.11, 2002) ... Open
- suspend keystroke -
Router#
Step 4 To disconnect (completely close) a Telnet session, enter the disconnect EXEC command:
Router# disconnect line 1
Closing connection to 172.16.1.10 [confirm] y
Router# disconnect line 2
Closing connection to 172.16.1.11 [confirm] y
Router#
Ready
DTR high
Network
Exit
connection
closed
Incoming User-typed
network activation
connection character
Create Create
Ready and active daemon EXEC Ready and active
Command Purpose
Router(config-line)# modem dtr-active Configures a line to initiate automatic dialing.
Using the modem dtr-active command causes a line to raise DTR signal only when there is an outgoing
connection (such as reverse Telnet, NetWare Asynchronous Support Interface (NASI), or DDR), rather
than leave DTR raised all the time. When raised, DTR potentially tells the modem that the router is ready
to accept a call.
Command Purpose
Router(config-line)# modem dialin Configures a line to automatically answer a modem.
You can turn on modem hardware flow control independently to respond to the status of router CTS
input. Wire CTS to whatever signal the modem uses for hardware flow control. If the modem expects to
control hardware flow in both directions, you might also need to wire modem flow control input to some
other signal that the router always has high, such as the DTR signal.
Figure 28 illustrates the modem dialin process with a high-speed dialup modem. When the Cisco IOS
software detects a signal on the RING input of an idle line, it starts an EXEC or autobaud process on that
line. If the RING signal disappears on an active line, the Cisco IOS software closes any open network
connections and terminates the EXEC facility. If the user exits the EXEC or the software terminates
because of no user input, the line makes the modem hang up by lowering the DTR signal for 5 seconds.
After 5 seconds, the modem is ready to accept another call.
Idle state
DTR low,
watching
CTS
Ring transition
Raise DTR
Lower DTR
Answer
timeout
DTR high,
Hang up DTR low watching Ringing
CTS
Lower DTR
close connection
CTS raised
Create EXEC
CTS lowered
or exit
DTR high
S1001a
Command Purpose
Router(config-line)# modem inout Configures a line for both incoming and outgoing calls.
Figure 29 illustrates the modem inout command. If the line is activated by raising the data set ready
(DSR) signal, it functions exactly as a line configured with the modem dialin line configuration
command described in the section “Automatically Answering a Modem” earlier in this chapter. If the
line is activated by an incoming TCP connection, the line functions similarly to lines not used with
modems.
Figure 29 EXEC and Daemon Creation for Incoming and Outgoing Calls
Idle state
DTR high,
watching
CTS
CTS raised
Close connection,
DTR low for
5 seconds
closed
Note If your system incorporates dial-out modems, consider using access lists to prevent unauthorized use.
Command Purpose
Router(config-line)# modem answer-timeout seconds Configures modem line timing.
Note The modem cts-required command was replaced by the modem printer command in Cisco IOS
Release 12.2.
To configure a line to close connections from a user’s terminal when the terminal is turned off and to
prevent inbound connections to devices that are out of service, use the following command in line
configuration mode:
Command Purpose
Router(config-line)# modem cts-required Configures a line to close connections.
Figure 30 illustrates the modem cts-required command operating in the context of a continuous CTS
signal. This form of modem control requires that the CTS signal be high for the entire session. If CTS
is not high, the user input is ignored and incoming connections are refused (or sent to the next line in a
rotary group).
Figure 30 EXEC and Daemon Creation on a Line Configured for Continuous CTS
Idle state
DTR high,
watching
CTS
CTS raised
Close connection,
DTR low for
5 seconds
closed
Command Purpose
Router(config-line)# autohangup Configures automatic line disconnect.
The autohangup command causes the EXEC facility to issue the exit command when the last
connection closes. This feature is useful for UNIX-to-UNIX copy program (UUCP) applications because
UUCP scripts cannot issue a command to hang up the telephone. This feature is not used often.
Command Purpose
Router(config-line)# modem callout Configures a line for reverse connections and prevents incoming
calls.
Figure 31 illustrates the modem callout process. When the Cisco IOS software receives an incoming
connection, it raises the DTR signal and waits to see if the CTS signal is raised to indicate that the host
has noticed the router DTR signal. If the host does not respond within the interval set by the modem
answer-timeout line configuration command, the software lowers the DTR signal and drops the
connection.
Idle state
DTR low
Incoming network
connection
Raise DTR
Lower DTR
Answer
timeout
DTR high,
watching Ringing
CTS
Close
connection
CTS raised
Lower DTR
Network
connection
closed or
CTS lowered Create daemon
DTR high,
watching
CTS
S1930
This chapter describes how to create and use modem chat scripts. These tasks are presented in the
following main sections:
• Chat Script Overview
• How To Configure Chat Scripts
• Using Chat Scripts
To identify the hardware platform or software image information associated with a feature, use the
Feature Navigator on Cisco.com to search for information about the feature or refer to the software
release notes for a specific release. For more information, see the“Finding Additional Feature Support
Information” section on page lxxvii in the “Using Cisco IOS Software for Release 12.4” chapter.
For a complete description of the modem support commands in this chapter, refer to the Cisco IOS Dial
Technologies Command Reference publication. To locate documentation of other commands that appear
in this chapter, use the command reference master index or search online.
Note On a router, chat scripts can be configured only on the auxiliary port.
A chat script must be configured to dial out on asynchronous lines. You also can configure chat scripts
so that they can be executed automatically for other specific events on a line, or so that they are executed
manually.
Each chat script is defined for a different event. These events can include the following:
• Line activation
• Incoming connection initiation
• Asynchronous dial-on-demand routing (DDR)
• Line resets
• Startup
Note Outbound chat scripts are not supported on lines where modem control is set for inbound activity only
using the modem dialin command.
For example, if you have a Telebit t3000 modem that uses V.32bis modulation, your script name would
be:
telebit-t3000-v32bis
Note Adhering to the recommended naming convention allows you to specify a range of chat scripts by using
partial names in UNIX-style regular expressions. The regular expressions are used to match patterns and
select chat scripts to use. This method is particularly useful for dialer rotary groups on an interface that
dials multiple destinations. Regular expressions are described in the “Regular Expressions” appendix in
the Cisco IOS Terminal Services Configuration Guide.
To define a chat script, use the following command in global configuration mode:
Command Purpose
Router(config)# chat-script script-name expect Creates a script that will place a call on a modem, log in to a
send... remote system, or initialize an asynchronous device on a line.
The Cisco IOS software waits for the string from the modem (defined by the expect portion of the script)
and uses it to determine what to send back to the modem (defined by the send portion of the script).
This part of the script specifies that, after the connection is established, you want ssword to be displayed.
If it is not displayed, you must press Return again after the timeout passes. (For more information about
expressing characters in chat scripts, see the “Regular Expressions” appendix in the Cisco IOS Terminal
Services Configuration Guide.)
For example, if a modem reports BUSY when the number dialed is busy, you can indicate that you want
the attempt stopped at this point by including ABORT BUSY in your chat script.
Note If you use the expect-send pair ABORT SINK instead of ABORT ERROR, the system terminates
abnormally when it encounters SINK instead of ERROR.
Command Purpose
1
Router(config-line)# script activation regexp Starts a chat script on a line when the line is activated (every time
a command EXEC is started on the line).
Router(config-line)# script connection regexp Starts a chat script on a line when a network connection is made
to the line.
Router(config-line)# script dialer regexp Specifies a modem script for DDR on a line.
2
Router(config-line)# script reset regexp Starts a chat script on a line whenever the line is reset.
2
Router(config-line)# script startup regexp Starts a chat script on a line whenever the system is started up.
1. The regexp argument is a regular expression that is matched to a script name that has already been defined using the chat-script command.
2. Do not use the script reset or script startup commands to configure a modem; instead use the modem autoconfigure command.
Note Outbound chat scripts are not supported on lines where modem control is set for inbound activity only
(using the modem dialin command).
Command Purpose
Step 1 Router# debug chat line number Starts detailed debugging on the specified line.
Step 2 Router# start-chat regexp [line-number [dialer-string]] Starts a chat script on any asynchronous line.
If you do not specify the line number, the script runs on the current line. If the line specified is already
in use, you cannot start the chat script. A message appears indicating that the line is already in use.
Router A 10.55.0.1
96837890
S2313
Router B
After the modem script is successfully executed, the system login script is executed. Table 42 lists the
functions that are executed with each expect-send pair in the system script called login.
! Script for logging into a Cisco access server and starting up TCP header compression:
chat-script cisco-compressed...
!
line 15
script dialer usrobotics-*
!
interface async 15
dialer map ip 10.2.3.4 system-script *-v32 system-script cisco-compressed 91800
dialer map ip 10.3.2.1 modem-script *-v32 modem-script cisco-compressed 91800
This feature module describes the Modem Script and System Script Support in Large-Scale Dial-Out
feature and includes the following sections:
• Feature Overview, page 315
• Supported Platforms, page 316
• Supported Standards, MIBs, and RFCs, page 316
• Configuration Tasks, page 317
• Monitoring and Maintaining Large-Scale Dial-Out Sessions, page 318
• Configuration Examples, page 318
• Command Reference, page 319
• Appendix, page 320
• Glossary, page 321
Feature Overview
Modem connection and system login chat scripts are often used when asynchronous dial-on-demand
routing (DDR) is configured. Currently, however, the large-scale dial-out network architecture does not
allow chat scripts for a particular session to be passed through the network. Cisco IOS Release 12.2(2)T
allows modem and system chat scripts to pass through large-scale dial-out networks by allocating two
new authentication, authorization, and accounting (AAA) attributes for outbound service.
The AAA attributes define specific AAA elements in a user profile. Large-scale dial-out supports Cisco
attribute-value (AV) pairs and TACACS+ attributes. The Modem Script and System Script Support in
Large-Scale Dial-Out feature provides two new outbound service attributes for passing chat scripts:
modem-script and system-script.
Benefits
The Modem Script and System Script Support in Large-Scale Dial-Out feature allows users to use
modem and system chat scripts by linking them to AAA service outbound attributes for use by Cisco
network access servers in large-scale dial-out networks.
Related Documents
• Cisco IOS Dial Technologies Configuration Guide, Release 12.2
• Cisco IOS Security Configuration Guide, Release 12.2
• CiscoSecure ACS for Windows NT User Guide 2.0
Supported Platforms
The Modem Script and System Script Support in Large-Scale Dial-Out feature was developed for and
tested on several Cisco device platforms. Check Feature Navigator for the feature sets in which the
Modem Script and System Script Support in Large-Scale Dial-Out is available.
MIBs
No new or modified MIBs are supported by this feature.
To obtain lists of supported MIBs by platform and Cisco IOS release, and to download MIB modules,
go to the Cisco MIB website on Cisco.com at
http://www.cisco.com/public/sw-center/netmgmt/cmtk/mibs.shtml.
RFCs
No new or modified RFCs are supported by this feature.
Configuration Tasks
See the following sections for configuration tasks for the Modem Script and System Script Support in
Large-Scale Dial-Out feature. Each task in the list is identified as either optional or required.
• Creating the Dial-Out Profile (required)
• Creating the Chat Script (required)
• Verifying Modem and System Chat Scripts with Large-Scale Dial-Out (optional but recommended)
Once these tasks are complete, you will need to complete the configuration tasks required for large-scale
dial-out. See the chapter “Configuring Large-Scale Dial-Out” in the Cisco IOS Dial Technologies
Configuration Guide, Cisco IOS Release 12.2.
To specify a name for the modem script and, if needed, a system script using TACACS+ attributes for
outbound service, use the following syntax to enter these attributes in the dial-out profile:
service = outbound {
modem-script = script-name
system-script = script-name
}
Timesaver Remember that the dial-out profile name must have the characters “-out” appended to it and that the only
required attribute for a profile is the Cisco AV pair outbound:dial-number.
See the section “Dial-Out Profile Examples” for examples of dial-out profiles.
For more information about defining profiles, see the Cisco IOS Security Configuration Guide and the
chapter “Configuring Large-Scale Dial-Out” in the Cisco IOS Dial Services Configuration Guide:
Network Services.
Command Purpose
Router(config)# chat-script script-name expect-send Provides commands to dial a modem and commands to log on
to remote systems when using DDR.
See the section “Chat Script Example” for an example of a chat script that works with a dial-out-profile.
Command Purpose
Router# clear dialer sessions Removes all dialer sessions and disconnects links.
Router# debug aaa authorization Displays configuration information and information about
AAA/TACACS+ authorization.
Router# show dialer sessions Displays all dialer sessions.
Configuration Examples
This section provides the following configuration examples:
• Dial-Out Profile Examples
• Chat Script Example
• Verification Example
The following is an example of how to define the same profile for TACACS+:
user = evergreen-out
{
service = outbound {
dial-number = 5551212
addr = 5.1.1.1
send-secret = cisco
modem-script = dialer-script
}
service = ppp protocol = ip {
default attribute = permit
}
}
Verification Example
Once connection is made, you can verify the configuration using the debug aaa authorization
privileged EXEC command:
Router# debug aaa authorization
00:01:07: %LSDialout: temporary debug to verify the data integrity
00:01:07: dial number = 5551212
00:01:07: dialnum_count = 1
00:01:07: force_56 = 0
00:01:07: routing = 0
00:01:07: data_svc = -1
00:01:07: port_type = -1
00:01:07: map_class =
00:01:07: modem_script = dialer-script
00:01:07: system_script =
00:01:07: ip_address = 5.1.1.1
00:01:07: send_secret = cisco
00:01:07: send_auth = -1
00:01:07: send_name =
00:01:07: class =
Command Reference
This feature uses no new or modified commands. To see the command pages for the commands used with
this feature, go to the Cisco IOS Master Commands List, Release 12.4, at http://www.cisco.com/
univercd/cc/td/doc/product/software/ios124/124mindx/124index.htm.
Appendix
The following new Cisco AV pairs and TACACS+ attributes are added to the large-scale dial outbound
service attributes:
TACACS+ Support:
service = outbound {
modem-script = VALUE
}
Value:
Modem script name that you assign.
TACACS+ Support:
service = outbound {
system-script = VALUE
}
Value:
System script name that you assign.
Glossary
AAA—authentication, authorization, and accounting. Suite of network security services that provide the
primary framework through which access control can be set up on your Cisco router or access server.
attributes—Data items sent between a network access server and a daemon that are used to direct AAA
activities.
authentication, authorization, and accounting—See AAA.
chat script—Strings of text used to send commands for modem dialing, logging in to remote systems,
and initializing asynchronous devices connected to an asynchronous line.
dial-out profile—Attributes that define specific AAA elements in a user profile. Large-scale dial-out
supports a subset of Ascend AV pairs, RADIUS attributes, and a map class attribute providing outbound
dialing services.
Feature History
Release Modification
12.2(4)T This feature was introduced.
This document describes the Cisco Modem User Interface feature in Cisco IOS Release 12.2(4)T. It
includes the following sections:
• Feature Overview, page 323
• Supported Platforms, page 325
• Supported Standards, MIBs, and RFCs, page 325
• Configuration Tasks, page 326
• Monitoring and Maintaining the Cisco Modem User Interface, page 331
• Configuration Examples, page 331
• Command Reference, page 334
• Glossary, page 335
Feature Overview
The Cisco Modem User Interface feature enables Cisco routers to behave like a modem and be
configured using standard Hayes modem commands.
Figure 33 shows a legacy data transfer configuration using X.25, modems, and telephone lines.
POS Host
terminal system
Modem Modem
PSTN
60548
With the Cisco Modem User Interface feature, a point of sale (POS) terminal, such as those used by
gasoline service stations to charge customers for merchandise and services, can use high-speed Internet
connections rather than slow-speed telephone connections to transfer data (see Figure 34).
Internet
60549
The user interface to the higher speed connection will not change when the Cisco Modem User Interface
feature is used; the user interface will still appear as if the connection on the POS terminal is through a
modem and a telephone line.
Although there are a wide variety of proprietary extensions to the Hayes modem commands, the Cisco
Modem User Interface feature supports only a subset of the commands. This basic functionality is
enhanced with Cisco-specific modem register settings, Telnet connection capability, and dial-related
Cisco IOS commands.
Note Typically, parity and databits commands have no effect on modem lines without UART. However, since
modem lines such as WIC-1AM and WIC-2AM are implemented though UART and use an internal
UART, the parity and databits commands can be used to set async parity framing. The following
commands may be used on WIC-AM modem cards (although changing the DTE speed and stopbits on
these lines have no effect): parity, databits, stopbits, flowcontrol, speed, rxspeed, txspeed.
Benefits
The Cisco Modem User Interface feature allows Cisco routers to replace modems, and thereby update a
slow telephone call-modem negotiation process with a high-speed Internet connection. Together, these
features provide the following benefits:
• Reduced costs, because modems are no longer necessary.
• Increased connection speeds, because Internet connections are faster than modem connections.
Restrictions
The following Hayes modem features are not supported by the Cisco Modem User Interface:
• Modem autobaud detection
• Modem answer capability
• Modem fax features
• Synchronous traffic
• The Hayes modem escape sequence (,+++,)
Supported Platforms
• Cisco 1700 series
• Cisco 2600 series
• Cisco 3600 series
MIBs
None
To obtain lists of supported MIBs by platform and Cisco IOS release, and to download MIB modules,
go to the Cisco MIB website on Cisco.com at the following URL:
http://www.cisco.com/public/sw-center/netmgmt/cmtk/mibs.shtml
RFCs
None
Configuration Tasks
See the following sections for the configuration tasks for the Cisco Modem User Interface feature. Each
task in the list is identified as either required or optional:
• Configuring the Telephone Number for the Cisco Modem User Interface Connection (required)
• Configuring a Line for the Cisco Modem User Interface (required)
• Entering Cisco Modem User Interface Mode from EXEC Mode (optional)
• Configuring Banners for the Hayes Information Mode Command (optional)
Configuring the Telephone Number for the Cisco Modem User Interface
Connection
To configure the telephone number for the Cisco Modem User Interface feature, you must map the
telephone number to the IP host where the connection will be made. To do so, use the following
command in global configuration mode:
Command Purpose
Router(config)# ip host tmodem-telephone-number address Maps a modem telephone number to an IP host address
for use in Cisco Modem User Interface mode.
Command Purpose
Step 1 Router(config)# line aux 0 Selects the line to configure for the Cisco Modem User
Interface feature and enters line configuration mode.
Step 2 Router(config-line)# stopbits bits Sets the number of stop bits sent per byte.
Step 3 Router(config-line)# speed rate Sets the asynchronous line bit rate.
Step 4 Router(config-line)# flowcontrol type Sets line flow control.
Step 5 Router(config-line)# modem dialin delay (Optional) Delays assertion of the data terminal ready
(DTR) signal until a connection is established.
Step 6 Router(config-line)# autocommand modemui (Optional) Automatically executes the modemui EXEC
[modem-commands] command when a user connects to the line. See Table 43
for the modem commands that are entered with the
modemui command.
Note Typically, parity and databits commands have no effect on modem lines without UART. However, since
modem lines such as WIC-1AM and WIC-2AM are implemented though UART and use an internal
UART, the parity and databits commands can be used to set async parity framing. The following
commands may be used on WIC-AM modem cards although changing the DTE speed and stopbits on
these lines have no effect: parity, databits, stopbits, flowcontrol, speed, rxspeed, and txspeed.
Example configurations in the section “Configuration Examples” list additional commands that might
also be entered for line configuration.
Command Purpose
Router# modemui [modem-commands] Enters Cisco modem user interface mode and
establishes an environment where you can enter the
Hayes modem commands listed in Table 43.
You can also add EXEC commands to the Cisco IOS autocommand line configuration command. This
type of configuration allows the modemui EXEC command to be automatically executed; see the
section “Configuring a Line for the Cisco Modem User Interface” for the relevant task.
Command Purpose
Router(config)# modemui-version delimiter banner-text delimiter Sets the the display for the Hayes information
mode command (ATIn).
Table 43 lists and describes the Hayes-compatible modem commands, including ATIn.
Hayes Modem
Commands Description
AT Attention command. Enters modem command execution mode. You can add any of the command settings
listed in this table to the AT command.
DTstring Dials outbound tone (T) or pulse (P) call. The string following the T or P character is used as an argument to
DPstring the Cisco IOS connect EXEC command.
Before dialing, you must set up an appropriate IP host using the Cisco IOS ip host global configuration
command. For example:
ip host t555-1212 4023 10.0.0.51
Valid characters for string are the same as the characters that are used in a host name for the Cisco IOS
connect command, as follows:
• The numbers 0 through 9
• Uppercase letters A through Z
• Lowercase letters a through z
• The . (period), - (hyphen), and _ (underscore) characters
No other characters (such as # or *) are accepted in the dial string, and unsupported characters are stripped
before dialing occurs.
En Echo mode. Values for n follow:
• 0 turns off command echo.
• 1 turns on command echo (default).
Hn Hangup mode. A value of 0 or 1 closes the connection.
In Information mode. The information displayed is set in a banner configured with the Cisco IOS
modemui-version global configuration command; see the section “Configuring Banners for the Hayes
Information Mode Command.” Acceptable values for n are the numbers 0 through 6.
On Online mode. A value of 0 or 1 resumes the connection.
Qn Quiet mode. Values for n follow:
• 0 displays modem result codes (default).
• 1 inhibits modem result codes display (quiet mode).
Sn=v Set selected register (S-register).
Note The standard Hayes modem S-register settings S0 through S53 are accepted by Cisco IOS software,
but do not have any effect.
Choose one of the following S-registers for n:
• S201—Command mode parity sniffing.
If the value (v) for S201 is 0 (default), parity for both the command and data portions of a call are
controlled by the Cisco IOS parity and databits line configuration commands.
If the value (v) for S201 is 1, mark or space parity for the command session will be taken from the Hayes
AT part of the command, while the data portion will be 8-bit transparent.
Hayes Modem
Commands Description
• S202—Output mask.
This setting allows mark parity to be unconditionally implemented for the command characters. The
default value for S202 is 0 (no parity). The value 128 causes command characters to be sent with mark
parity.
• S203—Connect delay.
Allows a delay to be added to the time between when the ATD command is executed and when the call
success or failure code is displayed. This delay is sometimes required because a Telnet connection is
established more quickly than placing a telephone call. The value for S203 can be a number from 0 to
255. The actual value applied to the connect delay is 10 percent of the number entered for v. For example,
a value of 300 sets a connect delay of 30 seconds. The default value is 0.
• S204—Connect code.
Allows the result code for a successful connection to be specified. The default is code 1 for the
unextended mode, but you can configure one of the following numbers to display a selected line speed.
For example, connection code 10 selects CONNECT 2400. By allowing the code to be expressed
explicitly, you can allow for a “CONNECT 2400” response message to be displayed, regardless of the
actual line speed.
The default for v is 0, or choose one of the following connection codes:
– 9—CONNECT 1200
– 10—CONNECT 2400
– 11—CONNECT 4800
– 12—CONNECT 9600
– 13—CONNECT 14400
– 14—CONNECT 19200
– 15—CONNECT 38400
– 16—CONNECT 57600
Sn? S-register query. The value for n is the number of the S-register to query (S201 through S204, see the
preceding list).
Vn Result code format. Values for n follow:
• 0 displays a short result report.
• 1 displays a long result report (default).
Xn Extended result codes. The value for n is any nonzero number, which appends /NONE to the connect message.
Also see the preceding description for S-register S204, for changing the reported connection speed.
Z Reset to default configuration. Choose one of the following reset options:
Z99
• ATZ returns the Cisco modem user interface to its default state and re-executes the initialization string
provided in the modemui command.
• ATZ99 returns to the standard Cisco IOS software user interface (EXEC) mode.
Step 1 Enter the modemui command to enter Cisco modem user interface mode:
Router# modemui
Step 2 Enter the AT command to start interactive Cisco modem user interface mode operation. The system
replies with “OK” when you successfully enter the mode:
AT
OK
Step 3 Enter the modem telephone number with the ATDT dial command. A successful connection displays the
“CONNECT” message followed by the login prompt from the remote terminal:
ATDT4085551212
CONNECT
User Access Verification
Username:
Step 4 Enter the Cisco IOS escape sequence (by default this sequence is Ctrl^, X) to leave the connection and
return to the Cisco modem user interface mode.
Step 5 Return to Cisco IOS EXEC mode by entering the ATZ99 command. The Cisco IOS EXEC prompt
reappears:
ATZ99
Router#
Under the Host field, a “p” indicates a pulse-dialed modem telephone number, and a “t” indicates a
tone-dialed modem telephone number. The IP address mapped to the telephone number appears under
the “Address(es)” field.
Troubleshooting Tips
To troubleshoot operation of the Cisco Modem User Interface feature, use the debug modem privileged
EXEC command to start modem and EXEC debugging mode.
Command Purpose
Router# show host Displays the default domain name, the style of name lookup service, a list of name server hosts,
and the cached list of host names and addresses.
Router# show tcp Displays the status of TCP connections, and lists the telephone number mapped to the IP host.
Router# show users Displays information about the active lines on the router.
Configuration Examples
This section provides the following configuration examples:
• Automatic Connection Configuration Example
• Asynchronous Tunnel Termination Configuration Example
• Banner Setup and Display Example
Internet
60549
Both the client and host router must have the Cisco Modem User Interface feature loaded for the
configurations to work. Configuration settings on the routers provide an environment that spoofs or
emulates the Hayes modem interface, yet allows connection to the host using a high-speed Internet
connection instead of the slow-speed telephone connections shown in Figure 33. The configuration in
this example includes a 2-second delay between when the dial number command is executed and when
the call success or failure code is displayed (see the autocommand modemui ats203=20 command in
the following “Client Router Configuration” output).
POS Host
Client Host
terminal system
router router
Internet
60905
Note that in this configuration the host router does not use the modemui EXEC command.
Step 1 From EXEC mode, enter the modemui command to enter Cisco modem user interface mode:
Router# modemui
Step 2 Display the modem model and code revision by entering the ATI6 command:
ATI6
Telebit T3000, Version 1.5
Step 3 Enter the modem telephone number with the Hayes ATDT dial command. A successful connection
displays the “CONNECT” message followed by the login prompt from the remote terminal:
ATDT4085551212
CONNECT
User Access Verification
Username:
Step 4 To leave the connection and return to Cisco modem user interface mode, either enter the Cisco IOS
escape sequence (by default this sequence is Ctrl^, X), or log out of an active terminal session.
Step 5 Return to Cisco IOS EXEC mode by entering the ATZ99 command. The Cisco IOS EXEC prompt
reappears:
ATZ99
Router#
Command Reference
The following new and modified commands are pertinent to this feature. To see the command pages for
these commands and other commands used with this feature, go to the Cisco IOS Master Commands List,
Release 12.4, at http://www.cisco.com/univercd/cc/td/doc/product/software/ios124/124mindx/
124index.htm.
New Commands
• modemui
• modemui-version
Modified Commands
• ip host
• modem dialin
• show hosts
Glossary
AT commands—The basic AT, or attention, command starts interaction with a Hayes or
Hayes-compatible modem. Additional Hayes modem commands and arguments can be added to the
basic AT command to set modem characteristics. For example, the ATE0 command turns off command
echoing.
Hayes-compatible modem—Any modem that recognizes Hayes modem commands. Hayes
Microcomputer Products has developed a language called the AT command set for controlling modems
that has become a de facto modem industry standard.
point of sale—See POS.
point of service—See POS.
POS—point of service or point of sale. A terminal such as those used by gasoline service stations to
charge customers for merchandise and services. A POS can be a PC with an internal modem and software
or an integrated device containing both a terminal and modem.
S-registers—Low-level modem service registers. Users can modify modem behavior by setting numeric
values into various modem control registers.
This chapter describes tasks that are required to use an ISDN BRI line. It provides an overview of the
ISDN technologies currently available and describes features that you can configure in an ISDN BRI
circuit-switched internetworking environment. This information is included in the following main
sections:
• ISDN Overview
• How to Configure ISDN BRI
• Monitoring and Maintaining ISDN Interfaces
• Troubleshooting ISDN Interfaces
• Configuration Examples for ISDN BRI
This chapter describes configuration of the ISDN BRI. See the chapter “Configuring ISDN PRI” for
information about configuring the ISDN PRI.
This chapter does not address routing issues, dialer configuration, and dial backup. For information
about those topics, see the chapters in the “Dial-on-Demand Routing Configuration” part of this
publication.
For hardware technical descriptions and for information about installing the router interfaces, refer to
the appropriate hardware installation and maintenance publication for your particular product.
To identify the hardware platform or software image information associated with a feature, use the
Feature Navigator on Cisco.com to search for information about the feature or refer to the software
release notes for a specific release. For more information, see the “Finding Additional Feature Support
Information” section on page lxxvii in the “Using Cisco IOS Software for Release 12.4” chapter.
For a complete description of the BRI commands in this chapter, refer to the Cisco IOS Dial
Technologies Command Reference. To locate documentation of other commands that appear in this
chapter, use the command reference master index or search online.
ISDN Overview
Basic ISDN service is described in the section “ISDN Service” in the chapter “Overview of Dial
Interfaces, Controllers, and Lines.” To summarize, Cisco IOS software supports both the ISDN BRI and
the ISDN PRI.
ISDN BRI provides two bearer (B) channels, each capable of transferring voice or data at 64 kbps, and
one 16 kbps data (D) signaling channel, which is used by the telephone network to carry instructions
about how to handle each of the B channels. ISDN BRI (also referred to as 2 B + D) provides a maximum
transmission speed of 128 kbps, but many users use only half the available bandwidth.
Figure 8 in the chapter “Overview of Dial Interfaces, Controllers, and Lines” illustrates the channel
assignment for each ISDN type.
Requesting BRI Line and Switch Configuration from a Telco Service Provider
Before configuring ISDN BRI on your Cisco router, you must order a correctly configured ISDN line
from your telecommunications service provider. This process varies from provider to provider on a
national and international basis. However, some general guidelines follow:
• Ask for two channels to be called by one number.
• Ask for delivery of calling line identification. Providers sometimes call this CLI or automatic
number identification (ANI).
• If the router will be the only device attached to the BRI, ask for point-to-point service and a
data-only line.
• If the router will be attached to an ISDN bus (to which other ISDN devices might be attached), ask
for point-to-multipoint service (subaddressing is required) and a voice-and-data line.
When you order ISDN service for switches used in North America, request the BRI switch configuration
attributes specified in Table 44.
Table 44 North American ISDN BRI Switch Type Configuration Information (continued)
Interface Configuration
The Cisco IOS software also provides custom features for configuring the ISDN BRI interface that
provide such capability as call screening, called party number verification, ISDN default cause code
override, and for European and Australian customers, Dialed Number Identification Service
(DNIS)-plus-ISDN-subaddress binding to allow multiple binds between a dialer profile and an ISDN B
channel.
E1-PRI
BRI 30 X.25 X.25
2B ISDN B channels Host
X.25
22344
X.25
TA
BRI BRI
2B 2B
To place calls on an ISDN interface, you must configure it with dial-on-demand routing (DDR). For
configuration information about ISDN using DDR, see the “Dial-on-Demand Routing Configuration”
part of this publication. For command information, refer to the Cisco IOS Dial Technologies Command
Reference.
To configure bandwidth on demand, see the chapters “Configuring Legacy DDR Spokes” or
“Configuring Legacy DDR Hubs” later in this publication.
For a complete list of ISDN cause codes that are generated by the switch, refer to “Appendix B: ISDN
Switch Types, Codes and Values” in the Cisco IOS Debug Command Reference.
Although the VoIP gateway generates the cause codes listed in Table 45 by default, there are commands
introduced in previous Cisco IOS releases that can override these defaults, allowing the gateway to send
different cause codes to the switch. The following commands override the default cause codes:
• isdn disconnect-cause—Sends the specified cause code to the switch when a call is disconnected.
• isdn network-failure-cause—Sends the specified cause code to the switch when a call fails because
of internal network failures.
• isdn voice-call-failure—Sends the specified cause code to the switch when an inbound voice call
fails with no specific cause code.
When you implement these commands, the configured cause codes are sent to the switch; otherwise, the
default cause codes of the voice application are sent. For a complete description of these commands,
refer to the Cisco IOS Dial Technologies Command Reference.
Command Purpose
Router(config)# isdn switch-type switch-type Selects the service provider switch type; see Table 44 for switch
types.
The section “Global ISDN and BRI Interface Switch Type Example” later in this chapter provides an
example of configuring the ISDN BRI switch.
Table 46 lists the ISDN BRI service provider switch types.
Central Office
(CO) Switch
Switch Type Keywords Description/Use Type?
Voice/PBX Systems
basic-qsig PINX (PBX) switch with QSIG signaling per Q.931
Australia, Europe, and UK
basic-1tr6 German 1TR6 ISDN switch Yes
basic-net3 NET3 ISDN BRI for Norway NET3, Australia NET3, Yes
and New Zealand NET3 switches; covers
ETSI-compliant Euro-ISDN E-DSS1 signaling system
vn3 French VN3 ISDN BRI switch Yes
Japan
ntt Japanese NTT ISDN BRI switch
North America
basic-5ess Lucent (AT&T) basic rate 5ESS switch Yes
basic-dms100 Nortel basic rate DMS-100 switch Yes
basic-ni National ISDN switch Yes
All Users
none No switch defined
Note The command parser will still accept the following switch type keywords: basic-nwnet3, vn2, and
basic-net3; however, when viewing the NVRAM configuration, the basic-net3 or vn3 switch type
keywords are displayed respectively.
Command Purpose
Router# show interfaces bri number Displays the MTU size.
Router# show buffers Displays the free buffers.
To configure the buffers and the MTU size, use the following commands in global configuration mode
as needed:
Command Purpose
Router(config)# buffers big permanent number Configures the buffers.
Router(config)# buffers big max-free number
Router(config)# buffers big min-free number
Router(config)# buffers big initial number
Command Purpose
Step 1 Router(config)# interface bri number Specifies the interface and begins interface
configuration mode.
Cisco 7200 series router only
Router(config)# interface bri slot/port
Step 2 Router(config-if)# ip address address mask Specifies an IP address for the interface.
Command Purpose
Router(config-if)# isdn spid1 spid-number [ldn] Specifies a SPID and local directory number for the B1
channel.
Router(config-if)# isdn spid2 spid-number [ldn] Specifies a SPID and local directory number for the B2
channel.
The LDN is optional but might be necessary if the router is to answer calls made to the second directory
number.
Command Purpose
Router(config-if)# encapsulation [ppp | lapb | frame-relay] Configures encapsulation type.
To verify dialer interfaces configured for binding and see statistics on each physical interface bound to
the dialer interface, use the show interfaces EXEC command.
The following example shows that the output under the B channel keeps all hardware counts that are not
displayed under any logical or virtual access interface. The line in the report that states “Interface is
bound to Dialer0 (Encapsulation LAPB)” indicates that this B interface is bound to the dialer 0 interface
and the encapsulation running over this connection is LAPB, not PPP, which is the encapsulation
configured on the D interface and inherited by the B channel.
Router# show interfaces bri0:1
Any protocol configuration and states should be displayed from the dialer 0 interface.
The router might need to communicate with devices that require a different encapsulation protocol or the
router might send traffic over a Frame Relay or X.25 network. The Dynamic Multiple Encapsulations
feature provides bidirectional support of all serial encapsulations except Frame Relay.
For more information, see the sections “Sending Traffic over Frame Relay, X.25, or LAPB Networks”
in the chapters “Configuring Legacy DDR Spokes” and “Configuring Legacy DDR Hubs” later in this
publication.
To configure the router for automatic detection of encapsulation type on incoming calls, or to configure
encapsulation for Cisco 700 and 800 series (formerly Combinet) router compatibility, see the section
“Configuring Automatic Detection of Encapsulation Type” in the chapter “Configuring ISDN Special
Signaling” later in this publication.
Command Purpose
Step 1 Router(config-if)# dialer map protocol (Most locations) Configures a serial interface or ISDN
next-hop-address name hostname speed [56 | 64] interface to call one or multiple sites or to receive calls
dial-string[:isdn-subaddress]
from multiple sites.
or
Router(config-if)# dialer map protocol
(Germany) Uses the command keyword that enables
next-hop-address name hostname spc [speed 56 | ISDN semipermanent connections.
64] [broadcast] dial-string[:isdn-subaddress]
Step 2 Router(config-if)# dialer-group group-number Assigns the interface to a dialer group to control access
to the interface.
Step 3 Router(config-if)# exit Exits to global configuration mode.
Step 4 Router(config)# dialer-list dialer-group Defines a dial-on-demand routing (DDR) dialer list for
protocol protocol-name {permit | deny | list dialing by protocol or by a combination of a protocol
access-list-number | access-group}
and an access list.
Step 5 Router(config)# access-list access-list-number Defines an access list permitting or denying access to
{deny | permit} protocol source address specified protocols, sources, or destinations. Permitted
source-mask destination destination-mask
packets cause the router to place a call to the destination
protocol address.
German networks allow semipermanent connections between customer routers with BRIs and the 1TR6
basic rate switches in the exchange. Semipermanent connections are less expensive than leased lines.
Note The access list reference in Step 5 of this task is an example of the access-list commands allowed by
different protocols. Some protocols might require a different command form or might require multiple
commands. Refer to the relevant protocol chapter in the network protocol configuration guide (the Cisco
IOS Novell IPX Configuration Guide, for example) for more information about setting up access lists for
a protocol.
For more information about defining outgoing call numbers, see the chapters “Configuring Legacy DDR
Hubs” and “Configuring Legacy DDR Spokes” later in this publication.
Command Purpose
Router(config-if)# isdn tei [first-call | Determines when ISDN TEI negotiation occurs.
powerup]
Command Purpose
Router(config-if)# isdn caller number Configures caller ID screening.
Note If caller ID screening is configured and the local switch does not deliver caller IDs, the router rejects all
calls.
Note In earlier releases of the Cisco IOS software, ISDN accepted all synchronous calls and performed some
minimal CLI screening before accepting or rejecting a call. Beginning with Cisco IOS Release 12.1
software, DDR provides a separate process that screens for the profile of the caller. The new screening
process also checks that enough resources are available to accept the call and that the call conforms to
predetermined rules. When the call is found acceptable, the screening process searches for a matching
profile for the caller. The call is accepted only when there is a matching profile.
You can specify that the router verify a called-party number or subaddress number in the incoming setup
message for ISDN BRI calls, if the number is delivered by the switch. You can do so by configuring the
number that is allowed. To configure verification, use the following command in interface configuration
mode:
Command Purpose
Router(config-if)# isdn answer1 Specifies that the router verify a called-party number or
[called-party-number][:subaddress] subaddress number in the incoming setup message.
Verifying the called-party number ensures that only the desired router responds to an incoming call. If
you want to allow an additional number for the router, you can configure it, too.
To configure a second number to be allowed, use the following command in interface configuration
mode:
Command Purpose
Router(config-if)# isdn answer2 Specifies that the router verify a second called-party number or
[called-party-number][:subaddress] subaddress number in the incoming setup message.
Command Purpose
Router(config-if)# isdn calling-number Specifies the calling party number.
calling-number
This command can be used with all switch types except German 1TR6 ISDN BRI switches.
Configuring the Line Speed for Calls Not ISDN End to End
When calls are made at 56 kbps but delivered by the ISDN network at 64 kbps, the incoming data can be
corrupted. However, on ISDN calls, if the receiving side is informed that the call is not an ISDN call
from end to end, it can set the line speed for the incoming call.
To set the speed for incoming calls recognized as not ISDN end to end, use the following command in
interface configuration mode:
Command Purpose
Router(config-if)# isdn not-end-to-end {56 | 64} Sets the speed to be used for incoming calls recognized as not
ISDN end to end.
Command Purpose
Router(config-if)# isdn fast-rollover-delay Defines a fast rollover delay.
seconds
A delay of 5 seconds should cover most cases. Configure sufficient delay to make sure the ISDN
RELEASE_COMPLETE message has been sent or received before making the fast rollover call. Use the
debug isdn q931 command to display this information. This pattern of failed second calls is a rare
occurrence.
Command Purpose
Router(config-if)# isdn disconnect-cause Specifies the ISDN cause code to send to the switch.
{cause-code-number | busy | not-available}
The following example sends a BUSY cause code to the switch when an application fails to complete
the call:
interface serial 0:23
isdn disconnect-cause busy
To verify that the ISDN Cause Code Override feature is operating correctly, enter the debug q931
command. The debug q931 command displays a report of any configuration irregularities.
Command Purpose
Router(config-if)# isdn sending-complete Includes the Sending Complete information element in the
outgoing call Setup message.
Command Purpose
Router(config)# dialer called DNIS:subaddress Binds a DNIS to an ISDN subaddress.
Note This command allows multiple binds between a dialer profile and an ISDN B channel. The configuration
requires an ISDN subaddress, which is used in Europe and Australia.
See the section “DNIS-plus-ISDN-Subaddress Binding Example” later in this chapter for a configuration
example.
Command Purpose
Router(config-if)# isdn v110 only [databits {5 | 7 Selectively accepts incoming V.110 calls based on data bit,
| 8}] [parity {even | mark | none | odd | space}] parity, and stop bit modem communication settings.
[stopbits {1 | 1.5 | 2}]
Command Purpose
Router(config-if)# no isdn v110 padding Disables the padded modem speed report required by the V.110
modem standard.
Step 1 Set up the ISDN lines and ports as described in the sections “Configuring the ISDN BRI Switch”and
“Specifying Interface Characteristics for an ISDN BRI” or for ISDN PRI, see the section “How to
Configure ISDN PRI” in the chapter “” later in this manual.
Step 2 Configure DDR on a selected interface, as described in the “Dial-on-Demand Routing Configuration”
part of this publication.
To begin DDR network addressing, use the following command in interface configuration mode
:
Command Purpose
Router(config-if)# dialer map protocol Defines the remote recipient’s protocol address, host name, and
next-hop-address name hostname spc [speed 56 | dialing string; indicates semipermanent connections; optionally,
64] [broadcast] dial-string[:isdn-subaddress]
provides the ISDN subaddress; and sets the dialer speed to 56 or
64 kbps, as needed.
Note Once an ISDN BRI interface is configured for access over leased lines, it is no longer a dialer interface,
and signaling over the D channel no longer applies. Although the interface is called interface bri n, it
is configured as a synchronous serial interface having the default High-Level Data Link (HDLC)
encapsulation. However, the Cisco IOS commands that set the physical characteristics of a serial
interface (such as the pulse time) do not apply to this interface.
Command Purpose
Step 1 Router(config)# isdn switch-type Configures the BRI switch type, as specified by the local
switch-type service provider.
Step 2 Router(config)# isdn leased-line bri Specifies the BRI interface number.
number 128
To disable leased-line service if you no longer want to support it on a specified ISDN BRI, use the
following command in global configuration mode:
Command Purpose
Router(config)# no isdn leased-line bri number Removes leased line configuration from a specified ISDN BRI
interface.
Note This feature is not supported on the Cisco 2500 series router because its BRI hardware does not support
channel aggregation.
To enable leased-line service at 128 kbps on a specified ISDN BRI, use the following commands in
global configuration mode:
Command Purpose
Step 1 Router(config)# isdn switch-type Selects the service provider switch type.
switch-type
Step 2 Router(config)# isdn leased-line bri Configures a specified BRI for access over leased lines.
number 128
To complete the configuration of the interface, see the chapter “Configure a Synchronous Serial Ports”
in this publication.
To remove the leased-line service configuration from a specified ISDN BRI, use the following command
in global configuration mode:
Command Purpose
Router(config)# no isdn leased-line bri number Removes leased-line configuration from a specified ISDN
BRI interface.
Command Purpose
Router> show interfaces bri number Displays information about the physical attributes of the
ISDN BRI B and D channels.
Cisco 7200 series routers only
Router> show interfaces bri slot/port
Router> show controllers bri number Displays protocol information about the ISDN B and
D channels.
Cisco 7200 series routers only
Router> show controllers bri slot/port
Router> show isdn {active | history | memory | status Displays information about calls, history, memory, status,
| timers} and Layer 2 and Layer 3 timers.
Router> show dialer interface bri number Obtains general diagnostic information about the specified
interface.
Command Purpose
Router# show controllers bri number Checks Layer 1 (physical layer) of the BRI.
Router# debug q921 Checks Layer 2 (data link layer).
Router# debug isdn events Checks Layer 3 (network layer).
Router# debug q931
Router# debug dialer
Router# show dialer
Refer to the Cisco IOS Debug Command Reference for more information about the debug commands.
encapsulation ppp
dialer map ip 10.1.1.2 name coaster 14195291357
dialer map ip 10.1.1.3 name roaster speed 56 14098759854
ppp authentication chap
ppp multilink
dialer-group 1
interface BRI 1
no ip address
encapsulation ppp
dialer rotary-group 1
interface BRI 2
encapsulation ppp
dialer rotary-group 1
interface BRI 3
no ip address
encapsulation ppp
dialer rotary-group 1
interface BRI 4
encapsulation ppp
dialer rotary-group 1
interface Dialer 0
description Dialer group controlling the BRIs
ip address 10.1.1.1 255.255.255.0
encapsulation ppp
dialer map ip 10.1.1.2 name angus 14802616900
dialer-group 1
ppp authentication chap
Compression Examples
The following example enables predictor compression on BRI 0:
interface BRI0
description Enables predictor compression on BRI 0
ip address 10.1.1.1 255.255.255.0
encapsulation ppp
dialer map ip 10.1.1.2 name bon 14195291357
compress predictor
ppp authentication chap
dialer-group 1
For more configuration examples of voice calls over ISDN, refer to the Cisco IOS Voice, Video, and Fax
Configuration Guide.
For additional configuration examples, see the sections “Dynamic Multiple Encapsulations” and
“Verifying the Dynamic Multiple Encapsulations Feature” in the chapter “” in this publication.
The following example configures the BRI 0 interface for PPP encapsulation:
interface bri 0
ip address 10.1.1.2 255.255.255.0
encapsulation ppp
bandwidth 128
Feature History
Release Modification
12.2(4)T This feature was introduced on the Cisco 800 series routers.
This document describes the Leased and Switched BRI Interfaces for ETSI NET3 feature. It includes the
following sections:
• Feature Overview, page 363
• Supported Platforms, page 364
• Supported Standards, MIBs, and RFCs, page 365
• Prerequisites, page 365
• Configuration Tasks, page 365
• Monitoring and Maintaining Leased and Switched BRI Interfaces for ETSI NET3, page 367
• Configuration Examples, page 368
• Command Reference, page 368
Feature Overview
In most BRI configurations, both B channels of a leased-line service are used as point-to-point leased lines
with the D channel disabled. Data transmission over the B channels is no different than data transmission
over point-to-point leased lines.
A new feature available in Cisco IOS Release 12.2(4)T, Leased and Switched BRI Interfaces for ETSI
NET3, allows one BRI B channel on a European Telecommunications Standards Institute (ETSI) NET3
switch to be configured as a leased line, and the second B channel to be configured as a standard ISDN or
dial interface and used as a switched channel to the Public Switched Telephone Network (PSTN). When the
Leased and Switched BRI Interfaces for ETSI NET3 feature is configured, one B channel functions as a
point-to-point 64-kbps leased line and the other B channel functions as a circuit-switched channel using the
D channel to provide the signaling features available for the ETSI NET3 signaling protocol.
Benefits
The Leased and Switched BRI Interfaces for ETSI NET3 feature allows Internet service providers to
split one ISDN line into a leased-line interface and a dialer interface, thereby increasing connection
capability without increasing cost.
Restrictions
The following restrictions apply to the Leased and Switched BRI Interfaces for ETSI NET3 feature:
• Only the ETSI NET3 signaling protocol is supported at a line speed of 64 kbps.
• Only one ISDN call can be active at any time, and the call must verify that the leased line is not used
to bring up a second call.
• The ETSI NET3 switch cannot be configured for a leased line when the U interface is used instead
of the S/T interface; doing so prevents the line protocol from coming up.
Related Documents
• Cisco IOS Dial Technologies Command Reference, Release 12.2
• Cisco IOS Dial Technologies Configuration Guide, “ISDN Configuration” part, Release 12.2
Supported Platforms
• Cisco 800 series
MIBs
The fillin_isdnBearerEntry() – isdnBearerTable manipulation MIB function is supported. See the
“RFCs” section for more information.
To obtain lists of supported MIBs by platform and Cisco IOS release, and to download MIB modules,
go to the Cisco MIB website on Cisco.com at the following URL:
http://www.cisco.com/public/sw-center/netmgmt/cmtk/mibs.shtml
RFCs
• RFC 2127, ISDN Management Information Base using SMIv2
RFC 2127 states that the following be reported for the leased line B channel: The isdnBearerTable
MIB entry for the leased line B channel will need to be altered, specifically the value of
isdnBearerChannelType MIB will be set to leased(2). This alteration involves a function in
isdn/sr_ietf_isdmib.c, namely the fillin_isdnBearerEntry() — isdnBearerTable manipulation MIB
function.
• RFC 1573, Evolution of the Interfaces Group of MIB-II
RFC 1573 makes no explicit mention of changes to the ifEntry for a B channel set to leased line. It
is proposed that the ifAdminStatus and ifOperStatus functions remain in the UP(1) state.
Prerequisites
Before starting the configuration tasks in this document, review the chapter “Configuring ISDN BRI”
and the section “Configuring ISDN BRI for Leased-Line Service,” for more complete details on
configuring a BRI. This chapter is in the part “ISDN Configuration” in the Cisco IOS Dial Technologies
Configuration Guide, Release 12.2.
Configuration Tasks
See the following sections for configuration tasks for the Leased and Switched BRI Interfaces for ETSI
NET3 feature. Each task in the list is identified as either required or optional:
• Configuring Leased and Switched BRI Interfaces for ETSI NET3 (required)
• Verifying Leased and Switched BRI Interfaces for ETSI NET3 (optional)
Command Purpose
Step 1 Router(config)# isdn switch-type basic-net3 Configures the ETSI NET3 BRI switch type.
Step 2 Router(config)# isdn leased-line brinumber/number {b1 | b2} Splits a line for both ISDN and 64-kbps
leased-line service.
Note In the following verification procedure, BRI channel B1(the BRI0:1 interface) is configured for
leased-line service and channel B2 (the BRI0:2 interface) is configured for ISDN.
To verify that each BRI channel is configured correctly, perform the following steps:
Step 1 Enter the show isdn status EXEC command and check the value in The Free Channel Mask field to
verify that only one channel has been allocated for ISDN. The Free Channel Mask field displays
0x80000000 when there is an active call. If no call is active, The Free Channel Mask field displays
0x80000001 and 0x80000002 for the B1 and B2 leased line configurations, respectively.
Router# show isdn status
Step 2 Enter the show dialer EXEC command to display dialer interface statistics. Check that there is no entry
for the BRI0:1 interface in the display:
Router# show dialer
Troubleshooting Tips
To test the BRI configurations, use the following commands in EXEC mode, as needed:
Command Purpose
Router# show controllers bri number Checks Layer 1 of the BRI.
Router# debug q921 Checks Layer 2 of the BRI.
Router# debug dialer Checks dialer events on the BRI.
Router# debug isdn events Checks call control events on the BRI.
Router# debug q931 Checks Layer 3 of the BRI.
Refer to the Cisco IOS Debug Command Reference for more information about the debug commands.
Command Purpose
Router# show isdn status Displays Layer 1, Layer 2, and Layer 3 status of the D channel
and channel mask information.
Router# show interfaces bri x:y status Displays status of the ISDN BRI channel configured as either a
leased line or dialer B-channel interface.
Router# show dialer Displays status of the ISDN BRI channel configured as a dialer
interface.
Configuration Examples
This section provides an example of how to configure the Leased and Switched BRI Interfaces for ETSI
NET3 feature.
interface bri0/0:2
ip address 10.1.1.2 255.255.255.0
encapsulation ppp
no ip address
Command Reference
The following modified commands are pertinent to this feature. To see the command pages for these
commands and other commands used with this feature, go to the Cisco IOS Master Commands List,
Release 12.4, at http://www.cisco.com/univercd/cc/td/doc/product/software/ios124/124mindx/
124index.htm.
• isdn leased-line bri
Glossary
European Telecommunications Standards Institute—See ETSI.
ETSI—European Telecommunications Standards Institute. Organization created by European Post,
Telephone, and Telegraph (PTT) groups and the European Community (EC) to propose
telecommunications standards for Europe.
leased line—Transmission line reserved by a communications carrier for the private use of a customer.
switched—General term applied to an electronic or mechanical device that allows a connection to be
established as necessary and terminated when there is no longer a session to support.
The ISDN BCAC and Round-Robin Channel Selection Enhancements feature allows more dynamic
control of the ISDN B channels by providing additional B-Channel Availability Control (BCAC)
functionality for configuring message signaling, and an enhanced channel selection scheme that adds
round-robin configuration to the existing ascending and descending channel selection schemes already
available.
Finding Support Information for Platforms and Cisco IOS Software Images
Use Cisco Feature Navigator to find information about platform support and Cisco IOS software image
support. Access Cisco Feature Navigator at http://www.cisco.com/go/fn. You must have an account on
Cisco.com. If you do not have an account or have forgotten your username or password, click Cancel at
the login dialog box and follow the instructions that appear.
Contents
• Prerequisites for ISDN BCAC Enhancements, page 372
• Information About the ISDN BCAC and Round-Robin Channel Selection Enhancements, page 372
• How to Configure the ISDN Enhancements, page 373
• Configuration Examples for ISDN BCAC and Round-Robin Channel Selection Enhancements,
page 379
• Additional References, page 379
• Command Reference, page 381
BCAC Enhancements
BCAC is a service message signaling procedure used to control the availability of ISDN B channels.
BCAC provides a coordinated capability between both ends of a PRI to simultaneously preclude
selection of specified B channels for outgoing calls, and reject calls (if channel negotiation is employed,
calls may go on another channel) for those same channels. The basic BCAC functionality for the
handling of SERV and SERV ACK messages already exists on Cisco routers. In Cisco IOS Release
12.3(1), the software has been enhanced with the following BCAC functionality:
• Processing of SERV and SERV ACK messages. Even though these messages are already handled in
the Cisco IOS software, their processing has been enhanced to more closely align with the behavior
described in the standards.
• Provides a mechanism to allow the retransmission of SERV messages.
• Handles SERV message collision cases.
• Provides service status audits for various audit triggers.
• Provides an option that when set triggers the exchange of service messages on all channels of the
interface when the router is rebooted and when the signaling link comes up.
• Provides a mechanism so that if there is a flood of service messages that need to be sent, the service
messages can be throttled to avoid losing them.
• Initializes B-channel service status upon provisioning.
SUMMARY STEPS
1. enable
2. configure terminal
3. interface serial port:channel
4. isdn bcac service audit
5. isdn bcac service audit trigger number
6. isdn bcac service audit interface
DETAILED STEPS
Example:
Router# configure terminal
Step 3 interface serial port:channel Enters interface configuration mode on the specified serial
port and channel.
Example:
Router(config)# interface serial 2:23
Step 4 isdn bcac service audit Enables BCAC service audits.
Example:
Router(config-if)# isdn bcac service audit
Step 5 isdn bcac service audit trigger number Enables individual BCAC service audit triggers.
Example:
Router(config-if)# isdn bcac service audit
trigger 2
Step 6 isdn bcac service audit interface Specifies that BCAC service audits need to be triggered on
the entire interface.
Example:
Router(config-if)# isdn bcac service audit
interface
Examples
The following example shows how to enable service audits on serial interface 4:23:
interface serial 4:23
isdn bcac service audit
The following example shows how to disable service trigger 4 on serial interface 4:23:
interface serial 4:23
no isdn bcac service audit trigger 4
See the command page for the isdn bcac service audit trigger command for a list of the triggers that
are set.
The following example shows how to configure service audits on the entire interface:
interface serial 4:23
isdn bcac service audit interface
SUMMARY STEPS
1. enable
2. configure terminal
3. interface serial port:channel
4. isdn bcac service update provision
5. isdn bcac service update linkup
DETAILED STEPS
Example:
Router# configure terminal
Step 3 interface serial port:channel Enters interface configuration mode on the specified serial
port and channel.
Example:
Router(config)# interface serial 2:23
Step 4 isdn bcac service update provision Enables BCAC service status functionality for provisioning
the B channels.
Example:
Router(config-if)# isdn bcac service update
provision
Step 5 isdn bcac service update linkup Triggers updates of the BCAC service states between peer
nodes through exchange of SERV and SERV ACK
messages.
Example:
Router(config-if)# isdn bcac service update
linkup
Examples
The following example shows how to enable the SERV status message for provisioning the B channels
on serial interface 4:23:
interface serial 4:23
isdn bcac service update provision
The following example shows how to trigger service state updates on serial interface 4:23:
interface serial 4:23
isdn bcac service update linkup
SUMMARY STEPS
1. enable
2. configure terminal
3. interface serial port:channel
4. isdn bcac service timer timer-value
5. isdn bcac service retry max retries
6. isdn bcac service retry in-serv-on-fail
DETAILED STEPS
Example:
Router# configure terminal
Step 3 interface serial port:channel Enters interface configuration mode on the specified serial
port and channel.
Example:
Router(config)# interface serial 2:23
Step 4 isdn bcac service timer timer-value Changes the value of the BCAC T3M1 or T323 service
message timer.
Example: • Valid range is from 500 to 120000 ms, and the default
Router(config-if)# isdn bcac service timer 600 is 120000 ms.
Examples
The following example shows how to configure an option whereby, on service message exchange failure,
the service state of the concerned channel or channels will be set to In-Service:
interface serial 2:23
isdn bcac service retry in-serv-on-fail
The following example shows how to set the maximum number of service message retransmissions on
serial interface 2:23 to 50:
interface serial 2:23
isdn bcac service retry max 50
The following example shows how to change the service timers to 600 ms on serial interface 2:23:
interface serial 2:23
isdn bcac service timer 600
SUMMARY STEPS
1. enable
2. configure terminal
3. interface serial port:channel
4. isdn bchan-number-order {ascending | descending} [round-robin]
DETAILED STEPS
Example:
Router# configure terminal
Step 3 interface serial port:channel Enters interface configuration mode on the specified serial
port and channel.
Example:
Router(config)# interface serial 2:23
Step 4 isdn bchan-number-order {ascending | Configures an ISDN PRI interface to make outgoing call
descending} [round-robin] selection in ascending or descending order.
• The optional round-robin keyword adds round-robin
Example: selection functionality to the selection order.
Router(config-if)# isdn bchan-number-order
ascending round-robin
Examples
The following example configures the outgoing B channel selection order on a PRI interface to be
round-robin in ascending order:
interface serial 5:10
isdn bchan-number-order ascending round-robin
SUMMARY STEPS
1. enable
2. configure terminal
3. isdn logging
DETAILED STEPS
Example:
Router# configure terminal
Step 3 isdn logging Enables logging of ISDN syslog messages.
Example:
Router(config)# isdn logging
Examples
The following example shows how to configure ISDN syslog logging:
isdn logging
Additional References
For additional information related to the ISDN enhancements, see the following sections:
• Related Documents, page 380
• Standards, page 380
• MIBs, page 380
• RFCs, page 380
• Technical Assistance, page 381
Related Documents
Related Topic Document Title
ISDN PRI configuration Refer to the “Configuring ISDN PRI” chapter in the “Signaling
Configuration” part of the Cisco IOS Dial Technologies
Configuration Guide, Release 12.3.
ISDN PRI configuration commands Cisco IOS Dial Technologies Command Reference, Release 12.3.
ISDN PRI configuration for voice, video, and fax Refer to the chapter “Configuring ISDN Interfaces for Voice ” in the
Cisco IOS Voice, Video, and Fax Configuration Guide, Release 12.3.
ISDN PRI voice, video, and fax configuration Cisco IOS Voice, Video, and Fax Command Reference, Release 12.3
commands
Standards
Standards1 Title
AT&T PRI Technical Report 41459–AT&T ISDN Primary Rate Interface and
Special Application Specification; “User Network Interface
Description,” 1999.
National ISDN Council (NIC) PRI SR (Special Report)-NWT-002343–ISDN Primary Rate Interface
Generic Guidelines for Customer Premises Equipment, June 1993.
SR-3887–National ISDN Primary Rate Interface Customer
Premises Equipment Generic Guidelines, 1996.
Nortel PRI NIS (Network Interface Specification)-A211-1–DMS100 ISDN
Primary Rate Network User Interface, 1993.
1. Not all supported standards are listed.
MIBs
MIBs MIBs Link
None To obtain lists of supported MIBs by platform and Cisco IOS
release, and to download MIB modules, go to the Cisco MIB website
on Cisco.com at the following URL:
http://www.cisco.com/public/sw-center/netmgmt/cmtk/mibs.shtml
RFCs
RFCs Title
None —
Technical Assistance
Description Link
Technical Assistance Center (TAC) home page, http://www.cisco.com/public/support/tac/home.shtml
containing 30,000 pages of searchable technical
content, including links to products, technologies,
solutions, technical tips, and tools. Registered
Cisco.com users can log in from this page to access
even more content.
Command Reference
The following new and modified commands are pertinent to this feature. To see the command pages for
these commands and other commands used with this feature, go to the Cisco IOS Master Commands List,
Release 12.4, at http://www.cisco.com/univercd/cc/td/doc/product/software/ios124/124mindx/
124index.htm.
New Commands
• isdn bcac service audit
• isdn bcac service audit interface
• isdn bcac service audit trigger
• isdn bcac service retry in-serv-on-fail
• isdn bcac service retry max
• isdn bcac service timer
• isdn bcac service update linkup
• isdn bcac service update provision
• isdn logging
Modified Commands
• isdn bchan-number-order
• isdn protocol-emulate (dial)
Glossary
PBX—private branch exchange.
RESTART—restart message.
RESTART ACK—restart acknowledge message.
STATUS ENQ—status enquiry message.
SERV—service message.
SERV ACK—service acknowledge message.
Note Refer to the Internetworking Terms and Acronyms for terms not included in this glossary.
Cisco IOS software offers two solutions to send virtual asynchronous traffic over ISDN:
• Using International Telecommunication Union Telecommunication Standardization Sector (ITU-T)
Recommendation V.120, which allows for reliable transport of synchronous, asynchronous, or bit
transparent data over ISDN bearer channels.
• Using ITU-T Recommendation X.75, which allows a system with an ISDN terminal adapter
supporting asynchronous traffic over Link Access Procedure, Balanced (LAPB) to call into a router
and establish an asynchronous PPP session. This method of asynchronous traffic transmission is also
called ISDN Link Access Procedure, Balanced-Terminal Adapter (LAPB-TA).
A virtual asynchronous interface (also known as vty-async) is created on demand to support calls that
enter the router through a nonphysical interface. For example, asynchronous character stream calls
terminate or land on nonphysical interfaces. These types of calls include inbound Telnet, local-area
transport (LAT), PPP over character-oriented protocols (such as V.120 or X.25), and LAPB-TA and
packet assembler/disassembler (PAD) calls.
Virtual asynchronous interfaces are not user configurable; rather, they are dynamically created and torn
down on demand. A virtual asynchronous line is used to access a virtual asynchronous interface. Refer
to the section “Virtual Asynchronous Interfaces” in the chapter “Overview of Dial Interfaces,
Controllers, and Lines” in this publication for more overview information about virtual asynchronous
interfaces. Refer to the section “Enabling Asynchronous Functions on Virtual Terminal Lines” in the
chapter “Configuring Protocol Translation and Virtual Asynchronous Devices” in the Cisco IOS
Terminal Services Configuration Guide, for additional virtual asynchronous interface configuration
information.
This chapter describes how to configure virtual asynchronous traffic over ISDN lines. It includes the
following main sections:
• Recommendation V.120 Overview
• How to Configure V.120 Access
• Configuration Example for V.120
• ISDN LAPB-TA Overview
• How to Configure ISDN LAPB-TA
• Configuration Example for ISDN LAPB-TA
To identify the hardware platform or software image information associated with a feature, use the
Feature Navigator on Cisco.com to search for information about the feature or refer to the software
release notes for a specific release. For more information, see the “Identifying Supported Platforms”
section in the “Using Cisco IOS Software” chapter.
For a complete description of the commands in this chapter, refer to the Cisco IOS Dial Technologies
Command Reference. To locate documentation of other commands that appear in this chapter, use the
command reference master index or search online.
To configure an ISDN BRI or PRI interface to answer all incoming calls as V.120, use the following
commands beginning in global configuration mode:
Command Purpose
Step 1 Cisco 4000 series routers only Configures the ISDN BRI interface and begins
Router(config)# interface bri number interface configuration mode.
or
Cisco 7200 series routers only
Router(config)# interface bri slot/port
Step 2 Router(config)# interface serial e1 Configures the ISDN PRI D channel and begins
controller-number:15 interface configuration mode.
or
Router(config)# interface serial t1
controller-number:23
Step 3 Router(config-if)# isdn all-incoming-calls-v120 Configures the interface to answer all calls as
V.120.
Command Purpose
Router(config-if)# autodetect encapsulation v120 Enables automatic detection of encapsulation type
on the specified interface.
You can specify one or more encapsulations to detect. Cisco IOS software currently supports automatic
detection of PPP and V.120 encapsulations.
To enable asynchronous protocol features on vty lines, use the following command in global
configuration mode:
Command Purpose
Router(config)# vty-async Configures all vty lines to support asynchronous protocol
features.
This task enables PPP on vty lines on a global basis on the router. If you prefer instead to configure PPP
on a per-vty basis, use the translate command, which is described in the Cisco IOS Dial Technologies
Command Reference.
• PPP over LAPB-TA (and V.120) connections impose a greater overhead on the router than
synchronous PPP over ISDN. The number of simultaneous sessions can be limited by dedicating a
pool of virtual terminals to these protocols and limiting the number of virtual terminals in the pool.
• Multilink PPP compression is not supported.
Command Purpose
Step 1 Router(config)# vty-async Creates a virtual asynchronous interface.
Step 2 Router(config)# vty-async virtual-template 1 Applies virtual template to the virtual asynchronous
interface.
Step 3 Router(config)# interface virtual-template 1 Creates a virtual interface template and enters
interface configuration mode.
Step 4 Router(config-if)# ip unnumbered Ethernet0 Assigns an IP address to the virtual interface
template.
Step 5 Router(config-if)# encapsulation ppp Enables encapsulation on the virtual interface
template.
Step 6 Router(config-if)# no peer default ip address Disables an IP address from a pool to the device
connecting to the virtual access interface
Step 7 Router(config-if)# ppp authentication chap Enables the CHAP protocol for PPP authentication.
Step 8 Router(config-if)# exit Exits to global configuration mode.
Command Purpose
Step 9 Router(config)# username user1 password home Specifies CHAP password to be used to authenticate
calls from caller “user1.”
Step 10 Router(config)# interface Serial0:236 Enters interface configuration mode for a D-channel
serial interface.1
Step 11 Router(config-if)# encapsulation ppp Configures PPP encapsulation as the default.
Step 12 Router(config-if)# dialer-group 1 Specifies the dialer group belonging to the interface.
Step 13 Router(config-if)# ppp authentication chap Enables the CHAP protocol for PPP authentication.
Step 14 Router(config-if)# autodetect encapsulation lapb-ta Enables autodetect encapsulation for LAPB-TA
protocols.
Step 15 Router(config)# line vty 0 32 Configures a range of 32 vty lines starting with vty0.
Step 16 Router(config-line)# transport input telnet lapb-ta Defines which protocol to use to connect to a specific
line of the access server.
1. The D channel is the signaling channel.
Building configuration...
Current configuration:
!
version 12.0
service timestamps debug datetime msec localtime
service timestamps log datetime msec localtime
no service password-encryption
service udp-small-servers
service tcp-small-servers
!
hostname Router
...(output omitted)
interface Serial0:23
description ENG PBX BRI num.:81063
no ip address
no ip directed-broadcast
encapsulation ppp
no ip route-cache
dialer pool-member 1
autodetect encapsulation ppp lapb-ta
isdn switch-type primary-5ess
no peer default ip address
no fair-queue
no cdp enable
ppp authentication chap
...(output omitted)
!
end
The following example treats the LAPB-TA and V.120 calls identically by immediately starting a PPP
session without asking for username and password and relying on PPP authentication to identify the
caller:
vty-async
vty-async virtual-template 1
interface Loopback0
ip address 10.2.2.1 255.255.255.0
exit
interface BRI3/0
encapsulation ppp
autodetect encapsulation ppp lapb-ta v120
exit
interface Virtual-Template1
ip unnumbered Loopback0
ppp authentication chap
exit
ip local pool default 10.2.2.64 10.2.2.127
line vty 0 2
password <removed>
login
transport input telnet
exit
line vty 3 4
no login
transport input lapb-ta v120
autocommand ppp neg
exit
end
This chapter describes how to configure the Modem over ISDN BRI feature. It includes the following
main sections:
• Modem over ISDN BRI Overview
• How to Configure Modem over ISDN BRI
• Verifying ISDN BRI Interface Configuration
• Configuration Examples for Modem over ISDN BRI
Before beginning the tasks in this chapter, check your system for the following hardware and software:
• At least one of the following digital modem network modules. The number in the model name
indicates the number of digital modems that can be connected to the module.
– NM-6DM
– NM-12DM
– NM-18DM
– NM-24DM
– NM-30DM
These digital modem network modules do not have their own network connections, but instead
handle analog calls passing through other router interfaces. BRI modules can provide their ISDN
connectivity. Other modules, such as Ethernet, can provide connectivity to the LAN. The digital
modem module acts as a pool of available modems that can be used for both incoming and outgoing
calls. Digital modem network modules do not support BRI voice interface cards or wide-area
network (WAN) interface cards.
• At least one of the following Cisco BRI network modules:
– NM-4B-S/T: 4-port ISDN BRI network module, minimum version 800-01236-03
– NM-4B-U: 4-port ISDN BRI with integrated network termination 1 (NT-1) network module,
minimum version 800-01238-06
– NM-8B-S/T: 8-port ISDN BRI network module, minimum version 800-01237-03
– NM-8B-U: 8-port ISDN BRI with integrated NT-1 network module, minimum version
800-01239-06
The version level is available from the show diag command, which displays the version number as
the part number.
If your BRI network module is a version lower than those cited or you need more details, refer to
the Cisco.com Field Notice titled Using Digital Modems with the Cisco 3600 Basic Rate Interface
(BRI) Network Module Upgrade in the Access Products index. If your existing Cisco BRI network
module is one of those listed and does not support the Modem over ISDN BRI feature, Cisco will
upgrade the module at no charge.
• To support the Modem over ISDN BRI feature, V.90 modem portware—for instructions on
downloading this software or obtaining it otherwise, refer to the Cisco 3600 Series Modem Portware
Upgrade Configuration Note on Cisco.com.
Before you can configure a Cisco 3640 router to provide Modem over ISDN BRI connectivity, you must
also perform the following tasks:
• Obtain BRI service from your telecommunications provider. The BRI line must be provisioned at
the switch to support voice calls.
• Install a 4-port or 8-port BRI network module into your Cisco router. Depending on the type of
network module and your BRI service, you might also need to install an external NT-1 for S/T
interfaces.
• Install a supported digital modem network module into the Cisco 3640 router.
• After the system comes up, make sure enough buffers are in the free list of the buffer pool that
matches the maximum transmission unit (MTU) of your BRI interface. If not, you must reconfigure
buffers so the BRI interfaces function properly. To check the MTU of your interfaces, use the show
interfaces bri command. The show buffers command displays the free buffer space. Use the
buffers global configuration command to make adjustments to initial buffer pool settings and to the
limits at which temporary buffers are created and destroyed.
For more information about the physical characteristics of the BRI network modules and their digital
modem support, or instructions on how to install the network or modem modules, either refer to the
Cisco 3600 series Network Module Hardware Installation Guide that came with your BRI network
module or view the up-to-date information on CCO.
To identify the hardware platform or software image information associated with a feature, use the
Feature Navigator on Cisco.com to search for information about the feature or refer to the software
release notes for a specific release. For more information, see the “Identifying Supported Platforms”
section in the “Using Cisco IOS Software” chapter.
For a complete description of the Modem over ISDN BRI commands in this chapter, refer to the
Cisco IOS Dial Technologies Command Reference. To locate documentation of other commands that
appear in this chapter, use the command reference master index or search online.
Home office
Small business
POTS
lines
Ethernet
Optional WAN to
headquarters PSTN
BRI Mobile
17271
Cisco 3640 router with 4- or 8-port
module and internal digital modems
The following are benefits of using the Modem over ISDN BRI feature:
• Supports cost-effective and readily available BRI service.
• Provides remote modem users with rapid Internet and LAN/WAN access.
• Allows flexible remote access application support.
Command Purpose
Step 1 Router(config)# isdn switch-type switch-type Configures the global ISDN switch type to match the
service provider switch type. For a list of keywords, see
Table 47.
Step 2 Router(config)# isdn tei [first-call | powerup] Configures when the ISDN TEI negotiation occurs. If
this command is not used, negotiation occurs when the
router is powered up.
The first-call option is primarily used in European
ISDN switch types, such as NET3 networks. The
powerup option should be used in most other locations.
Command Purpose
Step 3 Router(config)# interface bri slot/port Begins interface configuration mode to configure
parameters for the specified interface.
slot is the location of the BRI module. Valid values are
from 0 to 3.
port is an interface number. Valid values are from 0 to 7
if the module is an 8-port BRI network module, or from
0 to 4 if the module is a 4-port BRI network module.
Step 4 Router(config-if)# ip address ip-address mask Specifies an IP address and subnet for the interface. You
can also specify that there is no IP address. For
information about IP addressing, see the Release 12.2
Cisco IOS IP Configuration Guide publication.
Step 5 Router(config-if)# encapsulation ppp Enables PPP encapsulation on the BRI interface. PPP
encapsulation is configured for most ISDN
communication.
If the router needs to communicate with devices that
require a different encapsulation protocol, needs to
detect encapsulation on incoming calls automatically, or
needs to send traffic over a Frame Relay or X.25
network, see the chapter “Configuring X.25 on ISDN”
later in this part, and the chapters in the
Dial-on-Demand Routing Configuration part of this
publication for information.
Step 6 Router(config-if)# dialer map protocol (Most locations) Defines the remote protocol address of
next-hop-address name hostname speed 56|64 the recipient, host name, and dialing string; optionally,
dial-string[:isdn-subaddress]
provide the ISDN subaddress; set the dialer speed to 56
or or 64 kbps, as needed.
Router(config-if)# dialer map protocol (Germany) Use the spc keyword to enable ISDN
next-hop-address name hostname spc [speed 56 | 64] semipermanent connections.
[broadcast] dial-string[:isdn-subaddress]
Step 7 Router(config-if)# dialer-group group-number Assigns the interface to a dialer group to control access
to the interface.
Step 8 Router(config-if)# dialer-list dialer-group list Associates the dialer group number with an access list
access-list-number number.
Step 9 Router(config-if)# access-list access-list-number Defines an access list permitting or denying access to
{deny | permit} protocol source address specified protocols, sources, or destinations. Permitted
source-mask destination destination-mask
packets cause the router to place a call to the destination
protocol address.
Step 10 Router(config-if)# no ip-directed broadcast (Optional) Disables the translation of directed broadcast
to physical broadcasts.
Step 11 Router(config-if)# isdn switch-type switch-type (Optional) Configures the interface ISDN switch type to
match the service provider switch type. The interface
ISDN switch type overrides the global ISDN switch
type on the interface.
For a list of keywords, refer to Table 47.
Command Purpose
Step 12 Router(config-if)# isdn tei [first-call | (Optional) Determines when ISDN TEI negotiation
powerup] occurs for an individual interface. This overrides the
global configuration command.
Step 13 Router(config-if)# isdn spid1 spid-number [ldn] Specifies a service profile identifier (SPID) and local
directory number for the B1 channel. Currently, only the
DMS-100 and NI-1 switch types require SPIDs.
Although the Lucent 5ESS switch type might support a
SPID, we recommend that you set up that ISDN service
without SPIDs.
Step 14 Router(config-if)# isdn spid2 spid-number [ldn] Specifies a SPID and local directory number for the B2
channel.
Step 15 Router(config-if)# isdn caller number (Optional) Configure caller ID screening.
Step 16 Router(config-if)# isdn answer1 (Optional) Configures called-party number verification
[called-party-number][:subaddress] for a called-party number or subaddress number in the
incoming setup message.
Step 17 Router(config-if)# isdn calling-number (Optional) Specifies the calling-party number.
calling-number
Step 18 Router(config-if)# isdn not-end-to-end [56 | 64] (Optional) Configures the speed for incoming calls
recognized as not ISDN end-to-end.
Step 19 Router(config-if)# isdn incoming-voice modem Routes incoming voice calls to the modem and treats
them as analog data. This step is required for the Modem
over ISDN BRI feature.
Step 20 Router(config-if)# isdn disconnect-cause Overrides specific cause codes such as modem
{cause-code-number | busy | not available} availability and resource pooling that are sent to the
switch by ISDN applications. When the isdn
disconnect-cause command is implemented, the
configured cause codes are sent to the switch; otherwise,
the default cause codes of the application are sent.
The cause-code-number argument sends a cause code
number (submitted as integer 1 through 127) to the
switch.
The busy keyword sends the USER BUSY code to the
switch.
The not available keyword sends the CHANNEL NOT
AVAILABLE code to the switch.
Step 21 Router(config-if)# isdn fast-rollover-delay (Optional) Configures a delay between fast rollover
seconds dials.
Step 22 Router(config-if)# isdn sending-complete (Optional) Configures the BRI interface to include the
Sending Complete information element in the outgoing
call Setup message. Used in some geographic locations,
such as Hong Kong and Taiwan, where the sending
complete information element is required in the
outgoing call setup message.
See the section “Configuration Examples for Modem over ISDN BRI” at the end of this chapter for
configuration examples.
Note The show startup-config shows the configuration stored in NVRAM or in a location specified by the
CONFIG_FILE environment variable.
The following example shows some of the command output that is relevant to BRI configuration tasks.
The bold text in the example are the results of configuration steps such as those shown in the section
“How to Configure Modem over ISDN BRI” earlier in this chapter.
Building configuration...
Current configuration:
!
version 12.0
no service udp-small-servers
service tcp-small-servers
!
hostname Router
!
enable secret 5 $1$c8xi$tObplXsIS.jDeo43yZgq50
enable password xxx
!
username xxxx password x 11x5xx07
no ip domain-lookup
ip host Labhost 172.17.12.1
ip host Labhost2 172.17.12.2
ip name-server 172.19.169.21
!
interface Ethernet0
ip address 172.17.12.100 255.255.255.192
no ip mroute-cache
no ip route-cache
no mop enabled
.
.
.
interface BRI1/7
description (408) 555-3777
ip address 10.1.1.26 255.255.255.1
no ip directed-broadcast
encapsulation ppp
no ip route-cache
no ip mroute-cache
no keepalive
shutdown
dialer idle-timeout 180
dialer map ip 10.1.1.9 name MDial1 14085550715
dialer map ip 10.1.1.14 name MDial2 14085553775
dialer-group 1
isdn switch-type basic-5ess
isdn incoming-voice modem
isdn disconnect-cause busy
no fair-queue
no cdp enable
ppp authentication chap
ppp multilink
.
.
.
!
interface Group-Async1
ip unnumbered Loopback0
no ip directed-broadcast
ip tcp header-compression passive
async mode interactive
peer default ip address pool default
no fair-queue
group-range 65 70
hold-queue 10 in
!
router igrp 109
network 172.21.0.0
!
ip local pool local 172.21.50.85 172.21.50.89
ip local pool default 10.1.1.1 10.1.1.253
ip classless
ip route 0.0.0.0 0.0.0.0 172.21.48.1
!
!
map-class dialer VOICE
dialer voice-call
!
map-class dialer DATA
dialer-list 1 protocol ip list 101
tacacs-server host 172.19.2.74
tacacs-server host 192.168.15.197
snmp-server community isdn RW
snmp-server enable traps isdn call-information
snmp-server host 172.25.3.154 traps isdn
Use the show interfaces bri number command to verify information about the physical attributes of the
ISDN BRI B and D channels. The number argument is the slot location of the BRI module. Valid values
are from 0 to 3.
BRI0:1 is down, line protocol is down
Hardware is BRI
MTU 1500 bytes, BW 64 Kbit, DLY 20000 usec, rely 255/255, load 1/255
Internet address is 10.1.1.3/27
Encapsulation PPP, loopback not set, keepalive not set
LCP Closed
Closed: IPCP
Last input never, output never, output hang never
Last clearing of "show interface" counters never
Queueing strategy: fifo
Output queue 0/40, 0 drops; input queue 0/75, 0 drops
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
0 packets input, 0 bytes, 0 no buffer
Received 0 broadcasts, 0 runts, 0 giants
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
0 packets output, 0 bytes, 0 underruns
0 output errors, 0 collisions, 7 interface resets
0 output buffer failures, 0 output buffers swapped out
0 carrier transitions
!
interface BRI0/2
no ip address
no ip directed-broadcast
encapsulation ppp
isdn switch-type basic-ni
isdn spid1 0444000301 9194440003
isdn spid2 0444001301 9194440013
isdn incoming-voice modem
!
interface BRI0/3
no ip address
no ip directed-broadcast
encapsulation ppp
isdn switch-type basic-ni
isdn spid1 0444000401 9194440004
isdn spid2 0444001401 9194440014
isdn incoming-voice modem
!
interface BRI0/4
no ip address
no ip directed-broadcast
encapsulation ppp
isdn switch-type basic-ni
isdn spid1 0444000501 9194440005
isdn spid2 0444001501 9194440015
isdn incoming-voice modem
!
interface BRI0/5
no ip address
no ip directed-broadcast
encapsulation ppp
isdn switch-type basic-ni
isdn spid1 0444000601 9194440006
isdn spid2 0444001601 9194440016
isdn incoming-voice modem
!
interface BRI0/6
no ip address
no ip directed-broadcast
encapsulation ppp
isdn switch-type basic-ni
isdn spid1 0444000701 9194440007
isdn spid2 0444001701 9194440017
isdn incoming-voice modem
!
interface BRI0/7
no ip address
no ip directed-broadcast
encapsulation ppp
isdn switch-type basic-ni
isdn spid1 0444000801 9194440008
isdn spid2 0444001801 9194440018
isdn incoming-voice modem
!
interface BRI2/0
no ip address
no ip directed-broadcast
encapsulation ppp
isdn switch-type basic-ni
isdn spid1 0555000101 9195550001
isdn spid2 0555001101 9195550011
isdn incoming-voice modem
!
interface BRI2/1
no ip address
no ip directed-broadcast
encapsulation ppp
isdn switch-type basic-ni
isdn spid1 0555000201 9195550002
isdn spid2 0555001201 9195550012
isdn incoming-voice modem
!
interface BRI2/2
no ip address
no ip directed-broadcast
encapsulation ppp
isdn switch-type basic-ni
isdn spid1 0555000301 9195550003
isdn spid2 0555001301 9195550013
isdn incoming-voice modem
!
interface BRI2/3
no ip address
no ip directed-broadcast
encapsulation ppp
isdn switch-type basic-ni
isdn spid1 0555000401 9195550004
isdn spid2 0555001401 9195550014
isdn incoming-voice modem
!
interface BRI2/4
no ip address
no ip directed-broadcast
encapsulation ppp
isdn switch-type basic-ni
isdn spid1 0555000501 9195550005
isdn spid2 0555001501 9195550015
isdn incoming-voice modem
!
interface BRI2/5
no ip address
no ip directed-broadcast
encapsulation ppp
isdn switch-type basic-ni
isdn spid1 0555000601 9195550006
isdn spid2 0555001601 9195550016
isdn incoming-voice modem
!
interface BRI2/6
no ip address
no ip directed-broadcast
encapsulation ppp
isdn switch-type basic-ni
isdn spid1 0555000701 9195550007
isdn spid2 0555001701 9195550017
isdn incoming-voice modem
!
interface BRI2/7
no ip address
no ip directed-broadcast
encapsulation ppp
isdn switch-type basic-ni
isdn spid1 0555000801 9195550008
isdn spid2 0555001801 9195550018
isdn incoming-voice modem
!
The following lines are used for PPP CHAP authentication. Each username and password is associated
with one dialer interface.
username async1 password devtest
username async2 password devtest
username async3 password devtest
username async4 password devtest
username async5 password devtest
username async6 password devtest
username async7 password devtest
username async8 password devtest
username async9 password devtest
username async10 password devtest
username async11 password devtest
username async12 password devtest
username async13 password devtest
username async14 password devtest
username async15 password devtest
username async16 password devtest
username async17 password devtest
username async18 password devtest
username async19 password devtest
username async20 password devtest
username async21 password devtest
username async22 password devtest
username async23 password devtest
username async24 password devtest
username async25 password devtest
username async26 password devtest
username async27 password devtest
username async28 password devtest
username async29 password devtest
username async30 password devtest
username FLOYD password devtest
username MBRI_OUT password devtest
ip subnet-zero
no ip domain-lookup
!
isdn switch-type basic-5ess
interface BRI0/0
no ip address
no ip directed-broadcast
encapsulation ppp
isdn switch-type basic-ni
isdn spid1 0444000101 9194440001
isdn spid2 0444001101 9194440011
isdn incoming-voice modem
!
interface BRI0/1
no ip address
no ip directed-broadcast
encapsulation ppp
isdn switch-type basic-ni
isdn spid1 0444000201 9194440002
isdn spid2 0444001201 9194440012
isdn incoming-voice modem
!
interface BRI0/2
no ip address
no ip directed-broadcast
encapsulation ppp
isdn switch-type basic-ni
isdn spid1 0444000301 9194440003
isdn spid2 0444001301 9194440013
isdn incoming-voice modem
!
interface BRI0/3
no ip address
no ip directed-broadcast
encapsulation ppp
isdn switch-type basic-ni
isdn spid1 0444000401 9194440004
isdn spid2 0444001401 9194440014
isdn incoming-voice modem
!
interface BRI0/4
no ip address
no ip directed-broadcast
encapsulation ppp
isdn switch-type basic-ni
isdn spid1 0444000501 9194440005
isdn spid2 0444001501 9194440015
isdn incoming-voice modem
no shut
!
interface BRI0/5
no ip address
no ip directed-broadcast
encapsulation ppp
isdn switch-type basic-ni
isdn spid1 0444000601 9194440006
isdn spid2 0444001601 9194440016
isdn incoming-voice modem
!
interface BRI0/6
no ip address
no ip directed-broadcast
encapsulation ppp
isdn switch-type basic-ni
isdn spid1 0444000701 9194440007
isdn spid2 0444001701 9194440017
isdn incoming-voice modem
!
interface BRI0/7
no ip address
no ip directed-broadcast
encapsulation ppp
isdn switch-type basic-ni
isdn spid1 0444000801 9194440008
isdn spid2 0444001801 9194440018
isdn incoming-voice modem
!
interface BRI2/0
no ip address
no ip directed-broadcast
encapsulation ppp
isdn switch-type basic-ni
isdn spid1 0555000101 9195550001
isdn spid2 0555001101 9195550011
isdn incoming-voice modem
!
interface BRI2/1
no ip address
no ip directed-broadcast
encapsulation ppp
isdn switch-type basic-ni
isdn spid1 0555000201 9195550002
isdn spid2 0555001201 9195550012
isdn incoming-voice modem
!
interface BRI2/2
no ip address
no ip directed-broadcast
encapsulation ppp
isdn switch-type basic-ni
isdn spid1 0555000301 9195550003
isdn spid2 0555001301 9195550013
isdn incoming-voice modem
!
interface BRI2/3
no ip address
no ip directed-broadcast
encapsulation ppp
isdn switch-type basic-ni
isdn spid1 0555000401 9195550004
isdn spid2 0555001401 9195550014
isdn incoming-voice modem
!
interface BRI2/4
no ip address
no ip directed-broadcast
encapsulation ppp
isdn switch-type basic-ni
isdn spid1 0555000501 9195550005
isdn spid2 0555001501 9195550015
isdn incoming-voice modem
!
interface BRI2/5
no ip address
no ip directed-broadcast
encapsulation ppp
isdn switch-type basic-ni
isdn spid1 0555000601 9195550006
isdn spid2 0555001601 9195550016
isdn incoming-voice modem
!
interface BRI2/6
no ip address
no ip directed-broadcast
encapsulation ppp
isdn switch-type basic-ni
isdn spid1 0555000701 9195550007
isdn spid2 0555001701 9195550017
isdn incoming-voice modem
!
interface BRI2/7
no ip address
no ip directed-broadcast
encapsulation ppp
isdn switch-type basic-ni
isdn spid1 0555000801 9195550008
isdn spid2 0555001801 9195550018
isdn incoming-voice modem
!
interface Ethernet1/0
ip address 172.18.16.123 255.255.255.192
no ip directed-broadcast
!
The following example defines a group-async interface for grouping all the digital modems and
configuring them together. Group-async configuration is much easier than configuring all 30 digital
modems individually.
interface Group-Async1
ip unnumbered Ethernet3/1
no ip directed-broadcast
encapsulation ppp
load-interval 30
dialer in-band
dialer pool-member 1
async default routing
async mode dedicated
no peer default ip address
no cdp enable
ppp authentication chap
group-range 96 125
hold-queue 10 in
The following example defines dialer interfaces, associates IP addresses, and sets all the authentication
parameters required during the call establishment.
interface Dialer1
ip address 10.1.0.1 255.255.0.0
no ip directed-broadcast
encapsulation ppp
dialer remote-name async1
dialer pool 1
dialer-group 1
no cdp enable
ppp authentication chap callin
ppp chap hostname async1
ppp chap password devtest
!
interface Dialer2
ip address 10.2.0.1 255.255.0.0
no ip directed-broadcast
encapsulation ppp
dialer remote-name async2
dialer pool 1
dialer-group 1
no cdp enable
interface Dialer8
ip address 10.8.0.1 255.255.0.0
no ip directed-broadcast
encapsulation ppp
dialer remote-name async8
dialer pool 1
dialer-group 1
no cdp enable
ppp authentication chap callin
ppp chap hostname async8
ppp chap password devtest
!
interface Dialer9
ip address 10.9.0.1 255.255.0.0
no ip directed-broadcast
encapsulation ppp
dialer remote-name async9
dialer pool 1
dialer-group 1
no cdp enable
ppp authentication chap callin
ppp chap hostname async9
ppp chap password devtest
!
interface Dialer10
ip address 10.10.0.1 255.255.0.0
no ip directed-broadcast
encapsulation ppp
dialer remote-name async10
dialer pool 1
dialer-group 1
no cdp enable
ppp authentication chap callin
ppp chap hostname async10
ppp chap password devtest
!
interface Dialer11
ip address 10.11.0.1 255.255.0.0
no ip directed-broadcast
encapsulation ppp
dialer remote-name async11
dialer pool 1
dialer-group 1
no cdp enable
ppp authentication chap callin
ppp chap hostname async11
ppp chap password devtest
!
interface Dialer12
ip address 10.12.0.1 255.255.0.0
no ip directed-broadcast
encapsulation ppp
dialer remote-name async12
dialer pool 1
dialer-group 1
no cdp enable
ppp authentication chap callin
ppp chap hostname async12
ppp chap password devtest
!
interface Dialer13
ip address 10.13.0.1 255.255.0.0
no ip directed-broadcast
encapsulation ppp
interface Dialer24
ip address 10.24.0.1 255.255.0.0
no ip directed-broadcast
encapsulation ppp
dialer remote-name async24
dialer pool 1
dialer-group 1
no cdp enable
ppp authentication chap callin
ppp chap hostname async24
ppp chap password devtest
!
interface Dialer25
ip address 10.25.0.1 255.255.0.0
no ip directed-broadcast
encapsulation ppp
dialer remote-name async25
dialer pool 1
dialer-group 1
no cdp enable
ppp authentication chap callin
ppp chap hostname async25
ppp chap password devtest
!
interface Dialer26
ip address 10.26.0.1 255.255.0.0
no ip directed-broadcast
encapsulation ppp
dialer remote-name async26
dialer pool 1
dialer-group 1
no cdp enable
ppp authentication chap callin
ppp chap hostname async26
ppp chap password devtest
!
interface Dialer27
ip address 10.27.0.1 255.255.0.0
no ip directed-broadcast
encapsulation ppp
dialer remote-name async27
dialer pool 1
dialer-group 1
no cdp enable
ppp authentication chap callin
ppp chap hostname async27
ppp chap password devtest
!
interface Dialer28
ip address 10.28.0.1 255.255.0.0
no ip directed-broadcast
encapsulation ppp
dialer remote-name async28
dialer pool 1
dialer-group 1
no cdp enable
ppp authentication chap callin
ppp chap hostname async28
ppp chap password devtest
!
interface Dialer29
ip address 10.29.0.1 255.255.0.0
no ip directed-broadcast
encapsulation ppp
The following lines define routes that send incoming packets out via specific interfaces:
ip route 0.0.0.0 0.0.0.0 172.18.16.193
ip route 10.91.0.1 255.255.255.255 1.1.0.2
ip route 10.91.0.2 255.255.255.255 1.2.0.2
ip route 10.91.0.3 255.255.255.255 1.3.0.2
ip route 10.91.0.4 255.255.255.255 1.4.0.2
ip route 10.91.0.5 255.255.255.255 1.5.0.2
ip route 10.91.0.6 255.255.255.255 1.6.0.2
ip route 10.91.0.7 255.255.255.255 1.7.0.2
ip route 10.91.0.8 255.255.255.255 1.8.0.2
ip route 10.91.0.9 255.255.255.255 1.9.0.2
ip route 10.91.0.10 255.255.255.255 1.10.0.2
ip route 10.91.0.11 255.255.255.255 1.11.0.2
ip route 10.91.0.12 255.255.255.255 1.12.0.2
ip route 10.91.0.13 255.255.255.255 1.13.0.2
ip route 10.91.0.14 255.255.255.255 1.14.0.2
ip route 10.91.0.15 255.255.255.255 1.15.0.2
ip route 10.91.0.16 255.255.255.255 1.16.0.2
ip route 10.91.0.17 255.255.255.255 1.17.0.2
ip route 10.91.0.18 255.255.255.255 1.18.0.2
ip route 10.91.0.19 255.255.255.255 1.19.0.2
ip route 10.91.0.20 255.255.255.255 1.20.0.2
ip route 10.91.0.21 255.255.255.255 1.21.0.2
ip route 10.91.0.22 255.255.255.255 1.22.0.2
ip route 10.91.0.23 255.255.255.255 1.23.0.2
ip route 10.91.0.24 255.255.255.255 1.24.0.2
ip route 10.91.0.25 255.255.255.255 1.25.0.2
ip route 10.91.0.26 255.255.255.255 1.26.0.2
ip route 10.91.0.27 255.255.255.255 1.27.0.2
ip route 10.91.0.28 255.255.255.255 1.28.0.2
ip route 10.91.0.29 255.255.255.255 1.29.0.2
ip route 10.91.0.30 255.255.255.255 1.30.0.2
ip route 172.18.0.0 255.255.0.0 Ethernet3/1
!
dialer-list 1 protocol ip permit
!
line con 0
exec-timeout 0 0
transport input none
The following example configures the lines associated with the digital modems:
line 96 125
exec-timeout 0 0
modem InOut
transport input all
stopbits 1
flowcontrol hardware
line aux 0
exec-timeout 0 0
line vty 0 4
exec-timeout 0 0
password lab
login
line vty 5 60
exec-timeout 0 0
password lab
login
!
end
This chapter describes how to configure X.25 on ISDN. It includes the following main sections:
• X.25 on ISDN Overview
• How to Configure X.25 on ISDN
• Configuration Examples for X.25 on ISDN
To identify the hardware platform or software image information associated with a feature, use the
Feature Navigator on Cisco.com to search for information about the feature or refer to the software
release notes for a specific release. For more information, see the“Finding Additional Feature Support
Information” section on page lxxvii in the “Using Cisco IOS Software for Release 12.4” chapter.
For a complete description of the commands in this chapter, refer to the Cisco IOS Dial Technologies
Command Reference. To locate documentation of other commands that appear in this chapter, use the
command reference master index or search online.
Note X.25 on ISDN is also supported using the ISDN Always On/Dynamic (AO/DI) feature. AO/DI uses the
Multilink PPP (MLP) protocol signaling with standard Q.922 and X.25 encapsulations, and can
additionally use the Bandwidth Allocation Control Protocol (BACP) to optimize bandwidth on demand.
For information about how to configure AO/DI, see the chapter “Configuring X.25 on ISDN Using
AO/DI” in this publication.
Command Purpose
Step 1 Router(config)# interface bri number Specifies an ISDN BRI interface and begins interface
configuration mode.
Step 2 Router(config-if)# isdn x25 static-tei Specifies a static TEI, if required by the switch.
tei-number
Step 3 Router(config-if)# isdn x25 dchannel Creates a configurable interface for X.25 traffic over the
ISDN D channel.
The last step is to configure the X.25-over-ISDN interface for X.25 traffic. See the chapter “Configuring
LAPB and X.25” in the Cisco IOS Wide-Area Networking Configuration Guide, Release 12.2, for the
commands and tasks.
The new X.25-over-ISDN interface is called interface bri number:0 in configuration displays. It must
be configured as an individual X.25 interface. For information about configuring an interface for X.25
traffic, refer to the Cisco IOS Wide-Area Networking Configuration Guide, Release 12.2.
Note The encapsulation x25 command is neither required nor used on this new interface, but other X.25
commands can be used to configure this interface.
If you want to remove the X.25-over-ISDN interface later, use the no isdn x25 dchannel command.
See the section “X.25 on ISDN D-Channel Configuration Example” at the end of this chapter for a
configuration example.
PRI
25087
Peso (as X.25 switch)
interface BRI1
no ip address
no ip directed-broadcast
no ip mroute-cache
dialer pool-member 1
isdn switch-type basic-5ess
no fair-queue
!
interface Dialer0
ip address 10.1.1.1 255.0.0.0
no ip directed-broadcast
encapsulation x25
no ip mroute-cache
dialer remote-name dinar
dialer idle-timeout 180
dialer string 81060
dialer caller 81060
dialer max-call 1
dialer pool 1
dialer-group 1
x25 address 11111
x25 map ip 10.1.1.2 22222
!
ip default-gateway 172.21.75.1
no ip classless
ip route 0.0.0.0 0.0.0.0 172.21.75.1
no ip http server
!
access-list 101 permit ip any any
dialer-list 1 protocol ip list 101
!
x25 route 22222 interface Dialer0
x25 route 33333 interface Dialer0
!
line con 0
exec-timeout 0 0
transport input none
line aux 0
transport input all
line vty 0 4
password cisco
login
line vty 5 100
password cisco
login
!
end
!
controller T1 0
cablelength short
cablelength short 133
!
controller T1 1
framing esf
clock source line primary
pri-group timeslots 1-24
!
controller T1 2
cablelength short
cablelength short 133
!
controller T1 3
cablelength short
cablelength short 133
!
interface Ethernet0
ip address 172.21.75.3 255.255.255.0
no ip directed-broadcast
!
interface Serial1:23
no ip address
no ip directed-broadcast
encapsulation ppp
dialer pool-member 1
isdn switch-type primary-5ess
isdn incoming-voice modem
no fair-queue
no cdp enable
ppp authentication chap
!
interface Dialer0
no ip address
no ip directed-broadcast
encapsulation x25 dce
no ip mroute-cache
dialer remote-name yen
dialer idle-timeout 180
dialer string 61401
dialer caller 61401
dialer max-call 1
dialer pool 1
x25 address 33333
!
interface Dialer1
no ip address
no ip directed-broadcast
encapsulation x25 dce
no ip mroute-cache
dialer remote-name dinar
dialer idle-timeout 180
dialer string 61403
dialer caller 61403
dialer max-call 1
dialer pool 1
x25 address 44444
!
ip default-gateway 172.21.75.1
no ip classless
ip route 0.0.0.0 0.0.0.0 172.21.75.1
no ip http server
!
dialer-group 1
x25 address 22222
x25 map ip 10.1.1.1 11111
!
interface Dialer1
ip address 10.1.1.10 255.0.0.0
no ip directed-broadcast
no ip mroute-cache
dialer in-band
dialer-group 1
no fair-queue
!
ip default-gateway 172.21.75.1
no ip classless
ip route 0.0.0.0 0.0.0.0 172.21.75.1
no ip http server
!
access-list 101 permit ip any any
dialer-list 1 protocol ip list 101
!
x25 route 11111 interface Dialer0
x25 route 44444 interface Dialer0
!
The chapter describes how to configure the X.25 on ISDN using the Always On/Dynamic ISDN (AO/DI)
feature. It includes the following main sections:
• AO/DI Overview
• How to Configure an AO/DI Interface
• How to Configure an AO/DI Client/Server
• Configuration Examples for AO/DI
AO/DI supports PPP encapsulation on switched X.25 virtual circuits (VCs) only.
The X.25 encapsulation (per RFC 1356), PPP, Bandwidth Allocation Control Protocol (BACP), and
Bandwidth Allocation Protocol (BAP) modules must be present in both the AO/DI client and server.
AO/DI relies on features from X.25, PPP, and BACP modules and must be configured on both the AO/DI
client and server. BAP, if negotiated, is a subset of BACP, which is responsible for bandwidth allocation
for the Multilink PPP (MLP) peers. It is recommended you configure MLP with the BAP option due to
the differences between the ISDN (E.164) and X.25 (X.121) numbering formats.
To implement AO/DI, you must configure the AO/DI client and server for PPP, incorporating BAP and
X.25 module commands. This task involves configuring the BRI or PRI interfaces with the appropriate
X.25 commands and the dialer interfaces with the necessary PPP or BAP commands.
To identify the hardware platform or software image information associated with a feature, use the
Feature Navigator on Cisco.com to search for information about the feature or refer to the software
release notes for a specific release. For more information, see the “Finding Additional Feature Support
Information” section on page lxxvii in the “Using Cisco IOS Software for Release 12.4” chapter.
For a complete description of the commands in this chapter, refer to the Cisco IOS Dial Technologies
Command Reference, Release 12.2. To locate documentation of other commands that appear in this
chapter, use the command reference master index or search online.
AO/DI Overview
AO/DI functionality is based on the technology modules described in the following sections:
• PPP over X.25 Encapsulation
• Multilink PPP Bundle
• BACP/BAP
AO/DI is an on-demand service that is designed to optimize the use of an existing ISDN signaling
channel (D channel) to transport X.25 traffic. The X.25 D-channel call is placed from the subscriber to
the packet data service provider. The use of PPP allows protocols to be encapsulated within the X.25
logical circuit carried by the D channel. The bearer channels (B channels) use the multilink protocol
without the standard Q.922 and X.25 encapsulations, and invoke additional bandwidth as needed.
Optionally, BACP and BAP can be used to negotiate bandwidth allocation as required.
AO/DI takes full advantage of existing packet handlers at the central office by using an existing
D channel to transport the X.25 traffic. The link associated with the X.25 D channel packet connection
is used as the primary link of the multilink bundle. The D channel is a connectionless, packet-oriented
link between the customer premise equipment (CPE) and the central office. Because the D channel is
always available, it is possible to in turn offer “always available” services. On-demand functionality is
achieved by using the B channels to temporarily boost data throughput and by disconnecting them after
use. Figure 40 shows the AO/DI environment and how ISDN and X.25 resources are implemented.
Note On the client side, the X.25 switched virtual circuit (SVC) can only be terminated on an ISDN D channel;
however, on the server side, the SVC can be terminated on an ISDN BRI using a D channel, a PRI using
specific time slots, or a high-speed serial link.
ISDN ISP or
CPE corporate
B channel
D channel PH
X.25 11520
MLP bundle
11522
Primary Member Member
link link link
MLP bundle
11522
Primary Member Member
link link link
BACP/BAP
Bandwidth resources are provided by BACP, described in RFC 2125. Once the MLP peers have
successfully negotiated BACP, BAP negotiates bandwidth resources in order to support traffic
throughput. BAP is a subset of BACP, and it defines the methods and governing rules for adding and
removing links from the bundle for MLP. BACP/BAP negotiations are achieved through the following
process:
1. Once the MLP session is initiated and BACP is negotiated over the MLP bundle, the AO/DI client
issues a BAP call request for additional bandwidth.
2. The AO/DI server responds with the BAP call response, which contains the phone number of the
B channel to add. B channels are added, as needed, to support the demand for increased traffic
throughput.
3. B channels are disconnected as the traffic load decreases.
Command Purpose
Router(config-if)# ppp multilink bap Enables PPP BACP bandwidth allocation negotiation.
Router(config-if)# encapsulation ppp Enables PPP on the interface.
Router(config-if)# dialer in-band Enables dial-on-demand routing (DDR) on the interface.
Router(config-if)# dialer load-threshold load Sets the dialer load threshold.
Router(config-if)# dialer-group group-number Controls access to this interface by adding it to a dialer
access group.
Router(config-if)# ppp bap callback accept (Optional) Enables the interface to initiate additional links
upon peer request.
Command Purpose
Router(config-if)# ppp bap call request Enables the interface to initiate additional links.
Router(config-if)# dialer map protocol Enables a serial interface or an ISDN interface to initiate
next-hop-address [name hostname] [spc] [speed 56 | and receive calls to or from remote sites.
speed 64] [broadcast] [modem-script modem-regexp]
system-script system-regexp]
or
Router(config-if)# dialer string dial-string Specifies the destination string (telephone number) for
[:isdn-subaddress] calling:
Router(config-if)# dialer string dial-string [class • A single site (using legacy DDR)
class-name] • Multiple sites (using dialer profiles)
Command Purpose
Router(config-if)# x25 address address Configures the X.25 address.
Router(config-if)# x25 htc circuit-number Sets the highest two-way circuit number. For X.25 the
default is 1024.
Router(config-if)# x25 win packets Sets the default VC receive window size. The default is
2 packets.1
Router(config-if)# x25 wout packets Sets the default VC transmit window size. The default is
2 packets.1
1. The default input and output window sizes are typically defined by your network administrator. Cisco IOS configured window sizes must be set to match
the window size of the network.
For details and usage guidelines for X.25 configuration parameters, refer to the Cisco IOS Wide-Area
Networking Configuration Guide and Cisco IOS Wide-Area Networking Command Reference.
Command Purpose
Router(config-if)# ppp multilink bap Enables PPP BACP bandwidth allocation negotiation.
Router(config-if)# encapsulation ppp Enables PPP on the interface.
Router(config-if)# dialer in-band Enables DDR on the interface.
Command Purpose
Router(config-if)# dialer load-threshold load Sets the dialer load threshold.
Router(config-if)# dialer-group group-number Controls access to this interface by adding it to a dialer
access group.
Router(config-if)# ppp bap call accept Enables the interface to accept additional links upon peer
request.
Router(config-if)# ppp bap callback request Enables the interface to initiate additional links (optional).
BAP configuration commands are optional. For information on how to configure BACP/BAP see the
chapter “Configuring BACP” later in this publication.
Command Purpose
Router(config-if)# x25 address address Configures the X.25 address.
Router(config-if)# x25 htc circuit-number Sets the highest two-way circuit number. For X.25 the default is
1024.
Router(config-if)# x25 win packets Sets the default VC receive window size. The default is
2 packets.1
Router(config-if)# x25 wout packets Sets the default VC transmit window size. The default is
2 packets.1
1. The default input and output window sizes are typically defined by your network administrator. Cisco IOS configured window sizes must be sets to match
the window size of the network.
For details and usage guidelines for X.25 configuration parameters, see the Cisco IOS Wide-Area
Networking Configuration Guide and Cisco IOS Wide-Area Networking Command Reference.
Command Purpose
Router(config-if)# x25 aodi Enables the AO/DI client on an interface.
Command Purpose
Router(config-if)# x25 map ppp x121-address Enables the interface to initiate a PPP session over the X.25
interface cloning-interface protocol and remote end mapping.
Command Purpose
Router(config-if)# ppp multilink idle-link Configures the interface to enter “receive only” mode so that
MLP links are added as needed.
Command Purpose
Router(config-if)# ppp bap number prefix (Optional) specifies a primary telephone number prefix for a peer to
prefix-number call for PPP BACP negotiation.
Note The ppp bap number prefix command is not typically required on the server side, as the server usually
does not initiate calls to the client. This command would only be used on the server in a scenario where
both sides are configured to act as both client and server.
Command Purpose
Router(config-if)# x25 map ppp x121-address Enables the interface to initiate a PPP session over the X.25 protocol
interface cloning-interface no-outgoing and remote end mapping.
Command Purpose
Router(config-if)# ppp multilink idle-link Configures the interface to enter “receive only” mode so that MLP
links are added as needed.
Command Purpose
Router(config-if)# ppp bap number {format (Optional) Specifies that the primary telephone number for a peer to
national | subscriber} call is in either a national or subscriber number format.
Note The ppp bap number prefix command is not typically required on the server side, because the server
usually does not initiate calls to the client. This command would only be used on the server in a scenario
where both sides are configured to act as both client and server.
This chapter describes the Common Application Programming Interface (CAPI) and Remote Common
Application Programming Interface (RCAPI) feature for the Cisco 800 series routers. This information
is included in the following main sections:
• CAPI and RCAPI Overview
• How to Configure RCAPI
• Configuration Examples for RCAPI
The CAPI is an application programming interface standard used to access ISDN equipment connected
to ISDN BRIs and ISDN PRIs. RCAPI is the CAPI feature configured remotely from a PC client.
Before you can enable the RCAPI feature on the Cisco 800 series router, the following requirements
must be met:
• Cisco 800 series software with RCAPI support is installed on the router.
• CAPI commands are properly configured on the router.
• Both the CAPI local device console and RCAPI client devices on the LAN are correctly installed
and configured with RVS-COM client driver software.
To identify the hardware platform or software image information associated with a feature, use the
Feature Navigator on Cisco.com to search for information about the feature or refer to the software
release notes for a specific release. For more information see the“Finding Additional Feature Support
Information” section on page lxxvii section in the “Using Cisco IOS Software for Release 12.4” chapter.
For a complete description of the commands in this chapter, refer to the Cisco IOS Dial Technologies
Command Reference. To locate documentation of other commands that appear in this chapter, use the
command reference master index or search online.
26485
Framing Protocols
The framing protocols supported by CAPI include High-Level Data Link Control (HDLC), HDLC
inverted, bit transparent (speech), and V.110 synchronous/asynchronous.
CAPI Features
CAPI supports the following features:
• Basic call features, such as call setup and tear-down
• Multiple B channels for data and voice connections
• Multiple logical data link connections within a physical connection
• Selection of different services and protocols during connection setup and on answering
incoming calls
WinFax G4 fax
(non-CAPI) (CAPI)
Virtual CAPI
com port library
Soft
modem ISDN stack
29145
client driver server driver
CAPI provides a standardized interface through which application programs can use ISDN drivers and
controllers. One application can use one or more controllers. Several applications can share one or more
controllers.
CAPI supplies a selection mechanism that supports applications that use protocols at different levels and
standardized network access. An abstraction from different protocol variables is performed to provide
this support. All connection-related data, such as connection state and display messages, is available to
the applications at any time.
The ISDN Core Engine of RVS-COM supports the following B-channel protocols:
• CAPI layer B1
– 64-kbps with HDLC framing
– 64-kbps bit transparent operation with byte framing from the network
– T.30 modem for fax group 3
– Modem with full negotiation
• CAPI layer B2
– V.120
– Transparent
– T.30 modem for fax group 3
– Modem with full negotiation
• CAPI layer B3
– Transparent
– T.90NL with compatibility to T.70NL according to T.90 Appendix II
– ISO 8208 (X.25 DTE-DTE) modulo 8 and windows size 2, no multiple logical connections
– T.30 for fax group 3
– Modem with full negotiation
• T.30 for fax group 3 (SFF file format [default], sending and receiving up to 14400 bit/s with ECM
option, modulations V.17, V.21, V.27ter, V.29)
• Analog modem (sending and receiving up to 14,400 bit/s, modulations V.21, V.22, V.22bis, V.23,
V.32, V.32bis)
Supported Applications
ISDN-DCP supports CAPI and non-CAPI applications. Applications are supported that use one or two
B channels for data transfer, different HDLC-based protocols, Euro File transfer, or G4 fax; also
supported are applications that send bit-transparent data such as A/Mu law audio, G3 fax, analog
modem, or analog telephones.
Helpful Website
The following Web link provides answers to frequently asked questions about installing and using
RCAPI: http://www.cisco.com/warp/partner/synchronicd/cc/pd/rt/800/prodlit/rcapi_qa.htm
Command Purpose
Step 1 Router(config)# isdn switch-type basic-net3 Sets the switch type. In this example, the switch type is set
to NET3 ISDN, which covers the Euro-ISDN E-DSS1
signaling system and is ETSI-compliant.
Step 2 Router(config)# rcapi number number Enters the RCAPI directory number assigned by the ISDN
provider for the device.
An example command:
rcapi number 12345.
Step 3 Router(config)# rcapi server port number The rcapi server command is mandatory for RCAPI to be
enabled on the router. The parameter port is optional and
is entered only when you need to specify a port number
for RCAPI functions. Otherwise, the default port 2578 is
used.
An example command with default port 2578:
rcapi server port
Command Purpose
Step 4 Router(config)# interface bri0 Configures the ISDN BRI interface and begins interface
configuration mode.
Step 5 Router(config-if)# isdn switch-type basic-net3 Sets the switch type for the bri0 interface. In this example,
the switch type is set to NET3 ISDN, which covers the
Euro-ISDN E-DSS1 signaling system and is
ETSI-compliant.
Step 6 Router(config-if)# isdn incoming-voice modem Sets the modem as the default handler for incoming voice
calls.
Note If required, at each remote device console change to global configuration mode, using the command
configure terminal, and repeat Step 2 through Step 7 to configure that device.
Command Purpose
Router# show rcapi status Displays RCAPI status.
Troubleshooting RCAPI
To test the RCAPI operation, use the following command in privileged EXEC mode
Command Purpose
Router# debug rcapi events Starts a background debug program.
Building configuration...
Current configuration:
!
version xx.x
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname local
!
ip subnet-zero
!
isdn switch-type basic-net3
isdn voice-call-failure 0
!
interface Ethernet0
ip address 192.168.2.1 255.255.255.0
no ip directed-broadcast
!
interface BRI0
no ip address
no ip directed-broadcast
isdn switch-type basic-net3
isdn incoming-voice modem
!
no ip http server
ip classless
!
line con 0
transport input none
stopbits 1
line vty 0 4
!
rcapi server port 2578
!
rcapi number 5551000
rcapi number 5553000
!
end
Router1#
Router 2
Building configuration...
Current configuration:
!
version 12.0
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname local
!
ip subnet-zero
!
isdn switch-type basic-net3
isdn voice-call-failure 0
!
interface Ethernet0
ip address 192.168.1.1 255.255.255.0
no ip directed-broadcast
!
interface BRI0
no ip address
no ip directed-broadcast
isdn switch-type basic-net3
isdn incoming-voice modem
!
no ip http server
ip classless
!
line con 0
transport input none
stopbits 1
line vty 0
!
rcapi server port 2578
!
rcapi number 5552000
rcapi number 5554000
!
end
Router2#
Feature History
Release Modification
12.2(13)T Features described in this feature module were removed in 12.2(13)T.
12.2(15)T Features described in this feature module were removed in 12.2(15)T.
Feature Overview
The Cisco IOS Software Feature Removal feature is an engineering project to permanently remove
selected legacy features (or components) from the Cisco IOS code. These features will not be available
in future releases of Cisco IOS software.
The legacy features that have been removed as of Release 12.2(13)T are as follows:
• AppleTalk EIGRP
• Apollo Domain
• Banyan VINES
• Exterior Gateway Protocol
• HP Probe
• Interior Gateway Routing Protocol
• Next Hop Resolution Protocol for IPX
• Novell Link-State Protocol
• Simple Multicast Routing Protocol for AppleTalk
• Xerox Network Systems
The legacy features that have been removed as of Release 12.2(15)T are as follows:
• LAN Extension
• Netware Asychronous Services Interface Protocol
• Xremote
This feature module lists the commands that have been removed from or modified in Cisco IOS software
with the removal of a specified feature.
Note Commands that have been modified may not all be listed in this document.
AppleTalk EIGRP
The following commands have been removed from or modified in Cisco IOS software with the removal
of the AppleTalk EIGRP feature. Please note that not all commands that may have been modified are
listed here:
• appletalk eigrp active-time
• appletalk eigrp-bandwidth-percentage
• appletalk eigrp log-neighbor-changes
• appletalk eigrp-splithorizon
• appletalk eigrp-timers
• appletalk route-redistribution
• debug apple eigrp-all
• show appletalk eigrp interfaces
• show appletalk eigrp neighbors
• show appletalk eigrp topology
Apollo Domain
The following commands have been removed from or modified in Cisco IOS software with the removal
of the Apollo Domain feature:
• apollo access-group
• apollo access-list
• apollo maximum-paths
• apollo network
• apollo route
• apollo routing
• apollo update-time
• debug packet
• ping
• show apollo arp
• show apollo interface
• show apollo route
• show apollo traffic
Banyan VINES
The following commands have been removed from or modified in Cisco IOS software with the removal
of the Banyan VINES feature:
• clear vines cache
• clear vines ipc
• vines propagate
• vines redirect
• vines route
• vines route-cache
• vines routing
• vines serverless
• vines single-route
• vines split-horizon
• vines srtp-enabled
• vines time access-group
• vines time destination
• vines time participate
• vines time services
• vines time set-system
• vines time use-system
• vines update deltas
• vines update interval
HP Probe
The following commands have been removed from or modified in Cisco IOS software with the removal
of the HP Probe feature:
• arp (interface) probe
• ip hp-host
• ip probe proxy
• default-metric (IGRP)
• ip split-horizon (IGRP)
• metric holddown
• metric maximum-hops
• metric weights (IGRP)
• neighbor (IGRP)
• network (IGRP)
• offset-list (IGRP)
• router igrp
• set metric (IGRP)
• timers basic (IGRP)
• traffic-share balanced
LAN Extension
No commands were removed from or modified in Cisco IOS software with the removal of the LAN
Extension feature.
Xremote
The following commands have been removed from or modified in Cisco IOS software with the removal
of the Xremote feature:
• show xremote
• show xremote line
• xremote
• xremote lat
• xremote tftp buffersize
• xremote tftp host
• xremote tftp retries
• xremote xdm
This chapter describes how to configure channelized E1 and channelized T1 for ISDN PRI and for two
types of signaling to support analog calls over digital lines. This information is included in the following
sections:
• Signaling Overview
• How to Configure ISDN PRI
• Monitoring and Maintaining ISDN PRI Interfaces
• How to Configure Robbed-Bit Signaling for Analog Calls over T1 Lines
• How to Configure CAS
• How to Configure Switched 56K Digital Dial-In over Channelized T1 and Robbed-Bit Signaling
• How to Configure Switched 56K Services
• How to Configure E1 R2 Signaling
• Enabling R1 Modified Signaling in Taiwan
• Configuration Examples for Channelized E1 and Channelized T1
In addition, this chapter describes how to run interface loopback diagnostics on channelized E1 and
channelized T1 lines. For more information, see the “How to Configure Switched 56K Digital Dial-In
over Channelized T1 and Robbed-Bit Signaling” section later in this chapter, and the Cisco IOS Interface
Configuration Guide, Release 12.2.
For hardware technical descriptions and for information about installing the controllers and interfaces,
refer to the hardware installation and maintenance publication for your particular product.
To identify the hardware platform or software image information associated with a feature, use the
Feature Navigator on Cisco.com to search for information about the feature or refer to the software
release notes for a specific release. For more information, see the “Finding Additional Feature Support
Information” section on page lxxvii section in the “Using Cisco IOS Software for Release 12.4” chapter.
For a complete description of the channelized E1/T1 commands in this chapter, refer to the Cisco IOS
Dial Technologies Command Reference, Release 12.2. To locate documentation of other commands that
appear in this chapter, use the command reference master index or search online.
Signaling Overview
Channelized T1 and channelized E1 can be configured for ISDN PRI, synchronous serial, and
asynchronous serial communications.
Channelized T1 and channelized E1 are supported by corresponding controllers. Each T1 or E1
controller has one physical network termination, but it can have many virtual interfaces, depending on
the configuration.
Note After the ISDN PRI interface and lines are operational, configure the D-channel interface for
dial-on-demand routing (DDR). The DDR configuration specifies the packets that can trigger outgoing
calls, specifies whether to place or receive calls, and provides the protocol, address, and phone number
to use.
Requesting PRI Line and Switch Configuration from a Telco Service Provider
Before configuring ISDN PRI on your Cisco router, you need to order a correctly provisioned ISDN PRI
line from your telecommunications service provider.
This process varies dramatically from provider to provider on a national and international basis.
However, some general guidelines follow:
• Verify if the outgoing B channel calls are made in ascending or descending order. Cisco IOS default
is descending order however, if the switch from the service providers is configured for outgoing calls
made in ascending order, the router can be configured to match the switch configuration of the
service provider.
• Ask for delivery of calling line identification. Providers sometimes call this CLI or automatic
number identification (ANI).
• If the router will be attached to an ISDN bus (to which other ISDN devices might be attached), ask
for point-to-multipoint service (subaddressing is required) and a voice-and-data line.
Table 48 provides a sample of the T1 configuration attributes you might request for a PRI switch used
in North America.
Attribute Value
Line format Extended Superframe Format (ESF)
Line coding Binary 8-zero substitution (B8ZS)
Call type 23 incoming channels and 23 outgoing channels
Speed 64 kbps
Call-by-call capability Enabled
Channels 23 B + D
Trunk selection sequence Either ascending order (from 1 to 23) or descending
order (from 23 to 1)
B + D glare Yield
Directory numbers Only 1 directory number assigned by service
provider
SPIDs required? None
Command Purpose
Step 1 Router(config)# isdn switch-type switch-type Selects a service provider switch type that
accommodates PRI. (See Table 49 for a list of
supported switch type keywords.)
Step 2 Router(config)# controller e1 slot/port Defines the controller location in the Cisco 7200 or
Cisco 7500 series router by slot and port number.
or
Defines the controller location in the Cisco 4000
Router(config)# controller e1 number
series or the Cisco AS5200 universal access server
by unit number.1
Step 3 Router(config-controller)# framing crc4 Defines the framing characteristics as cyclic
redundancy check 4 (CRC4).
Step 4 Router(config-controller)# linecode hdb3 Defines the line code as high-density bipolar 3
(HDB3).
Step 5 Router(config-controller)# pri-group [timeslots range] Configures ISDN PRI.
1. Controller numbers range from 0 to 2 on the Cisco 4000 series and from 1 to 2 on the Cisco AS5000 series access server.
If you do not specify the time slots, the specified controller is configured for 30 B channels and
1 D channel. The B channel numbers range from 1 to 31; channel 16 is the D channel for E1.
Corresponding serial interfaces numbers range from 0 to 30. In commands, the D channel is interface
serial controller-number:15. For example, interface serial 0:15.
Table 49 lists the keywords for the supported service provider switch types to be used in Step 1 above.
Note For information and examples for configuring ISDN PRI for voice, video, and fax applications, refer to
the Cisco IOS Voice, Video, and Fax Applications Configuration Guide.
Command Purpose
Step 1 Router(config)# isdn switch-type switch-type Selects a service provider switch type that
accommodates PRI. (Refer to Table 49 for a list of
supported PRI switch type keywords.)
Step 2 Router(config)# controller t1 slot/port Specifies a T1 controller on a Cisco 7500.
or
Router(config)# controller t1 number Specifies a T1 controller on a Cisco 4000.1
Step 3 Router(config-controller)# framing esf Defines the framing characteristics as Extended
Superframe Format (ESF).
Command Purpose
Step 4 Router(config-controller)# linecode b8zs Defines the line code as binary 8 zero substitution
(B8ZS).
Step 5 Router(config-controller)# pri-group [timeslots Configures ISDN PRI.
range]2
If you do not specify the time slots, the controller is
configured for 23 B channels and 1 D channel.
1. Controller numbers range from 0 to 2 on the Cisco 4000 series and from 1 to 2 on the Cisco AS5000 series.
2. On channelized T1, time slots range from 1 to 24. You can specify a range of time slots (for example, pri-group timeslots 12-24) if other
time slots are used for non-PRI channel groups.
If you do not specify the time slots, the specified controller is configured for 24 B channels and
1 D channel. The B channel numbers range from 1 to 24; channel 24 is the D channel for T1.
Corresponding serial interfaces numbers range from 0 to 23. In commands, the D channel is interface
serial controller-number:23. For example, interface serial 0:23.
Command Purpose
Step 1 Router(config)# interface serial slot/port:23 Specifies D channel on the serial interface for
Router(config)# interface serial number:23 channelized T1 and begins interface configuration
mode.
or
Router(config)# interface serial slot/port:15 Specifies D channel on the serial interface for
Router(config)# interface serial number:15 channelized E1 and begins interface configuration
mode.
Step 2 Router(config-if)# ip address ip-address Specifies an IP address for the interface.
When you configure the D channel, its configuration is applied to all the individual B channels.
Note See the sections “Dynamic Multiple Encapsulations” and “Configuring Encapsulation on ISDN BRI” in
the chapter “” for information about the Cisco Dynamic Multiple Encapsulations feature.
Each ISDN B channel is treated as a serial line and supports HDLC and PPP encapsulation. The default
serial encapsulation is HDLC. To configure PPP encapsulation, use the following command in interface
configuration mode:
Command Purpose
Router(config-if)# encapsulation ppp Configures PPP encapsulation.
If traffic from this ISDN interface crosses a Frame Relay or X.25 network, the appropriate addressing
and encapsulation tasks must be completed as required for Frame Relay or X.25 networks.
See the sections “Sending Traffic over Frame Relay, X.25, or LAPB Networks” in the chapter
“Configuring Legacy DDR Spokes” for more information about addressing, encapsulation, and other
tasks necessary to configure Frame Relay or X.25 networks.
Historically, Combinet devices supported only the Combinet Proprietary Protocol (CPP) for negotiating
connections over ISDN B channels. To enable Cisco routers to communicate with those Combinet
bridges, the Cisco IOS software supports the CPP encapsulation type.
To enable routers to communicate over ISDN interfaces with Combinet bridges that support only CPP,
use the following commands in interface configuration mode:
Command Purpose
Step 1 Router(config-if)# encapsulation cpp Specifies CPP encapsulation.
Step 2 Router(config-if)# cpp callback accept Enables CPP callback acceptance.
Step 3 Router(config-if)# cpp authentication Enables CPP authentication.
Most Combinet devices support PPP. Cisco routers can communicate over ISDN with these devices by
using PPP encapsulation, which supports both routing and fast switching.
Cisco 700 and 800 series routers and bridges (formerly Combinet devices) support only IP, IPX, and
bridging. For AppleTalk, Cisco routers automatically perform half-bridging with Combinet devices. For
more information about half-bridging, see the section “Configuring PPP Half-Bridging” in the “” chapter
in this publication.
Cisco routers can also half-bridge IP and IPX with Combinet devices that support only CPP. To configure
this feature, you only need to set up the addressing with the ISDN interface as part of the remote subnet;
no additional commands are required.
You can enable a serial or ISDN interface to accept calls and dynamically change the encapsulation in
effect on the interface when the remote device does not signal the call type. For example, if an ISDN call
does not identify the call type in the Lower Layer Compatibility fields and is using an encapsulation that
is different from the one configured on the interface, the interface can change its encapsulation type at
that time.
This feature enables interoperation with ISDN terminal adapters that use V.120 encapsulation but do not
signal V.120 in the call setup message. An ISDN interface that by default answers a call as synchronous
serial with PPP encapsulation can change its encapsulation and answer such calls.
Automatic detection is attempted for the first 10 seconds after the link is established or the first 5 packets
exchanged over the link, whichever is first.
To enable automatic detection of encapsulation type, use the following command in interface
configuration mode:
Command Purpose
Router(config-if)# autodetect encapsulation Enables automatic detection of encapsulation type on the
encapsulation-type specified interface.
You can specify one or more encapsulations to detect. Cisco IOS software currently supports automatic
detection of PPP and V.120 encapsulations.
Command Purpose
Step 1 Router(config-if)# dialer map protocol Defines the protocol address of the remote recipient, host
next-hop-address name hostname speed 56|64 name, and dialing string; optionally, provides the ISDN
dial-string[:isdn-subaddress]
subaddress; sets the dialer speed to 56 or 64 kbps, as
or needed.
Router(config-if)# dialer map protocol (Australia) Uses the spc keyword that enables ISDN
next-hop-address name hostname spc [speed 56 | semipermanent connections.
64] [broadcast] dial-string[:isdn-subaddress]
Step 2 Router(config-if)# dialer-group group-number Assigns the interface to a dialer group to control access to
the interface.
Step 3 Router(config-if)# dialer-list dialer-group Associates the dialer group number with an access list
list access-list-number number.
Step 4 Router(config-if)# access-list Defines an access list permitting or denying access to
access-list-number {deny | permit} protocol specified protocols, sources, or destinations.
source address source-mask destination
destination-mask
Australian networks allow semipermanent connections between customer routers with PRIs and the
TS-014 ISDN PRI switches in the exchange. Semipermanent connections are offered at better pricing
than leased lines.
Packets that are permitted by the access list specified by the dialer-list command are considered
interesting and cause the router to place a call to the identified destination protocol address.
Note The access list reference in Step 4 of this task list is an example of the access list commands allowed by
different protocols. Some protocols might require a different command form or might require multiple
commands. See the relevant chapter in the appropriate network protocol configuration guide (for
example, the Cisco IOS AppleTalk and Novell IPX Configuration Guide) for more information about
setting up access lists for a protocol.
For more information about defining outgoing call numbers, see the sections “Configuring Access
Control for Outgoing Calls” in the chapters “Configuring Legacy DDR Spokes” or “Configuring Legacy
DDR Hubs” later in this publication.
Command Purpose
Router(config-if)# isdn calling-number Specifies the calling party number.
calling-number
This command can be used with all ISDN PRI switch types.
Command Purpose
Router(config-if)# isdn tei [first-call | powerup] Determines when ISDN TEI negotiation occurs.
Command Purpose
Router(config-if)# isdn static-tei tei-number Configures a static ISDN Layer 2 TEI over the D channel.
To enable all incoming ISDN voice calls to access the call switch module and integrated modems, use
the following command in interface configuration mode:
Command Purpose
Router(config-if)# isdn incoming-voice {modem [56 | Routes incoming ISDN modem calls to the call switch module.
64]}
The settings for the isdn incoming-voice interface command determine how a call is handled based on
bearer capability information, as follows:
• isdn incoming-voice voice—Calls bypass the modem and are handled as a voice call.
• isdn incoming-voice data—Calls bypass the modem and are handled as digital data.
• isdn incoming-voice modem—Calls are passed to the modem and the call negotiates the
appropriate connection with the far-end modem.
Refer to the Cisco IOS Voice, Video, and Fax Configuration Guide and Cisco IOS Voice, Video, and Fax
Command Reference, Release 12.2, for more information about using the isdn incoming-voice interface
configuration command to configure incoming ISDN voice and data calls.
Command Purpose
Router(config-if)# isdn reject {{cause cause-code} Rejects an incoming ISDN BRI or PRI call based on type.
|{data [56 | 64]} | piafs | v110 | v120 | vod |
voice {[3.1khz | 7khz | speech]}}
Note When the ISDN interface is configured for incoming voice with the isdn incoming-voice voice
command (see the previous section “Configuring Incoming ISDN Modem Calls”), and bearer capability
indicates the call as unrestricted digital data (i = 0x8890), the call is handled as voice over data (use vod
keyword).
To verify that calls are being rejected, perform the following steps:
Step 1 Enable the following debug commands at the privileged EXEC prompt:
• debug isdn event
• debug isdn event detail
• debug isdn q931
• debug isdn q931 l3trace
Step 2 Configure the appropriate isdn reject command. The following example configures the network to reject
all incoming data calls on ISDN interfaces 4 through 23:
Router(config)# interface serial 4:23
Router(config-if)# isdn reject data
Router(config-if)# ^Z
Step 3 Build the configuration and then monitor the debug command output for the following string, which
indicates that the call was rejected:
Step 4 Enter the show isdn status EXEC command to display a detailed report of the ISDN configuration,
including status of Layers 1 through 3, the call type, and the call identifier.
Step 5 Turn off the debugging messages by entering the no form of the debug
command—no debug isdn event detail, for example— or by entering the undebug form of the
command—undebug isdn q931, for example.
Command Purpose
Router(config-if)# isdn guard-timer msecs Enables the guard timer and sets the number of milliseconds
for which the access server waits for RADIUS to respond
before rejecting or accepting (optional) a call.
For more information about configuring RADIUS, and to see sample ISDN PRI guard timer
configurations, refer to the Cisco IOS Security Configuration Guide.
Command Purpose
Router(config-if)# isdn sending-complete Includes the Sending Complete information element in the
outgoing call Setup message.
Command Purpose
Step 1 Router(config)# interface serial Enters interface configuration mode for a D-channel serial
controller:timeslot interface.
Step 2 Router(config-if)# isdn snmp busyout b-channel Allows the busyout of individual PRI B channels via
SNMP.
Command Purpose
Step 1 Router(config)# map-class dialer classname Specifies the dialer map class, using the dialing-plan
keyword as the class name, and begins map class
configuration mode.
Step 2 Router(config-map-class)# dialer voice-call (Optional) Enables voice calls.
Step 3 Router(config-map-class)# dialer outgoing Configures the specific dialer map class to make outgoing
classname calls.
Note To set the called party type to international, the dialed number must be prefaced by 011.
Table 50 lists the NSF dialing plans and supported services offered on AT&T Primary-4ESS switches.
Command Purpose
Router(config)# isdn switch-type switch-type Applies a global ISDN switch type.
You must ensure that the ISDN switch type is valid for the ISDN interfaces on the router. Table 49 lists
valid ISDN switch types for BRI and PRI interfaces.
Note When you configure an ISDN switch type on the channelized E1 or T1 controller, this switch type is
applied to all time slots on that controller. For example, if you configure channelized T1 controller 1:23,
which corresponds to serial interface 1, with the ISDN switch type keyword primary-net5, then all time
slots on serial interface 1 (and T1 controller 1) will use the Primary-Net5 switch type.
The following restrictions apply to the Multiple ISDN Switch Types feature:
• You must configure a global ISDN switch type using the existing isdn switch-type global
configuration command before you can configure the ISDN switch type on an interface. Because
global commands are processed before interface level commands, the command parser will not
accept the isdn switch-type command on an interface unless a switch type is first added globally.
Using the isdn switch-type global command allows for backward compatibility.
• If an ISDN switch type is configured globally, but not at the interface level, then the global switch
type value is applied to all ISDN interfaces.
• If an ISDN switch type is configured globally and on an interface, the interface level switch type
supersedes the global switch type at initial configuration. For example, if the global BRI switch-type
keyword basic-net3 is defined and the interface-level BRI switch-type keyword is basic-ni, the
National ISDN switch type is the value applied to that BRI interface.
• The ISDN global switch type value is only propagated to the interface level on initial configuration
or router reload. If you reconfigure the global ISDN switch type, the new value is not applied to
subsequent interfaces. Therefore, if you require a new switch type for a specific interface, you must
configure that interface with the desired ISDN switch type.
• If an ISDN global switch type is not compatible with the interface type you are using or you change
the global switch type and it is not propagated to the interface level, as a safety mechanism, the
router will apply a default value to the interface level, as indicated in Table 51.
Table 51 ISDN PRI and ISDN BRI Global Switch Type Keywords
If, for example, you reconfigure the router to use global switch type keyword basic-net3, the router will
apply the primary-net5 ISDN switch type to PRI interfaces and the basic-net3 ISDN switch type to any
BRI interfaces. You can override the default switch assignment by configuring a different ISDN switch
type on the associated interface.
Command Purpose
Router(config-if)# isdn bchan-number-order Enables B channel selection for outgoing calls on a PRI interface
{ascending | descending} (optional).
Before configuring the ISDN PRI on your router, check with your service vendor to determine if the
ISDN trunk call selection is configured for ascending or descending order. If there is a mismatch
between the router and switch with regard to channel availability, the switch will send back an error
message stating the channel is not available. By default, the router will select outgoing calls in
descending order.
Command Purpose
Router> show controllers t1 slot/port Checks Layer 1 (physical layer) of the PRI over T1.
Router> show controllers e1 slot/port Checks Layer 1 (physical layer) of the PRI over E1.
Router> show isdn status Checks the status of PRI channels.
Router# debug q921 Checks Layer 2 (data link layer).
Router# debug isdn events Checks Layer 3 (network layer).
or
Router# debug q931
or
Router# debug dialer
or
Router> show dialer
Command Purpose
Cisco 7500 series routers Displays information about the physical attributes of the
Router> show interfaces serial slot/port bchannel ISDN PRI over T1 B and D channels.
channel-number
or
Cisco 4000 series routers
Router> show interfaces serial number bchannel
channel-number
Cisco 7500 series routers Displays information about the physical attributes of the
Router> show interfaces serial slot/port bchannel ISDN PRI over E1 B and D channels.
channel-number
or
Cisco 4000 series routers
Router> show interfaces serial number bchannel
channel-number
Cisco 7500 series routers Displays information about the T1 links supported on the
Router> show controllers t1 [slot/port] ISDN PRI B and D channels.
or
Cisco 4000 series routers
Router> show controllers t1 number
Cisco 7500 series routers Displays information about the E1 links supported on the
Router> show controllers e1 [slot/port] ISDN PRI B and D channels.
or
Cisco 4000 series routers
Router> show controllers e1 number
Router> show isdn {active | history | memory | Displays information about current calls, history, memory,
services | status [dsl | serial number] | timers} services, status of PRI channels, or Layer 2 or Layer 3
timers. (The service keyword is available for PRI only.)
Router> show dialer [interface type number] Obtains general diagnostic information about the specified
interface.
In countries that support T1 framing (such as the United States and Canada), many networks send
supervisory and signaling information to each other by removing the 8th bit of each time slot of the 6th
and 12th frame for superframe (SF) framing. For networks supporting extended superframe (ESF)
framing, the 6th, 12th, 18th, and 24th frames are affected. This additional signaling information is added
to support channel banks in the network that convert various battery and ground operations on analog
lines into signaling bits.
Robbed-bit signaling configured on a Cisco access server enables integrated modems to answer and send
analog calls. Robbed bits are forwarded over digital lines. To support analog signaling over T1 lines,
robbed-bit signaling must be enabled.
Note The signal type configured on the access server must match the signal type offered by your telco
provider. Ask your telco provider which signal type to configure on each T1 controller.
The Cisco access server has two controllers: controller T1 1 and controller T1 0, which must be
configured individually.
To configure robbed-bit signaling support for calls made and received, use the following commands
beginning in global configuration mode:
Command Purpose
Step 1 Router(config)# controller t1 0 Enables the T1 0 controller and begins controller
configuration mode.
Step 2 Router(config-controller)# cablelength long If the channelized T1 line connects to a smart jack instead
dbgain-value dbloss-value of a CSU, sets pulse equalization (use parameter values
specified by your telco service provider).
Step 3 Router(config-controller)# framing esf Sets the framing to match that of your telco service provider,
which in most cases is esf.
Step 4 Router(config-controller)# linecode b8zs Sets the line-code type to match that of your telco service
provider, which in most cases is b8zs.
Step 5 Router(config-controller)# clock source line Configures one T1 line to serve as the primary or most
primary stable clock source line.
Step 6 Router(config-controller)# cas-group Configures channels to accept voice calls.
channel-number timeslots range type signal
This step creates interfaces that you can configure.
Step 7 Router(config-controller)# fdl {att | ansi} Sets the facilities data-link exchange standard for the CSU,
as specified by your telco service provider.
If you want to configure robbed-bit signaling on the other T1 controller, repeat Steps 1 through 7, making
sure in Step 5 to select T1 controller line 1 as the secondary clock source.
If you want to configure ISDN on the other controller, see the section “How to Configure ISDN PRI” in
this chapter. If you want to configure channel groupings on the other controller, see the chapter
“Configuring Synchronous Serial Ports” in this publication; specify the channel groupings when you
specify the interface.
See the section “Robbed-Bit Signaling Examples” at the end of this chapter for configuration examples.
CAS on Channelized E1
Cisco access servers and access routers support CAS for channelized E1 lines, which are commonly
deployed in networks in Latin America, Asia, and Europe. CAS is configured to support channel banks
in the network that convert various battery and ground operations on analog lines into signaling bits,
which are forwarded over digital lines.
CAS is call signaling that is configured on an E1 controller and enables the access server to send or
receive analog calls. The signaling uses the16th channel (time slot); thus, CAS fits in the out-of-band
signaling category.
Once CAS is configured on a single E1 controller, remote users can simultaneously dial in to the Cisco
device through networks running the R2 protocol (see specifications for your particular network device
for the number of dialins supported).
The R2 protocol is an international signaling standard for analog connections. Because R2 signaling is
not supported in the Cisco access servers, an E1-to-E1 converter is required.
Figure 46 illustrates that, because the Cisco access servers have more than one physical E1 port on the
dual E1 PRI board, up to 60 simultaneous connections can be made through one dual E1 PRI board.
Figure 46 Remote PC Accessing Network Resources Through the Cisco AS5000 Series Access
Server
IP
network
Central R2 E&M
office network
using the R2 EI EI
Modem
Remote PC protocol EI-to-EI Cisco AS5200
making an converter
S5960
analog call
Note For information on how to configure an Anadigicom E1-to-E1 converter, see to the documentation that
came with the converter.
Note The dual E1 PRI card must be installed in the Cisco access server before you can configure CAS. To
identify the hardware platform or software image information associated with a feature, use the Feature
Navigator on Cisco.com to search for information.
Command Purpose
Step 1 Router(config)# controller e1 number Defines the controller location in the Cisco access
server by unit number (choices for the number
argument are 1 or 2) and begins controller
configuration mode.
Step 2 Router(config-controller)# cas-group channel-number Configures CAS and the R2 signaling protocol on a
timeslots range type signal specified number of time slots.
Step 3 Router(config-controller)# framing crc4 Defines the framing characteristics as CRC4.
Step 4 Router(config-controller)# linecode hdb3 Defines the line code as HDB3.
1
Step 5 Router(config-controller)# clock source line primary Specifies one E1 line to serve as the primary or
most stable clock source line.
1. Specify the other E1 line as the secondary clock source using the clock source line secondary command.
If you do not specify the time slots, CAS is configured on all 30 B channels and one D channel on the
specified controller.
See the section “ISDN CAS Examples” for configuration examples.
Command Purpose
Step 1 Router(config)# controller e1 slot/port Specifies the E1 controller that you want to
configure with R2 signaling and begins controller
configuration.
Step 2 Router(config-controller)# ds0-group ds0-group-no Configures channel-associated signaling and the
timeslots timeslot-list type {e&m-immediate | signaling protocol on a specified number of time
e&m-delay | e&m-wink | fxs-ground-start |
fxs-loop-start |fxo-ground-start | fxo-loop-start}
slots.
Step 3 Router(config-controller)# framing crc4 Defines the framing characteristics as cyclic
redundancy check 4 (CRC4).
Step 4 Router(config-controller)# linecode hdb3 Defines the line code as high-density bipolar 3
(HDB3).
Step 5 Router(config-controller)# clock source line primary1 Specifies one E1 line to serve as the primary or
most stable clock source line.
1. Specify the other E1 line as the secondary clock source using the clock source line secondary command.
If you do not specify the time slots, channel-associated signaling is configured on all 30 B channels and
one D channel on the specified controller.
In the original Wink Start protocol, the terminating side responds to an off-hook from the originating
side with a short wink (transition from on-hook to off-hook and back again). This wink tells the
originating side that the terminating side is ready to receive addressing digits. After receiving addressing
digits, the terminating side then goes off-hook for the duration of the call. The originating endpoint
maintains off-hook for the duration of the call.
Command Purpose
Step 1 Router(config)# signaling-class cas name Names the signaling class and begins interface
configuration mode.
Step 2 Router(config-if)# profile incoming template Defines the template to process the ANI/DNIS
delimiter.
Step 3 Router(config-if)# exit Return to global configuration mode.
Step 4 Router(config)# controller t1 slot/port/number Enables this feature for a T1 controller and begins
controller configuration mode.
Step 5 Router(config-controller)# cas-custom channel Specifies a single channel group number.
Step 6 Router(config-ctrl-cas)# class name Enables the ANI/DNIS delimiter feature by specifying
the template.
To disable the delimiter, use the command no class under the cas-custom configuration.
To remove the signaling class, use the configuration command no signaling-class cas. When removing
a signaling class, make sure the signaling class is no longer used by any controllers; otherwise, the
following warning will be displayed:
% Can’t delete, signaling class test is being used
• Analog modem calls are not supported over DS0s that are provisioned for switched 56K. For a
configuration example, see the section “Switched 56K and Analog Modem Calls over Separate T1
CAS Lines Example” later in this chapter.
• Certain types of T1 lines, such as loop start and ground start, might not support this service. Contact
your telco vendor to determine if this feature is available.
Figure 47 PCs Making Switched 56K and Analog Modem Calls into a Cisco AS5000 Series
Access Server
PC running Windows 95
and making switched 56K
digital calls into the Internet
RADIUS
security
server
External CSU/DSU
Switched
56K line
Asynchronous
modem line
For the startup running configuration on the Cisco access server shown in Figure 47, see the section
“Comprehensive Switched 56K Startup Configuration Example” later in this chapter.
Note The BRI terminal must originate its calls with a bearer capability of 56 kbps.
Figure 48 Processing Components for Switched 56K Calls Versus Analog Modem Calls
PC making
digital BRI calls
with an internal
terminal adapter
WAN
T1 1 T1 0
cas-group cas-group
service data service voice Access server at
service provider POP,
which is configured
to support switched 56K
calls and modem calls
Serial Group-async
interfaces Lines
SI:0-SI:23 Modems
10314
Ethernet
Note The Cisco IOS software does enable you to configure one T1 controller to support both switched 56K
digital calls and analog modem calls. In this scenario, Figure 48 would show all calls coming into the
access server through one T1 line and controller. However, you must negotiate with the telco which DS0s
will support switched 56K services and which DS0s will not. On the access server, analog modem calls
are not supported over DS0s that are provisioned for switched 56K. For an example software
configuration, see the section “Mixture of Switched 56K and Modem Calls over CT1 CAS Example” at
the end of this chapter.
Note The BRI terminal must originate its calls with a bearer capability of 56 kbps.
Figure 49 Remote PC Making BRI Digital Calls via Switched 56K to a Cisco AS5000 Series Access
Server
PC telecommuter
making analog modem
calls into the enterprise
Enterprise LAN
PSTN
Telco switch Switched 56K over CTI
converting ISDN BRI 100BASE-T
and analog modem calls
to robbed bit signaling Cisco AS5300 Windows NT
server
BRI UNIX
mail server
PC running Windows 95
and loaded with a
BRI interface terminal
10316
adapter card
For a configuration example on the Cisco access server, see the section “Comprehensive Switched 56K
Startup Configuration Example” at the end of this chapter.
Command Purpose
Step 1 Router(config)# controllers t1 number Specifies a T1 controller and begins controller
configuration mode.
Step 2 Router(config-controller)# framing {sf | esf} Sets the framing.
Step 3 Router(config-controller)# linecode {ami | b8zs} Defines the line code.
Command Purpose
Step 4 Router(config-controller)# clock source {line Specifies the clocking.
{primary | secondary} | internal}
Step 5 Router(config-controller)# cas-group channel Configures robbed-bit signaling for a range of time
timeslots range type signal slots. A logical serial interface is automatically created
for each switched 56K channel.
Step 6 Router(config-controller)# exit Exits controller configuration mode.
Step 7 Router(config)# interface serial number:number Specifies logical serial interface, which was
dynamically created when the cas-group command was
issued, and configures the core protocol characteristics
for the serial interface.
For configuration examples, see the section “Switched 56K Configuration Examples” later in this
chapter.
E1 R2 Signaling Overview
R2 signaling is channelized E1 signaling used in Europe, Asia, and South America. It is equivalent to
channelized T1 signaling in North America. There are two types of R2 signaling: line signaling and
interregister signaling. R2 line signaling includes R2 digital, R2 analog, and R2 pulse. R2 interregister
signaling includes R2 compelled, R2 noncompelled, and R2 semicompelled. These signaling types are
configured using the cas-group command for Cisco access servers, and the ds0-group command for
Cisco routers.
Many countries and regions have their own E1 R2 variant specifications, which supplement the ITU-T
Q.400-Q.490 recommendation for R2 signaling. Unique E1 R2 signaling parameters for specific
countries and regions are set by entering the cas-custom channel command followed by the country
name command.
The Cisco E1 R2 signaling default is ITU, which supports the following countries: Denmark, Finland,
Germany, Russia (ITU variant), Hong Kong (ITU variant), and South Africa (ITU variant). The
expression “ITU variant” means that there are multiple R2 signaling types in the specified country, but
Cisco supports the ITU variant.
Cisco also supports specific local variants of E1 R2 signaling in the following regions, countries, and
corporations:
• Argentina • Laos1
• Australia • Malaysia
1
• Bolivia • Malta1
• Brazil • New Zealand
1
• Bulgaria • Paraguay
• China • Peru
• Colombia • Philippines
• Costa Rica • Saudi Arabia
2
• East Europe • Singapore
• Ecuador ITU • South Africa (Panaftel variant)
• Ecuador LME • Telmex corporation (Mexico)
• Greece • Telnor corporation (Mexico)
• Guatemala • Thailand
• Hong Kong (uses the China variant) • Uruguay
• Indonesia • Venezuela
• Israel • Vietnam
• Korea
1. Cisco 3620 and 3640 series routers only.
2. Includes Croatia, Russia, and Slovak Republic.
Note Only MICA technologies modems support R2 functionality. Microcom modems do not support R2.
PC running Windows 95
and making analog modem
calls into the Cisco AS5800
Fast Service
4 CEI lines Ethernet provider
PSTN LAN
56k modem
Telco switch Cisco AS5800
loaded with 56k
MICA modems
Data
network
12950
Figure 51 shows a sample network topology for using E1 R2 signaling for voice transfers with a
Cisco 2600, 3600, or 7200 series router. All the controllers on the router are configured with R2 digital
signaling. Additionally, localized R2 country settings are enabled on the router.
IP, ATM, or
E1 R2 line
Frame Relay
Network
PBX Router
42930
Configuration examples are supplied in the “Configuration Examples for Channelized E1 and
Channelized T1” section at the end of this chapter.
Configuring E1 R2 Signaling
To configure support for E1 R2 signaling on the Cisco access servers, use the following commands
beginning in global configuration mode:
Command Purpose
Step 1 Router(config)# controller e1 slot/port Specifies the E1 controller that you want to configure
with R2 signaling and begins controller configuration
mode.
Step 2 Router(config-controller)# cas-group channel Configures R2 channel associated signaling on the E1
timeslots range type signal controller. For a complete description of the available
R2 options, see the cas-group command.
Replace the signal argument with any of the following The R2 part of this command is defined by the signal
choices under R2 analog, R2 digital, or R2 pulse: argument in the cas-group command.
r2-analog [dtmf | r2-compelled [ani] |
r2-non-compelled [ani] | r2-semi-compelled [ani]]
or
r2-digital [dtmf | r2-compelled [ani] |
r2-non-compelled [ani] | r2-semi-compelled [ani]]
or
r2-pulse [dtmf | r2-compelled [ani] |
r2-non-compelled [ani] | r2-semi-compelled [ani]]
Command Purpose
Step 1 Router(config)# controller E1 slot/port Specifies the E1 controller that you want to configure
with R2 signaling and begins controller configuration
mode.
Step 2 Router(config-controller)# ds0-group channel Configures R2 channel-associated signaling on the E1
timeslots range type signal controller. For a complete description of the available
R2 options, see the ds0-group (controller e1)
Replace the signal argument with any of the following
command reference page.
choices under R2 analog, R2 digital, or R2 pulse:
r2-analog [dtmf | r2-compelled [ani] |
r2-non-compelled [ani] | r2-semi-compelled [ani]]
or
r2-digital [dtmf | r2-compelled [ani] |
r2-non-compelled [ani] | r2-semi-compelled [ani]]
or
r2-pulse [dtmf | r2-compelled [ani] |
r2-non-compelled [ani] | r2-semi-compelled [ani]]
Command Purpose
Step 3 Router(config-controller)# cas-custom channel Enters cas-custom mode. In this mode, you can localize
E1 R2 signaling parameters, such as specific R2 country
settings for Hong Kong.
For the customization to take effect, the channel number
used in the cas-custom command must match the
channel number specified by the ds0-group command.
Step 4 Router(config-ctrl-cas)# country name use-defaults Specifies the local country, region, or corporation
specification to use with R2 signaling. Replaces the
name variable with one of the supported country names.
Cisco strongly recommends that you include the
use-defaults option, which engages the default settings
for a specific country. The default setting for all
countries is ITU.
See the cas-custom command reference page for the list
of supported countries, regions, and corporation
specifications.
Step 5 • Router(config-ctrl-cas)# ani-digits (Optional) Further customizes the R2 signaling
• Router(config-ctrl-cas)# answer-signal parameters. Some switch types require you to fine tune
• Router(config-ctrl-cas)# caller-digits your R2 settings. Do not tamper with these commands
• Router(config-ctrl-cas)# category
unless you fully understand your switch’s requirements.
• Router(config-ctrl-cas)# default For nearly all network scenarios, the country name
• Router(config-ctrl-cas)# dnis-digits use-defaults command fully configures your country’s
local settings. You should not need to perform Step 5.
• Router(config-ctrl-cas)# invert-abcd
• Router(config-ctrl-cas)# ka See the cas-custom command reference page for more
• Router(config-ctrl-cas)# kd
information about each signaling command.
• Router(config-ctrl-cas)# metering
• Router(config-ctrl-cas)# nc-congestion
• Router(config-ctrl-cas)# unused-abcd
• Router(config-ctrl-cas)# request-category
Monitoring E1 R2 Signaling
To monitor E1 R2 signaling, use the following commands in EXEC mode as needed:
Command Purpose
Router> show controllers e1 Displays the status for all controllers or a specific
or controller. Be sure the status indicates the controller is
Router> show controllers e1 number up and there are no alarms or errors (lines 2, 4, 9, and
10, as shown immediately below in the “Monitoring E1
R2 Using the show controllers e1 Command” section).
Router> show modem csm [slot/port| group number] Displays status for a specific modem, as shown below
in the “Monitoring E1 R2 Signaling Using the show
modem csm Command” section.
E1 0 is up.
Applique type is Channelized E1 - balanced
No alarms detected.
Version info of Slot 0: HW: 2, Firmware: 4, PLD Rev: 2
Verifying E1 R2 Signaling
To verify the E1 R2 signaling configuration, enter the show controller e1 command to view the status
for all controllers, or enter the show controller e1 slot/port command to view the status for a particular
controller. Make sure that the status indicates that the controller is up (line 2 in the following example)
and that no alarms (line 6 in the following example) or errors (lines 9, 10, and 11 in the following
example) have been reported.
Router# show controller E1 1/0
E1 1/0 is up.
Applique type is Channelized E1
Cablelength is short 133
Troubleshooting E1 R2 Signaling
If a connection does not come up, check for the following:
• Loose wires, splices, connectors, shorts, bridge taps, and grounds
• Backward send and receive
• Mismatched framing types (for example, CRC-4 versus no CRC-4)
• Send and receive pair separation (crosstalk)
• Faulty line cards or repeaters
• Noisy lines (for example, power and crosstalk)
If you see errors on the line or the line is going up and down, check the following:
• Mismatched line codes (HDB3 versus AMI)
• Receive level
• Frame slips due to poor clocking plan
If problems persist, enable the modem management Call Switching Module (CSM) debug mode, using
the debug modem csm command, as shown immediately below in the “Debug E1 R1 Signaling Using
the debug modem Command” section.
When the E1 controller comes up, you will see the following messages:
%CONTROLLER-3-UPDOWN: Controller E1 0, changed state to up
It also shows these messages for individual timeslots:
%DSX0-5-RBSLINEUP: RBS of controller 1 timeslot 1 is up
%DSX0-5-RBSLINEUP: RBS of controller 1 timeslot 2 is up
%DSX0-5-RBSLINEUP: RBS of controller 1 timeslot 3 is up
%DSX0-5-RBSLINEUP: RBS of controller 1 timeslot 4 is up
%DSX0-5-RBSLINEUP: RBS of controller 1 timeslot 5 is up
Note This type of signaling is not the same as ITU R1 signaling; it is R1 signaling modified for Taiwan
specifically. In the future, R1 modified signaling will be supported by the Cisco AS5800 access server,
and will also be available in Turkey.
Figure 52 Service Provider Using E1 R1 Signaling with a Cisco AS5200 Access Server
PC running Windows 95
and making analog modem
calls into the Cisco AS5200
Service
2 CE1 lines 10BaseT provider
PSTN LAN
56k modem
Telco switch Cisco AS5200
loaded with 56k
MICA modems
Data
network
10733
Figure 53 illustrates a service provider using R1 modified signaling with E1 and a Cisco AS5800 access
server.
Figure 53 Service Provider Using E1 R1 Modified Signaling with a Cisco AS5800 Access Server
Service
12 CEI lines provider
10BASE-T
PSTN LAN
56K modem
Telco switch Cisco AS5800
72 modem
MICA card per
CE1 line
Data
network
17692
For information on upgrading your Cisco IOS images, modem portware, or modem code, go to the
following locations and then select your access server type (Cisco AS5200, Cisco AS5300, or
Cisco AS5800) and port information:
• On Cisco.com:
http://www.cisco.com/univercd/cc/td/doc/product/access/acs_serv/
Or, follow this path:
Cisco Product Documentation/Access Servers and Access Routers/Access Servers
• On the Documentation CD-ROM:
Cisco Product Documentation/Access Servers and Access Routers/Access Servers
To configure R1 modified signaling, perform the tasks in the following sections, as required:
• Configuring R1 Modified Signaling on a T1 Interface
• Configuring R1 Modified Signaling on an E1 Interface
Note The sample prompts and output are similar for the Cisco AS5200, Cisco AS5300 and Cisco AS5800
access servers.
Command Purpose
Step 1 Cisco AS5800 access server Specifies the T1 controller that you want to configure and
Router(config)# vty-async(config)# controller begins controller configuration mode. Refer to the Cisco
t1 shelf/slot/port AS5800 Universal Access Server Software Installation and
Router(config)# vty-async(config-controller)#
Configuration Guide for port details.
or
Cisco AS5200 and AS5300 access servers The T1 controller ports are labeled 0 to 3 on the quad
T1/PRI cards in the Cisco AS5200 and AS5300 access
Router(config)# vty-async(config)# controller
t1 [0 | 1 | 2 | 3] servers.
Router(config)# vty-async(config-controller)#
Step 2 Router(config)# vty-async (config-controller)# Entering framing sf configures framing to T1 with sf.
framing {sf|esf}
Entering framing esf configures framing to T1 only.
Step 3 Router(config)# vty-async (config-controller)# Entering linecode ami configures line code to AMI1
linecode {ami|b8zs} encoding.
Entering linecode b8zs configures line code to b8zs
encoding.
Step 4 Router(config)# vty-async (config-controller)# Entering clock source internal configures the clock source
clock source {internal | line [primary | to the internal clock.
secondary]}
Entering clock source line primary configures the clock
source to the primary recovered clock.
Entering clock source secondary configures the clock
source to the secondary recovered clock.
Command Purpose
Step 5 Router(config)# vty-async(config-controller)# Configures the time slots that belong to each E1 circuit for
cas-group 1 timeslots 1-24 type {r1-modified r1-modified or for r1-itu signaling.2
{ani-dnis | dnis} | r1-itu {dnis}}
• The cas-group # ranges from 0 to 23 for CT1.
• The timeslot # ranges from 1 to 24 for CT1.
• For the type, each CAS group can be configured as one
of the Robbed Bit Signaling provisions.
• ani-dnis indicates R1 will collect ani and dnis
information; dnis indicates R1 will collect only dnis
information.
Step 6 Router(config)# vty-async(config-if)# ^Z Returns to enable mode by simultaneously pressing the Ctrl
Router(config)# vty-async# key and the z key. (This message returned is expected and
%SYS-5-CONFIG_I: Configured from console by
console
does not indicate an error.)
Command Purpose
Step 1 Cisco AS5800 access server Specifies the T1 controller that you want to configure and
Router(config)# controller e1 shelf/slot/port begins controller configuration mode.
Refer to the Cisco AS5800 Universal Access Server
or Software Installation and Configuration Guide for port
details.
Cisco AS5200 and AS5300 access servers The T1 controller ports are labeled 0 to 3 on the quad
Router(config)# controller e1 [0 | 1 | 2 | 3] T1/PRI cards in the Cisco AS5200 and AS5300 access
servers.
Step 2 Router (config-controller)# framing {crc4 | Entering framing crc4 configures framing to E1 with
no-crc4} CRC.1
Entering framing no-crc4 configures framing to E1 only.
Step 3 Router (config-controller)# linecode {ami | Entering linecode ami configures line code to AMI2
hdb3} encoding.
Entering linecode hdb3 configures line code to HDB3
encoding.
Step 4 Router (config-controller)# clock source Entering clock source internal configures the clock source
{internal | line [primary | secondary]} to the internal clock.
Entering clock source line primary configures the clock
source to the primary recovered clock.
Entering clock source secondary configures the clock
source to the secondary recovered clock.
Command Purpose
Step 5 Router(config-controller)# cas-group 1 Configures the time slots that belong to each E1 circuit for
timeslots 1-15, 17-31 type r1-modified R1 modified signaling.4
{ani-dnis | dnis}
• The cas-group number ranges from 0 to 30 for CE1.
• The timeslot number ranges from 1 to 31 for CE1.
• For the type, each CAS group can be configured as one
of the robbed bit signaling provisions.
• ani-dnis indicates R1 will collect ANI and DNIS
information; dnis indicates R1 will collect only DNIS
information.
Step 6 Router(config-controller-cas)# cas-custom 1 (Optional) Enters the channel number to customize.
Step 7 Router(config-controller-cas)# ^Z Returns to enable mode by simultaneously pressing the Ctrl
Router# key and the Z key.
%SYS-5-CONFIG_I: Configured from console by
console
This message is normal and does not indicate an error.
1. CRC = cyclic redundancy check.
2. AMI = alternate mark inversion.
3. HDB = high-density bipolar 3.
4. For a more detailed description of the syntax and arguments of this command, refer to the Cisco IOS Dial Technologies Command Reference.
Note None of the Cisco channelized interfaces will react to any loop codes. To loop a channelized interface
requires that the configuration command be entered manually.
Two loopbacks are available for channel groups and are described in the following sections:
• Interface Local Loopback
• Interface Remote Loopback
To place the serial interface (channel group) into local loopback, use the following command in interface
configuration mode:
Command Purpose
Router(config-if)# loopback local Places the serial interface (channel group) in local loopback.
Command Purpose
Router(config-if)# loopback remote interface Places the serial interface (channel group) in remote loopback.
Using the loopback remote interface command sends a latched CSU loopback command to the remote
CSU/DSU. The router must detect the response code, at which time the remote loopback is verified.
Global ISDN and Multiple BRI and PRI Switch Using TEI Negotiation Example
In the following example, the global ISDN switch type setting is NET3 ISDN (basic-net3 keyword) and
the PRI interface (channelized T1 controller) is configured to use isdn switch-type primary-net5. BRI
interface 0 is configured for isdn switch-type basic-ni and isdn tei first-call. TEI first-call negotiation
configured on BRI interface 0 overrides the default value (isdn tei powerup).
isdn switch-type basic-net
!
interface serial0:23
isdn switch-type primary-net5
ip address 172.21.24.85 255.255.255.0
!
interface BRI0
isdn switch-type basic-ni
isdn tei first-call
! The following lines configure the D channel for DDR. This configuration applies
! to all B channels on the ISDN PRI interface.
interface serial 1/1:23
description Will mark outgoing calls from AT&T type calls.
ip address 10.1.1.1 255.255.255.0
encapsulation ppp
dialer map ip 10.1.1.2 name tommyjohn class sdnplan 14193460913
dialer map ip 10.1.1.3 name angus class megaplan 14182616900
dialer map ip 10.1.1.4 name angus class accuplan 14193453730
dialer-group 1
ppp authentication chap
controller T1 0
framing esf
linecode b8zs
clock source line primary
pri-group timeslots 1-24
!
controller T1 1
framing esf
linecode b8zs
clock source line secondary
pri-group timeslots 1-24
!
interface Serial0:23
isdn incoming-voice modem
dialer rotary-group 1
!
interface Serial1:23
isdn incoming-voice modem
dialer rotary-group 1
!
interface Loopback0
ip address 172.16.254.254 255.255.255.0
!
interface Ethernet0
ip address 172.16.1.1 255.255.255.0
!
interface Group-Async1
ip unnumbered Loopback0
ip tcp header-compression passive
encapsulation ppp
async mode interactive
peer default ip address pool default
dialer-group 1
ppp authentication chap pap default
group-range 1 48
!
interface Dialer1
ip unnumbered Loopback0
encapsulation ppp
peer default ip address pool default
ip local pool default 172.16.254.1 172.16.254.48
dialer in-band
dialer-group 1
dialer idle-timeout 3600
ppp multilink
ppp authentication chap pap default
The following example configures ISDN PRI on the appropriate interfaces for IP dial-in on
channelized E1:
! E1 PRI controller configuration
controller E1 0
framing crc4
linecode hdb3
clock source line primary
pri-group timeslots 1-31
!
controller E1 1
framing crc4
linecode hdb3
clock source line secondary
pri-group timeslots 1-31
interface serial0:15
isdn incoming-voice modem
dialer rotary-group 1
!
interface serial1:15
isdn incoming-voice modem
dialer rotary-group 1
!
interface loopback0
ip address 172.16.254.254 255.255.255.0
!
interface ethernet0
ip address 172.16.1.1 255.255.255.0
!
! The following block of commands configures DDR for all the ISDN PRI interfaces
! configured above. The dialer-group and dialer rotary-group commands tie the
! interface configuration blocks to the DDR configuration.
!
interface dialer1
ip unnumbered loopback0
encapsulation ppp
peer default ip address pool default
ip local pool default 172.16.254.1 172.16.254.60
dialer in-band
dialer-group 1
dialer idle-timeout 3600
ppp multilink
ppp authentication chap pap default
The following example shows BRI interface 0 configured for switch type keyword basic-net3 (NET3
ISDN) that will override the global switch type keyword basic-ni (National ISDN). The PRI interface
(channelized T1 controller), is configured for ISDN switch type keyword primary-net5 and is applied
only to the PRI interface.
isdn switch-type basic-ni
!
interface BRI0
isdn switch-type basic-net3
interface serial0:23
! Apply the primary-net5 switch to this interface only.
isdn switch-type primary-net5
The following example sets cause code 21 to reject all incoming data calls:
interface serial 2/0:23
isdn reject data
isdn reject cause 21
There is no specific interface, such as the serial interface shown in the earlier examples, that corresponds
to the time-slot range.
Step 1 Enter global configuration mode using the configure terminal command:
Router# configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Step 2 Specify a T1 controller with the controller t1 number command. Replace the number variable with a
controller number from 0 to 3.
Router(config)# controller t1 1
Step 3 Configure robbed-bit signaling on a range of time slots, then specify switched 56K digital services using
the cas-group command. In this example, all calls coming into controller T1 1 are expected to be
switched 56K data calls, not analog modem calls.
Router(config-controller)# cas-group 1 timeslots 1-24 type e&m-fgb service data
Note Be sure your signaling type matches the signaling type specified by the central office or telco on
the other end. For a list of supported signaling types and how to collect DNIS, refer to the
cas-group command description for the E1 controller card in the Cisco IOS Dial Technologies
Command Reference, Release 12.2.
Step 4 Set the framing for your network environment. You can choose ESF (enter framing esf) or SF (enter
framing sf).
Router(config-controller)# framing esf
Step 5 Set the line-code type for your network environment. You can choose AMI encoding (enter linecode
ami) or B8ZS encoding (enter linecode b8zs).
Router(config-controller)# linecode b8zs
Mixture of Switched 56K and Modem Calls over CT1 CAS Example
The following example configures one T1 controller to accept incoming switched 56K digital calls and
analog modem calls over the same T1 CAS line. Time slots 1 through 10 are provisioned by the telco to
support switched 56K digital calls. Time slots 11 through 24 are provisioned to support analog modem
calls. Due to the DS0s provisioning, it is impossible for analog modems calls to be sent over the DS0s
that map to time slots 1 through 10.
controller T1 0
cas-group 1 timeslots 1-10 type e&m-fgb service data
cas-group 1 timeslots 11-24 type e&m-fgb service voice
framing esf
clock source line primary
linecode b8zs
exit
Switched 56K and Analog Modem Calls over Separate T1 CAS Lines Example
The following example configures one Cisco access server to accept 50 percent switched 56K digital
calls and 50 percent analog modem calls. The controllers T1 0 and T1 1 are configured to support the
switched 56K digital calls using the cas-group 1 timeslots 1-24 type e&m-fgb service digital
command. Controllers T1 2 and T1 3 are configured to support analog modem calls.
controller T1 0
cas-group 1 timeslots 1-24 type e&m-fgb service data
framing esf
clock source line primary
linecode b8zs
exit
controller T1 1
cas-group 1 timeslots 1-24 type e&m-fgb service data
framing esf
clock source line secondary
linecode b8zs
exit
controller T1 2
cas-group 1 timeslots 1-24 type e&m-fgb service voice
framing esf
clock source internal
linecode b8zs
exit
controller T1 3
cas-group 1 timeslots 1-24 type e&m-fgb service voice
framing esf
clock source internal
linecode b8zs
exit
copy running-config startup-config
Note In the following example, only analog modem calls encounter the group asynchronous and line
interfaces. Switched 56K calls encounter the logical serial interfaces and dialer interface.
version xx.x
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
no service udp-small-servers
no service tcp-small-servers
!
hostname 5300
!
aaa new-model
aaa authentication login default local
aaa authentication login console enable
aaa authentication login vty local
aaa authentication login dialin radius
aaa authentication ppp default local
aaa authentication ppp dialin if-needed radius
aaa authorization exec local radius
aaa authorization network radius
aaa accounting network start-stop radius
aaa accounting exec start-stop radius
!
enable secret cisco
!
username admin password cisco
async-bootp dns-server 10.1.3.1 10.1.3.2
!
!
! Switched 56K calls come into controllers T1 0 and T1 1. Take note of the keywords
! ”service data” in the cas-group command.
!
controller T1 0
framing esf
clock source line primary
linecode b8zs
cas-group 0 timeslots 1-24 type e&m-fgb service data
!
controller T1 1
framing esf
clock source line secondary
linecode b8zs
cas-group 1 timeslots 1-24 type e&m-fgb service data
!
! Analog modem calls come into controllers T1 2 and T1 3.
!
controller T1 2
framing esf
clock source line internal
linecode b8zs
cas-group 2 timeslots 1-24 type e&m-fgb
!
controller T1 3
framing esf
clock source line internal
linecode b8zs
cas-group 3 timeslots 1-24 type e&m-fgb
!
interface loopback0
ip address 10.1.2.62 255.255.255.192
!
interface Ethernet0
no ip address
shutdown
!
interface FastEthernet0
ip address 10.1.1.11 255.255.255.0
ip summary address eigrp 10.10.1.2.0 255.255.255.192
!
! Interface serial0:0 maps to the first switched 56K channel. The dialer pool-member
! command connects this channel to dialer interface 1.
!
interface Serial0:0
dialer rotary-group 1
!
interface Serial0:1
dialer rotary-group 1
!
interface Serial0:2
dialer rotary-group 1
!
interface Serial0:3
dialer rotary-group 1
!
interface Serial0:4
dialer rotary-group 1
!
interface Serial0:5
dialer rotary-group 1
!
interface Serial0:6
dialer rotary-group 1
!
interface Serial0:7
dialer rotary-group 1
!
interface Serial0:8
dialer rotary-group 1
!
interface Serial0:9
dialer rotary-group 1
!
interface Serial0:10
dialer rotary-group 1
!
interface Serial0:11
dialer rotary-group 1
!
interface Serial0:12
dialer rotary-group 1
!
interface Serial0:13
dialer rotary-group 1
!
interface Serial0:14
dialer rotary-group 1
!
interface Serial0:15
dialer rotary-group 1
!
interface Serial0:16
dialer rotary-group 1
!
interface Serial0:17
dialer rotary-group 1
!
interface Serial0:18
dialer rotary-group 1
!
interface Serial0:19
dialer rotary-group 1
!
interface Serial0:20
dialer rotary-group 1
!
interface Serial0:21
dialer rotary-group 1
!
interface Serial0:22
dialer rotary-group 1
!
! Interface serial 0:23 is the last switched 56K channel for controller T1 0.
!
interface Serial0:23
dialer rotary-group 1
!
! The switched 56K channels for controller T1 1 begin with interface serial 1:0 and end
! with interface serial 1:23.
!
interface Serial1:0
dialer rotary-group 1
!
interface Serial1:1
dialer rotary-group 1
!
interface Serial1:2
dialer rotary-group 1
!
interface Serial1:3
dialer rotary-group 1
!
interface Serial1:4
dialer rotary-group 1
!
interface Serial1:5
dialer rotary-group 1
!
interface Serial1:6
dialer rotary-group 1
!
interface Serial1:7
dialer rotary-group 1
!
interface Serial1:8
dialer rotary-group 1
!
interface Serial1:9
dialer rotary-group 1
!
interface Serial1:10
dialer rotary-group 1
!
interface Serial1:11
dialer rotary-group 1
!
interface Serial1:12
dialer rotary-group 1
!
interface Serial1:13
dialer rotary-group 1
!
interface Serial1:14
dialer rotary-group 1
!
interface Serial1:15
dialer rotary-group 1
!
interface Serial1:16
dialer rotary-group 1
!
interface Serial1:17
dialer rotary-group 1
!
interface Serial1:18
dialer rotary-group 1
!
interface Serial1:19
dialer rotary-group 1
!
interface Serial1:20
dialer rotary-group 1
!
interface Serial1:21
dialer rotary-group 1
!
interface Serial1:22
dialer rotary-group 1
!
interface Serial1:23
dialer rotary-group 1
!
interface Group-Async1
ip unnumbered Loopback0
encapsulation ppp
async mode interactive
peer default ip address pool dialin_pool
no cdp enable
ppp authentication chap pap dialin
group-range 1 96
!
interface Dialer1
ip unnumbered Loopback0
no ip mroute-cache
encapsulation ppp
peer default ip address pool dialin_pool
no fair-queue
no cdp enable
ppp authentication chap pap dialin
!
router eigrp 10
network 10.0.0.0
passive-interface Dialer0
no auto-summary
!
ip local pool dialin_pool 10.1.2.1 10.1.2.96
ip default-gateway 10.1.1.1
ip classless
!
dialer-list 1 protocol ip permit
radius-server host 10.1.1.23 auth-port 1645 acct-port 1646
radius-server host 10.1.1.24 auth-port 1645 acct-port 1646
radius-server key cisco
!
line con 0
login authentication console
line 1 96
autoselect ppp
autoselect during-login
login authentication dialin
modem DialIn
line aux 0
login authentication console
line vty 0 4
login authentication vty
transport input telnet rlogin
!
end
E1 R2 Signaling Procedure
The following procedure configures R2 signaling and customizes R2 parameters on controller E1 2 of a
Cisco AS5300 access server. In most cases, the same R2 signaling type is configured on each E1
controller.
Step 1 Enter global configuration mode using the configure terminal command:
Router# configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Step 2 Specify the E1 controller that you want to configure with R2 signaling using the controller e1 number
global configuration command. A controller informs the access server how to distribute or provision
individual time slots for a connected channelized E1 line. You must configure one E1 controller for each
E1 line.
Router(config)# controller e1 2
Step 3 Configure CAS with the cas-group channel timeslots range type signal command. The signaling type
forwarded by the connecting telco switch must match the signaling configured on the Cisco AS5300
access server. The Cisco IOS configuration options are r2-analog, r2-digital, or r2-pulse.
Router(config-controller)# cas-group 1 timeslots 1-31 type ?
e&m-fgb E & M Type II FGB
e&m-fgd E & M Type II FGD
e&m-immediate-start E & M Immediate Start
fxs-ground-start FXS Ground Start
fxs-loop-start FXS Loop Start
p7 P7 Switch
r2-analog R2 ITU Q411
r2-digital R2 ITU Q421
r2-pulse R2 ITU Supplement 7
sas-ground-start SAS Ground Start
sas-loop-start SAS Loop Start
The following example specifies R2 ITU Q421 digital line signaling (r2-digital). This example also
specifies R2 compelled register signaling and provisions the ANI ADDR option.
Router(config-controller)# cas-group 1 timeslots 1-31 type r2-digital r2-compelled ani
Router(config-controller)#
%DSX0-5-RBSLINEUP: RBS of controller 0 timeslot 1 is up
%DSX0-5-RBSLINEUP: RBS of controller 0 timeslot 2 is up
%DSX0-5-RBSLINEUP: RBS of controller 0 timeslot 3 is up
%DSX0-5-RBSLINEUP: RBS of controller 0 timeslot 4 is up
%DSX0-5-RBSLINEUP: RBS of controller 0 timeslot 5 is up
%DSX0-5-RBSLINEUP: RBS of controller 0 timeslot 6 is up
%DSX0-5-RBSLINEUP: RBS of controller 0 timeslot 7 is up
%DSX0-5-RBSLINEUP: RBS of controller 0 timeslot 8 is up
%DSX0-5-RBSLINEUP: RBS of controller 0 timeslot 9 is up
%DSX0-5-RBSLINEUP: RBS of controller 0 timeslot 10 is up
%DSX0-5-RBSLINEUP: RBS of controller 0 timeslot 11 is up
%DSX0-5-RBSLINEUP: RBS of controller 0 timeslot 12 is up
%DSX0-5-RBSLINEUP: RBS of controller 0 timeslot 13 is up
%DSX0-5-RBSLINEUP: RBS of controller 0 timeslot 14 is up
%DSX0-5-RBSLINEUP: RBS of controller 0 timeslot 15 is up
%DSX0-5-RBSLINEUP: RBS of controller 0 timeslot 17 is up
%DSX0-5-RBSLINEUP: RBS of controller 0 timeslot 18 is up
%DSX0-5-RBSLINEUP: RBS of controller 0 timeslot 19 is up
%DSX0-5-RBSLINEUP: RBS of controller 0 timeslot 20 is up
%DSX0-5-RBSLINEUP: RBS of controller 0 timeslot 21 is up
%DSX0-5-RBSLINEUP: RBS of controller 0 timeslot 22 is up
%DSX0-5-RBSLINEUP: RBS of controller 0 timeslot 23 is up
%DSX0-5-RBSLINEUP: RBS of controller 0 timeslot 24 is up
%DSX0-5-RBSLINEUP: RBS of controller 0 timeslot 25 is up
%DSX0-5-RBSLINEUP: RBS of controller 0 timeslot 26 is up
%DSX0-5-RBSLINEUP: RBS of controller 0 timeslot 27 is up
%DSX0-5-RBSLINEUP: RBS of controller 0 timeslot 28 is up
%DSX0-5-RBSLINEUP: RBS of controller 0 timeslot 29 is up
%DSX0-5-RBSLINEUP: RBS of controller 0 timeslot 30 is up
%DSX0-5-RBSLINEUP: RBS of controller 0 timeslot 31 is up
Note The actual R2 CAS is configured on the 16th time slot, which is why the time slot does not come
up in the example output. For a description of the supported R2 signaling options, refer to the
cas-group command for the E1 controller in the Cisco IOS Dial Technologies Command
Reference.
Step 4 Customize some of the E1 R2 signaling parameters with the cas-custom channel controller
configuration command. This example specifies the default R2 settings for Argentina. For custom
options, refer to the cas-custom command in the Cisco IOS Dial Technologies Command Reference.
Router(config-controller)# cas-custom 1
Router(config-ctrl-cas)# ?
CAS custom commands:
ani-digits Expected number of ANI digits
answer-signal Answer signal to be used
caller-digits Digits to be collected before requesting CallerID
category Category signal
country Country Name
default Set a command to its defaults
dnis-digits Expected number of DNIS digits
exit Exit from cas custom mode
invert-abcd invert the ABCD bits before tx and after rx
ka KA Signal
kd KD Signal
metering R2 network is sending metering signal
nc-congestion Non Compelled Congestion signal
no Negate a command or set its defaults
request-category DNIS digits to be collected before requesting category
unused-abcd Unused ABCD bit values
Router(config-ctrl-cas)# country ?
argentina Argentina
australia Australia
brazil Brazil
china China
colombia Colombia
.
.
.
Router(config-ctrl-cas)# country argentina ?
use-defaults Use Country defaults
<cr>
Note We highly recommend that you specify the default settings of your country. To display a list of
supported countries, enter the country? command. The default setting for all countries is ITU.
no service password-encryption
!
hostname router
!
enable secret 5 $1$YAaG$L0jTcQ.nMH.gpFYXaOU5c.
!
no modem fast-answer
ip host dirt 10.255.254.254
ip multicast rpf-check-interval 0
isdn switch-type primary-dms100
!
!
controller E1 0
clock source line primary
cas-group 1 timeslots 1-15,17-31 type r1-modified ani-dnis
!
controller E1 1
clock source line secondary
cas-group 1 timeslots 1-15,17-31 type r1-modified ani-dnis
!
controller E1 2
clock source internal
!
controller E1 3
clock source internal
!
interface Ethernet0
ip address 10.19.36.7 255.255.0.0
no ip mroute-cache
!
interface FastEthernet0
no ip address
no ip route-cache
no ip mroute-cache
shutdown
!
interface Group-Async1
ip unnumbered Ethernet0
encapsulation ppp
dialer in-band
dialer idle-timeout 480
dialer-group 1
async dynamic address
async mode interactive
peer default ip address pool DYNAMIC
no fair-queue
no cdp enable
group-range 1 108
!
router igrp 200
network 10.0.0.0
network 192.168.254.0
!
no ip classless
ip route 0.0.0.0 0.0.0.0 Ethernet0
logging source-interface Ethernet0
!
line con 0
exec-timeout 0 0
line 1 108
exec-timeout 0 0
modem InOut
transport input all
line aux 0
line vty 0 4
!
end
Feature History
Release Modification
12.2(11)T This feature was introduced.
This document describes the Dialing Number Enhancement feature. It includes the following sections:
• Feature Overview, page 511
• Supported Platforms, page 512
• Supported Standards, MIBs, and RFCs, page 513
• Configuration Tasks, page 513
• Monitoring and Maintaining Dialing Number Enhancement, page 514
• Configuration Examples, page 514
• Command Reference, page 516
Feature Overview
The Dialing Number Enhancement feature removes previous restrictions on the number of dialed digits
accepted as a valid telephone number in the Called Party number information element (IE) for the
National or International numbering types.
Benefits
The Dialing Number Enhancement feature is a change to the Cisco IOS software that makes the ISDN
dialing plan more flexible by allowing a range rather than a restricted number of digits to be accepted
for dialing.
Restrictions
The Dialing Number Enhancement feature was developed for interfaces configured for network-side
ISDN where the Called Party IE digits are of National or International numbering types.
Related Documents
Refer to the chapter “Configuring Network Side ISDN PRI Signaling, Trunking, and Switching” in the
part “Signaling Configuration” in the Cisco IOS Dial Technologies Configuration Guide, Release 12.2,
for more information about configuring network-side ISDN switches.
Supported Platforms
The Dialing Number Enhancement feature is supported on the following platforms:
Cisco 2600 series
Cisco 3620
Cisco 3640
Cisco 3660
Cisco AS5300 series
Cisco AS5350
Cisco AS5400 series
Cisco AS5800 series
Cisco AS5850
Cisco 7200 series
MIBs
None
To obtain lists of supported MIBs by platform and Cisco IOS release, and to download MIB modules,
go to the Cisco MIB website on Cisco.com at the following URL:
http://www.cisco.com/public/sw-center/netmgmt/cmtk/mibs.shtml
RFCs
None
Configuration Tasks
No new commands are associated with the Dialing Number Enhancement feature. See the
“Troubleshooting Tips” section for information about verifying numbering plans and switch types
configured. See the “Configuration Examples” section for configuration examples.
Troubleshooting Tips
To learn and, if necessary, change the numbering plan and type currently configured on the ISDN
interface, perform the following steps:
Step 1 To learn the numbering plan and type currently configured, use the debug isdn q931 command in EXEC
mode:
Router# debug isdn q931
The Called Party Number report lists the numbering plan and type.
Step 2 To change the numbering plan and type, use the isdn map command in interface configuration mode.
Use the command line interface help feature to list the choices.
Router(config-if)# isdn map address 78886 plan ?
Step 3 To force the ISDN numbering plan and National type on the peer (calling number) side, use the isdn map
command with the following keywords in interface configuration mode:
Router(config-if)# isdn map address telephone-number plan isdn type national
Command Purpose
Router# show isdn status [interface-type number] Displays the status of all ISDN interfaces, or just the specified
interface.
Configuration Examples
This section provides the following configuration examples:
• Data Call Dialing Number Enhancement Example
• Voice Call Dialing Number Enhancement Example
T1
Peer AS5300
72718
T1 Ethernet
Command Reference
This feature uses no new or modified commands. To see the command pages for the commands used with
this feature, go to the Cisco IOS Master Commands List, Release 12.4, at http://www.cisco.com/
univercd/cc/td/doc/product/software/ios124/124mindx/124index.htm.
The ISDN BCAC and Round-Robin Channel Selection Enhancements feature allows more dynamic
control of the ISDN B channels by providing additional B-Channel Availability Control (BCAC)
functionality for configuring message signaling, and an enhanced channel selection scheme that adds
round-robin configuration to the existing ascending and descending channel selection schemes already
available.
Finding Support Information for Platforms and Cisco IOS Software Images
Use Cisco Feature Navigator to find information about platform support and Cisco IOS software image
support. Access Cisco Feature Navigator at http://www.cisco.com/go/fn. You must have an account on
Cisco.com. If you do not have an account or have forgotten your username or password, click Cancel at
the login dialog box and follow the instructions that appear.
Contents
• Prerequisites for ISDN BCAC Enhancements, page 518
• Information About the ISDN BCAC and Round-Robin Channel Selection Enhancements, page 518
• How to Configure the ISDN Enhancements, page 519
• Configuration Examples for ISDN BCAC and Round-Robin Channel Selection Enhancements,
page 525
• Additional References, page 525
• Command Reference, page 527
BCAC Enhancements
BCAC is a service message signaling procedure used to control the availability of ISDN B channels.
BCAC provides a coordinated capability between both ends of a PRI to simultaneously preclude
selection of specified B channels for outgoing calls, and reject calls (if channel negotiation is employed,
calls may go on another channel) for those same channels. The basic BCAC functionality for the
handling of SERV and SERV ACK messages already exists on Cisco routers. In Cisco IOS Release
12.3(1), the software has been enhanced with the following BCAC functionality:
• Processing of SERV and SERV ACK messages. Even though these messages are already handled in
the Cisco IOS software, their processing has been enhanced to more closely align with the behavior
described in the standards.
• Provides a mechanism to allow the retransmission of SERV messages.
• Handles SERV message collision cases.
• Provides service status audits for various audit triggers.
• Provides an option that when set triggers the exchange of service messages on all channels of the
interface when the router is rebooted and when the signaling link comes up.
• Provides a mechanism so that if there is a flood of service messages that need to be sent, the service
messages can be throttled to avoid losing them.
• Initializes B-channel service status upon provisioning.
SUMMARY STEPS
1. enable
2. configure terminal
3. interface serial port:channel
4. isdn bcac service audit
5. isdn bcac service audit trigger number
6. isdn bcac service audit interface
DETAILED STEPS
Example:
Router# configure terminal
Step 3 interface serial port:channel Enters interface configuration mode on the specified serial
port and channel.
Example:
Router(config)# interface serial 2:23
Step 4 isdn bcac service audit Enables BCAC service audits.
Example:
Router(config-if)# isdn bcac service audit
Step 5 isdn bcac service audit trigger number Enables individual BCAC service audit triggers.
Example:
Router(config-if)# isdn bcac service audit
trigger 2
Step 6 isdn bcac service audit interface Specifies that BCAC service audits need to be triggered on
the entire interface.
Example:
Router(config-if)# isdn bcac service audit
interface
Examples
The following example shows how to enable service audits on serial interface 4:23:
interface serial 4:23
isdn bcac service audit
The following example shows how to disable service trigger 4 on serial interface 4:23:
interface serial 4:23
no isdn bcac service audit trigger 4
See the command page for the isdn bcac service audit trigger command for a list of the triggers that
are set.
The following example shows how to configure service audits on the entire interface:
interface serial 4:23
isdn bcac service audit interface
SUMMARY STEPS
1. enable
2. configure terminal
3. interface serial port:channel
4. isdn bcac service update provision
5. isdn bcac service update linkup
DETAILED STEPS
Example:
Router# configure terminal
Step 3 interface serial port:channel Enters interface configuration mode on the specified serial
port and channel.
Example:
Router(config)# interface serial 2:23
Step 4 isdn bcac service update provision Enables BCAC service status functionality for provisioning
the B channels.
Example:
Router(config-if)# isdn bcac service update
provision
Step 5 isdn bcac service update linkup Triggers updates of the BCAC service states between peer
nodes through exchange of SERV and SERV ACK
messages.
Example:
Router(config-if)# isdn bcac service update
linkup
Examples
The following example shows how to enable the SERV status message for provisioning the B channels
on serial interface 4:23:
interface serial 4:23
isdn bcac service update provision
The following example shows how to trigger service state updates on serial interface 4:23:
interface serial 4:23
isdn bcac service update linkup
SUMMARY STEPS
1. enable
2. configure terminal
3. interface serial port:channel
4. isdn bcac service timer timer-value
5. isdn bcac service retry max retries
6. isdn bcac service retry in-serv-on-fail
DETAILED STEPS
Example:
Router# configure terminal
Step 3 interface serial port:channel Enters interface configuration mode on the specified serial
port and channel.
Example:
Router(config)# interface serial 2:23
Step 4 isdn bcac service timer timer-value Changes the value of the BCAC T3M1 or T323 service
message timer.
Example: • Valid range is from 500 to 120000 ms, and the default
Router(config-if)# isdn bcac service timer 600 is 120000 ms.
Examples
The following example shows how to configure an option whereby, on service message exchange failure,
the service state of the concerned channel or channels will be set to In-Service:
interface serial 2:23
isdn bcac service retry in-serv-on-fail
The following example shows how to set the maximum number of service message retransmissions on
serial interface 2:23 to 50:
interface serial 2:23
isdn bcac service retry max 50
The following example shows how to change the service timers to 600 ms on serial interface 2:23:
interface serial 2:23
isdn bcac service timer 600
SUMMARY STEPS
1. enable
2. configure terminal
3. interface serial port:channel
4. isdn bchan-number-order {ascending | descending} [round-robin]
DETAILED STEPS
Example:
Router# configure terminal
Step 3 interface serial port:channel Enters interface configuration mode on the specified serial
port and channel.
Example:
Router(config)# interface serial 2:23
Step 4 isdn bchan-number-order {ascending | Configures an ISDN PRI interface to make outgoing call
descending} [round-robin] selection in ascending or descending order.
• The optional round-robin keyword adds round-robin
Example: selection functionality to the selection order.
Router(config-if)# isdn bchan-number-order
ascending round-robin
Examples
The following example configures the outgoing B channel selection order on a PRI interface to be
round-robin in ascending order:
interface serial 5:10
isdn bchan-number-order ascending round-robin
SUMMARY STEPS
1. enable
2. configure terminal
3. isdn logging
DETAILED STEPS
Example:
Router# configure terminal
Step 3 isdn logging Enables logging of ISDN syslog messages.
Example:
Router(config)# isdn logging
Examples
The following example shows how to configure ISDN syslog logging:
isdn logging
Additional References
For additional information related to the ISDN enhancements, see the following sections:
• Related Documents, page 526
• Standards, page 526
• MIBs, page 526
• RFCs, page 526
• Technical Assistance, page 527
Related Documents
Related Topic Document Title
ISDN PRI configuration Refer to the “Configuring ISDN PRI” chapter in the “Signaling
Configuration” part of the Cisco IOS Dial Technologies
Configuration Guide, Release 12.3.
ISDN PRI configuration commands Cisco IOS Dial Technologies Command Reference, Release 12.3.
ISDN PRI configuration for voice, video, and fax Refer to the chapter “Configuring ISDN Interfaces for Voice ” in the
Cisco IOS Voice, Video, and Fax Configuration Guide, Release 12.3.
ISDN PRI voice, video, and fax configuration Cisco IOS Voice, Video, and Fax Command Reference, Release 12.3
commands
Standards
Standards1 Title
AT&T PRI Technical Report 41459–AT&T ISDN Primary Rate Interface and
Special Application Specification; “User Network Interface
Description,” 1999.
National ISDN Council (NIC) PRI SR (Special Report)-NWT-002343–ISDN Primary Rate Interface
Generic Guidelines for Customer Premises Equipment, June 1993.
SR-3887–National ISDN Primary Rate Interface Customer
Premises Equipment Generic Guidelines, 1996.
Nortel PRI NIS (Network Interface Specification)-A211-1–DMS100 ISDN
Primary Rate Network User Interface, 1993.
1. Not all supported standards are listed.
MIBs
MIBs MIBs Link
None To obtain lists of supported MIBs by platform and Cisco IOS
release, and to download MIB modules, go to the Cisco MIB website
on Cisco.com at the following URL:
http://www.cisco.com/public/sw-center/netmgmt/cmtk/mibs.shtml
RFCs
RFCs Title
None —
Technical Assistance
Description Link
Technical Assistance Center (TAC) home page, http://www.cisco.com/public/support/tac/home.shtml
containing 30,000 pages of searchable technical
content, including links to products, technologies,
solutions, technical tips, and tools. Registered
Cisco.com users can log in from this page to access
even more content.
Command Reference
The following new and modified commands are pertinent to this feature. To see the command pages for
these commands and other commands used with this feature, go to the Cisco IOS Master Commands List,
Release 12.4, at http://www.cisco.com/univercd/cc/td/doc/product/software/ios124/124mindx/
124index.htm.
New Commands
• isdn bcac service audit
• isdn bcac service audit interface
• isdn bcac service audit trigger
• isdn bcac service retry in-serv-on-fail
• isdn bcac service retry max
• isdn bcac service timer
• isdn bcac service update linkup
• isdn bcac service update provision
• isdn logging
Modified Commands
• isdn bchan-number-order
• isdn protocol-emulate (dial)
Glossary
PBX—private branch exchange.
RESTART—restart message.
RESTART ACK—restart acknowledge message.
STATUS ENQ—status enquiry message.
SERV—service message.
SERV ACK—service acknowledge message.
Note Refer to the Internetworking Terms and Acronyms for terms not included in this glossary.
The ISDN PRI-SLT feature allows you to release the ISDN PRI signaling time slot for Redundant Link
Manager (RLM) configurations, and for Signaling System 7 (SS7) applications in integrated Signaling
Link Terminal (SLT) configurations. This feature supports the use of DS0 time slots for SS7 links, and
allows the coexistence of SS7 links and PRI voice and data bearer channels on the same T1 or E1
controller span.
Finding Support Information for Platforms and Cisco IOS Software Images
Use Cisco Feature Navigator to find information about platform support and Cisco IOS software image
support. Access Cisco Feature Navigator at http://www.cisco.com/go/fn. You must have an account on
Cisco.com. If you do not have an account or have forgotten your username or password, click Cancel at
the login dialog box and follow the instructions that appear.
Contents
• Information About ISDN PRI-SLT, page 530
• How to Configure ISDN PRI-SLT, page 532
• Configuration Examples for ISDN PRI-SLT, page 535
• Additional References, page 536
• Command Reference, page 538
B channel
23B + D
T1-PRI Used in North America
and Japan
D channel
B channel
30B + D
E1-PRI Used in Europe
14051
D channel
Figure 55 shows the logical contents of a Cisco ISDN PRI interface used in a standard T1 network
configuration.
Virtual
Serial
Channel Time Slot Interface
Type Number Number
B (data channel) 1 S0:0
B (data channel) 2 S0:1
B (data channel) 3 S0:2
B (data channel) 4 S0:3
• • •
• • •
• • • Logical
• • • contents
of a PRI
• • • interface
B (data channel) 21 S0:20
B (data channel) 22 S0:21
B (data channel) 23 S0:22
S6487
D (signaling channel) 24 S0:23
The software assumed that the 24th (or 16th for E1) slot in the controller is reserved for D-channel
signaling. However, in environments that require SS7-enabled Voice over IP (VoIP) configurations, some
applications needed to share all time slots in a PRI group but were not allowed to use the 24th (or 16th)
time slot. The ISDN PRI-SLT Cisco IOS Release 12.2(8)B feature, and specifically, the rlm-group
subkeyword introduced in the pri-group timeslots controller configuration command as part of this
feature, releases the signaling time slots, thereby supporting SS7 applications in VoIP configurations.
The D-Channel Interface and Cisco SS7 Interconnect for Voice Gateways
A new interface, D-channel, is introduced with the ISDN PRI-SLT feature for use specifically in VoIP
applications, such as an SS7 Interconnect Voice Gateway that requires release of ISDN signaling time
slots for RLM configurations.
A Cisco SLT is a key component of the Cisco SS7 Interconnect for Voice Gateways feature. In the
Cisco SS7 Interconnect for Voice Gateways environment, the D channel will be on Ethernet, and the time
slots on an E1 and T1 controller can be shared by other applications such as SS7.
SUMMARY STEPS
1. enable
2. configure {terminal | memory | network}
3. controller {t1 | e1} controller-number
4. pri-group timeslots timeslot-range [nfas_d {backup | none | primary {nfas_int number |
nfas_group number | rlm-group number}} | service]
5. channel-group channel-number timeslots range [speed {48 | 56 | 64}]
6. exit
7. interface Dchannel interface-number
8. isdn command parameter (use the commands listed in ISDN Commands Supported by ISDN
PRI-SLT, page 531 to configure the ISDN interface)
9. exit
DETAILED STEPS
Example:
Router# configure terminal
Step 3 controller {t1 | e1} controller-number Configures a T1 or E1 controller and enters controller
configuration mode.
Example:
Router(config)# controller t1 1
Step 4 pri-group timeslots timeslot-range [nfas_d Specifies an ISDN PRI group on a channelized T1 or E1
{backup | none | primary {nfas_int number | controller.
nfas_group number | rlm-group number}} |
service] The nfas_d keyword has the following options:
• backup—The D-channel time slot is used as the
Example: Non-Facility Associated Signaling (NFAS) D-channel
Router(config-controller)# pri-group timeslots backup.
1-3 nfas_d primary nfas_int 0 nfas_group 0
rlm-group 1 • none—The D-channel time slot is used as an additional
B channel.
• primary—The D-channel time slot is used as the
NFAS D primary.
The primary keyword requires further interface and
group configuration:
– nfas_int number—Specify the provisioned NFAS
interface as a value; value is a number from 0 to 8.
– nfas_group number—Specify the NFAS group
number.
– rlm-group number—Specify the RLM group and
release the ISDN PRI signaling channel.
Step 5 channel-group channel-number timeslots range Defines the time slot or range of time slots that belong to
[speed {48 | 56 | 64}] each T1 or E1 circuit.
Example:
Router(config-controller)# channel-group 23
timeslots 24
Step 6 exit Returns to global configuration mode.
Example:
Router(config-controller)# exit
Example:
Router(config-if)# isdn T309 4000
Step 9 exit Returns to global configuration mode.
Example:
Router(config-if)# exit
SUMMARY STEPS
1. enable
2. show isdn status
DETAILED STEPS
Troubleshooting Tips
Use the commands described in Table 52 to troubleshoot the ISDN PRI-SLT feature.
Command Report
debug isdn event ISDN events occurring on the user (local router) side of the ISDN interface.
debug isdn q921 Data link layer (ISDN Layer 2) access procedures taking place at the router
on the D channel.
debug isdn q931 Information about call setup and teardown of network (ISDN Layer 3)
connections between the user (local router) side and the network.
Layer 3 Status:
0 Active Layer 3 Call(s)
Active dsl 0 CCBs = 0
The Free Channel Mask: 0x80000000
Number of L2 Discards = 0, L2 Session ID = 43
ISDN Dchannel1 interface
Transport Link Status : Not Applicable
dsl 1, interface ISDN Switchtype = primary-ni : Group member of nfas group 0
Layer 1 Status:
DEACTIVATED
Layer 2 Status: Not Applicable
Layer 3 Status:
0 Active Layer 3 Call(s)
Active dsl 1 CCBs = 0
The Free Channel Mask: 0x80000000
Number of L2 Discards = 0, L2 Session ID = 0
ISDN Serial2:15 interface
dsl 2, interface ISDN Switchtype = primary-ni : Primary D channel of nfas group 1
Layer 1 Status:
DEACTIVATED
Layer 2 Status:
TEI = 0, Ces = 1, SAPI = 0, State = TEI_ASSIGNED
Layer 3 Status:
0 Active Layer 3 Call(s)
Active dsl 2 CCBs = 0
The Free Channel Mask: 0x0
Number of L2 Discards = 0, L2 Session ID = 0
ISDN Serial3:15 interface
dsl 3, interface ISDN Switchtype = primary-ni : Group member of nfas group 1
Layer 1 Status:
ACTIVATING
Layer 2 Status: Not Applicable
Layer 3 Status:
0 Active Layer 3 Call(s)
Active dsl 3 CCBs = 0
The Free Channel Mask: 0x0
Number of L2 Discards = 0, L2 Session ID = 0
Total Allocated ISDN CCBs = 0
Additional References
For additional information related to ISDN PRI-SLT, refer to the following references:
• Related Documents, page 537
• Standards, page 537
• MIBs, page 537
• RFCs, page 538
• Technical Assistance, page 538
Related Documents
Related Topic Document Title
Dial ISDN commands Cisco IOS Dial Technologies Command Reference, Release 12.2
ISDN PRI Cisco IOS Dial Technologies Configuration Guide, Release 12.2;
refer to “Configuring ISDN PRI” in the “Signaling Configuration”
part
Voice ISDN commands Cisco IOS Voice, Video, and Fax Command Reference, Release 12.2
Voice ISDN interfaces Cisco IOS Voice, Video, and Fax Configuration Guide, Release 12.2;
refer to the chapter “Configuring ISDN Interfaces for Voice”
Standards
Standards Title
None —
MIBs
MIBs MIBs Link
None To obtain lists of supported MIBs by platform and Cisco IOS
release, and to download MIB modules, go to the Cisco MIB website
on Cisco.com at the following URL:
http://www.cisco.com/public/sw-center/netmgmt/cmtk/mibs.shtml
To locate and download MIBs for selected platforms, Cisco IOS releases, and feature sets, use Cisco
MIB Locator found at the following URL:
http://tools.cisco.com/ITDIT/MIBS/servlet/index
If Cisco MIB Locator does not support the MIB information that you need, you can also obtain a list of
supported MIBs and download MIBs from the Cisco MIBs page at the following URL:
http://www.cisco.com/public/sw-center/netmgmt/cmtk/mibs.shtml
To access Cisco MIB Locator, you must have an account on Cisco.com. If you have forgotten or lost your
account information, send a blank e-mail to [email protected]. An automatic check will verify
that your e-mail address is registered with Cisco.com. If the check is successful, account details with a
new random password will be e-mailed to you. Qualified users can establish an account on Cisco.com
by following the directions found at this URL:
http://www.cisco.com/register
RFCs
RFCs Title
None —
Technical Assistance
Description Link
Technical Assistance Center (TAC) home page, http://www.cisco.com/public/support/tac/home.shtml
containing 30,000 pages of searchable technical
content, including links to products, technologies,
solutions, technical tips, tools, and lots more.
Registered Cisco.com users can log in from this page to
access even more content.
Command Reference
This section documents new and modified commands. All other commands used with this feature are
documented in the Cisco IOS Release 12.2 command reference publications.
New Command
• interface Dchannel
Modified Commands
• pri-group timeslots
• show isdn
This chapter describes features that either depend on special signaling services offered by an ISDN
network service provider or overcome an inability to deliver certain signals. It describes these features
in the following main sections:
• How to Configure ISDN Special Signaling
• Troubleshooting ISDN Special Signaling
• Configuration Examples for ISDN Special Signaling
For an overview of ISDN PRI, see the section “ISDN Service” in the “Overview of Dial Interfaces,
Controllers, and Lines” chapter, and the section “ISDN Overview” in the “Configuring ISDN BRI”
chapter.
To identify the hardware platform or software image information associated with a feature, use the
Feature Navigator on Cisco.com to search for information about the feature or refer to the software
release notes for a specific release. For more information, see the“Finding Additional Feature Support
Information” section on page lxxvii in the “Using Cisco IOS Software for Release 12.4” chapter.
For a complete description of the ISDN signaling commands in this chapter, refer to the Cisco IOS Dial
Technologies Command Reference. To locate documentation of other commands that appear in this
chapter, use the command reference master index or search online.
Step 1 Configure the ISDN BRI or PRI interface, as described in the chapter “” or the section “How to
Configure ISDN PRI” in the chapter “” later in this publication, using the relevant keyword in the isdn
switch-type command:
• BRI interface—basic-net3
• PRI interface—primary-net5
Step 2 Configure dialer profiles or legacy dial-on-demand routing (DDR) for outgoing calls, as described in the
chapters in the “Dial-on-Demand Routing” part of this publication, making sure to do the following:
• Configure the static line-idle timeout to be used for incoming calls.
• For each destination, use the dialer map command with the class keyword (legacy DDR) or a dialer
string class command (dialer profiles) to identify the dialer map class to be used for outgoing calls
to the destination.
Step 3 Configure each specified dialer map class, providing a dialer idle timeout, or ISDN short-hold timeout,
or both for outgoing calls, as described in this chapter.
To configure a dialer map class with timers, use the following commands beginning in global
configuration mode:
Command Purpose
Step 1 Router(config)# map-class dialer Specifies the dialer map class and begins map class
classname configuration mode.
Step 2 Router(config-map-class)# dialer (Optional) Specifies a static idle timeout for the map class to
idle-timeout seconds override the static line-idle timeout configured on the BRI
interface.
Step 3 Router(config-map-class)# dialer Specifies a dialer ISDN short-hold timeout for the map class.
isdn short-hold seconds
Command Purpose
Router> show isdn {active [dsl | serial-number] | Displays information about active calls, call history,
history [dsl | serial-number ] | memory | nfas group memory, nfas group, service or status of PRI channels, or
group-number | service [dsl | serial-number] | status
[dsl | serial-number] | timers [dsl | serial-number]}
Layer 2 or Layer 3 timers. The history keyword displays
AOC charging time units used during the call and indicates
whether the AOC information is provided during calls or at
the end of calls.
(The service keyword is available for PRI only.)
Note On the Nortel (Northern Telecom) DMS-100 switch, when a single D channel is shared, multiple PRI
interfaces may be configured in a single trunk group. The additional use of alternate route indexing,
which is a feature of the DMS-100 switch, provides a rotary from one trunk group to another. This
feature enables the capability of building large trunk groups in a public switched network.
The ISDN switch must be provisioned for NFAS. The primary and backup D channels should be
configured on separate T1 controllers. The primary, backup, and B-channel members on the respective
controllers should be the same as that configured on the router and ISDN switch. The interface ID
assigned to the controllers must match that of the ISDN switch.
• The function to be performed by time slot 24 (primary D channel, backup, or none); the latter
specifies its use as a B channel.
• The group identifier number for the interface under control of the D channel.
To configure ISDN NFAS, use the following commands in controller configuration mode:
Command Purpose
Step 1 Router(config-controller)# pri-group timeslots On one channelized T1 controller, configures the NFAS
1-24 nfas_d primary nfas_interface number primary D channel.
nfas_group number
Step 2 Router(config-controller)# pri-group timeslots On a different channelized T1 controller, configures the
1-24 nfas_d backup nfas_interface number NFAS backup D channel to be used if the primary D channel
nfas_group number
fails.
Step 3 Router(config-controller)# pri-group timeslots (Optional) On other channelized T1 controllers, configures a
1-24 nfas_d none nfas_interface number 24-B-channel interface, if desired.
nfas_group number
For an example of configuring three T1 controllers for the NFAS primary D channel, the backup
D channel, and 24 B channels, along with the DDR configuration for the PRI interface, see the section
“NFAS Primary and Backup D Channels” at the end of this chapter.
When a backup NFAS D channel is configured and the primary NFAS D channel fails, rollover to the
backup D channel is automatic and all connected calls stay connected.
If the primary NFAS D channel recovers, the backup NFAS D channel remains active and does not switch
over again unless the backup NFAS D channel fails.
Note You cannot configure a backup D channel for the NTT PRI NFAS feature; it does not support D channel
backup.
Step 1 Enter the show isdn status command to learn whether the ISDN PRI switch type was configured
correctly:
Router# show isdn status serial 0:23
Step 2 Enter the show isdn nfas group command to display information about members of an NFAS group:
Router# show isdn nfas group 1
Step 3 Enter the show isdn service command to display information about ISDN channels and the service
states:
Router# show isdn service
Command Purpose
Router(config-if)# isdn service dsl number Takes an individual B channel out of service or sets it to a different
b_channel number state state-value state.
Router(config-if)# isdn service dsl number Sets the entire PRI to the specified state.
b_channel 0 state state-value
Note The active D channel changeover between primary and backup controllers happens only when one of the
link fails and not when the link comes up. The T309 timer is triggered when the changeover takes place.
Command Purpose
Router> show isdn nfas group number Displays information about members of an NFAS group.
Command Purpose
Router> show isdn service Displays information about ISDN channels and the service states.
However, the rate negotiation information will be part of the bearer cap and not the lower-layer
compatibility. PIAFS calls will have the user rate as 32000 and 64000; this will be used to distinguish a
PIAFS call from a V.110 call. Also, PIAFS will use only up to octets 5a in a call setup message. The data
format will default to 8N1 for PIAFS calls.
To configure ISDN PRI to take PIAFS call on MICA modems, use the following commands beginning
in global configuration mode:
Command Purpose
Step 1 Router(config)# interface serial Enters interface configuration mode for a D-channel serial
controller:channel interface.
Step 2 Router(config-if)# isdn piafs-enabled Enables the PRI to take PIAFS calls on MICA modems.
Step 3 Router(config-if)# exit Exits interface configuration mode.
Verifying PIAFS
Step 1 Enter the show modem operational-status slot/port command to view PIAFS call information.
Router# show modem op 1/32
Automatic detection is attempted for the first 10 seconds after the link is established or the first 5 packets
exchanged over the link, whichever is first.
To enable automatic detection of encapsulation type, use the following command in interface
configuration mode:
Command Purpose
Router(config-if)# autodetect encapsulation Enables automatic detection of encapsulation type on the
encapsulation-type specified interface.
You can specify one or more encapsulations to detect. Cisco IOS software currently supports automatic
detection of PPP and V.120 encapsulations.
Command Purpose
Step 1 Router(config-if)# encapsulation cpp Specifies CPP encapsulation.
Step 2 Router(config-if)# cpp callback accept Enables CPP callback acceptance.
Step 3 Router(config-if)# cpp authentication Enables CPP authentication.
Most Combinet devices support PPP. Cisco routers can communicate over ISDN with these devices by
using PPP encapsulation, which supports both routing and fast switching.
Cisco 700 and 800 series routers and bridges (formerly Combinet devices) support only IP, Internet
Protocol Exchange (IPX), and bridging. For AppleTalk, Cisco routers automatically perform
half-bridging with Combinet devices. For more information about half-bridging, see the section
“Configuring PPP Half-Bridging” in the chapter “” later in this publication.
Cisco routers can also half-bridge IP and IPX with Combinet devices that support only CPP. To configure
this feature, you only need to set up the addressing with the ISDN interface as part of the remote subnet;
no additional commands are required.
Command Purpose
Router# debug dialer Displays the values of timers.
Router# debug isdn q921 [interface bri number] Displays link layer information for all interfaces or, optionally,
for a single BRI interface.
or
Router# debug isdn q921 interface serial Displays link layer information for a single PRI interface.
slot/controller-number:23
Router# debug isdn q931 [interface bri number] Displays the content of call control messages and information
elements, in particular the Facility IE message for all interfaces
or or, optionally, for a single BRI interface.
interface Dialer2
ip address 10.1.1.8 255.255.255.0
encapsulation ppp
dialer remote-name dmsisdn
dialer string 81012345678902 class Omega
dialer string 14153909503 class Gamma
dialer pool 2
dialer-group 1
ppp authentication chap
!
map-class dialer Omega
dialer idle-timeout 60
dialer isdn short-hold 150
!
map-class dialer Gamma
dialer isdn short-hold 60
!
dialer-list 1 protocol ip permit
! NFAS primary D channel interface configuration for PPP and DDR. This
! configuration is distributed to all the B channels in NFAS group 1 on the
! three channelized T1 controllers.
!
interface Serial 1/0:23
ip address 10.1.1.2 255.255.255.0
no ip mroute-cache
encapsulation ppp
dialer map ip 10.1.1.1 name flyboy 567898
dialer map ip 10.1.1.3 name flyboy 101112345678
dialer map ip 10.1.1.4 name flyboy 01112345678
dialer-group 1
no fair-queue
no cdp enable
ppp authentication chap
This chapter describes the Network Side ISDN PRI Signaling, Trunking, and Switching feature. The
following main sections are provided:
• Network Side ISDN PRI Signaling Overview
• How to Configure Network Side ISDN PRI
• Configuration Examples for Network Side ISDN PRI Signaling, Trunking, and Switching
For hardware technical descriptions and for information about installing the controllers and interfaces,
refer to the hardware installation and maintenance publication for your particular product.
To identify the hardware platform or software image information associated with a feature, use the
Feature Navigator on Cisco.com to search for information about the feature or refer to the software
release notes for a specific release. For more information, see the “Finding Additional Feature Support
Information” section on page lxxvii in the “Using Cisco IOS Software for Release 12.4” chapter.
For a complete description of the ISDN PRI commands in this chapter, refer to the Cisco IOS Dial
Technologies Command Reference. To locate documentation of other commands that appear in this
chapter, use the command reference master index or search online.
The Network Side ISDN PRI Signaling, Trunking, and Switching feature provides the following
benefits:
• Allows you to bypass PSTN tariffed services such as trunking and administration, thus extending
the cost savings of VoIP.
• Allows your PBXs to be connected directly to a Cisco access server, so PBX station calls can be
routed automatically to the IP network without the need for special IP telephones.
• Provides flexibility in network design.
• Enables you to block calls selectively based on the called number or the calling number.
Note An incoming call will be switched or processed as a voice call only if it matches a dial peer.
A dial peer is an addressable call endpoint identified, for example, by a phone number or a port number.
In VoIP, there are two kinds of dial peers: plain old telephone service (POTS) and VoIP. Dial peers are
defined from the perspective of the access server and are used for both inbound and outbound call legs.
An inbound call leg originates outside the access server. An outbound call leg originates from the access
server.
For inbound call legs, a dial peer might be associated with the calling number or the port designation.
Outbound call legs always have a dial peer associated with them. The destination pattern (a defined
initial part of a phone number) is used to identify the outbound dial peer. The call is associated with the
outbound dial peer at setup time.
POTS dial peers associate a telephone number with a particular voice port so that incoming calls for that
telephone number can be received and outgoing calls can be placed.
Additional information about dial peers can be found in the chapter “Configuring Dial Plans, Dial Peers,
and Digit Manipulation” in the Cisco IOS Voice, Video, and Fax Configuration Guide, Release 12.2.
Class of Restrictions
The class of restrictions (COR) functionality provides the ability to deny certain call attempts based on
the incoming and outgoing class of restrictions provisioned on the dial peers. This functionality provides
flexibility in network design, allows users to block calls (for example, to 900 numbers), and applies
different restrictions to call attempts from different originators.
COR is used to specify which incoming dial peer can use which outgoing dial peer to make a call. Each
dial peer can be provisioned with an incoming and an outgoing COR list. The incoming COR list
indicates the capability of the dial peer to initiate certain classes of calls. The outgoing COR list
indicates the capability required for an incoming dial peer to deliver a call via this outgoing dial peer. If
the capabilities of the incoming dial peer are not the same or a superset of the capabilities required by
the outgoing dial peer, the call cannot be completed using this outgoing dial peer.
Also keep the following restrictions in mind as you configure network side ISDN PRI signaling,
trunking, and switching:
• You can configure Cisco access server and access routers for either Network Side ISDN PRI for NI
or Net5 switches.
• The trunking and COR parts of the Network Side ISDN PRI Signaling, Trunking, and Switching
feature are available only on the Cisco AS5800 access server. In addition, call hairpinning without
the need of a Voice Feature Card (and its digital signal processor) is available only on the
Cisco AS5800 and Cisco AS5400. The remainder of the feature is platform-independent.
• The Cisco AS5800 and Cisco AS5400 switch both voice and data calls. The Cisco As5300 switches
only data calls.
• On the Cisco AS5800, direct-inward-dial (DID) switched calls can work without a Voice Feature
Card, if the appropriate modem is present. Refer to the AS5800 hardware and software installation
manuals for more information.
• On the Cisco AS5400, direct-inward-dial (DID) switched calls can work with only Trunk Feature
Cards present. No Voice Feature Card or Modem Feature card are required.
• An interface that is a member of a Non-Facility Associated Signaling (NFAS) group cannot belong
to a trunk group.
• The Cisco AS5400 supports Network Side ISDN PRI Signaling and Calling Switching Using Dial
Peers. It does not support Trunk Group Resource Manager and Class of Restrictions.
• The Network Side ISDN PRI part of this feature runs on any ISDN-capable platform with PRI
interfaces. The trunking and class of restrictions parts of this feature require the Cisco AS5800.
Note To identify the hardware platform or software image information associated with a feature, use the
Feature Navigator on Cisco.com to search for information about the feature. For more information, see
the “Identifying Supported Platforms” section in the “Using Cisco IOS Software” chapter.
Configuring ISDN Network Side for the National ISDN Switch Type
To configure Network Side ISDN PRI, use the following commands beginning in global configuration
mode:
Command Purpose
Step 1 Router(config)# isdn switch-type type Sets the global ISDN switch type. Two types are
supported:
• primary-ni for NI on a T1 line
or • primary-net5 for ETSI Net5 on an E1 line
If you choose to configure Network Side ISDN PRI on individual interfaces in Step 1, repeat the
configuration on the additional PRI interfaces.
Command Purpose
Step 1 Router(config)# isdn switch-type primary-net5 Sets the primary-net5 global ISDN switch type.
or or
Router(config-if)# interface serial0/0/0:15 Specifies a D-channel interface to configure for ISDN
Network Side for ETSI Net5 PRI.
Router(config-if)# switch-type primary-net5 Sets the primary-net5 switch type on the interface.
Step 2 Router(config-if)# isdn protocol-emulate network Enables network side support on the interface.
Repeat the configuration steps on all the additional PRI D-channel interfaces you want to configure for
ISDN Network Side for ETSI Net5 PRI.
Command Purpose
Step 1 Router(config)# trunk group group-number Defines the trunk group globally.
or
Router(config-if)# interface serial0/0/n Specifies the PRI D-channel. For n, the D-channel
number, use:
• 0:23 on a T1 PRI
and • 0:15 on an E1 PRI
Router(config-if)# trunk-group group-number Adds the interface to a trunk group. If the trunk
group has not been defined globally, it will be
created now.
Step 2 Router(config-if)# max-calls {voice | data | any} Applies a maximum number of calls restriction to
number | [direction in | out] the trunk group.
This command can be repeated to apply a
maximum number to different types of calls and,
optionally, to specify whether the maximum
applies to incoming or outgoing calls.
Note Repeat Step 1 and Step 2 to create
additional trunk groups and specify their
restrictions, as needed for your traffic.
Step 3 Router(config)# dial-peer voice tag pots Enters dial-peer configuration mode and defines a
remote dial peer.
Step 4 Router(config-dial-peer)# trunkgroup group-number Specifies the trunk group to be used for outgoing
calls to the destination phone number.
Command Purpose
Step 1 Router(config)# dial-peer cor custom Specifies that named classes of restrictions apply
to dial peers and changes the command mode to
COR configuration.
Step 2 Router(config-cor)# name class-name Provides a name for a custom class of restrictions.
Note Repeat this step for additional class
names, as needed. These class names are
used in various combinations to define the
lists in Step 3 and Step 4.
Step 3 Router(config)# dial-peer cor list list-name Provides a name for a list of restrictions.
Step 4 Router(config-cor)# member class-name Adds a COR class to this list of restrictions.
The member is a class named in Step 2.
Note Repeat Step 3 and Step 4 to define another
list and its membership, as needed.
Step 5 Router(config)# dial-peer voice tag pots Enters dial-peer configuration mode and defines a
remote dial peer.
Step 6 Router(config-dial-peer)# corlist incoming Specifies the COR list to be used when this is the
cor-list-name incoming dial peer.
Step 7 Router(config-dial-peer)# corlist outgoing Specifies the COR list to be used when this is the
cor-list-name outgoing dial peer.
Note Repeat Step 5 through Step 7 for
additional dial peers, as needed.
Command Purpose
Step 1 Router(config)# interface serial controller:timeslot Enters interface configuration mode for a D-channel
serial interface.
Step 2 Router(config-if)# isdn t306 milliseconds Sets the number of milliseconds that the gateway
waits before clearing a call after it receives a
Disconnect message with a progress indicator of 8.
Step 3 Router(config-if)# isdn t310 milliseconds Sets the number of milliseconds that the gateway
waits before clearing a call after it receives a Call
Proceeding message.
To verify that the T306 timer is configured and operating correctly, perform the following steps:
Step 1 Display the running configuration file with the show running-config privileged EXEC command. Verify
that the configuration is accurate for the T306 timer. See the “T306/T310 Timer Configuration Example”
section for a sample configuration.
Step 2 Enable the debug isdn q931 privileged EXEC command to trace the ISDN messages.
Step 3 Place a call to the gateway. Disconnect the call and allow the far end to play its error message until the
T306 timer expires. When the timer expires, the gateway should disconnect the call.
Step 1 Enter the show isdn status command to learn whether an appropriate switch type is specified either
globally or on the D-channel interface:
Router# show isdn status serial 0:15
Step 2 Enter the show dial-peer voice command to learn whether the trunk group COR list and permission
fields are set as desired on a dial peer:
Router# show dial-peer voice
VoiceEncapPeer210
information type = voice,
tag = 210, destination-pattern = `221',
answer-address = `', preference=0,
numbering Type = `unknown'
group = 210, Admin state is up, Operation state is up,
incoming called-number = `221', connections/maximum = 4/unlimited,
DTMF Relay = disabled,
Modem = system passthrough ,
huntstop = disabled,
application associated:
permission :both
incoming COR list:listA
outgoing COR list:minimum requirement
type = pots, prefix = `221',
forward-digits default
session-target = `', voice-port = `1/0/8:D',
direct-inward-dial = enabled,
digit_strip = enabled,
Note The above output is for a dial peer configured with incoming COR list “listA” and without an
outgoing COR list configured. When no outgoing COR list is configured, the show dial-peer
voice command displays “minimum requirement” in the outgoing COR list output. When no
incoming COR list is configured, the show dial-peer voice command displays “maximum
capability” in the incoming COR list output.
Step 3 Enter the show dial-peer cor command to display the COR names and lists you defined. For example,
if you configured COR as shown in the following sample display, the show dial-peer cor command
output reflects that configuration.
Sample Configuration
dial-peer cor custom
name 900block
name 800_call
name Catchall
!
dial-peer cor list list1
member 900block
member 800_call
!
dial-peer cor list list2
member 900block
!
dial-peer cor list list3
member 900block
member 800_call
member Catchall
Verification
Router# show dial-peer cor
Class of Restriction
name:900block
name:800_call
name:Catchall
Step 4 Enter the show tgrm command to verify the trunk group configuration. For example, if you configured
trunk groups as shown in the following sample display, the show tgrm command output reflects that
configuration.
Sample Configuration
interface Serial1/0/8:15
no ip address
ip mroute-cache
no keepalive
isdn switch-type primary-net5
isdn protocol-emulate network
isdn incoming-voice modem
trunk-group 2
no cdp enable
Verification
Router# show tgrm
Step 5 Enter the show isdn status command to display the status of both Network Side ISDN PRI and call
switching:
Router# show isdn status
Command Purpose
Router# show controllers e1 slot/port Checks Layer 1 (physical layer) of the PRI over E1.
Router# show controllers e1 number call-counters Displays the number of calls and call durations on an E1
controller.
Router# show interfaces serial slot/port bchannel Displays information about the physical attributes of
channel-number the ISDN PRI over channelized E1 B and D channels.
Router# show isdn {active | history | memory | services | Displays information about memory, Layer 2 and Layer
status [dsl | interface-type number] | timers} 3 timers, and the status of PRI channels.
Monitoring TGRM
To monitor and maintain the Trunk Group Resource Manager, use the following command in EXEC
mode:
Command Purpose
Router# show tgrm Displays TGRM information for debugging purposes.
In this example, calls from 525xxxx are not able to use dial peer 300, which means they will not be able
to make 1900 calls (long distance calls to the 900 area code). But calls from 526xxxx can make
1900 calls.
The following partial example sets up a trunk group to handle calls for directory assistance:
dial-peer voice 500 pots
destination-pattern 411
trunkgroup 211
!
The following partial example sets up a trunk group to handle calls to the 911 emergency number.
Emergency calls will not require a wait for the interdigital timeout to expire. They will be completed
immediately.
dial-peer voice 600 pots
destination pattern 911
trunkgroup 333
This chapter presents the decisions and preparations leading to a dial-on-demand routing (DDR)
configuration and shows where some advanced features fit into the DDR configuration steps. It
distinguishes between the topology decisions and the implementation of the decisions. In the
implementation phase, it distinguishes the DDR-independent decisions from the DDR-dependent
decisions.
This chapter provides the following information:
• DDR Decision Flowchart—A flowchart of topology and implementation decisions that you will
need to make before you configure DDR.
• DDR Topology Decisions, DDR-Independent Implementation Decisions, and DDR-Dependent
Implementation Decisions—References to sources of detailed information for the configuration
steps associated with each decision.
• Global and Interface Preparations for DDR—Brief description indicating which preparations are
global and which are interface-specific.
• Preparations for Routing or Bridging over DDR—A description of the steps required for bridging
or routing over DDR.
The section “Configuration Examples for Legacy DDR” at the end of this chapter provides examples of
configuring DDR in your network, and includes line configuration and chat script samples.
To identify the hardware platform or software image information associated with a feature, use the
Feature Navigator on Cisco.com to search for information about the feature or refer to the software
release notes for a specific release. For more information see the “Finding Additional Feature Support
Information” section on page lxxvii in the “Using Cisco IOS Software for Release 12.4” chapter.
For a complete description of the global dialer commands in this chapter, refer to the Cisco IOS Dial
Technologies Command Reference. To locate documentation of other commands that appear in this
chapter, use the command reference master index or search online.
1 DDR-independent implementation
Async Sync ISDN
Route 3
Bridge Bridging
or
configuration
bridge?
Which
encapsulation? Route
Topology
implementation
4
2
IP
Which
routed IPX
HDLC PPP LAPB X.25 FR protocol?
AT
.
.
.
DDR-dependent implementation
DDR
Simple Spoke
Hub
Legacy Simple
DDR or or
dialer complex? Bandwidth
profiles? on demand
6 Complex MLP
5
BACP
MMP
S6669
Dial backup
Flowchart Notes
The DDR chapters do not provide complete configuration information for most of the items in the
following list. However, detailed information is available in other chapters and publications. The
numbers in this list correspond to the circled numbers in the flowchart.
1. Configuration of the dial port and interface. The port, line, and interface are expected to be
configured and operational before you configure DDR. See the relevant chapters in the “Preparing
for Dial Access” part of this manual.
2. Encapsulation; including encapsulation for other WANs. See the “Configuring Media-Independent
PPP and Multilink PPP” chapter of this publication for PPP encapsulation and refer to the Cisco IOS
Wide-Area Networking Configuration Guide for sections on Frame Relay and X.25.
3. Bridging configurations. Refer to the Cisco IOS Bridging and IBM Networking Configuration
Guide.
4. Routed protocols to be supported. See the protocol-specific chapters and publications.
5. Dialer profiles and legacy DDR are described in different chapters of the “Dial-on-Demand
Routing” part of this publication.
6. Complex DDR configurations. Refer to the chapter “Configuring Media-Independent PPP and
Multilink PPP” in this publication.
The DDR chapters provide complete configuration information about the simple hub-and-spoke DDR
configurations, about the dialer profiles implementation of DDR, and about preparations required for
configuring asynchronous interfaces for DDR.
If you decide to send DDR traffic over Frame Relay, X.25, or Link Access Procedure, Balanced
(LAPB) networks, the interface must be configured with the appropriate encapsulation. For
configuration details, refer to the related chapters in the Cisco IOS Wide-Area Networking
Configuration Guide.
• Routing or bridging the DDR traffic.
Legacy DDR supports bridging to only one destination, but the dialer profiles support bridging to
multiple destinations.
If you decide to bridge traffic over a dial-on-demand connection, configure the interface for
transparent bridging. For detailed information, refer to the “Configuring Transparent Bridging”
chapter of the Cisco IOS Bridging and IBM Networking Configuration Guide.
• Supporting one or more specific routed protocols, if you decide to route traffic.
Depending on the protocol, you do need to control access by entering access lists and to decide how
to support network addressing on an interface to be configured for DDR. You might also need to
spoof keepalive or other packets. For configuration details, refer to the related network protocol
chapters in the appropriate network protocols configuration guide, such as the Cisco IOS AppleTalk
and Novell IPX Configuration Guide.
Dialer Profiles
The dialer profiles implementation of DDR is based on a separation between logical and physical
interface configuration. Dialer profiles also allow the logical and physical configurations to be bound
together dynamically on a per-call basis.
Dialer profiles are advantageous in the following situations:
• When you want to share an interface (ISDN, asynchronous, or synchronous serial) to place or
receive calls.
• When you want to change any configuration on a per-user basis.
• When you want to maximize ISDN channel usage using the Dynamic Multiple Encapsulations
feature to configure various encapsulation types and per-user configurations on the same ISDN B
channel at different times according to the type of call.
• When you want to bridge to many destinations, and for avoiding split horizon problem.
Most routed protocols are supported; however, International Organization for Standardization
Connectionless Network Service (ISO CLNS) is not supported.
If you decide to configure dialer profiles, you must disable validation of source addresses for the routed
protocols you support.
For detailed dialer profiles information, see the “” chapter in this publication. For more information
about Dynamic Multiple Encapsulations, see the “How to Configure Dialer Profiles” section in that
chapter.
Legacy DDR
Legacy DDR is powerful and comprehensive, but its limitations affect scaling and extensibility. Legacy
DDR is based on a static binding between the per-destination call specification and the physical interface
configuration.
However, legacy DDR also has many strengths. It supports Frame Relay, ISO CLNS, LAPB, snapshot
routing, and all routed protocols that are supported on Cisco routers. By default, legacy DDR supports
fast switching.
For information about simple legacy DDR spoke configurations, see the “Configuring Legacy DDR
Spokes” chapter. For information about simple legacy DDR hub configurations, see the “Configuring
Legacy DDR Hubs” chapter. Both chapters are in this publication.
Command Purpose
Router(config)# no ip routing Disables IP routing.
If you choose not to bridge another protocol supported on your network, use the relevant command to
enable routing of that protocol. For more information about tasks and commands, refer to the relevant
protocol chapter in the appropriate network protocols configuration guide, such as the Cisco IOS
AppleTalk and Novell IPX Configuration Guide or Cisco IOS IP Configuration Guide.
Command Purpose
Router(config)# bridge bridge-group protocol {ieee | dec} Defines the type of spanning tree protocol and identifies
a bridge group.
The bridge-group number is used when you configure the interface and assign it to a bridge group.
Packets are bridged only among members of the same bridge group.
Command Purpose
Step 1 Router(config)# access-list access-list-number Identifies interesting packets by Ethernet type codes
{permit | deny} type-code [mask] (access list numbers must be in the range 200–299).
Step 2 Router(config)# dialer-list dialer-group protocol Defines a dialer list for the specified access list.
bridge list access-list-number
Packets with a specified Ethernet type code can trigger outgoing calls. Spanning tree bridge protocol data
units (BPDUs) are always treated as uninteresting and cannot trigger calls.
For a table of some common Ethernet types codes, refer to the “Ethernet Types Codes” appendix in the
Cisco IOS Bridging and IBM Networking Command Reference.
To identify all transparent bridge packets as interesting, use the following command in global
configuration mode:
Command Purpose
Router(config)# dialer-list dialer-group protocol bridge Defines a dialer list that treats all transparent bridge
permit packets as interesting.
Configuring IP Routing
IP routing is enabled by default on Cisco routers; thus no preparation is required simply to enable it. You
might, however, need to decide your addressing strategy and complete other global preparations for
routing IP in your networks. To use dynamic routing where multiple remote sites communicate with each
other through a central site, you might need to disable the IP split horizon feature. Refer to the
“Configuring IP Addressing” chapter in the Cisco IOS IP Configuration Guide for more information.
At a minimum, you must complete the following tasks:
• Disable validation of source addresses.
• Configure one or more IP access lists before you refer to the access lists in DDR dialer-list
commands to specify which packets can trigger outgoing calls.
To disable validation of source addresses, use the following commands in global configuration mode:
Command Purpose
Router(config)# router rip Specifies the routing protocol; RIP, for example.
Router(config)# no validate-update-source Disables validation of source addresses.
Router(config)# network number Specifies the IP address.
For more information about IP routing protocols, refer to the Cisco IOS IP Configuration Guide.
To configure IP access lists, use one of the following commands in global configuration mode:
Command Purpose
Router(config)# access-list access-list-number Specifies an IP standard access list.
{deny | permit} source [source-mask]
or
Router(config)# access-list access-list-number Specifies an IP extended access list.
{deny | permit} protocol source source-mask
destination destination-mask [operator operand]
You can also use simplified IP access lists that use the any keyword instead of the numeric forms of
source and destination addresses and masks. Other forms of IP access lists are also available. For more
information, refer to the “IP Services Commands” chapter in the Cisco IOS IP Configuration Guide.
For an example of configuring DDR for IP, see the chapters “Configuring a Legacy DDR Spoke” or
“Configuring a Legacy DDR Hub” in this publication.
You can configure IP routing on DDR asynchronous, synchronous serial, and ISDN interfaces, as well
as dialer rotary groups.
To configure routing of IPX over DDR, you must complete both global and interface-specific tasks:
• Enable IPX routing globally.
• Enable IPX watchdog spoofing, or enable Sequenced Packet Exchange (SPX) keepalive spoofing on
the interface.
To enable IPX routing, use the following command in global configuration mode:
Command Purpose
Router(config)# ipx routing [node] Enables IPX routing.
To enable IPX watchdog spoofing on the interface, use the following command in interface configuration
mode:
Command Purpose
Router(config-if)# ipx watchdog-spoof Enables IPX watchdog spoofing.
To enable SPX keepalive spoofing, use the following commands in interface configuration mode:
Command Purpose
Router(config-if)# ipx spx-spoof Enables SPX keepalive spoofing.
Router(config-if)# ipx spx-idle-time Sets the idle time after which SPX spoofing begins.
delay-in-seconds
You can configure IPX routing on DDR asynchronous, synchronous serial, and ISDN interfaces, as well
as dialer rotary groups.
For detailed DDR for IPX configuration examples, refer to the section “IPX over DDR Example” in the
“Configuring Novell IPX” chapter of the Cisco IOS AppleTalk and Novell IPX Configuration Guide.
You must enable AppleTalk routing and then specify AppleTalk access lists. After you specify AppleTalk
access lists, define dialer lists. Use the dialer-list protocol command to define permit or deny conditions
for the entire protocol; for a finer granularity, use the dialer-list protocol command with the list
keyword.
You can configure AppleTalk routing on DDR asynchronous, synchronous serial, and ISDN interfaces,
as well as dialer rotary groups.
See the chapters “Configuring a Legacy DDR Spoke” or “Configuring a Legacy DDR Hub” for more
information and examples.
To configure DDR for Banyan VINES, use one of the following commands in global configuration
mode:
Command Purpose
Router(config)# vines access-list access-list-number {permit Specifies a VINES standard access list.
| deny} source source-mask1
or
Router(config)# vines access-list access-list-number {permit Specifies a VINES extended access list.
| deny} source source-mask [destination] [destination-mask]
After you specify VINES standard or extended access lists, define DDR dialer lists. Use the dialer-list
protocol command to define permit or deny conditions for the entire protocol; for a finer granularity,
use the dialer-list protocol command with the list keyword. See the chapters “Configuring a Legacy
DDR Spoke” or “Configuring a Legacy DDR Hub” for more information and examples.
You can configure Banyan VINES on DDR asynchronous, synchronous serial, and ISDN interfaces, as
well as dialer rotary groups.
Note The Banyan VINES neighbor command is not supported for LAPB and X.25 encapsulations.
To configure DDR for DECnet, use one of the following commands in global configuration mode:
Command Purpose
Router(config)# access-list access-list-number {permit | Specifies a DECnet standard access list.
deny} source source-mask1
or
Router(config)# access-list access-list-number {permit | deny} Specifies a DECnet extended access list.
source source-mask [destination] [destination-mask]
After you specify DECnet standard or extended access lists, define DDR dialer lists. Use the dialer-list
protocol command to define permit or deny conditions for the entire protocol; for a finer granularity,
use the dialer-list protocol command with the list keyword. See the chapters “Configuring a Legacy
DDR Spoke” or “Configuring a Legacy DDR Hub” in this publication for more information and
examples.
You classify DECnet control packets, including hello packets and routing updates, using one or more of
the following commands: dialer-list protocol decnet_router-L1 permit, dialer-list protocol
decnet_router-L2 permit, and dialer-list protocol decnet_node permit.
You can configure DECnet on DDR asynchronous, synchronous serial, and ISDN interfaces, as well as
dialer rotary groups.
To configure ISO CLNS for DDR, use the following commands beginning in global configuration mode:
Command Purpose
Step 1 Router(config)# clns filter-set name [permit | deny] Specifies one or more CLNS filters, repeating this
template command as needed to build the filter list
associated with the filter name.
Step 2 Router(config)# interface type number Specifies the interface to apply the filter to and
begins interface configuration mode.
Step 3 Router(config-if)# clns access-group name out Filters CLNS traffic going out of the interface, on
the basis of the filter specified and named in
Step 1.
After you complete these CLNS-specific steps, define a dialer list for CLNS. Use the dialer-list protocol
command to define permit or deny conditions for the entire protocol; for a finer granularity, use the
dialer-list protocol command with the list keyword. Use the access-group argument with this command,
because ISO CLNS uses access groups but does not use access lists. See the chapters “Configuring a
Legacy DDR Spoke” or “Configuring a Legacy DDR Hub” in this publication for more information and
examples.
You classify CLNS control packets, including hello packets and routing updates, using the dialer-list
protocol clns_is permit and/or dialer-list protocol clns_es permit command.
You can configure ISO CLNS on DDR asynchronous, synchronous serial, and ISDN interfaces, as well
as dialer rotary groups.
You must enable XNS routing and then define an access list. To define an XNS access list, use one of
the following commands in global configuration mode:
Command Purpose
Router(config)# access-list access-list-number {deny | permit} Specifies a standard XNS access list.
source-network[.source-address [source-address-mask]]
[destination-network[.destination-address
[destination-address-mask]]]
or
Router(config)# access-list access-list-number {deny | permit}
protocol [source-network[.source-host Specifies an extended XNS access list.
[source-network-mask.]source-host-mask] source-socket
[destination-network [.destination-host
[destination-network-mask.destination-host-mask]
destination-socket[/pep]]]
After you specify an XNS access list, define a DDR dialer list. Use the dialer-list protocol command to
define permit or deny conditions for the entire protocol; for a finer granularity, use the dialer-list
protocol command with the list keyword. See the chapters “Configuring a Legacy DDR Spoke” or
“Configuring a Legacy DDR Hub” for more information and examples.
You can configure XNS on DDR asynchronous, synchronous serial, and ISDN interfaces, as well as
dialer rotary groups.
Command Purpose
Router(config)# dialer-list dialer-group protocol Associates a protocol access list number or access group name
protocol-name {permit | deny | list with the dialer group.
access-list-number | access-group}
Note For a given protocol and a given dialer group, only one access list can be specified in the dialer-list
command.
For the dialer-list protocol list command form, acceptable access list numbers are as follows:
• Banyan VINES, DECnet, IP, and XNS standard and extended access list numbers
• Novell IPX standard, extended, and SAP access list numbers
• AppleTalk access lists numbers
• Bridge type codes
Remote Configuration
The following sample configuration is performed on the remote side of the connection:
interface ethernet 0
ip address 172.30.44.1 255.255.255.0
!
interface async 7
ip address 172.30.45.2 255.255.255.0
Local Configuration
The following sample configuration is performed on the local side of the connection:
interface ethernet 0
ip address 172.30.43.1 255.255.255.0
!
interface async 7
async mode dedicated
peer default ip address 172.30.45.2
encapsulation ppp
dialer in-band
dialer string 1235
dialer rotary-group 1
!
interface async 8
async mode dedicated
peer default ip address 172.30.45.2
dialer rotary-group 1
!
ip route 172.30.44.0 255.255.255.0 async 7
ip address 172.30.45.2 255.255.255.0
encapsulation ppp
ppp authentication chap
dialer in-band
dialer map ip 172.30.45.2 name remote 4321
dialer load-threshold 80
!
ip route 172.30.44.0 255.255.255.0 128.150.45.2
chat-script generic ABORT BUSY ABORT NO ## AT OK ATDT\T TIMEOUT 30 CONNECT
dialer-list 1 protocol ip permit
!
route igrp 109
network 172.30.0.0
redistribute static
passive-interface async 7
!
line 7
modem InOut
speed 38400
flowcontrol hardware
script dialer generic
Remote Configuration
The following example is performed on the remote side of the connection. It provides authentication by
identifying a password that must be provided on each end of the connection.
username local password secret1
username remote password secret2
interface ethernet 0
ip address 172.30.44.1 255.255.255.0
!
interface async 7
ip address 172.30.45.2 255.255.255.0
async mode dedicated
peer default ip address 172.30.45.1
encapsulation ppp
dialer in-band
dialer string 1234
dialer-group 1
!
ip route 172.30.43.0 255.255.255.0 async 7
ip default-network 172.30.0.0
chat-script generic ABORT BUSY ABORT NO ## AT OK ATDT\T TIMEOUT 30 CONNECT
dialer-list 1 protocol ip permit
!
line 7
no exec
modem InOut
speed 38400
flowcontrol hardware
script dialer generic
Local Configuration
The following example configuration is performed on the local side of the connection. As with the
remote side configuration, it provides authentication by identifying a password for each end of the
connection.
username remote password secret1
username local password secret2
!
interface ethernet 0
ip address 172.30.43.1 255.255.255.0
!
interface async 7
async mode dedicated
peer default ip address 172.30.45.2
dialer rotary-group 1
!
interface async 8
async mode dedicated
peer default ip address 172.30.45.2
dialer rotary-group 1
!
interface dialer 1
ip address 172.30.45.2 255.255.255.0
encapsulation ppp
This chapter describes how to configure legacy dial-on-demand routing (DDR) on interfaces that
function as a spoke in a hub-and-spoke network topology. It includes the following main sections:
• DDR Spokes Configuration Task Flow
• How to Configure DDR
• Monitoring DDR Connections
• Configuration Examples for Legacy DDR Spoke
This chapter considers a spoke interface to be any interface that calls or receives calls from exactly one
other router, and considers a hub interface to be an interface that calls or receives calls from more than
one router: all the spokes in the network.
This chapter also describes the DDR-independent tasks required to bridge protocols or to route protocols
over DDR. Most of these tasks are global in scope and can be completed before you begin to configure
DDR.
For configuration tasks for the central hub interface in a hub-and-spoke network topology, see the
chapter “Configuring a Legacy DDR Hub” in this publication.
For information about the Dialer Profiles implementation of DDR, see the chapter “Configuring
Peer-to-Peer DDR with Dialer Profiles” in this publication.
To identify the hardware platform or software image information associated with a feature, use the
Feature Navigator on Cisco.com to search for information about the feature or refer to the software
release notes for a specific release. For more information, see the “Finding Additional Feature Support
Information” section on page lxxvii in the “Using Cisco IOS Software for Release 12.4” chapter.
For a complete description of the legacy DDR spoke commands mentioned in this chapter, refer to the
Cisco IOS Dial Technologies Command Reference. To locate documentation of other commands that
appear in this chapter, use the command reference master index or search online.
When you configure DDR on a spoke interface in a hub-and-spoke topology, you perform the following
general steps:
Step 1 Specify the interface that will place calls to or receive calls from a single site. (See the chapter
“Configuring Legacy DDR Hubs” in this publication for information about configuring an interface to
place calls to or receive calls from multiple sites.)
Step 2 Enable DDR on the interface. This step is not required for some interfaces; for example, ISDN interfaces
and passive interfaces that receive only from DTR-dialing interfaces.
Step 3 Configure the interface to receive calls only, if applicable. Receiving calls from multiple sites requires
each inbound call to be authenticated.
Step 4 Configure the interface to place calls only, if applicable.
Step 5 Configure the interface to place and receive calls, if applicable.
Step 6 If the interface will place calls, specify access control for:
• Transparent bridging—Assign the interface to a bridge group, and define dialer lists associated with
the bridging access lists. The interface switches between members of the same bridge group, and
dialer lists specify which packets can trigger calls.
or
• Routed protocols—Define dialer lists associated with the protocol access lists to specify which
packets can trigger calls.
Step 7 Customize the interface settings (timers, interface priority, hold queues, bandwidth on demand, and
disabling fast switching) as needed.
When you have configured the interface and it is operational, you can monitor its performance and its
connections as described in the “Monitoring DDR Connections” section later in this chapter.
You can also enhance DDR by configuring Multilink PPP and configuring PPP callback. The PPP
configuration tasks are described in the chapter “Configuring Media-Independent PPP and Multilink
PPP” in this publication.
See the section “Configuration Examples for Legacy DDR Spoke” later in this chapter for examples of
how to configure DDR on your network.
Note When you specify an interface, make sure to use the interface numbering scheme supported on the
network interface module or other port hardware on the router. On the Cisco 7200 series, for example,
you specify an interface by indicating its type, slot number, and port number.
To specify an interface to configure for DDR, use one of the following commands in global configuration
mode:
Command Purpose
Router(config)# interface async number Specifies an interface to configure for DDR.
Router(config)# interface serial number
Router(config)# interface bri number
or
Router(config)# interface serial slot/port:23 Specifies an ISDN PRI D channel (T1).
Router(config)# interface serial slot/port:15
Specifies an ISDN PRI D channel (E1).
or
Router(config)# interface dialer number Specifies a logical interface to function as a dialer rotary
group leader.
Dialer interfaces are logical or virtual entities, but they use physical interfaces to place or receive calls.
Command Purpose
Router(config)# dialer dtr Enables DDR and configures the specified serial
interface to use DTR dialing—for interfaces with
non-V.25bis modems using EIA Data Terminal Ready
or (DTR) signaling.
Router(config)# dialer in-band [no-parity | odd-parity] Enables DDR and configures the specified serial
interface to use in-band dialing—for asynchronous
interfaces or interfaces using V.25bis modems.
Note An interface configured with the dialer in-band command can both place and receive calls. A serial
interface configured for DTR dialing can place calls only; it cannot accept them.
You can optionally specify parity if the modem on this interface uses the V.25bis command set. The 1984
version of the V.25bis specification states that characters must have odd parity. However, the default for
the dialer in-band command is no parity.
For an example of configuring an interface to support DTR dialing, see the section “DTR Dialing
Example” later in this chapter.
To receive calls from an interface that is using DTR dialing, an interface can be configured for in-band
dialing or not configured for anything but encapsulation, depending on the desired behavior. If you
expect the receiving interface to terminate a call when no traffic is received for some time, you must
configure in-band dialing (along with access lists and a dummy dialer string). If the receiving interface
is purely passive, no additional configuration is necessary.
Note You can configure an interface or dialer rotary group to both place and receive calls. If the interface is
calling and being called by a single site, simply enable DDR and specify a dial string.
Command Purpose
Router(config-if)# dialer string dial-string[:isdn-subaddress] Specifies the number to dial.
Dialers pass the string (telephone number) to the external DCE device, which dials the number; ISDN
devices themselves call the specified number.
Specifying Chat Scripts and Dial Strings for Asynchronous Serial Interfaces
The modem chat script becomes the default chat script for an interface, which means it becomes the
default chat script for the dialer string and dialer map commands presented in this section.
To place a call to a single site on an asynchronous line for which either a modem dialing script has not
been assigned or a system script login must be specified, use the following command in interface
configuration mode:
Command Purpose
Router(config-if)# dialer map protocol next-hop-address Specifies chat scripts and a dial string.
[modem-script modem-regexp] [system-script system-regexp]
dial-string [:isdn-subaddress]
Refer to the sections “How To Configure Chat Scripts” and “Dialer Mapping Example” in the chapter “”
for more information about configuring chat scripts.
To receive calls from an interface that is using DTR dialing, an interface can be configured for in-band
dialing or not configured for anything but encapsulation, depending on the desired behavior. If you
expect the receiving interface to terminate a call when no traffic is received for some time, you must
configure in-band dialing (along with access lists and a dummy dialer string). If the receiving interface
is purely passive, no additional configuration is necessary.
Authentication is not required when traffic comes from only one site. However, you can configure
authentication for security. See the “Defining the Traffic to Be Authenticated” section. If you want to
receive calls only, do not provide a dial string in the dialer map command shown in that section.
Command Purpose
Router(config-if)# dialer string Specifies the number to dial one site.
dial-string[:isdn-subaddress]
Note Use the dialer map command instead of the dialer string command if you want to authenticate calls
received. See the section “Defining the Traffic to Be Authenticated” later in this chapter for more
information.
When a dialer string is configured but PPP Challenge Handshake Authentication Protocol (CHAP) is not
configured on the interface, the Cisco IOS software recognizes each incoming call as coming from the
configured dialer string. That is, if your outgoing calls go to only one number and you do not
authenticate incoming calls, it is assumed that all incoming calls come from that number. (If you received
calls from multiple sites, you would need to authenticate the calls.)
Authentication is not required when traffic comes from only one site. However, you can configure
authentication for an extra measure of security. See the following section, “Defining the Traffic to Be
Authenticated,” for more information. If you want to receive and place calls, use the dialer map
command.
To enable CHAP or PAP on an interface and authenticate sites that are calling in, use the following
commands in interface configuration mode:
Command Purpose
Step 1 Router(config-if)# encapsulation ppp Configures an interface for PPP encapsulation.
Step 2 Router(config-if)# ppp authentication chap Enables CHAP.
[if-needed]
or
Router(config-if)# ppp authentication pap Enables PAP.
[if-needed]
Step 3 Router(config-if)# dialer map protocol Maps the protocol address to a host name.
next-hop-address name hostname [modem-script
modem-regexp] [system-script system-regexp]
[dial-string[:isdn-subaddress]]
If the dial string is not provided in the chat script, the interface will be able to receive calls from the host
but will not be able to place calls to the host.
Note Spanning-tree bridge protocol data units (BPDUs) are always treated as uninteresting.
Command Purpose
Router(config)# access-list access-list-number {permit Identifies interesting packets by Ethernet type codes (access
| deny} type-code [mask] list numbers must be in the range 200 to 299).
To enable packets with a specified Ethernet type code to trigger outgoing calls, use the following
command in interface configuration mode:
Command Purpose
Router(config-if)# dialer-list dialer-group protocol Defines a dialer list for the specified access list.
bridge list access-list-number
For a table of some common Ethernet types codes, see the “Ethernet Types Codes” appendix in the
Cisco IOS Bridging and IBM Networking Command Reference.
Command Purpose
Router(config-if)# dialer-list dialer-group protocol Defines a dialer list that treats all transparent bridge packets
bridge permit as interesting.
Command Purpose
Router(config-if)# bridge-group bridge-group Assigns the specified interface to a bridge group.
An interface can be associated only with a single dialer access group; multiple dialer access group
assignments are not allowed. To specify the dialer access group to which you want to assign an access
list, use the following command in interface configuration mode:
Command Purpose
Router(config-if)# dialer-group group-number Specifies the number of the dialer access group to which the
specific interface belongs.
To specify the amount of time for which a line will stay idle before it is disconnected, use the following
command in interface configuration mode:
Command Purpose
Router(config-if)# dialer idle-timeout seconds Specifies the duration of idle time in seconds after which a line
[inbound | either] will be disconnected.
By default, outbound traffic will reset the dialer idle timer.
Adding the either keyword causes both inbound and outbound
traffic to reset the timer; adding the inbound keyword causes
only inbound traffic to reset the timer.
Note The dialer idle-timeout interface configuration command specifies the duration of time before an idle
connection is disconnected. Previously, both inbound and outbound traffic would reset the dialer idle
timer; now you can specify that only inbound traffic will reset the dialer idle timer.
The dialer fast idle timer is activated if there is contention for a line. Contention occurs when a line is
in use, a packet for a different next hop address is received, and the busy line is required to send the
competing packet.
If the line has been idle for the configured amount of time, the current call is disconnected immediately
and the new call is placed. If the line has not yet been idle as long as the fast idle timeout period, the
packet is dropped because there is no way to get through to the destination. (After the packet is dropped,
the fast idle timer remains active and the current call is disconnected as soon as it has been idle for as
long as the fast idle timeout.) If, in the meantime, another packet is sent to the currently connected
destination, and it is classified as interesting, the fast-idle timer is restarted.
To specify the amount of time for which a line for which there is contention will stay idle before the line
is disconnected and the competing call is placed, use the following command in interface configuration
mode:
Command Purpose
Router(config-if)# dialer fast-idle seconds Sets idle time for high traffic lines.
To set the length of time for which the interface stays down before it is available to dial again after a line
is disconnected or fails, use the following command in interface configuration mode:
Command Purpose
Router(config-if)# dialer enable-timeout seconds Sets the interface downtime.
To set the length of time for which an interface waits for the telephone service (carrier), use the following
command in interface configuration mode:
Command Purpose
Router(config-if)# dialer wait-for-carrier-time Sets the length of time for which the interface waits for the
seconds carrier to come up when a call is placed.
For asynchronous interfaces, this command sets the total time to wait for a call to connect. This time is
set to allow for running the chat script.
To assign priority to an interface in a dialer rotary group, use the following command in interface
configuration mode:
Command Purpose
Router(config-if)# dialer priority number Sets the interface priority in the dialer rotary group.
The range of values for number is 0 through 255. Zero is the default value and lowest priority; 255 is the
highest priority. This command applies to outgoing calls only.
Command Purpose
Router(config-if)# dialer hold-queue packets Creates a dialer hold queue and specifies the number of
packets to be held in it.
Command Purpose
Router(config-if)# dialer load-threshold load Configures the dialer rotary group to place additional calls to
a single destination, as indicated by interface load.
Once multiple links are established, they are still governed by the load threshold. If the total load on all
the links falls below the threshold, an idle link will be torn down.
Command Purpose
Router(config-if)# no ip route-cache Disables IP fast switching over a DDR interface.
Router(config-if)# ip route cache Reenables IP fast switching over a DDR interface.
Command Purpose
Step 1 Router(config)# interface dialer Enters interface configuration mode.
Step 2 Router(config-if)# dialer redial interval time Configures redial options on the router.
attempts number re-enable disable-time
configuration and data structures. The ISDN B channel becomes a forwarding device, and the
configuration on the D channel is ignored, thereby allowing the different encapsulation types and
per-user configurations.
To configure an interface for those networks, perform the tasks in the following sections:
• Configuring the Interface for Sending Traffic over a Frame Relay Network (As required)
• Configuring the Interface for Sending Traffic over an X.25 Network (As required)
• Configuring the Interface for Sending Traffic over a LAPB Network (As required)
Configuring the Interface for Sending Traffic over a Frame Relay Network
Access to Frame Relay networks is now available through dialup connections as well as leased lines.
Dialup connectivity allows Frame Relay networks to be extended to sites that do not generate enough
traffic to justify leased lines, and also allows a Frame Relay network to back up another network or
point-to-point line.
DDR over Frame Relay is supported for synchronous serial and ISDN interfaces and for rotary groups,
and is available for in-band, DTR, and ISDN dialers.
Frame Relay supports multiple permanent virtual circuit (PVC) connections over the same serial
interface or ISDN B channel, but only one physical interface can be used (dialed, connected, and active)
in a rotary group or with ISDN.
The Dynamic Multiple Encapsulations feature supports the following Frame Relay features:
• Frame Relay RTP Header Compression (RFC 1889)
• Frame Relay TCP/IP Header Compression
• Legacy DDR over Frame Relay
• Frame Relay Interface/Subinterface Backup
Dynamic multiple encapsulations support at least four Frame Relay PVCs on either dialer interfaces or
dialer subinterfaces.
Note Frame Relay encapsulations in the Dynamic Multiple Encapsulations feature do not support IETF or
Cisco Encapsulation for IBM Systems Network Architecture (SNA). Frame Relay for SNA support is
not applicable.
Configuration Restrictions
Configuration Overview
No new commands are required to support DDR over Frame Relay. In general, you configure Frame
Relay and configure DDR. In general, complete the following tasks to configure an interface for DDR
over Frame Relay:
• Specify the interface.
• Specify the protocol identifiers for the interface.
For example, enter the IP address and mask, the IPX network number, and the AppleTalk cable range
and zone.
• Configure Frame Relay.
As a minimum, you must enable Frame Relay encapsulation and decide whether you need to do
static or dynamic address mapping. If you decide to do dynamic mapping, you need not enter a
command because Inverse Address Resolution Protocol is enabled by default. If you decide to do
static mapping, you must enter Frame Relay mapping commands.
You can then configure various options as needed for your Frame Relay network topology.
• Configure DDR.
At a minimum, you must decide and configure the interface for outgoing calls only, incoming calls
only, or both outgoing and incoming calls.
You can also configure DDR for your routed protocols (as specified in the section “Preparations for
Routing or Bridging over DDR” in the chapter “Preparing to Configure DDR” in this publication)
and for snapshot routing (as specified in the chapter “Configuring Snapshot Routing” later in this
publication). You can also customize DDR interfaces on your router or access server (as described
in the section “Customizing the Interface Settings” in this chapter).
For examples of configuring various interfaces for DDR over Frame Relay, see the section “Frame Relay
Support Example” later in this chapter.
Command Purpose
Step 1 Router(config-if)# encapsulation x25 [dte | dce] Configures the interface to use X.25 encapsulation.
[ietf]
Command Purpose
Step 2 Router(config-if)# x25 address x.121-address Assigns an X.25 address to the interface.
Step 3 Router(config-if)# x25 map protocol address Sets up the LAN protocols-to-remote host address
[protocol2 address2 [...[protocol9 address9]]] mapping.
x.121-address [option]
The order of DDR and X.25 configuration tasks is not critical; you can configure DDR before or after
X.25, and you can even mix the DDR and X.25 commands.
For an example of configuring an interface for X.25 encapsulation and then completing the DDR
configuration, see the section “X.25 Support Example” later in this chapter.
Command Purpose
Router(config-if)# encapsulation lapb [dte | Specifies LAPB encapsulation.
dce] [multi | protocol]
For more information about the serial connections on which LAPB encapsulation is appropriate, refer to
the encapsulation lapb command in the chapter “X.25 and LAPB Commands” in the Cisco IOS
Wide-Area Networking Command Reference.
For an example of configuring an interface for DDR over LAPB, see the section “LAPB Support
Example” later in this chapter.
Command Purpose
Router# show dialer [interface type number] Displays general diagnostics about the DDR interface.
Router# show dialer map Displays current dialer maps, next-hop protocol addresses, user
names, and the interfaces on which they are configured.
Router# show interfaces bri 0 Displays information about the ISDN interface.
Router# show ipx interface [type number] Displays status about the IPX interface.
Router# show ipx traffic Displays information about the IPX packets sent by the router or
access server, including watchdog counters.
Command Purpose
Router# show appletalk traffic Displays information about the AppleTalk packets sent by the router
or access server.
Router# show vines traffic Displays information about the Banyan VINES packets sent by the
router or access server.
Router# show decnet traffic Displays information about the DECnet packets sent by the router or
access server.
Router# show xns traffic Displays information about the XNS packets sent by the router or
access server.
Router# clear dialer Clears the values of the general diagnostic statistics.
The second example also configures the serial 1 interface for DDR bridging. However, this example
includes an access-list command that specifies the Ethernet type codes that can cause calls to be placed
and a dialer list protocol list command that refers to the specified access list.
no ip routing
!
interface Serial1
no ip address
encapsulation ppp
dialer in-band
dialer enable-timeout 3
dialer map bridge name urk broadcast 8985
dialer hold-queue 10
dialer-group 1
ppp authentication chap
bridge-group 1
pulse-time 1
!
access-list 200 permit 0x0800 0xFFF8
!
dialer-list 1 protocol bridge list 200
bridge 1 protocol ieee
bridge 1 hello 10
With many modems, the pulse-time command must be used so that DTR is dropped for enough time to
allow the modem to disconnect.
The redistribute static command can be used to advertise static route information for DDR applications.
Refer to the redistribute static ip command, described in the chapter “IP Routing Commands” of the
Cisco IOS IP Command Reference. Without this command, static routes to the hosts or network that the
router can access with DDR will not be advertised to other routers with which the router is
communicating. This behavior can block communication because some routes will not be known.
interface ethernet 0
ipx network 40
!
interface async
ip unnumbered e0
encapsulation ppp
async mode dedicated
async dynamic routing
ipx network 45
ipx watchdog-spoof
dialer in-band
dialer map ipx 45.0000.0cff.d016 broadcast name local 1212
dialer-group 1
ppp authentication chap
!
access-list 901 deny 0 FFFFFFFF 452
access-list 901 deny 0 FFFFFFFF 453
access-list 901 deny 0 FFFFFFFF 457
access-list 901 deny 0 FFFFFFFF 0 FFFFFFFF 452
access-list 901 deny 0 FFFFFFFF 0 FFFFFFFF 453
access-list 901 deny 0 FFFFFFFF 0 FFFFFFFF 457
access-list 901 permit 0
ipx route 41 45.0000.0cff.d016
ipx route 50 45.0000.0cff.d016
ipx sap 4 SERVER 50.0000.0000.0001 451 2
chat-script generic ABORT BUSY ABORT NO ## AT OK ATDT\T TIMEOUT 30 CONNECT
!
dialer-list 1 list 901
!
line 7
modem InOut
speed 38400
flowcontrol hardware
modem chat-script generic
interface serial 0
no ip address
encapsulation ppp
xns network 10
dialer in-band
dialer map xns 10.0000.0c01.d877 name RouterB broadcast 4155551212
dialer-group 1
ppp authentication chap
pulse-time 1
!
access-list 400 deny -1 -1.ffff.ffff.ffff 0000.0000.0000
access-list 400 permit -1 10
!
dialer-list 1 protocol xns list 400
Local router
5555555
Remote
Router A
6666666
56951
Remote
Router B
If the single site called by the DDR spoke interface on your router has the phone number 5555555, it will
send the packet to that site, assuming that the next hop address 10.1.1.1 indicates the same remote device
as phone number 5555555. The dialer string command is used to specify the string (telephone number)
to be called.
interface serial 1
dialer in-band
dialer string 5555555
Router A Router B
E0 S0 S0 E0
PSTN
S3036
Router A
interface serial 0
ip address 172.18.170.19 255.255.255.0
dialer dtr
dialer-group 1
!
access-list 101 deny igrp 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255
access-list 101 permit ip 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255
!
dialer-list 1 list 101
Router B
interface serial 0
ip address 172.18.170.20 255.255.255.0
dialer in-band
dialer string 9876543
pulse-time 1
!
access-list 101 deny igrp 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255
access-list 101 permit ip 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255
!
dialer-list 1 list 101
S3366
!
router igrp 109
network 172.30.0.0
redistribute static
!
line 7
login tacacs
modem InOut
speed 38400
flowcontrol hardware
modem chat-script generic
Remote Configuration
The following commands are executed on the remote side of the connection. This configuration provides
authentication by identifying a password that must be provided on each end of the connection.
interface ethernet 0
ip address 172.30.44.1 255.255.255.0
!
interface async 7
ip address 172.30.45.2 255.255.255.0
async mode dedicated
async default ip address 172.30.45.1
encap ppp
dialer in-band
dialer string 1234
dialer-group 1
!
ip route 172.30.43.0 255.255.255.0 async 7
ip default-network 172.30.0.0
chat-script generic ABORT BUSY ABORT NO ## AT OK ATDT\T TIMEOUT 30 CONNECT
dialer-list 1 protocol ip permit
!
line 7
no exec
modem InOut
speed 38400
flowcontrol hardware
modem chat-script generic
Local Configuration
The following commands are executed on the local side of the connection. As with the remote side
configuration, this configuration provides authentication by identifying a password for each end of the
connection.
interface ethernet 0
ip address 172.30.43.1 255.255.255.0
!
interface async 7
async mode dedicated
async default ip address 172.30.45.2
encapsulation ppp
dialer in-band
dialer string 1235
dialer rotary-group 1
!
interface async 8
async mode dedicated
async default ip address 172.30.45.2
dialer rotary-group 1
!
ip route 172.30.44.0 255.255.255.0 async 7
ip address 172.30.45.2 255.255.255.0
encapsulation ppp
ppp authentication chap
dialer in-band
dialer map ip 172.30.45.2 name remote 4321
dialer load-threshold 80
!
ip route 172.30.44.0 255.255.255.0 128.150.45.2
chat-script generic ABORT BUSY ABORT NO ## AT OK ATDT\T TIMEOUT 30 CONNECT
dialer-list 1 protocol ip permit
!
route igrp 109
network 172.30.0.0
redistribute static
passive-interface async 7
!
line 7
modem InOut
speed 38400
flowcontrol hardware
modem chat-script generic
Frame Relay Access with In-Band Dialing (V.25bis) and Static Mapping Example
The following example shows how to configure a router for IP over Frame Relay using in-band dialing.
A Frame Relay static map is used to associate the next hop protocol address to the data-link connection
identifier (DLCI). The dialer string allows dialing to only one destination.
interface Serial0
ip address 10.1.1.1 255.255.255.0
encapsulation frame-relay
frame-relay map ip 10.1.1.2 100 broadcast
dialer in-band
dialer string 4155551212
dialer-group 1
!
access-list 101 deny igrp any host 255.255.255.255
access-list 101 permit ip any any
!
dialer-list 1 protocol ip list 101
Frame Relay Access with ISDN Dialing and DDR Dynamic Maps Example
The following example shows a BRI interface configured for Frame Relay and for IP, IPX, and
AppleTalk routing. No static maps are defined because this setup relies on Frame Relay Local
Management Interface (LMI) signaling and Inverse ARP to determine the network addresses-to-DLCI
mappings dynamically. (Because Frame Relay Inverse ARP is enabled by default, no command is
required.)
interface BRI0
ip address 10.1.1.1 255.255.255.0
ipx network 100
appletalk cable-range 100-100 100.1
appletalk zone ISDN
no appletalk send-rtmps
encapsulation frame-relay IETF
dialer map ip 10.1.1.2 broadcast 4155551212
dialer map apple 100.2 broadcast 4155551212
dialer map ipx 100.0000.0c05.33ed broadcast 4085551234
dialer-group 1
!
access-list 101 deny igrp any host 255.255.255.255
access-list 101 permit ip any any
access-list 901 deny -1 FFFFFFFF 452
access-list 901 deny -1 FFFFFFFF 453
access-list 901 deny -1 FFFFFFFF 457
access-list 901 deny -1 FFFFFFFF 0 FFFFFFFF 452
access-list 901 deny -1 FFFFFFFF 0 FFFFFFFF 453
access-list 901 deny -1 FFFFFFFF 0 FFFFFFFF 457
access-list 901 permit -1
access-list 601 permit cable-range 100-100 broadcast-deny
access-list 601 deny other-access
!
dialer-list 1 protocol ip list 101
dialer-list 1 protocol novell list 901
dialer-list 1 protocol apple list 601
This chapter describes how to configure legacy dial-on-demand routing (DDR) on interfaces functioning
as the hub in a hub-and-spoke network topology. It includes the following main sections:
• DDR Issues
• DDR Hubs Configuration Task Flow
• How to Configure DDR
• Monitoring DDR Connections
• Configuration Examples for Legacy DDR Hub
This chapter considers a hub interface to be any interface that calls or receives calls from more than one
other router and considers a spoke interface to be an interface that calls or receives calls from exactly
one router.
For configuration tasks for the spoke interfaces in a hub-and-spoke network topology, see the chapter
“Configuring Legacy DDR Spokes” in this publication.
For information about the dialer profiles implementation of DDR, see the chapter “Configuring
Peer-to-Peer DDR with Dialer Profiles” in this publication.
To identify the hardware platform or software image information associated with a feature, use the
Feature Navigator on Cisco.com to search for information about the feature or refer to the software
release notes for a specific release. For more information, see the “Finding Additional Feature Support
Information” section on page lxxvii in the “Using Cisco IOS Software for Release 12.4” chapter.
For a complete description of the DDR commands in this chapter, see the Cisco IOS Dial Technologies
Command Reference, Release 12.2. To locate documentation of other commands that appear in this
chapter, use the command reference master index or search online.
DDR Issues
A DDR configuration applies to a specified router interface but serves to meet the communication needs
of the network. The router configured for DDR has a function to serve in preserving communications
and ensuring that routes are known to other routers at both ends of the dial link. Thus, these issues are
important:
• Types and number of router interfaces to be configured for DDR.
• Function of each specific interface—to place calls, receive calls, or both—and the number of sites
connecting to the interface.
• Identity and characteristics of the router at the other end of each connection—phone number, host
name, next hop network protocol addresses, type of signaling used or required, ability to place or
receive calls, other requirements.
• Types of packets that will be allowed to trigger outgoing calls—if the interface places calls.
• End of the connection that will control the communication: initiating calls and terminating calls
when the line is idle.
• Method for authenticating other routers—if the interface receives calls from multiple sites.
• Passing routing information across the dial link.
Step 1 Specify the interface that will place calls to or receive calls from multiple sites. (See the chapter
“Configuring Legacy DDR Spokes” in this publication for information about configuring an interface to
place calls to or receive calls from one site only.)
Step 2 Enable DDR on the interface. This step is not required for some interfaces; for example, ISDN interfaces
and passive interfaces that receive only from data terminal ready (DTR)-dialing interfaces.
Step 3 Configure the interface to receive calls only, if applicable. Receiving calls from multiple sites requires
each inbound call to be authenticated.
Step 4 Configure the interface to place calls only, if applicable.
Step 5 Configure the interface to place and receive calls, if applicable.
Step 6 If the interface will place calls, specify access control for the following:
• Transparent bridging—Assign the interface to a bridge group, and define dialer lists associated with
the bridging access lists. The interface switches between members of the same bridge group, and
dialer lists specify which packets can trigger calls.
or
• Routed protocols—Define dialer lists associated with the protocol access lists to specify which
packets can trigger calls.
Step 7 Customize the interface settings (timers, interface priority, hold queues, bandwidth on demand, and
disabling fast switching) as needed.
When you have configured the interface and it is operational, you can monitor its performance and its
connections as described in the “Monitoring DDR Connections” section later in this chapter.
You can also enhance DDR by configuring Multilink PPP and configuring PPP callback. The PPP
configuration tasks are described in the chapter “Configuring Media-Independent PPP and Multilink
PPP” in this publication.
See the section “Configuration Examples for Legacy DDR Hub” at the end of this chapter for examples
of how to configure DDR on your network.
Note When you specify an interface, make sure to use the interface numbering scheme supported on the
network interface module or other port hardware on the router. On the Cisco 7200 series router, for
example, you specify an interface by indicating its type, slot number, and port number.
To specify an interface to configure for DDR, use one of the following commands in global configuration
mode:
Command Purpose
Router(config)# interface async number Specifies an interface to configure for DDR.
Router(config)# interface serial number
Router(config)# interface bri number
or
Router(config)# interface serial slot/port:23 Specifies an ISDN PRI D channel (T1).
Router(config)# interface serial slot/port:15
or Specifies an ISDN PRI D channel (E1).
Router(config)# interface dialer number
Specifies a logical interface to function as a dialer rotary group
leader.
Dialer interfaces are logical or virtual entities, but they use physical interfaces to place or receive calls.
Command Purpose
Router(config-if)# dialer in-band [no-parity | Enables DDR on an asynchronous interface or a synchronous
odd-parity] serial interface using V.25bis modems.
You can optionally specify parity if the modem on this interface uses the V.25bis command set. The 1984
version of the V.25bis specification states that characters must have odd parity. However, the default for
the dialer in-band command is no parity.
Command Purpose
Router(config-if)# dialer map protocol Defines a dialing destination for a synchronous serial interface
next-hop-address dial-string[:isdn-subaddress] or a dialer interface.
Router(config-if)# dialer map protocol Defines a dialing destination for an ISDN interface (including an
next-hop-address [spc] [speed 56 | 64] [broadcast] ISDN PRI D channel).
[dial-string[:isdn-subaddress]]
Router(config-if)# dialer map protocol Defines a dialing destination for an asynchronous interface.
next-hop-address [modem-script modem-regexp]
[system-script system-regexp] If a modem dialing chat script has not been assigned to the line
dial-string[:isdn-subaddress] or a system login chat script must be specified, defines both a
dialing destination and the chat scripts to use.
Repeat this task as many times as needed to ensure that all dialing destinations are reachable via some
next hop address and dialed number.
If you intend to send traffic over other types of networks, see one of the following sections later in this
chapter: “Configuring the Interface for Sending Traffic over a Frame Relay Network,” “Configuring the
Interface for Sending Traffic over an X.25 Network,” or “Configuring the Interface for Sending Traffic
over a LAPB Network.”
Command Purpose
Step 1 Router(config)# interface serial number Specifies a physical interface to use and begins interface
or configuration mode.
Router(config)# interface async number
Step 2 Router(config-if)# dialer rotary-group number Assigns the specified physical interface to a dialer rotary
group.
Repeat these two steps for each physical interface to be used by the dialer interface.
An ISDN BRI is a rotary group of B channels. An ISDN interface can be part of a rotary group
comprising other interfaces (synchronous, asynchronous, ISDN BRI, or ISDN PRI). However, Cisco
supports at most one level of recursion; that is, a rotary of rotaries is acceptable, but a rotary of rotaries
of rotaries is not supported.
Interfaces in a dialer rotary group do not have individual addresses; when the interface is being used for
dialing, it inherits the parameters configured for the dialer interface. However, if the individual interface
is configured with an address and it is subsequently used to establish a connection from the user EXEC
level, the individual interface address again applies.
Note When you look at your configuration file, commands will not appear in the order in which you entered
them. You will also see interface configuration commands that you did not enter, because each interface
assigned to a dialer rotary group inherits the parameters of the dialer interface in the dialer rotary group.
Figure 60 illustrates how dialer interfaces work. In this configuration, serial interfaces 1, 2, and 3 are
assigned to dialer rotary group 1 and thereby take on the parameters configured for dialer interface 1.
When it is used for dialing, the IP address of serial interface 2 is the same as the address of the dialer
interface, 172.18.1.1.
172.18.1.1 172.25.1.1
Router
Command Purpose
Router(config-if)# ppp use-tacacs [single-line] Configures TACACS.
or
Router(config-if)# aaa authentication ppp
Use the ppp use-tacacs command with TACACS and extended TACACS. Use the aaa authentication
ppp command with authentication, authorization, and accounting (AAA)/TACACS+.
Note After you have enabled one of these protocols, the local router or access server requires authentication
of the remote devices that are calling. If the remote device does not support the enabled authentication
protocol, no traffic will be passed to that device.
1. For CHAP, configure host name authentication and the secret or password for each remote system
with which authentication is required.
2. Map the protocol address to the name of the host calling in.
To enable PPP encapsulation, use the following commands beginning in interface configuration mode:
Command Purpose
Step 1 Router(config-if)# encapsulation ppp Enables PPP on an interface.
Step 2 Router(config-if)# ppp authentication chap Enables CHAP on an interface.
[if-needed]
or
Enables PAP on an interface.
Router(config-if)# ppp authentication pap
Step 3 Router(config-if)# dialer map protocol For any host calling in to the local router or access server,
next-hop-address name hostname maps its host name (case-sensitive) to the next hop address
used to reach it.
Repeat this step for each host calling in to this interface.
Command Purpose
Step 4 Router(config-if)# exit Returns to global configuration mode.
Step 5 Router(config)# username name [user-maxlinks Specifies the password to be used in CHAP caller
link-number] password secret identification. Optionally, you can specify the maximum
number of connections a user can establish.
To use the user-maxlinks keyword, you must also use the
aaa authorization network default local command, and
PPP encapsulation and name authentication on all the
interfaces the user will be accessing.
Repeat this step to add a username entry for each remote
system from which the local router or access server requires
authentication.
Specifying Physical Interfaces and Assigning Them to the Dialer Rotary Group
To assign a physical interface to a dialer rotary group, use the following commands beginning in global
configuration mode:
Command Purpose
Step 1 Router(config)# interface serial number Specifies a physical interface to use and begins interface
or configuration mode.
Router(config)# interface async number
Step 2 Router(config-if)# dialer rotary-group number Assigns the specified physical interface to a dialer rotary
group.
Repeat these two steps for each physical interface to be used by the dialer interface.
Remote
Router E
Remote Remote
Router D Router A
Remote Remote
Router C Router B
Central site
S1159a
To configure a single line, multiple lines, or a dialer interface to place calls to and receive calls from
multiple sites, perform the tasks in the following section:
• Defining One or More Dialing Destinations
• Defining the Traffic to Be Authenticated
If you intend to send traffic over other types of networks, see one of the following sections later in this
chapter: “Configuring the Interface for Sending Traffic over a Frame Relay Network,” “Configuring the
Interface for Sending Traffic over an X.25 Network,” or “Configuring the Interface for Sending Traffic
over a LAPB Network.”
Command Purpose
Router(config-if)# dialer string Defines only one dialing destination (used to configure one
dial-string[:isdn-subaddress] phone number on multiple lines only).
Router(config-if)# dialer map protocol Defines one of several dialing destinations for a
next-hop-address dial-string[:isdn-subaddress] synchronous serial interface or a dialer interface.
Router(config-if)# dialer map protocol Defines one of several dialing destinations for an ISDN
next-hop-address [spc] interface (including an ISDN PRI D channel).
[speed 56 | 64][broadcast]
[dial-string[:isdn-subaddress]]
Router(config-if)# dialer map protocol Defines one of several dialing destinations for an
next-hop-address [modem-script modem-regexp] asynchronous interface.
[system-script system-regexp]
dial-string[:isdn-subaddress] If a modem dialing chat script has not been assigned to the
line or a system login chat script must be specified, define
both a dialing destination and the chat scripts to use.
Repeat this task as many times as needed to ensure that all dialing destinations are reachable via some
next hop address and dialed number.
Command Purpose
Step 1 Router(config-if)# encapsulation ppp Configures an interface for PPP encapsulation.
Step 2 Router(config-if)# ppp authentication chap Enables CHAP.
[if-needed]
or
Router(config-if)# ppp authentication pap Enables PAP.
[if-needed]
Step 3 Router(config-if)# dialer map protocol Maps the protocol address to a host name.
next-hop-address name hostname [modem-script
modem-regexp] [system-script system-regexp]
[dial-string[:isdn-subaddress]]
If the dial string is not used, the interface will be able to receive calls from the host, but will not be able
to place calls to the host.
Repeat this task for each site from which the router will receive calls.
To assign an interface to a bridge group, use the following command in interface configuration mode:
Command Purpose
Router(config-if)# bridge-group bridge-group Assigns the specified interface to a bridge group.
For examples of bridging over DDR, see the “Transparent Bridging over DDR Examples” section later
in this chapter.
Command Purpose
Router(config-if)# dialer-group group-number Specifies the number of the dialer access group to which the
specific interface belongs.
To specify the amount of time for which a line will stay idle before it is disconnected, use the following
command in interface configuration mode:
Command Purpose
Router(config-if)# dialer idle-timeout seconds Sets line-idle time.
The dialer fast idle timer is activated if there is contention for a line. Contention occurs when a line is
in use, a packet for a different next hop address is received, and the busy line is required to send the
competing packet.
If the line has been idle for the configured amount of time, the current call is disconnected immediately
and the new call is placed. If the line has not yet been idle as long as the fast idle timeout period, the
packet is dropped because the destination is unreachable. (After the packet is dropped, the fast idle timer
remains active and the current call is disconnected as soon as it has been idle for as long as the fast idle
timeout). If, in the meantime, another packet is sent to the currently connected destination, and it is
classified as interesting, the fast-idle timer is restarted.
To specify the amount of time for which a line for which there is contention will stay idle before the line
is disconnected and the competing call is placed, use the following command in interface configuration
mode:
Command Purpose
Router(config-if)# dialer fast-idle seconds Sets idle time for high traffic lines.
To set the length of time for which the interface stays down before it is available to dial again after a line
is disconnected or fails, use the following command in interface configuration mode:
Command Purpose
Router(config-if)# dialer enable-timeout seconds Sets the interface downtime.
To set the length of time for which an interface waits for the telephone service (carrier), use the following
command in interface configuration mode:
Command Purpose
Router(config-if)# dialer wait-for-carrier-time Sets the length of for which time the interface waits for the
seconds carrier to come up when a call is placed.
For asynchronous interfaces, this command sets the total time to wait for a call to connect. This time is
set to allow for running the chat script.
Command Purpose
Router(config-if)# dialer priority number Specifies which dialer interfaces will be used first.
For example, you might give one interface in a dialer rotary group higher priority than another if it is
attached to a faster, more reliable modem. In this way, the higher-priority interface will be used as often
as possible.
The range of values for number is 0 through 255. Zero is the default value and lowest priority; 255 is the
highest priority. This command applies to outgoing calls only.
Command Purpose
Router(config-if)# dialer hold-queue packets Creates a dialer hold queue and specifies the number of packets to
be held in it.
To set the dialer load threshold for bandwidth on demand, use the following command in interface
configuration mode:
Command Purpose
Router(config-if)# dialer load-threshold load Configures the dialer rotary group to place additional calls to a
destination, as indicated by interface load.
Once multiple links are established, they are still governed by the load threshold. If the total load falls
below the threshold, an idle link will be torn down.
Command Purpose
Router(config-if)# no ip route-cache Disables IP fast switching over a DDR interface.
Router(config-if)# no ip route-cache distributed Disables distributed IP fast switching over a DDR interface.
This feature works in Cisco 7500 routers with a Versatile
Interface Processor (VIP) card.
Enables distributed IP fast switching over a DDR interface. This
Router(config-if)# ip route-cache distributed
feature works in Cisco 7500 routers with a VIP card.
Router(config-if)# no ipx route-cache Disables IPX fast switching over a DDR interface.
Router(config-if)# ipx route-cache Reenables IPX fast switching over a DDR interface.
To configure redial options, use the following commands beginning in global configuration mode:
Command Purpose
Step 1 Router(config)# interface dialer Enters interface configuration mode.
Step 2 Router(config-if)# dialer redial interval time Configures redial options on the router.
attempts number re-enable disable-time
Configuring the Interface for Sending Traffic over a Frame Relay Network
Access to Frame Relay networks is now available through dialup connections and leased lines. Dialup
connectivity allows Frame Relay networks to be extended to sites that do not generate enough traffic to
justify leased lines, and also allows a Frame Relay network to back up another network or point-to-point
line.
DDR over Frame Relay is supported for synchronous serial and ISDN interfaces and for rotary groups,
and is available for in-band, DTR, and ISDN dialers.
Frame Relay supports multiple permanent virtual circuit (PVC) connections over the same serial
interface or ISDN B channel, but only one physical interface can be used (dialed, connected, and active)
in a rotary group or with ISDN.
Dynamic multiple encapsulations support the following Frame Relay features:
• Frame Relay RTP Header Compression (RFC 1889)
• Frame Relay TCP/IP Header Compression
• Legacy DDR over Frame Relay
• Frame Relay Interface/Subinterface Backup
Dynamic multiple encapsulations support at least four Frame Relay PVCs on either dialer interfaces or
dialer subinterfaces.
Note Frame Relay encapsulations in the dynamic multiple encapsulations feature do not support IETF or
Cisco Encapsulation for IBM Systems Network Architecture (SNA). Frame Relay for SNA support is
not applicable.
Configuration Restrictions
Note Frame Relay subinterfaces work the same on dialup connections as they do on leased lines.
Configuration Overview
No new commands are required to support DDR over Frame Relay. In general, you configure Frame
Relay and configure DDR. In general, to configure an interface for DDR over Frame Relay, perform the
following tasks:
• Specify the interface.
• Specify the protocol identifiers for the interface.
For example, enter the IP address and mask, the IPX network number, and the AppleTalk cable range
and zone.
• Configure Frame Relay, as described in the chapter “Configuring Frame Relay” in the Cisco IOS
Wide-Area Networking Configuration Guide.
As a minimum, you must enable Frame Relay encapsulation and decide whether you need to do
static or dynamic address mapping. If you decide to do dynamic mapping, you need not enter a
command because Inverse ARP is enabled by default. If you decide to do static mapping, you must
enter Frame Relay mapping commands.
You can then configure various options as needed for your Frame Relay network topology.
• Configure DDR.
At a minimum, you must decide and configure the interface for outgoing calls only, incoming calls
only, or both outgoing and incoming calls.
You can also configure DDR for your routed protocols (as specified in the chapter “Preparing
to Configure DDR”) and for snapshot routing (as specified in the chapter “Configuring Snapshot
Routing” later in this publication). You can also customize DDR on your router or access server (as
described in the “Customizing the Interface Settings” section later in this chapter).
For examples of configuring various interfaces for DDR over Frame Relay, see the section “Frame Relay
Support Examples” later in this chapter.
Command Purpose
Step 1 Router(config-if)# encapsulation x25 [dte | dce] Configures the interface to use X.25 encapsulation.
[ietf]
Step 2 Router(config-if)# x25 address x.121-address Assigns an X.25 address to the interface.
Step 3 Router(config-if)# x25 map protocol address Sets up the LAN protocols-to-remote host address
[protocol2 address2 [...[protocol9 address9]]] mapping.
x.121-address [option]
The order of DDR and X.25 configuration tasks is not critical; you can configure DDR before or after
X.25, and you can even mix the DDR and X.25 commands.
For an example of configuring an interface for X.25 encapsulation and then completing the DDR
configuration, see the section “X.25 Support Configuration Example” later in this chapter.
Command Purpose
Router(config-if)# encapsulation lapb [dte | dce] Specifies LAPB encapsulation.
[multi | protocol]
For more information about the serial connections on which LAPB encapsulation is appropriate, see the
encapsulation lapb command in the chapter “X.25 and LAPB Commands” in the Cisco IOS Wide-Area
Networking Command Reference, Release 12.2.
For an example of configuring an interface for DDR over LAPB, see the section “X.25 Support
Configuration Example” later in this chapter.
Command Purpose
Router# show dialer [interface type number] Displays general diagnostics about the DDR interface.
Router# show dialer map Displays current dialer maps, next-hop protocol addresses,
user names, and the interfaces on which they are configured.
Router# show interfaces bri 0 Displays information about the ISDN interface.
Router# show ipx interface [type number] Displays status about the IPX interface.
Router# show ipx traffic Displays information about the IPX packets sent by the
router or access server, including watchdog counters.
Router# show appletalk traffic Displays information about the AppleTalk packets sent by
the router or access server.
Router# show vines traffic Displays information about the Banyan VINES packets sent
by the router or access server.
Router# show decnet traffic Displays information about the DECnet packets sent by the
router or access server.
Router# show xns traffic Displays information about the XNS packets sent by the
router or access server.
Router# clear dialer Clears the values of the general diagnostic statistics.
The second example also configures the serial interface 1 for DDR bridging. However, this example
includes an access-list command that specifies the Ethernet type codes that can cause calls to be placed
and a dialer list protocol list command that refers to the specified access list.
no ip routing
!
interface Serial1
no ip address
encapsulation ppp
dialer in-band
dialer enable-timeout 3
dialer map bridge name urk broadcast 8985
dialer hold-queue 10
dialer-group 1
ppp authentication chap
bridge-group 1
pulse-time 1
!
access-list 200 permit 0x0800 0xFFF8
!
dialer-list 1 protocol bridge list 200
bridge 1 protocol ieee
bridge 1 hello 10
With many modems, the pulse-time command must be used so that DTR is dropped for enough time to
allow the modem to disconnect.
S3366
The examples in the following sections show how to create this configuration.
interface ethernet 0
ip address 172.30.43.1 255.255.255.0
!
interface async 7
async mode interactive
async dynamic address
dialer rotary-group 1
!
interface async 8
async mode interactive
async dynamic address
dialer rotary-group 1
!
interface dialer 1
ip address 172.30.45.2 255.255.255.0
no ip split-horizon
encapsulation ppp
ppp authentication chap
dialer in-band
dialer map ip 172.30.45.2 name spoke1 3333
dialer map ip 172.30.45.2 name spoke2 4444
dialer map ip 172.30.45.2 name spoke3 5555
dialer map ip 172.30.45.255 name spoke1 3333
dialer map ip 172.30.45.255 name spoke2 4444
dialer map ip 172.30.45.255 name spoke3 5555
dialer-group 1
!
ip route 172.30.44.0 255.255.255.0 172.30.45.2
ip route 172.30.44.0 255.255.255.0 172.30.45.3
ip route 172.30.44.0 255.255.255.0 172.30.45.4
dialer-list 1 protocol ip list 101
access-list 101 deny igrp 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255
access-list 101 permit ip 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255
chat-script generic ABORT BUSY ABORT NO ## AT OK ATDT\T TIMEOUT 30 CONNECT
!
username spoke1 password <spoke1-passwd>
username spoke2 password <spoke2-passwd>
username spoke3 password <spoke3-passwd>
username spoke1 autocommand ppp 172.30.45.2
username spoke2 autocommand ppp 172.30.45.3
username spoke3 autocommand ppp 172.30.45.4
!
router igrp 109
network 172.30.0.0
redistribute static
!
line 7
login tacacs
modem InOut
speed 38400
flowcontrol hardware
modem chat-script generic
The redistribute static command can be used to advertise static route information for DDR applications.
Without this command, static routes to the hosts or network that the router can access with DDR will not
be advertised to other routers with which the router is communicating. This behavior can block
communication because some routes will not be known. See the redistribute static ip command,
described in the chapter “IP Routing Protocol-Independent Commands” in the Cisco IOS IP Command
Reference, Volume 2 of 3: Routing Protocols, Release 12.2.
Local router
5555555
Remote
Router A
6666666
56951
Remote
Router B
If the interface on your router is configured to call a single site with phone number 5555555, it will send
the packet to that site, assuming that the next hop address 10.1.1.1 indicates the same remote device as
phone number 5555555. The dialer string command is used to specify the string (telephone number) to
be called.
interface serial 1
dialer in-band
dialer string 5555555
If the interface is configured to dial multiple sites, the interface or dialer rotary group must be configured
so that the correct phone number, 5555555, is mapped to the address 10.1.1.1. If this mapping is not
configured, the interface or dialer rotary group does not know what phone number to call to deliver the
packet to its correct destination, which is the address 10.1.1.1. In this way, a packet with a destination
of 10.2.2.2 will not be sent to 5555555. The dialer map command is used to map next hop addresses to
phone numbers.
interface serial 1
dialer in-band
dialer map ip 10.1.1.1 5555555
dialer map ip 10.2.2.2 6666666
As in the “DDR Configuration in an IP Environment Example” section, a pulse time is assigned and a
dialer access group specified.
The first dialer map command specifies that the number 555-8899 is to be dialed for IP packets with a
next-hop-address value of 172.18.126.10. The second dialer map command then specifies that the
number 5555555 will be called when an IP packet with a next-hop-address value of 172.18.126.15 is
detected.
! Serial interfaces 1 and 2 are placed in dialer rotary group 1. All the
! interface configuration commands (the encapsulation and dialer map commands
! shown earlier in this example) that applied to interface dialer 1 also apply
! to these interfaces.
interface serial 1
dialer rotary-group 1
interface serial 2
dialer rotary-group 1
172.18.1.1 172.25.1.1
Router
54733
Dialer rotary group 1 Dialer rotary group 2
Remote Configuration
The following commands are executed on the remote side of the connection. This configuration provides
authentication by identifying a password that must be provided on each end of the connection.
username local password secret1
username remote password secret2
!
interface ethernet 0
ip address 172.30.44.1 255.255.255.0
!
interface async 7
ip address 172.30.45.2 255.255.255.0
async mode dedicated
async default ip address 172.30.45.1
encapsulation ppp
dialer in-band
dialer string 1234
dialer-group 1
!
ip route 172.30.43.0 255.255.255.0 async 7
ip default-network 172.30.0.0
chat-script generic ABORT BUSY ABORT NO ## AT OK ATDT\T TIMEOUT 30 CONNECT
dialer-list 1 protocol ip permit
!
line 7
no exec
modem InOut
speed 38400
flowcontrol hardware
modem chat-script generic
Local Configuration
The following commands are executed on the local side of the connection. As with the remote side
configuration, this configuration provides authentication by identifying a password for each end of the
connection.
username remote password secret1
username local password secret2
!
interface ethernet 0
ip address 172.30.43.1 255.255.255.0
!
interface async 7
async mode dedicated
async default ip address 172.30.45.2
dialer rotary-group 1
!
interface async 8
async mode dedicated
async default ip address 172.30.45.2
dialer rotary-group 1
!
interface dialer 1
ip address 172.30.45.2 255.255.255.0
encapsulation ppp
ppp authentication chap
dialer in-band
dialer map ip 172.30.45.2 name remote 4321
dialer load-threshold 80
!
Frame Relay Access with ISDN Dialing and DDR Dynamic Maps
The following example shows a BRI interface configured for Frame Relay and for IP, Internet Protocol
Exchange (IPX), and AppleTalk routing. No static maps are defined because this setup relies on Frame
Relay Local Management Interface (LMI) signaling and Inverse ARP to determine the network
addresses-to-DLCI mappings dynamically. (Because Frame Relay Inverse ARP is enabled by default, no
command is required.)
interface BRI0
ip address 10.1.1.1 255.255.255.0
ipx network 100
appletalk cable-range 100-100 100.1
appletalk zone ISDN
no appletalk send-rtmps
encapsulation frame-relay IETF
dialer map ip 10.1.1.2 broadcast 4155551212
dialer map apple 100.2 broadcast 4155551212
dialer map ipx 100.0000.0c05.33ed broadcast 4085551234
dialer-group 1
!
This chapter describes how to configure the Cisco IOS software for the Dialer Profiles feature
implementation of dial-on-demand routing (DDR). It includes the following main sections:
• Dialer Profiles Overview
• How to Configure Dialer Profiles
• Monitoring and Maintaining Dialer Profile Connections
• Configuration Examples Dialer Profiles
For information about preparations for configuring dialer profiles, see the chapter “Preparing to
Configure DDR” in this publication.
The Dialer Profiles feature is contrasted with legacy DDR. For information about legacy DDR, see the
other chapters in the “Dial-on-Demand Routing” part of this publication.
For information about dial backup using dialer profiles, see the chapter “Configuring Dial Backup with
Dialer Profiles” in this publication.
To identify the hardware platform or software image information associated with a feature, use the
Feature Navigator on Cisco.com to search for information about the feature or refer to the software
release notes for a specific release. For more information, see the “Finding Additional Feature Support
Information” section on page lxxvii in the “Using Cisco IOS Software for Release 12.4” chapter.
For a complete description of the commands in this chapter, refer to the Cisco IOS Dial Technologies
Command Reference. To locate documentation of other commands that appear in this chapter, use the
command reference master index or search online.
Note Dialer profiles support most routed protocols; however, International Organization for Standardization
Connectionless Network Service (ISO CLNS) is not supported.
renegotiated. Because PPP client software often does not accept renegotiation, this workaround is not
acceptable. Therefore, the D interface configuration takes precedence over the dialer profile interface
configuration. This is the only case where the configuration of the dialer profile is overruled.
Dialer Interface
A dialer interface configuration includes all settings needed to reach a specific destination subnetwork
(and any networks reached through it). Multiple dial strings can be specified for the same dialer
interface, each dial string being associated with a different dialer map class.
Dialer Pool
Each dialer interface uses a dialer pool, a pool of physical interfaces ordered on the basis of the priority
assigned to each physical interface. A physical interface can belong to multiple dialer pools, contention
being resolved by priority. ISDN BRI and PRI interfaces can set a limit on the minimum and maximum
number of B channels reserved by any dialer pools. A channel reserved by a dialer pool remains idle until
traffic is directed to the pool.
When dialer profiles are used to configure DDR, a physical interface has no configuration settings except
encapsulation and the dialer pools with which the interface belongs.
Note The preceding paragraph has one exception: commands that apply before authentication is complete
must be configured on the physical (or BRI or PRI) interface and not on the dialer profile. Dialer profiles
do not copy PPP authentication commands (or LCP commands) to the physical interface.
Figure 65 shows a typical application of dialer profiles. Router A has dialer interface 1 for DDR with
subnetwork 10.1.1.0, and dialer interface 2 for DDR with subnetwork 10.2.2.0. The IP address for dialer
interface 1 is its address as a node in network 10.1.1.0; at the same time, that IP address serves as the IP
address of the physical interfaces used by the dialer interface 1. Similarly, the IP address for dialer
interface 2 is its address as a node in network 10.2.2.0.
Router B is on Router C is on
subnetwork 10.1.1.0. subnetwork 10.2.2.0.
Networks 3, 4, and 5 Networks 6, 7, and 8
are reached through it. are reached through it.
Dialer interface 1 for subnetwork 10.1.1.0
and all networks reached through it.
56952
Dialer interface 2 for subnetwork 10.2.2.0
and all networks reached through it.
A dialer interface uses only one dialer pool. A physical interface, however, can be a member of one or
many dialer pools, and a dialer pool can have several physical interfaces as members.
Figure 66 illustrates the relations among the concepts of dialer interface, dialer pool, and physical
interfaces. Dialer interface 0 uses dialer pool 2. Physical interface BRI 1 belongs to dialer pool 2 and
has a specific priority in the pool. Physical interface BRI 2 also belongs to dialer pool 2. Because
contention is resolved on the basis of priority levels of the physical interfaces in the pool, BRI 1 and
BRI 2 must be assigned different priorities in the pool. Perhaps BRI 1 is assigned priority 50 and BRI 2
is assigned priority 100 in dialer pool 2 (a priority of 100 is higher than a priority of 50). BRI 2 has a
higher priority in the pool, and its calls will be placed first.
Figure 66 Relations Among Dialer Interfaces, Dialer Pools, and Physical Interfaces
Dialer pool 2
Dialer pool 1 Dialer pool 3
Command Purpose
Step 1 Router(config)# interface dialer number Creates a dialer interface and begins interface configuration
mode.
Step 2 Router(config-if)# ip address address mask Specifies the IP address and mask of the dialer interface as a
node in the destination network to be called.
Step 3 Router(config-if)# encapsulation type Specifies the encapsulation type.
Step 4 Router(config-if)# dialer string dial-string Specifies the remote destination to call and the map class
class class-name that defines characteristics for calls to this destination.
Step 5 Router(config-if)# dialer pool number Specifies the dialing pool to use for calls to this destination.
Step 6 Router(config-if)# dialer-group group-number Assigns the dialer interface to a dialer group.
Step 7 Router(config-if)# dialer-list dialer-group Specifies an access list by list number or by protocol and list
protocol protocol-name {permit | deny | list number to define the “interesting” packets that can trigger a
access-list-number}
call.
Note Per-user fancy queueing and traffic shaping work with both process switching and fast switching in the
new dialer profile model. However, Frame Relay Traffic Shaping (FRTS) is not supported on the new
dialer profile model.
See the chapter “Policing and Shaping Overview” in the Cisco IOS Quality of Service Solutions
Configuration Guide for more information about FRTS.
Command Purpose
Step 1 Router(config)# map-class dialer classname Specifies a map class and begins map-class
configuration mode.
Step 2 Router(config-map-class)# dialer fast-idle seconds Specifies the fast idle timer value.
Step 3 Router(config-map-class)# dialer idle-timeout seconds Specifies the duration of idle time in seconds after
[inbound | either] which a line will be disconnected.
By default, outbound traffic will reset the dialer
idle timer. Adding the either keyword causes both
inbound and outbound traffic to reset the timer;
adding the inbound keyword causes only inbound
traffic to reset the timer.
Step 4 Router(config-map-class)# dialer wait-for-carrier-time Specifies the length of time to wait for a carrier
seconds when dialing out to the dial string associated with
the map class.
Step 5 Router(config-map-class)# dialer isdn [speed speed] For ISDN only, specifies the bit rate used on the B
[spc] channel associated with a specified map class or
specifies that an ISDN semipermanent connection
is to be used for calls associated with this map.
Note The dialer idle-timeout interface configuration command specifies the duration of time before an idle
connection is disconnected. Previously, both inbound and outbound traffic would reset the dialer idle
timer; now you can specify that only inbound traffic will reset the dialer idle timer.
Command Purpose
Step 1 Router(config)# interface type number Specifies the physical interface and begins
interface configuration mode.
Step 2 Router(config-if)# encapsulation ppp Enables PPP encapsulation.
Step 3 Router(config-if)# ppp authentication chap Specifies PPP Challenge Handshake
Authentication Protocol (CHAP) authentication, if
you also want to receive calls on this interface.
Step 4 dialer pool-member number [priority priority] Places the interface in a dialing pool and,
optionally, assigns the interface a priority.
dialer pool-member number [priority priority] [min-link For ISDN interfaces, you may also specify the
minimum] [max-link maximum] minimum number of channels reserved and
maximum number of channels used on this
interface.
The minimum value applies to outgoing calls only,
and specifies the number of channels or interfaces
reserved for dial out in that dialer pool; the
channels remain idle when no calls are active. The
maximum value applies to both incoming and
outgoing calls and sets the total number of
connections for a particular dialer pool member.
Step 5 Router(config-if)# dialer pool-member number [priority (Optional) Repeat Step 4 if you want to put the
priority] interface in additional dialing pools.
or
Router(config-if)# dialer pool-member number [priority
priority] [min-link minimum] [max-link maximum]
Repeat this procedure for additional physical interfaces that you want to use with dialer profiles.
Command Purpose
Router(config)# vines access-list access-list-number Specifies a VINES standard access list.
{permit | deny} source source-mask1
or
Router(config)# vines access-list access-list-number Specifies a VINES extended access list.
{permit | deny} source source-mask [destination]
[destination-mask]
After you specify VINES standard or extended access lists, configure the dialer interface for dialer
profiles, defining the dialer list to be used. Use the dialer-list protocol command to define permit or
deny conditions for the entire protocol; for a finer granularity, use the dialer-list protocol command with
the list keyword. See the section “Configuring a Dialer Interface” earlier in this chapter for more
information about defining dialer lists.
Note The Banyan VINES neighbor command is not supported for Link Access Procedure, Balanced (LAPB)
and X.25 encapsulations.
Command Purpose
Router(config)# access-list access-list-number {permit | Specifies a DECnet standard access list.
deny} source source-mask1
or
Router(config)# access-list access-list-number {permit | Specifies a DECnet extended access list.
deny} source source-mask [destination] [destination-mask]
After you specify DECnet standard or extended access lists, configure the dialer interface for dialer
profiles, defining the dialer list to be used. Use the dialer-list protocol command to define permit or
deny conditions for the entire protocol; for a finer granularity, use the dialer-list protocol command with
the list keyword. See the section “Configuring a Dialer Interface” earlier in this chapter for more
information about defining dialer lists.
You classify DECnet control packets, including hello packets and routing updates, using one or more of
the following commands: dialer-list protocol decnet_router-L1 permit, dialer-list protocol
decnet_router-L2 permit, and dialer-list protocol decnet_node permit.
Command Purpose
Router(config)# access-list access-list-number Specifies an IP standard access list.
{deny | permit} source [source-mask]
or
Router(config)# access-list access-list-number Specifies an IP extended access list.
{deny | permit} protocol source source-mask
destination destination-mask [operator operand]
You can now also use simplified IP access lists that use the any keyword instead of the numeric forms
of source and destination addresses and masks. Other forms of IP access lists are also available. For more
information, see the chapter “IP Services Commands” in the Cisco IOS IP Command Reference.
To use dynamic routing where multiple remote sites communicate with each other through a central site,
you might need to disable the IP split horizon feature. Split horizon applies to Routing Information
Protocol (RIP), Interior Gateway Routing Protocol (IGRP), and Enhanced IGRP. Depending on which
routing protocol is configured, see the chapter “Configuring RIP,” “Configuring IGRP,” or “Configuring
Enhanced IGRP” in this publication. Refer to the chapter “Configuring IP Routing Protocols” in the
Cisco IOS IP Configuration Guide for more information.
To modify the dialer profiles dialer interface configuration for Novell IPX, use the following commands
in interface configuration mode:
Command Purpose
Step 1 Router(config-if)# no ipx route-cache Disables fast switching for IPX.
Step 2 Router(config-if)# ipx watchdog-spoof Enables IPX watchdog spoofing.
or
Router(config-if)# ipx spx-spoof Enables Sequenced Packet Exchange (SPX)
keepalive spoofing.
Step 3 Router(config-if)# ipx spx-idle-time delay-in-seconds Sets the idle time after which SPX keepalive
spoofing begins.
Command Purpose
Router(config)# access-list access-list-number {deny | permit} Specifies a standard XNS access list.
source-network[.source-address [source-address-mask]]
[destination-network[.destination-address
[destination-address-mask]]]
or
Router(config)# access-list access-list-number {deny | permit} Specifies an extended XNS access list.
protocol [source-network[.source-host
[source-network-mask.]source-host-mask] source-socket
[destination-network [.destination-host
[destination-network-mask.destination-host-mask]
destination-socket[/pep]]]
After you specify an XNS access list, configure the dialer interface for dialer profiles, defining the dialer
list to be used. Use the dialer-list protocol command to define permit or deny conditions for the entire
protocol; for a finer granularity, use the dialer-list protocol command with the list keyword. See the
section “Configuring a Dialer Interface” earlier in this chapter for more information about defining
dialer lists.
Command Purpose
Router(config)# no ip routing Disables IP routing.
If you choose not to bridge another protocol, use the relevant command to enable routing of that protocol.
For more information about tasks and commands, refer to the relevant chapter in the appropriate network
protocol configuration guide, such as the Cisco IOS AppleTalk and Novell IPX Configuration Guide.
Command Purpose
Router(config)# bridge bridge-group protocol {ieee | Defines the type of spanning-tree protocol and identifies a
dec} bridge group.
The bridge-group number is used when you configure the interface and assign it to a bridge group.
Packets are bridged only among members of the same bridge group.
Note Spanning-tree bridge protocol data units (BPDUs) are always treated as uninteresting.
To identify all transparent bridge packets as interesting, use the following command in global
configuration mode:
Command Purpose
Router(config)# dialer-list dialer-group protocol Defines a dialer list that treats all transparent bridge
bridge permit packets as interesting.
To control access by Ethernet type codes, use the following commands in global configuration mode:
Command Purpose
Step 1 Router(config)# access-list access-list-number Identifies interesting packets by Ethernet type codes
{permit | deny} type-code [mask] (access list numbers must be in the range 200 to 299).
Step 2 Router(config)# dialer-list dialer-group protocol Defines a dialer list for the specified access list.
bridge list access-list-number
For a table of some common Ethernet type codes, see the “Ethernet Type Codes” appendix in the
Cisco IOS Bridging and IBM Networking Command Reference.
To specify the interface and enter interface configuration mode, use the following command in global
configuration mode:
Command Purpose
Router(config)# interface type number Specifies the serial or ISDN interface and enters
interface configuration mode.
Command Purpose
Router(config-if)# dialer string dial-string Configures the dial string to call.
Note You can define only one dialer bridge map for the interface. If you enter a different bridge map, the
previous one is replaced immediately.
Packets are bridged only among interfaces that belong to the same bridge group. To assign an interface
to a bridge group, use the following command in interface configuration mode:
Command Purpose
Router(config-if)# bridge-group bridge-group Assigns the specified interface to a bridge group.
Command Purpose
Router# show dialer interface Displays information for the interfaces configured for DDR dialer
profiles.
Router# show interfaces type number Displays statistics for configured interfaces. The output varies,
depending on the network for which an interface has been
configured.
Router# show ipx interface [type number] Displays status about the IPX interface.
Router# show ipx traffic Displays information about the IPX packets sent by the router or
access server, including watchdog counters.
Router# show appletalk traffic Displays information about the AppleTalk packets sent by the router
or access server.
Router# show vines traffic Displays information about the Banyan VINES packets sent by the
router or access server.
Router# show decnet traffic Displays information about the DECnet packets sent by the router
or access server.
Router# show xns traffic Displays information about the XNS packets sent by the router or
access server.
Router# clear dialer Clears the values of the general diagnostic statistics.
Dialer Profile for Central Site with Multiple Remote Sites Example
The following example shows a central site that can place or receive calls from three remote sites over
four ISDN BRI lines. Each remote site is on a different IP subnet and has different bandwidth
requirements; therefore, three dialer interfaces and three dialer pools are defined.
! This is a dialer profile for reaching remote subnetwork 10.1.1.1.
interface Dialer1
ip address 10.1.1.1 255.255.255.0
encapsulation ppp
dialer remote-name Smalluser
dialer string 4540
dialer pool 3
dialer-group 1
encapsulation ppp
dialer remote-name Poweruser
dialer string 4156884540 class Eng
dialer hold-queue 10
dialer load-threshold 80
dialer pool 2
dialer-group 2
! This map class ensures that these calls use an ISDN speed of 56 kbps.
map-class dialer Eng
isdn speed 56
interface BRI0
encapsulation PPP
! BRI 0 has a higher priority than BRI 1 in dialer pool 1.
dialer pool-member 1 priority 100
ppp authentication chap
interface BRI1
encapsulation ppp
dialer pool-member 1 priority 50
dialer pool-member 2 priority 50
! BRI 1 has a reserved channel in dialer pool 3; the channel remains inactive
! until BRI 1 uses it to place calls.
dialer pool-member 3 min-link 1
ppp authentication chap
interface BRI2
encapsulation ppp
! BRI 2 has a higher priority than BRI 1 in dialer pool 2.
dialer pool-member 2 priority 100
ppp authentication chap
interface BRI3
encapsulation ppp
! BRI 3 has the highest priority in dialer pool 2.
dialer pool-member 2 priority 150
ppp authentication chap
Dialer Profile for ISDN BRI Backing Up Two Leased Lines Example
The following example shows the configuration of a site that backs up two leased lines using one BRI.
Two dialer interfaces are defined. Each serial (leased line) interface is configured to use one of the dialer
interfaces as a backup. Both of the dialer interfaces use BRI 0, and BRI 0 is a member of the two dialer
pools. Thus, BRI 0 can back up two different serial interfaces and can make calls to two different sites.
interface dialer0
ip unnumbered loopback0
encapsulation ppp
dialer remote-name Remote0
dialer pool 1
dialer string 5551212
dialer-group 1
interface dialer1
ip unnumbered loopback0
encapsulation ppp
dialer remote-name Remote1
dialer pool 2
dialer string 5551234
dialer-group 1
interface bri 0
encapsulation PPP
dialer pool-member 1
dialer pool-member 2
ppp authentication chap
interface serial 0
ip unnumbered loopback0
backup interface dialer0
backup delay 5 10
interface serial 1
ip unnumbered loopback0
backup interface dialer1
backup delay 5 10
ip domain-name cisco.com
ip name-server 192.168.30.32
ip name-server 172.16.2.132
isdn switch-type basic-5ess
!
interface Virtual-Template 1
encapsulation ppp
ppp authentication chap
!
interface Ethernet0
ip address 172.21.17.11 255.255.255.0
no ip mroute-cache
no cdp enable
!
interface Serial0
ip address 10.2.2.1 255.0.0.0
shutdown
clockrate 56000
ppp authentication chap
!
interface Serial1
ip address 10.0.0.1 255.0.0.0
shutdown
!
interface BRI0
description PBX 60035
no ip address
encapsulation x25
no ip mroute-cache
no keepalive
dialer pool-member 1
dialer pool-member 2
!
interface Dialer0
ip address 10.1.1.1 255.0.0.0
encapsulation lapb dce multi
no ip route-cache
no ip mroute-cache
no keepalive
dialer remote-name RU1
dialer idle-timeout 300
dialer string 60036
dialer caller 60036
dialer pool 1
dialer-group 1
no fair-queue
!
interface Dialer1
ip address 10.1.1.1 255.0.0.0
encapsulation ppp
no ip route-cache
no ip mroute-cache
dialer remote-name RU2
dialer string 60043
dialer caller 60043
dialer pool 2
dialer-group 1
no fair-queue
no cdp enable
ppp authentication chap
!
interface Dialer2
ip address 10.1.1.1 255.0.0.0
encapsulation hdlc
At the end of the Dialer0 display, the show interfaces command is executed on each physical interface
bound to it.
In the next example, the physical interface is the B1 channel of the BRI0 link. This example also
illustrates that the output under the B channel keeps all hardware counts that are not displayed under any
logical or virtual access interface. The line in the report that states “Interface is bound to Dialer0
(Encapsulation LAPB)” indicates that this B interface is bound to the dialer 0 interface and that the
encapsulation running over this connection is LAPB, not PPP, which is the encapsulation configured on
the D interface and inherited by the B channel.
Router# show interfaces bri0:1
Any protocol configuration and states should be displayed from the dialer 0 interface.
Feature History
Release Modification
12.2(8)T This feature was introduced.
This document describes the Dialer Map VRF-Aware for an MPLS VPN feature in Cisco IOS
Release 12.2(8)T and includes the following sections:
• Feature Overview, page 671
• Supported Platforms, page 673
• Supported Standards, MIBs, and RFCs, page 674
• Prerequisites, page 674
• Configuration Tasks, page 674
• Configuration Example, page 676
• Command Reference, page 682
Feature Overview
The dialer software in Cisco IOS prior to Release 12.2(8)T had no way to dial two different destinations
with the same IP address. More specifically, in networks where a network access server (NAS) supports
dialing clients with overlapping addresses, dial-out attempts would fail. The Dialer Map VRF-Aware for
an MPLS VPN feature solves this problem.
A VRF—virtual routing and forwarding instance—is a per-Virtual Private Network (VPN) routing
information repository that defines the VPN membership of a customer site attached to the NAS. A VRF
consists of an IP routing table, a derived Cisco Express Forwarding (CEF) table, a set of interfaces that
use the forwarding table, and a set of rules and routing protocol parameters that control the information
that is included in the routing table. A separate set of routing and CEF tables is maintained for each VPN
customer.
The Multiprotocol Label Switching (MPLS) distribution protocol is a high-performance packet
forwarding technology that integrates the performance and traffic management capabilities of data link
layer switching with the scalability, flexibility, and performance of network-layer routing.
The Cisco IOS dialer software is “VRF-aware for an MPLS VPN,” which means that it can distinguish
between two destinations with the same IP address using information stored in the VRF. This capability
is provided to the dialer software by two existing Cisco IOS commands, dialer map and ip route, which
have been enhanced to include VRF information.
In previous Cisco IOS releases, the dialer software obtained the telephone number for dial-out based on
the destination IP address configured in the dialer map command. Now, the enhanced dialer map
command supplies the name of the VRF so that the telephone number to be dialed is based on the VRF
name and the destination IP address. The VRF is identified based on the incoming interface of the packet,
and is used with the destination IP address defined in the dialer map command to determine the
telephone number to be dialed.
The ip route configuration command also includes the VRF information. When a packet arrives in an
incoming interface that belongs to a particular VRF, only those ip route commands that correspond to
that particular VRF are used to determine the destination interface.
Benefits
The Dialer Map VRF-Aware for an MPLS VPN feature allows the dialer software to dial out in an
MPLS-based VPN. The MPLS VPN model simplifies network routing. For example, rather than needing
to manage routing over a complex virtual network backbone composed of many virtual circuits, an
MPLS VPN user can employ the backbone of the service provider as the default route in communicating
with all other VPN sites.
This default route capability allows several sites to transparently interconnect through the service
provider network. One service provider network can support several different IP VPNs, each of which
appears to its users as a separate, private network. Within a VPN, each site can send IP packets to any
other site in the same VPN, because each VPN is associated with one or more VRFs. The VRF is a key
element in the VPN technology, because it maintains the routing information that defines a customer
VPN site.
For additional benefits and information about MPLS, VPNs, and VRF, refer to the documents listed in
the “Related Documents” section.
Related Documents
Additional information about configuring networks that can take advantage of the Dialer Map
VRF-Aware for an MPLS VPN feature can be found in the following Cisco IOS documentation:
• Cisco IOS Dial Technologies Command Reference, Release 12.2.
• Cisco IOS Dial Technologies Configuration Guide, Release 12.2. Refer to the chapter “Configuring
Virtual Profiles” in the part “Virtual Templates, Profiles, and Networks.”
• Cisco IOS Switching Services Command Reference, Release 12.2.
• Cisco IOS Switching Services Configuration Guide, Release 12.2. Refer to the chapters
“Multiprotocol Label Switching Overview” and “Configuring Multiprotocol Label Switching” in
the part “Multiprotocol Label Switching.”
Supported Platforms
The Dialer Map VRF-Aware for an MPLS VPN feature is supported on the following Cisco router and
access server platforms:
• Cisco 1600 series
• Cisco 1720
• Cisco 1721
• Cisco 1750
• Cisco 1751
• Cisco 3600 series
• Cisco 3631
• Cisco 3725
• Cisco 3745
• Cisco 7200 series
• Cisco 7500 series
• Cisco 802
• Cisco 820
• Cisco 828
• Cisco uBR7200
MIBs
None
To obtain lists of supported MIBs by platform and Cisco IOS release, and to download MIB modules,
go to the Cisco MIB website on Cisco.com at the following URL:
http://www.cisco.com/public/sw-center/netmgmt/cmtk/mibs.shtml
RFCs
None
Prerequisites
Before beginning the tasks described in this document, you need to understand how to configure the
following network features:
• Virtual profiles with two-way AAA authentication
• MPLS VPNs
Refer to the documents listed in the “Related Documents” section for information about configuring
these features.
Configuration Tasks
See the following sections for the configuration tasks for this feature. Each task in the list is identified
as either required or optional.
• Configuring Dialer Map VRF-Aware for an MPLS VPN (required)
• Verifying Dialer Map VRF-Aware for an MPLS VPN (optional)
Command Purpose
Step 1 Router(config)# interface dialer number Enters configuration mode and begins dialer configuration.
Step 2 Router(config-if)# dialer map ip Maps a VRF and next hop address combination to a dial string
protocol-next-hop-address vrf vrf-name (telephone number).
name host-name dial-string
Command Purpose
Step 3 Router(config-if)# exit Exit to global configuration mode.
Step 4 Router(config)# ip route vrf vrf-name Configures a VRF and next hop address combination that points
ip-address mask interface-type to the interface where the dialer software should make the
interface-number
connection.
These commands are only part of the required configuration and show how to map a VRF and next hop
address combination to a dial string. Refer to the documents listed in the section “Related Documents”
and the example in the “Configuration Example” section, for details on where to include these
commands in the network configuration.
To verify correct operation of the Dialer Map VRF-Aware for an MPLS VPN feature, on the customer
edge NAS, use the ping command in EXEC mode to place a call to peer. The expected result is that the
NAS successfully dials out to peer1. If the call fails, use the show adjacency EXEC command to check
CEF adjacency table information.
Troubleshooting Tips
If you encounter problems with the Dialer Map VRF-Aware for an MPLS VPN feature, use the following
debug privileged EXEC commands on the NAS to help you determine where the problem lies:
• debug ppp authentication
• debug ppp negotiation
• debug aaa authentication
• debug aaa authorization
• debug radius
• debug dialer
Command Purpose
Router# show adjacency Displays CEF adjacency table information.
Router# show ip route Displays all static IP routes, or those installed using the AAA route download function.
Router# show users Displays information about the active lines on the router.
Configuration Example
This section provides a configuration example of the Dialer Map VRF-Aware for an MPLS VPN feature
on the simple network topology shown in Figure 67.
CE PE Peer
68859
AAA server
Note The network addresses and telephone numbers used in the following configuration are examples only
and will not work if tried in an actual network configuration.
duplex auto
speed auto
!
interface FastEthernet0/1
no ip address
no ip mroute-cache
shutdown
duplex auto
speed auto
!
interface Ethernet1/0
ip address 10.0.58.11 255.255.255.0
no ip mroute-cache
half-duplex
!
interface Ethernet1/1
ip address 50.0.0.2 255.0.0.0
no ip mroute-cache
half-duplex
!
interface Ethernet1/2
no ip address
no ip mroute-cache
shutdown
half-duplex
!
interface Ethernet1/3
no ip address
no ip mroute-cache
shutdown
half-duplex
!
interface Serial2/0
no ip address
no ip mroute-cache
shutdown
no fair-queue
serial restart-delay 0
!
interface Serial2/1
no ip address
no ip mroute-cache
shutdown
serial restart-delay 0
!
interface Serial2/2
no ip address
no ip mroute-cache
shutdown
serial restart-delay 0
!
interface Serial2/3
no ip address
no ip mroute-cache
shutdown
serial restart-delay 0
!
interface Serial3/0
no ip address
no ip mroute-cache
shutdown
!
interface Serial3/1
no ip address
no ip mroute-cache
shutdown
!
interface Serial3/2
no ip address
no ip mroute-cache
shutdown
!
interface Serial3/3
no ip address
no ip mroute-cache
shutdown
!
interface Serial3/4
no ip address
no ip mroute-cache
shutdown
!
interface Serial3/5
no ip address
no ip mroute-cache
shutdown
!
interface Serial3/6
no ip address
no ip mroute-cache
shutdown
!
interface Serial3/7
no ip address
no ip mroute-cache
shutdown
!
interface FastEthernet4/0
no ip address
no ip mroute-cache
shutdown
duplex auto
speed auto
!
ip classless
ip route 0.0.0.0 0.0.0.0 10.0.58.1
ip route 60.0.0.0 255.0.0.0 50.0.0.1
no ip http server
!
!
snmp-server manager
banner motd ^C AV-8B OAKTREE^C
alias exec r sh run
!
line con 0
exec-timeout 0 0
line aux 0
login
line vty 0 4
no login
!
end
interface Loopback0
ip vrf forwarding yellow
ip address 70.0.0.1 255.0.0.0
!
interface FastEthernet1/0
no ip address
shutdown
duplex half
!
interface Ethernet2/0
ip address 10.0.58.3 255.255.255.0
duplex full
!
interface Ethernet2/1
ip vrf forwarding yellow
ip address 50.0.0.1 255.0.0.0
duplex half
!
interface Ethernet2/2
no ip address
shutdown
duplex half
!
interface Ethernet2/3
no ip address
shutdown
duplex half
!
interface Serial3/0:23
description phone# 555-3123
no ip address
encapsulation ppp
dialer rotary-group 0
dialer-group 1
isdn switch-type primary-5ess
ppp authentication chap
!
interface Serial4/0
no ip address
shutdown
no fair-queue
!
interface Serial4/1
no ip address
shutdown
!
interface Serial4/2
no ip address
shutdown
!
interface Serial4/3
no ip address
shutdown
!
interface Dialer0
ip address negotiated
encapsulation ppp
dialer in-band
dialer map ip 60.0.0.12 vrf yellow name rubbertree02 5552171
dialer map ip 60.0.0.2 5552172
dialer-group 1
ppp authentication chap
!
ip classless
ip route 0.0.0.0 0.0.0.0 10.0.58.1
ip route 60.0.0.2 255.255.255.255 Dialer0
ip route vrf yellow 60.0.0.0 255.0.0.0 Dialer0 permanent
no ip http server
ip pim bidir-enable
!
ip director cache time 60
dialer-list 1 protocol ip permit
!
!
!
radius-server host 172.19.192.89 auth-port 1645 acct-port 1646 key rad123
radius-server retransmit 3
call rsvp-sync
!
no mgcp timer receive-rtcp
!
mgcp profile default
!
dial-peer cor custom
!
!
!
gatekeeper
shutdown
!
banner motd ^C F/A-18 PINETREE ^C
!
line con 0
exec-timeout 0 0
login authentication con-log
line aux 0
line vty 5 15
!
!
end
Peer Router
!
hostname rubbertree02
!
logging buffered 32000 debugging
enable secret 5 $1$RCKC$scgtdlaDzjSyUVAi7KK5Q.
enable password Windy
!
username pinetree02 password 0 Hello
!
!
!
ip subnet-zero
no ip domain-lookup
!
isdn switch-type basic-5ess
!
!
!
interface Ethernet0
ip address 10.0.58.9 255.255.255.0
no ip route-cache
!
interface Serial0
no ip address
no ip route-cache
shutdown
!
interface BRI0
description phone# 555-2171
ip address 60.0.0.12 255.0.0.0
encapsulation ppp
no ip route-cache
dialer map ip 60.0.0.11 5553123
dialer map ip 60.0.0.2 5552172
dialer-group 1
isdn switch-type basic-5ess
isdn fast-rollover-delay 45
!
ip default-gateway 10.0.58.1
ip classless
ip route 0.0.0.0 0.0.0.0 10.0.58.1
ip route 50.0.0.0 255.0.0.0 70.0.0.1
no ip http server
!
dialer-list 1 protocol ip permit
no cdp run
banner motd ^C F-4B RUBBERTREE^C
!
line con 0
exec-timeout 0 0
line vty 0 4
password Windy
login
!
end
Command Reference
The following modified commands are pertinent to this feature. To see the command pages for these
commands and other commands used with this feature, go to the Cisco IOS Master Commands List,
Release 12.4, at http://www.cisco.com/univercd/cc/td/doc/product/software/ios124/124mindx/
124index.htm.
• dialer map
Feature History
Release Modification
12.2(4)T This feature was introduced.
12.2(11)T This feature was implemented on Cisco access server platforms.
This document describes the Dialer Persistent feature. It includes the following sections.
• Feature Overview, page 683
• Supported Platforms, page 684
• Supported Standards, MIBs, and RFCs, page 685
• Prerequisites, page 685
• Configuration Tasks, page 685
• Monitoring and Maintaining Dialer Persistence, page 687
• Configuration Examples, page 688
• Command Reference, page 689
• Glossary, page 690
Feature Overview
A new interface configuration command, dialer persistent, allows a dial-on-demand routing (DDR)
dialer profile connection to be brought up without being triggered by interesting traffic. When
configured, the dialer persistent command starts a timer when the dialer interface starts up and starts
the connection when the timer expires. If interesting traffic arrives before the timer expires, the
connection is still brought up and set as persistent. The command provides a default timer interval, or
you can set a custom timer interval.
The connection is not brought down until the shutdown interface command is entered on the dialer
interface. If the persistent connection is torn down for some other reason, such as the ISDN line goes
down, the system immediately tries to bring the connection back up, and will use any other settings
configured for dialing on the dialer interface.
Benefits
The Dialer Persistent feature allows the connection settings in the dialer profile to be configured as
persistent, that is, the connection is not torn down until the shutdown interface command is entered on
the dialer interface.
Until Cisco IOS Release 12.2(4)T, interesting traffic was used to bring up a DDR link. If there was no
interesting traffic and the idle timeout interval was reached, the link was torn down. However, there are
situations where a link needs to be up all the time. The Dialer Persistent feature provides the option to
ignore idle timers and interesting traffic, thereby keeping the link up and maintaining DDR dialed calls
indefinitely. The Dialer Persistent feature allows you to configure the intervals to be used for dial
attempts, both initially on startup and when a persistent link is brought down due to external failures.
Restrictions
The Dialer Persistent feature is available only with dialer profiles and not with legacy dialers.
The dialer idle-timeout interface configuration command cannot be configured when the dialer
persistent command is configured.
Related Documents
• Cisco IOS Dial Technologies Command Reference, Release 12.2
• Cisco IOS Dial Technologies Configuration Guide, “Dial-on-Demand Routing Configuration” part,
Release 12.2
Supported Platforms
See the next section for information about Feature Navigator and how to use this tool to determine the
platforms and software images in which this feature is available.
MIBs
None
To obtain lists of supported MIBs by platform and Cisco IOS release, and to download MIB modules,
go to the Cisco MIB website on Cisco.com at the following URL:
http://www.cisco.com/public/sw-center/netmgmt/cmtk/mibs.shtml
RFCs
None
Prerequisites
Before performing the configuration tasks in this document, review the overview of and steps to
configure a dialer profile in the chapter “Configuring Peer-to-Peer DDR with Dialer Profiles” in the
Cisco IOS Dial Technologies Configuration Guide, “Dial-on-Demand Routing Configuration” part,
Release 12.2.
Configuration Tasks
See the following sections for configuration tasks for the Dialer Persistent feature. Each task in the list
is identified as either required or optional:
• Configuring Dialer Persistent (required)
• Shutting Down an Interface Configured for Dialer Persistence (required)
• Verifying Dialer Persistent (optional)
The section “Monitoring and Maintaining Dialer Persistence” describes how to monitor and maintain the
Dialer Persistent feature. See the section“Configuration Examples” for an example of how to configure
the Dialer Persistent feature.
Command Purpose
Step 1 Router(config)# interface dialer number Creates a dialer interface and enters interface
configuration mode.
Step 2 Router(config-if)# ip address address mask Specifies the IP address and mask of the dialer
interface as a node in the destination network to
be called.
Step 3 Router(config-if)# encapsulation type Specifies the encapsulation type.
Step 4 Router(config-if)# dialer string dial-string class Specifies the remote destination to call and the
class-name map class that defines characteristics for calls
to this destination.
Step 5 Router(config-if)# dialer pool number Specifies the dialing pool to use for calls to this
destination.
Step 6 Router(config-if)# dialer-group group-number Assigns the dialer interface to a dialer group.
Step 7 Router(config-if)# dialer-list dialer-group protocol Specifies an access list by list number or by
protocol-name {permit | deny | list access-list-number} protocol and list number to define the
interesting packets that can trigger a call.
Step 8 Router(config-if)# dialer remote-name user-name (Optional) Specifies the authentication name of
the remote router on the destination
subnetwork for a dialer interface.
Step 9 Router(config-if)# dialer persistent [delay [initial] Forces a dialer interface to be connected at all
seconds | max-attempts number] times, even in the absence of interesting traffic.
See the configuration example in the section “Configuration Examples” and the “Examples” section in
the dialer persistent command reference page for additional commands that might be entered for this
configuration.
Command Purpose
Step 1 Router(config)# interface dialer number Enters interface configuration mode on the
specified dialer interface.
Step 2 Router(config-if)# shutdown Fully tears down a persistent connection and
prevents the software from attempting more
dialing.
Step 1 Enter the show dialer interface EXEC command with the interface type and number to display statistics
on the physical interface bound to the dialer interface. Output includes the configured timers. The “Idle
timer (never)” and “Dial reason:” lines indicate that persistent dialing is configured.
Router# show dialer interface dialer 1
Step 2 Enter the debug dialer EXEC command and verify that the following message appears:
Di1 DDR: Persistent Dialer Profile nailed up successfully
Command Purpose
Router# clear interface When dialer persistent is configured, the clear interface command clears
unsuccessful dial attempts on a line without interesting traffic, and then the
dialer software attempts to bring up the connection as persistent.
Router# debug dialer Displays debugging information about the packets received on a dialer
interface.
Configuration Examples
This section provides the following Dialer Persistent configuration examples:
• Standard Dialer Persistent Configuration Example
• Dialer Persistent Plus Failed Connection Delays Configuration Example
ip classless
ip route 0.0.0.0 0.0.0.0 dialer 1
ip route 172.30.21.0 255.255.255.0 1.1.1.5
ip route 172.30.114.0 255.255.255.0 172.30.21.1
no ip http server
!
!
map-class dialer test
dialer isdn speed 56
access-list 183 permit ip host 10.239.28.2 host 10.239.28.128
access-list 183 permit ip host 10.239.28.128 host 10.239.28.2
!
Command Reference
The following new command is pertinent to this feature. To see the command pages for this command
and other commands used with this feature, go to the Cisco IOS Master Commands List, Release 12.4,
at http://www.cisco.com/univercd/cc/td/doc/product/software/ios124/124mindx/124index.htm.
• dialer persistent
Glossary
interesting packets—Dialer access lists are central to the operation of DDR. In general, access lists are
used as the screening criteria for determining when to initiate DDR calls. All packets are tested against
the dialer access list. Packets that match a permit entry are deemed interesting.
persistent connection—A connection that is brought up even without interesting traffic, and is not torn
down until the shutdown interface configuration command is entered on the interface.
Feature History
Release Modification
12.2(8)T This feature was introduced.
This document describes the Dialer Watch Connect Delay feature in Cisco IOS Release 12.2(8)T and
includes the following sections:
• Feature Overview, page 691
• Supported Platforms, page 692
• Supported Standards, MIBs, and RFCs, page 693
• Prerequisites, page 693
• Configuration Tasks, page 693
• Verifying Dialer Watch Connect Delay Configuration
• Configuration Examples, page 695
• Command Reference, page 696
Feature Overview
The Dialer Watch Connect Delay feature introduces the ability to configure a delay in bringing up a
secondary link when a primary link that is monitored by Dialer Watch goes down and is removed from
the routing table. Previously, the router would instantly dial a secondary route without allowing time for
the primary route to come back up. When the Dialer Watch Connect Delay feature is configured, the
router will check for availability of the primary link at the end of the specified delay time before dialing
the secondary link.
Benefits
The Dialer Watch Connect Delay feature allows users greater control over the use of a secondary link on
monitored IP addresses or networks. Configuring the router to delay bringing up a secondary link when
the watched primary link goes down will allow time for the primary link to be restored in the event of a
temporary outage.
Related Documents
• The part “Dial-on-Demand Routing Configuration” in the Cisco IOS Dial Technologies
Configuration Guide, Release 12.2.
• The chapter “Configuring Dial Backup Using Dialer Watch” in the Cisco IOS Dial Technologies
Configuration Guide, Release 12.2.
• Cisco IOS Dial Technologies Command Reference, Release 12.2
Supported Platforms
• Cisco 805
• Cisco 806
• Cisco 820
• Cisco 827
• Cisco 828
• Cisco 1600 series
• Cisco 1700
• Cisco 1710
• Cisco 2600 series
• Cisco 3640
• Cisco 3660
• Cisco 7100
• Cisco 7200
• Cisco 7500
• soho 78
• mc3810
• C6MSFC2
To access Cisco Feature Navigator, you must have an account on Cisco.com. If you have forgotten or
lost your account information, send a blank e-mail to [email protected]. An automatic check
will verify that your e-mail address is registered with Cisco.com. If the check is successful, account
details with a new random password will be e-mailed to you. Qualified users can establish an account
on Cisco.com by following the directions at http://www.cisco.com/register.
Cisco Feature Navigator is updated regularly when major Cisco IOS software releases and technology
releases occur. For the most current information, go to the Cisco Feature Navigator home page at the
following URL:
http://www.cisco.com/go/fn
MIBs
No new or modified MIBs are supported by this feature.
To obtain lists of supported MIBs by platform and Cisco IOS release, and to download MIB modules,
go to the Cisco MIB website on Cisco.com at the following URL:
http://www.cisco.com/public/sw-center/netmgmt/cmtk/mibs.shtml
RFCs
No new or modified RFCs are supported by this feature.
Prerequisites
Dial-on-Demand routing (DDR) must be configured and Dialer Watch must be enabled. For more
information on configuring DDR, refer to the following documents:
• The part “Dial-on-Demand Routing Configuration” in the Cisco IOS Dial Technologies
Configuration Guide, Release 12.2.
• The chapter “Configuring Dial Backup Using Dialer Watch” in the Cisco IOS Dial Technologies
Configuration Guide, Release 12.2.
Configuration Tasks
See the following sections for configuration tasks for the Dialer Watch Connect Delay feature. Each task
in the list is identified as either required or optional.
• Configuring a Delay Before Activating a Secondary Link (required)
• Configuring a Delay Before Disconnecting the Secondary Link (optional)
Command Purpose
Router(config)# dialer watch-list group-number Configures a delay in dialing the secondary link when the primary
delay connect connect-time link becomes unavailable.
• The delay connect keyword phrase specifies that the router
will delay dialing the secondary link when the primary link
becomes unavailable.
• The connect-time argument specifies the time, in seconds,
after which the router rechecks for availability of the primary
link. If the primary link is still unavailable, the secondary
link is then dialed. Valid times range from 1 to 2147483.
Command Purpose
Router(config)# dialer watch-list group-number Configures a delay in disconnecting the secondary link after
delay disconnect disconnect-time detecting availability of the primary link.
• The delay disconnect keyword phrase specifies that the
router will delay disconnecting the secondary link after
detecting availability of the primary link.
• The disconnect-time argument specifies the time, in seconds,
after which the router disconnects the secondary link once
the primary link has been detected. Valid times range from 1
to 2147483.
Step 1 Enter the show running-config command to verify the configuration of Dialer Watch connect and
disconnect delays:
router# show running-config
Connect Delay
------------------------
Disconnect delay
------------------------
Configuration Examples
This section provides the following configuration examples:
• Configuring a Delay Before Activating a Secondary Link Example
• Configuring a Delay Before Disconnecting a Secondary Link Example
Command Reference
The following new command is pertinent to this feature. To see the command pages for this command
and other commands used with this feature, go to the Cisco IOS Master Commands List, Release 12.4,
at http://www.cisco.com/univercd/cc/td/doc/product/software/ios124/124mindx/124index.htm.
• dialer watch-list delay
The PPPoE Client DDR Idle-Timer feature supports the dial-on-demand routing (DDR) interesting
traffic control list functionality of the dialer interface with a PPP over Ethernet (PPPoE) client, but also
keeps original functionality (PPPoE connection up and always on after configuration) for those PPPoE
clients that require it.
Finding Support Information for Platforms and Cisco IOS Software Images
Use Cisco Feature Navigator to find information about platform support and Cisco IOS software image
support. Access Cisco Feature Navigator at http://www.cisco.com/go/fn. You must have an account on
Cisco.com. If you do not have an account or have forgotten your username or password, click Cancel at
the login dialog box and follow the instructions that appear.
Contents
• Prerequisites for Using the PPPoE Client DDR Idle-Timer, page 697
• Information About the PPPoE Client DDR Idle-Timer, page 698
• How to Configure the PPPoE Client DDR Idle-Timer, page 698
• Configuration Examples for PPPoE Client DDR Idle-Timer, page 703
• Additional References, page 705
• Command Reference, page 706
SUMMARY STEPS
1. enable
2. configure {terminal | memory | network}
3. interface atm atm-interface-number
4. pvc vpi/vci
5. pppoe-client dial-pool-number number [dial-on-demand]
6. exit
DETAILED STEPS
Example:
Router# configure terminal
Step 3 interface atm atm-interface-number Configures an ATM interface type and enters interface
configuration mode.
Example:
Router# interface atm 2/0
Step 4 pvc vpi/vci Creates an ATM permanent virtual circuit (PVC) and enters
interface-ATM-VC configuration mode.
Example:
Router(config-if)# pvc 2/100
Step 5 pppoe-client dial-pool-number number Configures DDR interesting traffic control list functionality
[dial-on-demand] of the dialer interface with a PPPoE client.
• The optional dial-on-demand keyword enables DDR
Example: functionality on the PPPoE connection.
Router(config-if-atm-vc)# pppoe-client
dial-pool-number 1 dial-on-demand
Step 6 exit Exits the configuration mode.
• Enter the exit command at each configuration mode to
Example: leave that mode.
Router(config-if-atm-vc)# exit
What to Do Next
To support DDR functionality for the PPPoE client, DDR functionality must be configured. See the
“Configure the Dialer Interface” section on page 701 for the steps to do this.
SUMMARY STEPS
1. enable
2. configure {terminal | memory | network}
3. interface ethernet ethernet-number
4. pppoe enable
5. pppoe-client dial-pool-number number [dial-on-demand]
DETAILED STEPS
Example:
Router# configure terminal
Step 3 interface ethernet ethernet-number Configures an Ethernet interface and enters interface
configuration mode.
Example:
Router# interface ethernet 1
Step 4 pppoe enable Enables PPPoE sessions on an Ethernet interface.
Example:
Router(config-if)# pppoe enable
What to Do Next
To support DDR functionality for the PPPoE client, DDR functionality must be configured. See the
“Configure the Dialer Interface” section for the steps to do this.
SUMMARY STEPS
1. enable
2. configure {terminal | memory | network}
3. interface dialer dialer-rotary-group-number
4. dialer idle-timeout seconds [inbound | either]
5. dialer hold-queue packets [timeout seconds]
6. dialer-group group-number
7. exit
8. dialer-list dialer-group protocol protocol-name {permit | deny | list access-list-number |
access-group}
DETAILED STEPS
Example:
Router# configure terminal
Step 3 interface dialer dialer-rotary-group-number Defines a dialer rotary group and enters interface
configuration mode.
Example:
Router# interface dialer 1
Step 4 dialer idle-timeout seconds [inbound | either] Specifies the duration of idle time before a line is
disconnected.
Example: • inbound—Only inbound traffic will reset the idle
Router(config-if)# dialer idle-timeout 180 timeout.
either
• either—Both inbound and outbound traffic will reset
the idle timeout.
Step 5 dialer hold-queue packets [timeout seconds] Allows interesting outgoing packets to be queued until a
modem connection is established.
Example: • timeout—Amount of time, in seconds, to queue the
Router(config-if)# dialer hold-queue 100 packets.
Step 6 dialer-group group-number Controls access by configuring an interface to belong to a
specific dialing group.
Example:
Router(config-if)# dialer-group 1
Step 7 exit Leaves interface configuration mode and returns to global
configuration mode.
Example:
Router(config-if)# exit
Step 8 dialer-list dialer-group protocol protocol-name Defines a DDR dialer list for dialing by protocol or by a
{permit | deny | list access-list-number | combination of a protocol and a previously defined access
access-group}
list.
• permit and deny—Configure access permissions.
Example:
Router(config)# dialer-list 1 protocol ip • list—Specifies that an access list will be used for
permit defining a granularity finer than an entire protocol.
ip mtu 1492
encapsulation ppp
dialer pool 1
dialer idle-timeout 180 either
dialer hold-queue 100
dialer-group 1
!
dialer-list 1 protocol ip permit
!
ip route 0.0.0.0 0.0.0.0 Dialer1
Additional References
For additional information related to the PPPoE client DDR idle-timer, refer to the following references:
Related Documents
Related Topic Document Title
DDR interesting packets and access control lists Cisco IOS Dial Technologies Configuration Guide, Release 12.2.
See the section “Configuring Access Control for Outgoing Calls “ in
the chapter “Configuring Legacy DDR Hubs.”
DDR and dialer commands: complete command Cisco IOS Dial Technologies Command Reference, Release 12.2.
syntax, command mode, defaults, usage guidelines,
and examples
PPPoE Stage Protocols Cisco IOS Wide-Area Networking Configuration Guide, Release
12.2. See the section “PPPoE Stage Protocols” in the chapter
“Configuring Broadband Access: PPP and Routed Bridge
Encapsulation.”
PPPoE configuration commands: complete command Cisco IOS Wide-Area Networking Command Reference, Release
syntax, command mode, defaults, usage guidelines, 12.2. See the chapter “Broadband Access: PPP and Routed Bridge
and example Encapsulation Commands.”
Standards
Standards Title
None —
MIBs
MIBs MIBs Link
None To obtain lists of supported MIBs by platform and Cisco IOS
release, and to download MIB modules, go to the Cisco MIB website
on Cisco.com at the following URL:
http://www.cisco.com/public/sw-center/netmgmt/cmtk/mibs.shtml
To locate and download MIBs for selected platforms, Cisco IOS releases, and feature sets, use Cisco
MIB Locator found at the following URL:
http://tools.cisco.com/ITDIT/MIBS/servlet/index
If Cisco MIB Locator does not support the MIB information that you need, you can also obtain a list of
supported MIBs and download MIBs from the Cisco MIBs page at the following URL:
http://www.cisco.com/public/sw-center/netmgmt/cmtk/mibs.shtml
To access Cisco MIB Locator, you must have an account on Cisco.com. If you have forgotten or lost your
account information, send a blank e-mail to [email protected]. An automatic check will verify
that your e-mail address is registered with Cisco.com. If the check is successful, account details with a
new random password will be e-mailed to you. Qualified users can establish an account on Cisco.com
by following the directions found at this URL:
http://www.cisco.com/register
RFCs
RFCs Title
None —
Technical Assistance
Description Link
Technical Assistance Center (TAC) home page, http://www.cisco.com/public/support/tac/home.shtml
containing 30,000 pages of searchable technical
content, including links to products, technologies,
solutions, technical tips, tools, and lots more.
Registered Cisco.com users can log in from this page to
access even more content.
Command Reference
The following modified command is pertinent to this feature. To see the command pages for this
command and other commands used with this feature, go to the Cisco IOS Master Commands List,
Release 12.4, at http://www.cisco.com/univercd/cc/td/doc/product/software/ios124/124mindx/
124index.htm.
• pppoe-client dial-pool-number
Feature History
Release Modification
12.2(4)T This feature was introduced.
12.2(4)T2 Support for the Cisco 7500 series routers was added.
This document describes the Redial Enhancements feature for Cisco IOS Release 12.2(4)T. It includes
the following sections:
• Feature Overview, page 707
• Supported Platforms, page 708
• Supported Standards, MIBs, and RFCs, page 709
• Configuration Tasks, page 709
• Configuration Examples, page 713
• Command Reference, page 713
Feature Overview
The Redial Enhancements feature improves the performance of redial and provides greater control over
redial behavior. The dialer will now cycle through all matching dialer strings or dialer maps before
applying the redial interval, and may select a different physical dialer on each redial attempt. New
dial-out attempts will not be initiated if a redial to the same destination is pending. The dialer can now
be configured to apply a disable timer without performing any redial attempts, and a disable time can be
applied to a dialer profile interface and to a serial dialer.
By default, the Cisco IOS software considers a call successful if it connects at the physical layer (Layer
1 of the OSI reference model). However, problems such as poor quality telco circuits or peer
misconfiguration can cause dial-out failure even though a connection is made at the physical layer. The
Redial Enhancements feature introduces a new command that allows the router to be configured to wait
a specific amount of time for a line protocol to come up before considering a dial-out attempt successful.
If the timer runs out or the call is dropped before the line protocol comes up, the call is considered
unsuccessful. Unsuccessful dial-out attempts will trigger redial if the redial options have been
configured.
Benefits
The Redial Enhancements feature will reduce dialer congestion by preventing additional dial-out
attempts to any locations which have a redial attempt pending. This can reduce your telco bills by
limiting unecessary dial-out attempts. In addition, the router may now be configured to wait for the line
protocol to come up before considering a dial-out attempt successful.
Restrictions
The dialer wait-for-line-protocol command is supported only with the PPP encapsulation protocol.
Related Documents
• Cisco IOS Dial Technologies Configuration Guide, Release 12.2
• Cisco IOS Dial Technologies Command Reference, Release 12.2
Supported Platforms
• Cisco 800 series
• Cisco 1000 series
• Cisco 1600 series
• Cisco 2500 series
• Cisco 2600 series
• Cisco 3600 series
• Cisco 7200 series
• Cisco 7500 series
MIBs
No new or modified MIBs are supported by this feature.
To obtain lists of supported MIBs by platform and Cisco IOS release, and to download MIB modules,
go to the Cisco MIB website on Cisco.com at the following URL:
http://www.cisco.com/public/sw-center/netmgmt/cmtk/mibs.shtml
RFCs
No new or modified RFCs are supported by this feature.
Configuration Tasks
See the following sections for configuration tasks for the Redial Enhancements feature. Each task in the
list is identified as either required or optional:
• Configuring Redial Options (optional)
• Configuring the Dialer to Wait for a Line Protocol (optional)
• Verifying Redial Configuration (optional)
Command Purpose
Step 1 Router(config)# interface dialer Enters interface configuration mode.
Step 2 Router(config-if)# dialer redial interval time Configures redial options on the router.
attempts number re-enable disable-time
Command Purpose
Step 1 Router(config)# interface dialer Enters interface configuration mode.
Step 2 Router(config-if)# dialer wait-for-line-protocol time Configures the router to wait for a line protocol
after connecting to the physical layer.
Step 1 Initiate a dial-out attempt to a location that is likely to fail to connect on the first attempt.
Step 2 Enter the debug dialer events command. The following debug output results from a dial-out attempt that
failed to connect on both the initial attempt and two redial attempts:
Target IP address:10.0.0.2
Repeat count [5]:1
Datagram size [100]:
Timeout in seconds [2]:
Extended commands [n]:
Sweep range of sizes [n]:
Type escape sequence to abort.
Sending 1, 100-byte ICMP Echos to 10.0.0.2, timeout is 2 seconds:
The following debug output results from a dial-out attempt that failed to connect initially, but succeeded
on the first redial attempt:
Router# ping
Protocol [ip]:
Target IP address:10.0.0.2
Repeat count [5]:1
Datagram size [100]:
Timeout in seconds [2]:
Extended commands [n]:
The following debug output results from a call that failed to connect to a line protocol during either the
initial dial-out attempt or the first redial attempt. The connection was successfully made on the second
redial attempt. The router was configured with both the dialer wait-for-line-protocol and dialer redial
commands. In this example, the dialer wait-for-line-protocol command was configured to wait 10
seconds for the line protocol to come up.
Zcape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.0.0.2, timeout is 2 seconds:
led#
led#
*Mar 1 02:32:48.787:Di1 DDR:Redial:Timeout
!This is new debug output specific to redial configuration.
*Mar 1 02:32:48.787:BR0/0 DDR:rotor dialout [priority]
*Mar 1 02:32:48.787:Di1 DDR:Redialing on BR0/0 for ip (s=10.0.0.1, d=10.0.0.2) (attempt
1)
!This is new debug output specific to redial configuration.
*Mar 1 02:32:48.787:BR0/0 DDR:Dialing cause ip (s=10.0.0.1, d=10.0.0.2)
*Mar 1 02:32:48.787:BR0/0 DDR:Attempting to dial 6109
02:32:208317874112:%LINK-3-UPDOWN:Interface BRI0/0:1, changed state to up
*Mar 1 02:32:48.987:BR0/0:1:interface must be fifo queue, force fifo
02:32:210453397503:%DIALER-6-BIND:Interface BR0/0:1 bound to profile Di1
led#
*Mar 1 02:32:58.987:BR0/0:1 DDR:wait for line protocol timeout
!This is new debug output specific to waiting for a line protocol to come up.
*Mar 1 02:32:58.987:BR0/0 DDR:has total 0 call(s), dial_out 0, dial_in 0
02:32:58:%DIALER-6-UNBIND:Interface BR0/0:1 unbound from profile Di1
*Mar 1 02:32:58.987:BR0/0:1 DDR:disconnecting call
02:32:58:%ISDN-6-CONNECT:Interface BRI0/0:1 is now connected to 6109
02:32:58:%ISDN-6-DISCONNECT:Interface BRI0/0:1 disconnected from 6109 , call lasted 10
seconds
02:32:255565373540:%LINK-3-UPDOWN:Interface BRI0/0:1, changed state to down
*Mar 1 02:32:59.079:BR0/0:1 DDR:disconnecting call
led#
led#
*Mar 1 02:33:28.987:Di1 DDR:Redial:Timeout
!This is new debug output specific to redial configuration.
*Mar 1 02:33:28.987:BR0/0 DDR:rotor dialout [priority]
*Mar 1 02:33:28.987:Di1 DDR:Redialing on BR0/0 for ip (s=10.0.0.1, d=10.0.0.2) (attempt
2)
!This is new debug output specific to redial configuration.
*Mar 1 02:33:28.987:BR0/0 DDR:Dialing cause ip (s=10.0.0.1, d=10.0.0.2)
*Mar 1 02:33:28.987:BR0/0 DDR:Attempting to dial 6109
02:33:126713495488:%LINK-3-UPDOWN:Interface BRI0/0:1, changed state to up
*Mar 1 02:33:29.187:BR0/0:1:interface must be fifo queue, force fifo
02:33:128849018879:%DIALER-6-BIND:Interface BR0/0:1 bound to profile Di1
*Mar 1 02:33:31.155:BR0/0:1 DDR:No callback negotiated
*Mar 1 02:33:31.171:BR0/0:1 DDR:dialer protocol up
*Mar 1 02:33:31.171:Di1 DDR:Redial:Upon line protocol up
!This is new debug output specific to redial configuration.
*Mar 1 02:33:31.175:Di1 DDR:Redial:Removed for ip (s=10.0.0.1, d=10.0.0.2) (2 attempts
tried)
!This is new debug output specific to redial configuration.
02:33:32:%LINEPROTO-5-UPDOWN:Line protocol on Interface BRI0/0:1, changed state to up
led#
Configuration Examples
This section provides the following configuration examples:
• Dialer Redial Example
• Dialer Wait-for-Line-Protocol Example
Command Reference
The following new and modified commands are pertinent to this feature. To see the command pages for
these commands and other commands used with this feature, go to the Cisco IOS Master Commands List,
Release 12.4, at http://www.cisco.com/univercd/cc/td/doc/product/software/ios124/124mindx/
124index.htm.
New Command
• dialer wait-for-line-protocol
Modified Command
• dialer redial
Feature History
Release Modification
12.2(8)T This feature was introduced.
This document describes the Rotating Through Dial Strings feature in Cisco IOS Release 12.2(8)T and
includes the following sections:
• Feature Overview, page 715
• Supported Platforms, page 716
• Supported Standards, MIBs, and RFCs, page 717
• Prerequisites, page 717
• Configuration Tasks, page 717
• Configuration Examples, page 719
• Command Reference, page 720
Feature Overview
The Cisco IOS software allows multiple dial strings (telephone numbers) to be configured for outgoing
calls. In previous releases of the Cisco IOS software, the dial string used for a particular outgoing call
was always the first telephone number in the dial string list. It was not possible to customize the selection
or otherwise participate in deciding which dial string should be used first. But in Cisco IOS Release
12.2(8)T, the Rotating Through Dial Strings feature allows the order in which dial strings should be
dialed to be specified.
Benefits
The Rotating Through Dial Strings feature allows you to specify the dialing order when multiple dial
strings are configured. Options for dialing order are as follows:
• Sequential—Dial using the first dial string configured in a list of multiple strings.
• Round-robin—Dial using the dial string following the most recently successful dial string.
• Last successful call—Dial using the most recently successful dial string.
This feature takes advantage of information available from a previous call attempt, such as the call was
unsuccessful or the line was busy, and thereby increases the rate of successful calls.
Related Documents
Additional information about configuring networks that can take advantage of the Rotating Through Dial
Strings feature can be found in the Cisco IOS Dial Technologies Configuration Guide, Release 12.2.
Refer to the chapter “Configuring Peer-to-Peer DDR with Dialer Profiles” in the part “Dial-on-Demand
Routing Configuration.” In the same manual, also refer to the chapter “Configuring ISDN Caller ID
Callback,” in the part “Callback and Bandwidth Allocation Configuration.”
Supported Platforms
• Cisco 1400 series
• Cisco 1600 series
• Cisco 1710
• Cisco 1720
• Cisco 1721
• Cisco 1750
• Cisco 1751
• Cisco 2400 series
• Cisco 2600 series
• Cisco 3620
• Cisco 3631
• Cisco 3640
• Cisco 3660
• Cisco 3725
• Cisco 3745
• Cisco 7100
• Cisco 7200
• Cisco 7500
• Cisco 7700
• Cisco 800 series
• Cisco 805
• Cisco 806
• Cisco 828
• Cisco MC3810
• Universal Route Module (URM)
• ubr7200
MIBs
None
To obtain lists of supported MIBs by platform and Cisco IOS release, and to download MIB modules,
go to the Cisco MIB website on Cisco.com at the following URL:
http://www.cisco.com/public/sw-center/netmgmt/cmtk/mibs.shtml
RFCs
None
Prerequisites
The Rotating Through Dial Strings feature is used in configurations that apply to both legacy dialers and
dialer profiles. The dialing order you configure applies to dial strings configured on an interface by the
dialer string and dialer map configuration commands. See the documents listed in the “Related
Documents” section for more information about using these commands to configure dial strings.
Configuration Tasks
See the following sections for the configuration tasks for this feature. Each task in the list is identified
as either required or optional.
• Configuring the Order of Dial Strings (required)
• Verifying Dial String Order (optional)
Command Purpose
Router(config-if)# dialer order [sequential | round-robin | Specifies the dialing order when multiple dial strings
last-successful] are configured. Use one of the following optional
keywords:
• sequential—Starts dialing the first dial string
configured in a list of multiple strings.
• round-robin—Starts dialing using the dial string
that occurs after the most recently successful dial
string.
• last-successful—Starts dialing using the most
recently successful dial string.
The dialer order command keywords can be configured on a per-interface basis. You can use this
command in interface configurations that apply to both legacy dialers and dialer profiles. See the
“Configuration Examples” section to see how this command is used with both these dialer types.
Step 1 To check the dial string order configuration, enter the show running-config interface command with
the appropriate interface type at the privileged EXEC prompt:
Router# show running-config interface dialer 1
Building configuration...
Check that a dialer order command is listed in the configuration displayed. If no dialer order command
is listed, that indicates the default sequential dial string order is configured.
Step 2 To see a report of the call types, telephone numbers, and call duration, enter the show isdn history
command at the privileged EXEC prompt:
Router# show isdn history
Troubleshooting Tips
To troubleshoot the Rotating Through Dial Strings feature, use the debug dialer command in privileged
EXEC mode.
Configuration Examples
This section provides the following configuration examples:
• Legacy Dialer with Multiple Dial Strings Example
• Dialer Profile Configuration with Multiple Dial Strings Example
Command Reference
This section documents the new command. All other commands used with this feature are documented
in the Cisco IOS Release 12.2 command reference publications.
• dialer order
Feature History
Release Modification
12.2(4)T This feature was introduced.
Contents
This document includes the following sections:
• Restrictions for Dialer CEF, page 723
• Information About Dialer CEF, page 723
• Supported Platforms, page 725
• Supported Standards, MIBs, and RFCs, page 726
• Configuration Tasks, page 726
• Monitoring and Maintaining Dialer CEF Interfaces, page 726
• Configuration Examples, page 726
• Command Reference, page 727
Dialer Profiles
The dialer profiles implementation of DDR is based on a separation between logical and physical interface
configuration. Dialer profiles also allow the logical and physical configurations to be bound together
dynamically on a per-call basis.
Dialer profiles are advantageous in the following situations:
• When you want to share an interface (ISDN, asynchronous, or synchronous serial) to place or
receive calls.
• When you want to change any configuration on a per-user basis.
• When you want to maximize ISDN channel usage using the Dynamic Multiple Encapsulations
feature to configure various encapsulation types and per-user configurations on the same ISDN B
channel at different times according to the type of call.
• When you want to bridge to many destinations and avoiding split horizon problems.
Most routed protocols are supported; however, International Organization for Standardization
Connectionless Network Service (ISO CLNS) is not supported.
If you decide to configure dialer profiles, you must disable validation of source addresses for the routed
protocols you support.
For detailed dialer profiles information, see the “Configuring Peer-to-Peer DDR with Dialer Profiles” chapter
in the Cisco IOS Dial Technologies Configuration Guide, Release 12.2.
For more information about Dynamic Multiple Encapsulations, see the “Dialer Profiles Configuration Task
List” section in the Cisco IOS Dial Technologies Configuration Guide, Release 12.2.
Legacy DDR
Legacy DDR is powerful and comprehensive, but its limitations affect scaling and extensibility. Legacy DDR
is based on a static binding between the per-destination call specification and the physical interface
configuration.
However, legacy DDR also has many strengths. It supports Frame Relay, ISO CLNS, LAPB, snapshot
routing, and all routed protocols that are supported on Cisco routers. By default, legacy DDR supports fast
switching.
For information about simple legacy DDR spoke configurations, see the “Configuring Legacy DDR Spokes”
chapter in the Cisco IOS Dial Technologies Configuration Guide, Release 12.2. For information about
simple legacy DDR hub configurations, see the “Configuring Legacy DDR Hubs” chapter in the Cisco IOS
Dial Technologies Configuration Guide, Release 12.2.
Benefits
Improved Performance
CEF is less CPU-intensive than fast switching route caching. More CPU processing power can be
dedicated to Layer 3 services such as quality of service (QoS) and encryption.
Resilience
CEF offers an unprecedented level of switching consistency and stability in large dynamic networks. In
dynamic networks, fast-switched cache entries are frequently invalidated due to routing changes. These
changes can cause traffic to be process switched using the routing table, rather than fast switched using
the route cache. Because the Forwarding Information Base (FIB) lookup table contains all known routes
that exist in the routing table, it eliminates route cache maintenance and the fast-switch or
process-switch forwarding scenario. CEF can switch traffic more efficiently than typical demand
caching schemes.
Although you can use CEF in any part of a network, it is designed for high-performance, highly resilient
Layer 3 IP backbone switching.
Related Documents
• Cisco IOS Dial Technologies Configuration Guide, Release 12.2
• Cisco IOS Dial Technologies Command Reference, Release 12.2
Supported Platforms
• Cisco 1003 router
• Cisco 1004 router
• Cisco 1005 router
• Cisco 1600 series
• Cisco 2600 series
• Cisco 3620 series
• Cisco 3640 series
• Cisco 3660 series
• Cisco 7000 series
• Cisco 7100 series
• Cisco 7200 series
• Cisco AS5300 series
• Cisco AS5400 series
• Cisco AS5800 series
To access Feature Navigator, you must have an account on Cisco.com. If you have forgotten or lost your
account information, send a blank e-mail to [email protected]. An automatic check will verify
that your e-mail address is registered with Cisco.com. If the check is successful, account details with a
new random password will be e-mailed to you. Qualified users can establish an account on Cisco.com
by following the directions at http://www.cisco.com/register.
Feature Navigator is updated when major Cisco IOS software releases and technology releases occur.
For the most current information, go to the Feature Navigator homepage at the following URL:
http://www.cisco.com/go/fn
MIBs
None
To obtain lists of supported MIBs by platform and Cisco IOS release, and to download MIB modules,
go to the Cisco MIB website on Cisco.com at the following URL:
http://www.cisco.com/public/sw-center/netmgmt/cmtk/mibs.shtml
RFCs
None
Configuration Tasks
None
Command Purpose
Router# debug ip cef Displays debugging information about various CEF events.
Router# show adjacency Displays CEF adjacency table information.
Router# show ip interface Displays network layer IP information about a specified interface.
Configuration Examples
None
Command Reference
The following modified commands are pertinent to this feature. To see the command pages for these
commands and other commands used with this feature, go to the Cisco IOS Master Commands List,
Release 12.4, at http://www.cisco.com/univercd/cc/td/doc/product/software/ios124/124mindx/
124index.htm.
• debug ip cef
• show adjacency
• show ip interface
The CEF Support for Dialer Profiles on Cisco 7500 Routers feature adds support for Cisco Express
Forwarding (CEF) switching on dialer profile interfaces, on Cisco 7500 routers with the Route Switch
Processor (RSP).
Feature History for the CEF Support for Dialer Profiles on Cisco 7500 Routers Feature
Release Modification
12.2(4)T This feature was introduced.
12.3(4)T Support for this feature was added for dialer profile interfaces on
Cisco 7500 routers with an RSP.
Finding Support Information for Platforms and Cisco IOS Software Images
Use Cisco Feature Navigator to find information about platform support and Cisco IOS software image
support. Access Cisco Feature Navigator at http://www.cisco.com/go/fn. You must have an account on
Cisco.com. If you do not have an account or have forgotten your username or password, click Cancel at
the login dialog box and follow the instructions that appear.
Contents
• Restrictions for CEF Support for Dialer Profiles on Cisco 7500 Routers, page 730
• Information About CEF Support for Dialer Profiles on Cisco 7500 Routers, page 730
• How to Implement Dialer CEF Support on Cisco 7500 Routers with RSP, page 731
• Configuration Examples for CEF Support for Dialer Profiles on Cisco 7500 Routers, page 732
• Additional References, page 734
• Command Reference, page 735
Verifying that CEF Support for Dialer Profiles on Cisco 7500 Routers Feature Is
Operational
Perform the following task to verify that the CEF Support for Dialer Profiles on Cisco 7500 Routers
feature is operational.
SUMMARY STEPS
1. enable
2. debug ip cef {drops [rpf [access-list]] [access-list] | receive [access-list] | events [access-list] |
interface | dialer}
3. show adjacency [type number] [detail] [summary] [internal]
4. show ip interface [type number]
5. exit
DETAILED STEPS
Example:
Router# debug ip cef dialer
Example:
Router> exit
00:31:44:CEF-Dialer (profile dynamic encap (not MLP)):add link to 10.10.10.2 via Dialer1
through Dialer1
00:31:44:CEF-Dialer:adjacency added:0x81164850
00:31:44:CEF-Dialer:adjacency found:0x81164850; fib->count:1
Additional References
The following sections provide references related to the CEF Support for Dialer Profiles on Cisco 7500
Routers feature.
Related Documents
Related Topic Document Title
Cisco Express Forwarding • Cisco IOS Switching Services Configuration Guide; refer to the
Cisco Express Forwarding chapters in “Part 1: Cisco IOS
Switching Paths”
• Cisco IOS Switching Command Reference
Dialer interfaces and profiles; Dialer CEF • Cisco IOS Dial Technologies Configuration Guide; refer to the
chapters “Configuring Peer-to-Peer DDR with Dialer Profiles”
and “Dialer CEF” in “Part 5: Dial-on-Demand Routing
Configuration”
• Cisco IOS Dial Technologies Command Reference
Standards
Standards Title
None —
MIBs
MIBs MIBs Link
None To locate and download MIBs for selected platforms, Cisco IOS
releases, and feature sets, use Cisco MIB Locator found at the
following URL:
http://www.cisco.com/go/mibs
RFCs
RFCs Title
None —
Technical Assistance
Description Link
Technical Assistance Center (TAC) home page, http://www.cisco.com/public/support/tac/home.shtml
containing 30,000 pages of searchable technical
content, including links to products, technologies,
solutions, technical tips, and tools. Registered
Cisco.com users can log in from this page to access
even more content.
Command Reference
This feature uses no new or modified commands. To see the command pages for the commands used with
this feature, go to the Cisco IOS Master Commands List, Release 12.4, at http://www.cisco.com/
univercd/cc/td/doc/product/software/ios124/124mindx/124index.htm.
This chapter describes how to configure snapshot routing. It includes the following main sections:
• Snapshot Routing Overview
• How to Configure Snapshot Routing
• Monitoring and Maintaining DDR Connections and Snapshot Routing
• Configuration Examples for Snapshot Routing
To identify the hardware platform or software image information associated with a feature, use the
Feature Navigator on Cisco.com to search for information about the feature or refer to the software
release notes for a specific release. For more information, see the “Finding Additional Feature Support
Information” section on page lxxvii in the “Using Cisco IOS Software for Release 12.4” chapter.
For a complete description of the snapshot routing commands mentioned in this chapter, refer to the
Cisco IOS Dial Technologies Command Reference. To locate documentation of other commands that
appear in this chapter, use the command reference master index or search online.
At the end of the active period, the router takes a snapshot of the entries in the routing table. These entries
remain frozen during a quiet period. At the end of the quiet period, another active period starts during
which routing information is again exchanged; see Figure 68.
Active Active
Quiet period
period period
S3105
Time (minutes)
When the router makes the transition from the quiet period to the active period, the line might not be
available for a variety of reasons. For example, the line might be down or busy, or the permanent virtual
circuit (PVC) might be down. If this happens, the router has to wait through another entire quiet period
before it can update its routing table entries. This wait might be a problem if the quiet period is very
long—for example, 12 hours. To avoid the need to wait through the quiet period, you can configure a
retry period. If the line is not available when the quiet period ends, the router waits for the amount of
time specified by the retry period and then makes the transition to an active period. See to Figure 69.
S3106
Time (minutes)
The retry period is also useful in a dialup environment in which there are more remote sites than router
interface lines that dial in to a PRI and want routing information from that interface. For example, a PRI
has 23 DS0s available, but you might have 46 remote sites. In this situation, you would have more dialer
map commands than available lines. The router will try the dialer map commands in order and will use
the retry time for the lines that it cannot immediately access.
The following routed protocols support snapshot routing. Note that these are all distance-vector
protocols.
• AppleTalk—Routing Table Maintenance Protocol (RTMP)
• Banyan VINES—Routing Table Protocol (RTP)
• IP—Routing Information Protocol (RIP), Interior Gateway Routing Protocol (IGRP)
• Internet Protocol Exchange (IPX)—RIP, Service Advertisement Protocol (SAP)
You can also monitor and maintain interfaces configured for snapshot routing. For tips on maintaining
your network with snapshot routing, see the section “Monitoring and Maintaining DDR Connections and
Snapshot Routing” later in this chapter.
For an example of configuring snapshot routing, see the section “Configuration Examples for Snapshot
Routing” at the end of this chapter.
Command Purpose
Step 1 Router(config)# interface serial number Specifies a serial interface.
Step 2 Router(config-if)# snapshot client Configures the client router.
active-time quiet-time
[suppress-statechange-updates] [dialer]
To configure snapshot routing on the client router that is connected to an interface configured for DDR,
use the following commands beginning in global configuration mode:
Command Purpose
Step 1 Router(config)# interface serial number Specifies a serial interface.
Step 2 Router(config-if)# dialer rotary-group number Configures a dialer rotary group.
Step 3 Router(config-if)# interface dialer number Specifies a dialer interface.
Step 4 Router(config-if)# snapshot client Configures the client router.
active-time quiet-time
[suppress-statechange-updates] [dialer]
Step 5 Router(config-if)# dialer map snapshot Defines a dialer map.
sequence-number dial-string
Repeat these steps for each map you want to define. Maps must be provided for all the remote server
routers that this client router is to call during each active period.
Because ISDN BRI and PRI automatically have rotary groups, you need not define a rotary group when
configuring snapshot routing.
To configure snapshot routing on the client router over an interface configured for BRI or PRI, use the
following commands beginning in global configuration mode:
Command Purpose
Step 1 Router(config)# interface bri number Specifies a BRI interface.
Step 2 Router(config-if)# snapshot client Configures the client router.
active-time quiet-time
[suppress-statechange-updates] [dialer]
Step 3 Router(config-if)# dialer map snapshot Defines a dialer map.
sequence-number dial-string
Command Purpose
Step 1 Router(config)# interface serial number Specifies a serial interface.
Step 2 Router(config-if)# snapshot server Configures the server router.
active-time [dialer]
To configure snapshot routing on the associated server router that is connected to an interface configured
for DDR, use the following commands beginning in global configuration mode:
Command Purpose
Step 1 Router(config)# interface serial number Specifies a serial interface.
Step 2 Router(config-if)# interface dialer number Specifies a dialer interface.
Step 3 Router(config-if)# snapshot server Configures the server router.
active-time [dialer]
The active period for the client router and its associated server routers should be the same.
Command Purpose
Router# show dialer [interface type number] Displays general diagnostics about the DDR interface.
Router# show interfaces bri 0 Displays information about the ISDN interface.
Router# clear snapshot quiet-time interface Terminates the snapshot routing quiet period on the client
router within 2 minutes.
Router# show snapshot [type number] Displays information about snapshot routing parameters.
Router# clear dialer Clears the values of the general diagnostic statistics.
The absence of the suppress-statechange-updates keyword means that routing updates will be
exchanged each time the line protocol goes from “down” to “up” or from “dialer spoofing” to “fully up.”
The dialer keyword on the snapshot client command allows the client router to dial the server router in
the absence of regular traffic if the active period time expires.
interface serial 0
dialer rotary-group 3
!
interface dialer 3
dialer in-band
snapshot client 5 360 dialer
This chapter describes how to configure the primary interface to use the dial backup interface. It includes
the following main sections:
• Backup Serial Interface Overview
• How to Configure Dial Backup
• Configuration Examples for Dial Backup for Serial Interfaces
To identify the hardware platform or software image information associated with a feature, use the
Feature Navigator on Cisco.com to search for information about the feature or refer to the software
release notes for a specific release. For more information, see the “Finding Additional Feature Support
Information” section on page lxxvii in the “Using Cisco IOS Software for Release 12.4” chapter.
For a complete description of the dial backup commands in this chapter, refer to the Cisco IOS Dial
Technologies Command Reference. To locate documentation of other commands that appear in this
chapter, use the command reference master index or search online.
Note Dial backup is also available using the Dialer Watch feature. Dialer Watch is based on routing
characteristics instead of relying exclusively on interesting traffic conditions. For information about
Dialer Watch, see the chapter “” in this publication.
To configure a backup interface for a serial interface based on one of the conditions listed, complete the
following general steps:
• Specify the interface and configure it as needed (for DDR, Frame Relay, or X.25). You can also
specify and configure a Frame Relay subinterface.
Refer to the chapters “Configuring Frame Relay” or “Configuring X.25” in the Cisco IOS Wide-Area
Networking Configuration Guide. In this publication, see the chapter “Configuring Synchronous
Serial Ports” and related chapters in the “Dial-on-Demand Routing” part for details.
• Configure the primary interface or subinterface by specifying the dial backup interface and the
conditions for activating the backup interface, as described in this chapter.
• Configure the backup interface for DDR, as described in the “Dial-on-Demand Routing” part of this
publication.
See the chapters “Configuring Legacy DDR Spokes” (for point-to-point legacy DDR connections) or
“Configuring Legacy DDR Hubs” (for point-to-multipoint legacy DDR connections) in this publication.
If you have configured dialer profiles instead of legacy DDR, see the chapter “Configuring Dial Backup
with Dialer Profiles” in this publication for backup information.
Command Purpose
Router(config-if)# backup interface type number Selects a backup interface.
or
Cisco 7500 series routers:
Router(config-if)# backup interface type slot/port
or
Cisco 7200 series routers:
Router(config-if)# backup interface type
slot/port-adapter/port
Note When you enter the backup interface command, the configured physical or logical interface will be forced
to standby mode. When you use a BRI for a dial backup (with Legacy DDR), neither of the B channels can
be used because the physical BRI interface is in standby mode. However, with dialer profiles, only the logical
dialer interface is placed in standby mode and the physical interface (BRI) still can be used for other
connections by making it a member of another pool.
When configured for legacy DDR, the backup interface can back up only one interface. For examples of
selecting a backup line, see the sections “Dial Backup Using an Asynchronous Interface Example” and
“Dial Backup Using DDR and ISDN Example” later in this chapter.
Command Purpose
Router(config-if)# backup load {enable-threshold | never} Defines the traffic load threshold as a percentage of the
{disable-load | never} available bandwidth of the primary line.
Command Purpose
Router(config-if)# backup delay {enable-delay | never} Defines backup line delays.
{disable-delay | never}
For examples of how to define backup line delays, see the sections “Dial Backup Using an Asynchronous
Interface Example” and “Dial Backup Using DDR and ISDN Example” at the end of this chapter.
Note When you use a BRI interface for dial backup, neither of the B channels can be used while the interface
is in standby mode.
Interface BRI 0 is configured to make outgoing calls to one number. This is a legacy DDR spoke
example.
interface serial 1
backup delay 0 0
backup interface bri 0
ip address 10.2.3.4 255.255.255.0
!
interface bri 0
ip address 10.2.3.5 255.255.255.0
dialer string 5551212
dialer-group 1
!
dialer-list 1 protocol ip permit
Note Dialing will occur only after a packet is received to be output on BRI 0. We recommend using the
dialer-list command with the protocol and permit keywords specified to control access for dial backup.
Using this form of access control specifies that all packets are interesting.
Dial Backup Service When the Primary Line Reaches Threshold Example
The following example configures the secondary line (serial 1) to be activated only when the load of the
primary line reaches a certain threshold:
interface serial 0
backup interface serial 1
backup load 75 5
In this case, the secondary line will not be activated when the primary goes down. The secondary line
will be activated when the load on the primary line is greater than 75 percent of the bandwidth of the
primary line. The secondary line will then be brought down when the aggregate load between the primary
and secondary lines fits within 5 percent of the primary bandwidth.
The same example on a Cisco 7500 series router would be as follows:
interface serial 1/1
backup interface serial 2/2
backup load 75 5
Dial Backup Service When the Primary Line Exceeds Threshold Example
The following example configures the secondary line (serial 1) to activate when the traffic threshold on
the primary line exceeds 25 percent:
interface serial 0
backup interface serial 1
backup load 25 5
backup delay 10 60
When the aggregate load of the primary and the secondary lines returns to within 5 percent of the primary
bandwidth, the secondary line is deactivated. The secondary line waits 10 seconds after the primary goes
down before activating and remains active for 60 seconds after the primary returns and becomes active
again.
The same example on a Cisco 7500 series router would be as follows:
interface serial 1/0
backup interface serial 2/0
backup load 25 5
backup delay 10 60
Dial Backup Service When the Primary Line Goes Down Example
The following example configures the secondary line (serial 1) as a backup line that becomes active only
when the primary line (serial 0) goes down. The backup line will not be activated because of load on the
primary line.
interface serial 0
backup interface serial 1
backup delay 30 60
The backup line is configured to activate 30 seconds after the primary line goes down and to remain on
for 60 seconds after the primary line is reactivated.
The same example on a Cisco 7500 series router would be as follows:
interface serial 1/1
backup interface serial 2/0
backup delay 30 60
This chapter describes how to configure dialer interfaces, which can be configured as the logical
intermediary between one or more physical interfaces and another physical interface that is to function
as backup. It includes the following main sections:
• Dial Backup with Dialer Profiles Overview
• How to Configure Dial Backup with Dialer Profiles
• Configuration Example of Dialer Profile for ISDN BRI Backing Up Two Leased Lines
To identify the hardware platform or software image information associated with a feature, use the
Feature Navigator on Cisco.com to search for information about the feature or refer to the software
release notes for a specific release. For more information, see the “Finding Additional Feature Support
Information” section on page lxxvii in the “Using Cisco IOS Software for Release 12.4” chapter.
For a complete description of the dial backup commands in this chapter, refer to the Cisco IOS Dial
Technologies Command Reference. To locate documentation of other commands that appear in this
chapter, use the command reference master index or search online.
Command Purpose
Step 1 Router(config)# interface dialer number Creates a dialer interface and begins interface configuration
mode.
Step 2 Router(config-if)# ip unnumbered loopback0 Specifies IP unnumbered loopback.
Step 3 Router(config-if)# encapsulation ppp Specifies PPP encapsulation.
Step 4 Router(config-if)# dialer remote-name Specifies the Challenge Handshake Authentication Protocol
username (CHAP) authentication name of the remote router.
Step 5 Router(config-if)# dialer string dial-string Specifies the remote destination to call.
Step 6 Router(config-if)# dialer pool number Specifies the dialing pool to use for calls to this destination.
Step 7 Router(config-if)# dialer-group group-number Assigns the dialer interface to a dialer group.
Command Purpose
Step 1 Router(config)# interface type number Specifies the interface and begins interface configuration
mode.
Step 2 Router(config-if)# encapsulation ppp Specifies PPP encapsulation.
Step 3 Router(config-if)# dialer pool-member number Makes the interface a member of the dialing pool that the
dialer interface will use; make sure the number arguments
have the same value.
Step 4 Router(config-if)# ppp authentication chap Specifies CHAP authentication.
Command Purpose
Step 1 Router(config)# interface type number Specifies the interface to be backed up and begins interface
configuration mode.
Step 2 Router(config-if)# ip unnumbered loopback0 Specifies IP unnumbered loopback.
Command Purpose
Step 3 Router(config-if)# backup interface dialer Specifies the backup interface and begins interface
number configuration mode.
Step 4 Router(config-if)# backup delay enable-delay Specifies delay between the physical interface going down
disable-delay and the backup being enabled, and between the physical
interface coming back up and the backup being disabled.
interface dialer1
ip unnumbered loopback0
encapsulation ppp
dialer remote-name Remote1
dialer pool 1
dialer string 5551234
dialer-group 1
interface bri 0
encapsulation PPP
dialer pool-member 1
ppp authentication chap
interface serial 0
ip unnumbered loopback0
backup interface dialer 0
backup delay 5 10
interface serial 1
ip unnumbered loopback0
backup interface dialer1
backup delay 5 10
When a primary link is down in the Multiprotocol Label Switching (MPLS) core network, the ISDN
Backup in MPLS Core feature allows a backup ISDN link on a dialer interface to be brought up to restore
network connectivity. This feature ensures high availability of the link between two routers in the MPLS
core by providing a backup mechanism.
Finding Support Information for Platforms and Cisco IOS Software Images
Use Cisco Feature Navigator to find information about platform support and Cisco IOS software image
support. Access Cisco Feature Navigator at http://www.cisco.com/go/fn. You must have an account on
Cisco.com. If you do not have an account or have forgotten your username or password, click Cancel at
the login dialog box and follow the instructions that appear.
Contents
• Prerequisites for ISDN Backup in MPLS Core, page 758
• Restrictions for ISDN Backup in MPLS Core, page 758
• Information About ISDN Backup in MPLS Core, page 758
• How to Configure ISDN Backup in MPLS Core, page 758
• Configuration Examples for ISDN Backup in MPLS Core, page 761
• Additional References, page 763
• Command Reference, page 764
• Glossary, page 765
SUMMARY STEPS
6. enable
7. configure terminal
8. interface type slot/port.subinterface-number [multipoint | point-to-point]
9. backup interface dialer number
10. exit
DETAILED STEPS
Example:
Router# configure terminal
Step 3 interface type slot/port.subinterface-number Configures an interface type and enters interface
[multipoint | point-to-point] configuration mode.
Example:
Router(config)# interface serial 1
Step 4 backup interface dialer number Configures an interface as a secondary or dial backup
interface.
Example:
Router(config-if)# backup interface dialer 1
Step 5 exit Returns to global configuration mode.
Example:
Router(config-if)# exit
SUMMARY STEPS
1. enable
2. configure terminal
DETAILED STEPS
Example:
Router# configure terminal
Step 3 interface dialer number Creates a dialer interface and enters interface configuration
mode.
Example:
Router(config)# interface dialer 1
Step 4 encapsulation type Specifies the encapsulation type.
Example:
Router(config-if)# encapsulation ppp
Step 5 dialer persistent [delay [initial] seconds | Forces a dialer interface to be connected at all times, even
max-attempts number] in the absence of interesting traffic.
Example:
Router(config-if)# dialer persistent delay
initial 20
Step 6 tag-switching ip Enables label switching of IPv4 packets on an interface.
Example:
Router(config-if)# tag-switching ip
Step 7 exit Returns to global configuration mode.
Example:
Router(config-if)# exit
SUMMARY STEPS
1. enable
2. show mpls forwarding-table
3. show mpls interfaces [interface] [detail]
4. exit
DETAILED STEPS
Example:
Router# show mpls forwarding-table
Step 3 show mpls interfaces [interface] [detail] Displays the contents of the Multiprotocol Label Switching
(MPLS) label forwarding information base (LFIB).
Example:
Router(config)# show mpls interfaces dialer
detail
Step 4 exit Returns to global configuration mode.
Example:
Router(config)# exit
!
interface Serial0:23
no ip address
encapsulation ppp
dialer pool-member 1
ppp authentication chap
!
interface Dialer1
ip address 172.16.1.3 255.0.0.0
encapsulation ppp
dialer pool 1
dialer remote-name P1
dialer string 1114
dialer persistent
dialer-group 1
mpls ip
ppp authentication chap
!
Additional References
The following sections provide additional references related to the ISDN Backup in MPLS Core feature.
Related Documents
Related Topic Document Title
Configuring the Dialer Persistent feature “Dialer Persistent Feature”, Release 12.2(4)T
Configuring the Dial Backup feature “Configuring Dial Backup with Dialer Profiles” chapter of the
Cisco IOS Dial Technologies Configuration Guide, Release 12.2 T
Standards
Standards Title
None —
MIBs
MIBs MIBs Link
None To obtain lists of supported MIBs by platform and Cisco IOS
release, and to download MIB modules, go to the Cisco MIB website
on Cisco.com at the following URL:
http://www.cisco.com/public/sw-center/netmgmt/cmtk/mibs.shtml
RFCs
RFCs Title
None —
Technical Assistance
Description Link
Technical Assistance Center (TAC) home page, http://www.cisco.com/public/support/tac/home.shtml
containing 30,000 pages of searchable technical
content, including links to products, technologies,
solutions, technical tips, and tools. Registered
Cisco.com users can log in from this page to access
even more content.
Command Reference
This feature uses no new or modified commands. To see the command pages for the commands used with
this feature, go to the Cisco IOS Master Commands List, Release 12.4, at http://www.cisco.com/
univercd/cc/td/doc/product/software/ios124/124mindx/124index.htm.
Glossary
Note Refer to the Internetworking Terms and Acronyms for terms not included in this glossary.
This chapter describes how to configure dial backup using the Dialer Watch feature. It includes the
following main sections:
• Dialer Watch Overview
• How to Configure Dialer Backup with Dialer Watch
• Configuration Examples for Dialer Watch
To identify the hardware platform or software image information associated with a feature, use the
Feature Navigator on Cisco.com to search for information about the feature or refer to the software
release notes for a specific release. For more information, see the “Finding Additional Feature Support
Information” section on page lxxvii in the “Using Cisco IOS Software for Release 12.4” chapter.
For a complete description of the dial backup commands used to configure Dialer Watch, refer to the
Cisco IOS Dial Technologies Command Reference. To locate documentation of other commands that
appear in this chapter, use the command reference master index or search online.
3. If a valid route exists for at least one of the defined IP addresses and if the route is pointing to an
interface other than the backup interface configured for Dialer Watch, the primary link is
considered up.
4. If the primary link goes down, Dialer Watch is immediately notified by the routing protocol and the
secondary link is brought up.
5. Once the secondary link is up, at the expiration of each idle timeout, the primary link is rechecked.
6. If the primary link remains down, the idle timer is indefinitely reset.
7. If the primary link is up, the secondary backup link is disconnected. Additionally, you can set a
disable timer to create a delay for the secondary link to disconnect, after the primary link is
reestablished.
Dialer Watch provides the following advantages:
• Routing—Backup initialization is linked to the dynamic routing protocol, rather than a specific
interface or static route entry. Therefore, both primary and backup interfaces can be any interface
type, and can be used across multiple interfaces and multiple routers. Dialer Watch also relies on
convergence, which is sometimes preferred over traditional DDR links.
• Routing protocol independent—Static routes or dynamic routing protocols, such as Interior
Gateway Routing Protocol (IGRP), Enhanced IGRP (EIGRP) or Open Shortest Path First (OSPF)
can be used.
• Nonpacket semantics—Dialer Watch does not exclusively rely on interesting packets to trigger
dialing. The link is automatically brought up when the primary line goes down without postponing
dialing.
• Dial backup reliability—DDR redial functionality is extended to dial indefinitely in the event that
secondary backup lines are not initiated. Typically, DDR redial attempts are affected by
enable-timeouts and wait-for-carrier time values. Intermittent media difficulties or flapping
interfaces can cause problems for traditional DDR links. However, Dialer Watch automatically
reestablishes the secondary backup line on ISDN, synchronous, and asynchronous serial links.
The following prerequisites apply to Dialer Watch:
• The router is dial backup capable, meaning the router has a data communications equipment (DCE),
terminal adapter, or network termination 1 device attached that supports V.25bis.
• The router is configured for DDR. This configuration includes traditional commands such as dialer
map and dialer in-band commands, and so on.
• Dialer Watch is only supported for IP at this time.
For information on how to configure traditional DDR for dial backup, see the other chapters in the “Dial
Backup” part of this publication.
Command Purpose
Router(config-if)# dialer watch-group Enables Dialer Watch on the backup interface.
group-number
Command Purpose
Router(config)# dialer watch-list group-number Defines all IP addresses to be watched.
ip ip-address address-mask
The dialer watch-list command is the means to detect if the primary interface is up or down. The
primary interface is determined to be up when there is an available route with a valid metric to any of
the addresses defined in this list, and it points to an interface other than the interface on which the dialer
watch-group command is defined. The primary interface is determined to be down when there is no
available route to any of the addresses defined in the dialer watch-list command.
Note The dialer watch-disable command used in Dialer Watch configurations was Replaced in
Cisco IOS Release 12.3(11)T by the dialer watch-list delay command. When using the dialer
watch-list delay command in software later than Cisco IOS Release 12.3(11)T, you can specify both a
connect and disconnect timer for the disable timer. The disconnect time specifies that the disconnect
timer is started when the secondary link is up and after the idle timeout period has expired, and only
when software has determined that the primary route has come up
Command Purpose
Router(config-if)# dialer watch-disable seconds Applies a disable time to the interface.
Command Purpose
Router(config-if)# dialer watch-list Configures a disable time.
group-number delay {connect connect-time |
disconnect disconnect-time} • group-number—Group number assigned to the list. Valid group
numbers are from 1 to 255.
• delay—Specifies that the router will delay dialing the secondary
link when the primary link becomes unavailable.
• connect connect-time—Time, in seconds, after which the router
rechecks for availability of the primary link. If the primary link
is still unavailable, the secondary link is then dialed. Valid times
range from 1 to 2147483 seconds.
• disconnect disconnect-time—Time, in seconds, that specifies
when to disconnect. Disconnect occurs when the secondary link
is up and after the idle timeout period has expired, and only when
software has determined that the primary route has come up.
Valid times range from 1 to 2147483 seconds.
ISDN
(backup link)
bri0 172.20.10.2 bri1/0 172.20.10.1
Serial 172.22.53.0/24
192.168.10.2 network 192.168.10.1 e0/0
s0 (primary link) s2/0
maui-soho-01 maui-nas-05
60177
Note The following example uses commands supported in Cisco IOS software prior to Release 12.3(11)T. See
the updated example for configuring Dialer Watch after Cisco IOS Release 12.3(11)T that follows this
example.
Building configuration...
Building configuration...
Current configuration:
!
version 12.1
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname maui-nas-05
!
aaa new-model
aaa authentication login default local
aaa authentication login NO_AUTHEN none
aaa authentication ppp default local
! -- This is basic AAA configuration for PPP calls.
Enable secret 5 <deleted>
!
username maui-soho-01 password 0 cisco
!Username for remote router (maui-soho-01) and shared secret.
!Shared secret(used for CHAP authentication) must be the same on both sides.
!
ip subnet-zero
!
isdn switch-type basic-ni
!
interface Loopback0
ip address 172.22.1.1 255.255.255.0
!
interface Ethernet0/0
ip address 172.22.53.105 255.255.255.0
!
interface Ethernet0/1
no ip address
shutdown
!
interface BRI1/0
!Backup link.
ip address 172.20.10.1 255.255.255.0
encapsulation ppp
!When the watched route disappears, this dials the specified phone number.
dialer watch-group 8
!Enable Dialer Watch on this backup interface.
!Watch the route specified with dialer watch-list 8.
dialer-group 1
!Apply interesting traffic defined in dialer-list 1.
isdn switch-type basic-ni
isdn spid1 51255522220101 5552222
isdn spid2 51255522230101 5552223
ppp authentication chap
!Use chap authentication.
dialer watch-list 8 delay disconnect 15
!Delays disconnecting the backup interface for 15 seconds after the
!primary interface is found to be up.
!
router ospf 5
log-adjacency-changes
network 172.16.1.0 0.0.0.255 area 0
network 172.17.1.0 0.0.0.255 area 0
network 172.20.10.0 0.0.0.255 area 0
network 192.168.10.0 0.0.0.3 area 0
!
ip classless
no ip http server
!
dialer watch-list 8 ip 172.22.53.0 255.255.255.0
!This defines the route(s) to be watched.
!This exact route(including subnet mask) must exist in the routing table.
!Use the dialer watch-group 8 command to apply this list to the backup interface.
access-list 101 remark Define Interesting Traffic
access-list 101 deny ospf any any
!Mark OSPF as uninteresting.
!This will prevent OSPF hellos from keeping the link up.
Access-list 101 permit ip any any
dialer-list 1 protocol ip list 101
!Interesting traffic is defined by access-list 101.
!This is applied to BRI0 using dialer-group 1.
!
line con 0
login authentication NO_AUTHEN
transport input none
line vty 0 4
!
end
Current configuration:
!
version 12.4
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname maui-nas-05
!
aaa new-model
aaa authentication login default local
aaa authentication login NO_AUTHEN none
aaa authentication ppp default local
line aux 0
line vty 0 4
!
end
Feature History
Release Modification
12.2(8)T This feature was introduced.
This document describes the Dialer Watch Connect Delay feature in Cisco IOS Release 12.2(8)T and
includes the following sections:
• Feature Overview, page 781
• Supported Platforms, page 782
• Supported Standards, MIBs, and RFCs, page 783
• Prerequisites, page 783
• Configuration Tasks, page 783
• Verifying Dialer Watch Connect Delay Configuration
• Configuration Examples, page 785
• Command Reference, page 786
Feature Overview
The Dialer Watch Connect Delay feature introduces the ability to configure a delay in bringing up a
secondary link when a primary link that is monitored by Dialer Watch goes down and is removed from
the routing table. Previously, the router would instantly dial a secondary route without allowing time for
the primary route to come back up. When the Dialer Watch Connect Delay feature is configured, the
router will check for availability of the primary link at the end of the specified delay time before dialing
the secondary link.
Benefits
The Dialer Watch Connect Delay feature allows users greater control over the use of a secondary link on
monitored IP addresses or networks. Configuring the router to delay bringing up a secondary link when
the watched primary link goes down will allow time for the primary link to be restored in the event of a
temporary outage.
Related Documents
• The part “Dial-on-Demand Routing Configuration” in the Cisco IOS Dial Technologies
Configuration Guide, Release 12.2.
• The chapter “Configuring Dial Backup Using Dialer Watch” in the Cisco IOS Dial Technologies
Configuration Guide, Release 12.2.
• Cisco IOS Dial Technologies Command Reference, Release 12.2
Supported Platforms
• Cisco 805
• Cisco 806
• Cisco 820
• Cisco 827
• Cisco 828
• Cisco 1600 series
• Cisco 1700
• Cisco 1710
• Cisco 2600 series
• Cisco 3640
• Cisco 3660
• Cisco 7100
• Cisco 7200
• Cisco 7500
• soho 78
• mc3810
• C6MSFC2
To access Cisco Feature Navigator, you must have an account on Cisco.com. If you have forgotten or
lost your account information, send a blank e-mail to [email protected]. An automatic check
will verify that your e-mail address is registered with Cisco.com. If the check is successful, account
details with a new random password will be e-mailed to you. Qualified users can establish an account
on Cisco.com by following the directions at http://www.cisco.com/register.
Cisco Feature Navigator is updated regularly when major Cisco IOS software releases and technology
releases occur. For the most current information, go to the Cisco Feature Navigator home page at the
following URL:
http://www.cisco.com/go/fn
MIBs
No new or modified MIBs are supported by this feature.
To obtain lists of supported MIBs by platform and Cisco IOS release, and to download MIB modules,
go to the Cisco MIB website on Cisco.com at the following URL:
http://www.cisco.com/public/sw-center/netmgmt/cmtk/mibs.shtml
RFCs
No new or modified RFCs are supported by this feature.
Prerequisites
Dial-on-Demand routing (DDR) must be configured and Dialer Watch must be enabled. For more
information on configuring DDR, refer to the following documents:
• The part “Dial-on-Demand Routing Configuration” in the Cisco IOS Dial Technologies
Configuration Guide, Release 12.2.
• The chapter “Configuring Dial Backup Using Dialer Watch” in the Cisco IOS Dial Technologies
Configuration Guide, Release 12.2.
Configuration Tasks
See the following sections for configuration tasks for the Dialer Watch Connect Delay feature. Each task
in the list is identified as either required or optional.
• Configuring a Delay Before Activating a Secondary Link (required)
• Configuring a Delay Before Disconnecting the Secondary Link (optional)
Command Purpose
Router(config)# dialer watch-list group-number Configures a delay in dialing the secondary link when the primary
delay connect connect-time link becomes unavailable.
• The delay connect keyword phrase specifies that the router
will delay dialing the secondary link when the primary link
becomes unavailable.
• The connect-time argument specifies the time, in seconds,
after which the router rechecks for availability of the primary
link. If the primary link is still unavailable, the secondary
link is then dialed. Valid times range from 1 to 2147483.
Command Purpose
Router(config)# dialer watch-list group-number Configures a delay in disconnecting the secondary link after
delay disconnect disconnect-time detecting availability of the primary link.
• The delay disconnect keyword phrase specifies that the
router will delay disconnecting the secondary link after
detecting availability of the primary link.
• The disconnect-time argument specifies the time, in seconds,
after which the router disconnects the secondary link once
the primary link has been detected. Valid times range from 1
to 2147483.
Step 1 Enter the show running-config command to verify the configuration of Dialer Watch connect and
disconnect delays:
router# show running-config
Connect Delay
------------------------
Disconnect delay
------------------------
Configuration Examples
This section provides the following configuration examples:
• Configuring a Delay Before Activating a Secondary Link Example
• Configuring a Delay Before Disconnecting a Secondary Link Example
Command Reference
The following new command is pertinent to this feature. To see the command pages for this command
and other commands used with this feature, go to the Cisco IOS Master Commands List, Release 12.4,
at http://www.cisco.com/univercd/cc/td/doc/product/software/ios124/124mindx/124index.htm.
• dialer watch-list delay
The VRF Aware Dialer Watch feature enhances dialer watch functionality by allowing an IP address and
VPN routing and forwarding (VRF) instance pair to be watched for dial backup.
Finding Support Information for Platforms and Cisco IOS Software Images
Use Cisco Feature Navigator to find information about platform support and Cisco IOS software image
support. Access Cisco Feature Navigator at http://www.cisco.com/go/fn. You must have an account on
Cisco.com. If you do not have an account or have forgotten your username or password, click Cancel at
the login dialog box and follow the instructions that appear.
Contents
• Information About VRF Aware Dialer Watch, page 788
• How to Configure VRF Aware Dialer Watch, page 789
• Configuration Examples for VRF Aware Dialer Watch, page 791
• Additional References, page 792
• Command Reference, page 793
CE3
Primary link
PE PE
CE2 VRF3 CE
VRF2 IP VPN
VRF1
CE1 Customer
site
Each VLAN is
associated
Secondary links with each VRF
Dial-out
ISDN When a primary link goes
down, Dialer Watch detects
VRF it at the VRF and calls the
103357
appropriate CE
A typical scenario for the VRF Aware Dialer Watch feature follows:
• A VRF router learns the route to the CE from a PE.
• The VRF router watches these learned routes to the CEs.
• The primary link between a PE and CE goes down.
• The watched route goes down in the VRF router.
• Dialer Watch call is initiated to the corresponding CE.
The backup link will be bound to the correct VRF. In configurations with a dialer profile, the dialer
profile interface is statically bound to the corresponding VRF. In configurations without a dialer profile,
a virtual access interface is created dynamically that is bound to the VRF.
the “Related Documents” section for additional information. See the “Configuration Examples for VRF
Aware Dialer Watch” section for examples of how the VRF Aware Dialer Watch feature can be
configured.
SUMMARY STEPS
1. enable
2. configure terminal
3. dialer watch-list group-number {ip ip-address address-mask [vrf vrf-name] | delay route-check
initial seconds}
4. exit
DETAILED STEPS
Example:
Router# configure terminal
Step 3 dialer watch-list group-number {ip ip-address Specifies the list of watched routes of IP addresses or IP
address-mask [vrf vrf-name] | delay route-check address and VRF pairs to be monitored by Dialer Watch.
initial seconds}
• group-number—Matches the group number set in a
dialer watch-group interface configuration command.
Example:
Router(config)# dialer watch-list 1 ip 10.2.1.0 • ip ip-address address-mask—Specifies the IP address
255.255.255.0 vrf v1 or address range and address mask to be applied to the
list.
• vrf vrf-name—(Optional) Specifies a watched route
using the VRF table named in the vrf-name argument.
• delay route-check initial seconds—Number of
seconds after which the router ensures that the primary
route is up once initial startup is complete.
Note You can define one watch route that watches the
same IP address, but belongs to a different VRF, in
a single watch list.
Step 4 exit Exits global configuration mode.
• Use the end command to save your configuration and
Example: leave configuration mode.
Router(config)# exit
Additional References
The following sections provide references related to the VRF Aware Dialer Watch feature.
Related Documents
Related Topic Document Title
Dialer Watch “Configuring Dial Backup Using Dialer Watch” chapter in the Cisco
IOS Dial Technologies Configuration Guide
Dialer commands Cisco IOS Dial Technologies Command Reference, Release 12.3 T
VRF-aware dialer maps Dialer Map VRF-Aware for an MPLS VPN feature module
Standards
Standards Title
None —
MIBs
MIBs MIBs Link
None To locate and download MIBs for selected platforms, Cisco IOS
releases, and feature sets, use Cisco MIB Locator found at the
following URL:
http://www.cisco.com/go/mibs
RFCs
RFCs Title
None —
Technical Assistance
Description Link
Technical Assistance Center (TAC) home page, http://www.cisco.com/public/support/tac/home.shtml
containing 30,000 pages of searchable technical
content, including links to products, technologies,
solutions, technical tips, and tools. Registered
Cisco.com users can log in from this page to access
even more content.
Command Reference
The following modified command is pertinent to this feature. To see the command pages for this
command and other commands used with this feature, go to the Cisco IOS Master Commands List,
Release 12.4, at http://www.cisco.com/univercd/cc/td/doc/product/software/ios124/124mindx/
124index.htm.
• dialer watch-list
The Reliable Static Routing Backup Using Object Tracking feature introduces the ability for the
Cisco IOS software to use Internet Control Message Protocol (ICMP) pings to identify when a
Point-to-Point over Ethernet (PPPoE) or IP Security Protocol (IPSec) Virtual Private Network (VPN)
tunnel goes down, allowing the initiation of a backup connection from any alternative port. The Reliable
Static Routing Backup Using Object Tracking feature is compatible with both preconfigured static routes
and Dynamic Host Configuration Protocol (DHCP) configurations.
Feature History for Reliable Static Routing Backup Using Object Tracking
Release Modification
12.3(2)XE This feature was introduced.
12.3(8)T Support for this feature was integrated into Cisco IOS Release 12.3(8)T.
12.3(14)T The Cisco IOS command-line interface (CLI) used to configure the
Cisco IOS IP Service Level Agreements (SLAs) monitoring and
management feature set was modified.
Finding Support Information for Platforms and Cisco IOS Software Images
Use Cisco Feature Navigator to find information about platform support and Cisco IOS software image
support. Access Cisco Feature Navigator at http://www.cisco.com/go/fn. You must have an account on
Cisco.com. If you do not have an account or have forgotten your username or password, click Cancel at
the login dialog box and follow the instructions that appear.
Contents
• Prerequisites for Reliable Static Routing Backup Using Object Tracking, page 796
• Restrictions for Reliable Static Routing Backup Using Object Tracking, page 796
• Information About Reliable Static Routing Backup Using Object Tracking, page 796
• How to Configure Reliable Static Routing Backup Using Object Tracking, page 797
• Configuration Examples for Reliable Static Routing Backup Using Object Tracking, page 813
• Additional References, page 816
• Command Reference, page 817
Figure 72 Reliable Static Routing Backup Using Object Tracking Network Diagram
Traffic from the remote LAN is forwarded to the main office from the primary interface of the remote
router. If the connection to the main office is lost, the status of the tracked object changes from up to
down. When the state of the tracked object changes to down, the routing table entry for the primary
interface is removed and the preconfigured floating static route is installed on the secondary interface.
Traffic is then forwarded to the preconfigured destination from the secondary interface. If DDR is
configured on the secondary interface, interesting traffic will trigger DDR. The backup circuit can be
configured to use the public switched telephone network (PSTN) or the Internet. When the state of the
tracked object changes from down to up, the routing table entry for the primary interface is reinstalled
and the floating static route for the secondary interface is removed.
• Verifying the State of the Tracked Object for Reliable Static Routing Backup Using Object Tracking,
page 812 (optional)
Configuring the Primary Interface for Reliable Static Routing Backup Using
Object Tracking
You must configure the connection between the primary interface and the remote gateway. The status of
this connection will be monitored by the Reliable Static Routing Backup Using Object Tracking feature.
The primary interface can be configured in one of three ways: PPPoE, DHCP, or static routing. You must
choose one of these configuration types. If you are unsure of which method to use with your network
configuration, consult your internet service provider (ISP) or network administrator.
Perform one of the following tasks to configure the primary interface:
• Configuring the Primary Interface for PPPoE, page 798
• Configuring the Primary Interface for DHCP, page 799
• Configuring the Primary Interface for Static Routing, page 800
SUMMARY STEPS
1. enable
2. configure terminal
3. interface type number [name-tag]
4. description string
5. no ip address
6. pvc [name] vpi/vci [ces | ilmi | qsaal | smds | l2transport]
7. pppoe-client dial-pool-number number [dial-on-demand]
DETAILED STEPS
Example:
Router# configure terminal
Example:
Router(config-if)# description primary-link
Step 5 no ip address Sets a primary or secondary IP address for an interface.
Example:
Router(config-if)# no ip address
Step 6 pvc [name] vpi/vci [ces | ilmi | qsaal | smds | Creates or assigns a name to an ATM permanent virtual
l2transport] circuit (PVC), specifies the encapsulation type on an ATM
PVC, and enters ATM virtual circuit configuration mode.
Example:
Router(config-if)# pvc 0/33
Step 7 pppoe-client dial-pool-number number Configures a PPPoE client and specifies DDR functionality.
[dial-on-demand]
Example:
Router(config-if-atm-vc)# pppoe-client
dial-pool-number 1
SUMMARY STEPS
1. enable
2. configure terminal
3. interface type number [name-tag]
4. description string
5. ip dhcp client route track number
6. ip address dhcp
DETAILED STEPS
Example:
Router# configure terminal
Step 3 interface type number [name-tag] Configures an interface type and enters interface
configuration mode.
Example:
Router(config)# interface FastEthernet 0/0
Step 4 description string Adds a description to an interface configuration.
Example:
Router(config-if)# description primary-link
Step 5 ip dhcp client route track number Configures the DHCP client to associate any added routes
with the specified track number.
Example: • route track number—Associates a track object with
Router(config-if)# ip dhcp client route track the DHCP-installed static route. Valid values for the
123 number argument range from 1 to 500.
Note You must configure the ip dhcp client command
before issuing the ip address dhcp command on an
interface. The ip dhcp client command is checked
only when an IP address is acquired from DHCP. If
the ip dhcp client command is issued after an IP
address has been acquired from DHCP, it will not
take effect until the next time the router acquires an
IP address from DHCP.
Step 6 ip address dhcp Acquires an IP address on an Ethernet interface from
DHCP.
Example:
Router(config-if)# ip address dhcp
SUMMARY STEPS
1. enable
2. configure terminal
3. interface type number [name-tag]
4. description string
5. ip address ip-address mask [secondary]
DETAILED STEPS
Example:
Router# configure terminal
Step 3 interface type number [name-tag] Configures an interface type and enters interface
configuration mode.
Example:
Router(config)# interface FastEthernet 0/0
Step 4 description string Adds a description to an interface configuration.
Example:
Router(config-if)# description primary-link
Step 5 ip address ip-address mask [secondary] Sets a primary or secondary IP address for an interface.
Example:
Router(config-if)# ip address 10.1.1.1
255.0.0.0
Configuring the Backup Interface for Reliable Static Routing Backup Using
Object Tracking
You must configure a backup interface to contact the remote gateway. If the connection between the
primary interface and the remote gateway goes down, the backup interface will be used.
Perform the following task to configure the backup interface. This task applies to PPPoE, DHCP, and
static routing configurations.
SUMMARY STEPS
1. enable
2. configure terminal
3. interface type number [name-tag]
4. description string
5. ip address ip-address mask [secondary]
DETAILED STEPS
Example:
Router# configure terminal
Step 3 interface type number [name-tag] Configures an interface type and enters interface
configuration mode.
Example:
Router(config)# interface Dialer 0
Step 4 description string Adds a description to an interface configuration.
Example:
Router(config-if)# description backup-link
Step 5 ip address ip-address mask [secondary] Sets a primary or secondary IP address for an interface.
Example:
Router(config-if)# ip address 10.2.2.2
255.0.0.0
Configuring Network Monitoring with Cisco IOS IP SLAs for Reliable Static
Routing Backup Using Object Tracking
The Reliable Static Routing Backup Using Object Tracking feature uses a Cisco IOS IP SLAs
configuration to generate ICMP pings to monitor the state of the connection to the primary gateway.
Perform this task to configure a Cisco IOS IP SLAs to ping the target address. This task applies to
PPPoE, DHCP, and static routing configurations.
SUMMARY STEPS
1. enable
2. configure terminal
3. ip sla monitor [operation-number]
4. type echo protocol protocol-type target [source-ipaddr ip-address]
5. timeout milliseconds
6. frequency seconds
7. threshold milliseconds
8. exit
DETAILED STEPS
Example:
Router# configure terminal
Step 3 ip sla monitor [operation-number] Begins configuring a Cisco IOS IP SLAs operation and
enters IP SLA monitor configuration mode.
Example:
Router(config)# ip sla monitor 1
Step 4 type echo protocol ipIcmpEcho Configures a Cisco IOS IP SLAs end-to-end echo response
{destination-ip-address | destination-hostname} time probe operation.
[source-ipaddr {ip-address | hostname}
Example:
Router(config-rtr)# type echo protocol
ipIcmpEcho 172.16.23.7
Step 5 timeout milliseconds Sets the amount of time for which the Cisco IOS IP SLAs
operation waits for a response from its request packet.
Example:
Router(config-rtr)# timeout 1000
Step 6 frequency seconds Sets the rate at which a specified Cisco IOS IP SLAs
operation is sent into the network.
Example:
Router(config-rtr)# frequency 3
Step 7 threshold milliseconds Sets the rising threshold (hysteresis) that generates a
reaction event and stores history information for the
Cisco IOS IP SLAs operation.
Example:
Router(config-rtr)# threshold 2
Step 8 exit Exits RTR configuration mode.
Example:
Router(config-rtr)# exit
Example:
Router(config)# ip sla monitor schedule 1 life
forever start-time now
Step 10 track object-number rtr rtr-operation {state | Tracks the state of a Cisco IOS IP SLAs operation and
reachability} enters tracking configuration mode.
Example:
Router(config)# track 123 rtr 1 reachability
Configuring the Routing Policy for Reliable Static Routing Backup Using Object
Tracking
In order to track the status of the primary connection to the remote gateway, the Cisco IOS IP SLAs
ICMP pings must be routed only from the primary interface.
Perform one of the following tasks to configure a routing policy that will ensure that the Cisco IOS IP
SLAs pings are always routed out of the primary interface:
• Configuring a Routing Policy for PPPoE, page 804
• Configuring a Routing Policy for DHCP, page 806
• Configuring a Routing Policy for Static Routing, page 807
SUMMARY STEPS
1. enable
2. configure terminal
3. access-list access-list-number [dynamic dynamic-name [timeout minutes]] {deny | permit} icmp
source source-wildcard destination destination-wildcard [icmp-type [icmp-code] | icmp-message]
[precedence precedence] [tos tos] [log | log-input] [time-range time-range-name] [fragments]
4. route-map map-tag [permit | deny] [sequence-number]
5. match ip address {access-list-number | access-list-name} [... access-list-number |
... access-list-name]
6. set interface type number [...type number]
7. exit
8. ip local policy route-map map-tag
DETAILED STEPS
Example:
Router# configure terminal
Step 3 access-list access-list-number [dynamic Defines an extended IP access list.
dynamic-name [timeout minutes]] {deny | permit}
icmp source source-wildcard destination
destination-wildcard [icmp-type [icmp-code] |
icmp-message] [precedence precedence] [tos tos]
[log | log-input] [time-range time-range-name]
[fragments]
Example:
Router(config)# access-list 101 permit icmp any
host 172.16.23.7 echo
Step 4 route-map map-tag [permit | deny] Enters route-map configuration mode and defines the
[sequence-number] conditions for redistributing routes from one routing
protocol into another.
Example:
Router(config)# route-map MY-LOCAL-POLICY
permit 10
Step 5 match ip address {access-list-number | Distributes any routes that have a destination network
access-list-name} [... access-list-number | number address that is permitted by a standard or extended
... access-list-name]
access list, or performs policy routing on packets.
Example:
Router(config-route-map)# match ip address 101
Step 6 set interface type number [... type number] Indicates where to output packets that pass a match clause
of a route map for policy routing.
Example: Note The interface must be configured for null 0 in this
Router(config-route-map)# set interface null 0 scenario. If the next hop is not set because the
interface is down, the packet will be routed to the
null interface and discarded. Otherwise policy
routing will fail and the packet will be routed using
the Routing Information Base (RIB) card. Routing
the packet using the RIB card is undesirable.
Example:
Router(config-route-map)# exit
Step 8 ip local policy route-map map-tag Identifies a route map to use for local policy routing.
Example:
Router(config)# ip local policy route-map
MY-LOCAL-POLICY
SUMMARY STEPS
1. enable
2. configure terminal
3. access-list access-list-number [dynamic dynamic-name [timeout minutes]] {deny | permit} icmp
source source-wildcard destination destination-wildcard [icmp-type [icmp-code] | icmp-message]
[precedence precedence] [tos tos] [log | log-input] [time-range time-range-name] [fragments]
4. route-map map-tag [permit | deny] [sequence-number]
5. match ip address {access-list-number | access-list-name} [... access-list-number |
... access-list-name]
6. set ip next-hop dynamic dhcp
7. exit
8. ip local policy route-map map-tag
DETAILED STEPS
Example:
Router# configure terminal
Example:
Router(config)# access-list 101 permit icmp any
host 172.16.23.7 echo
Step 4 route-map map-tag [permit | deny] Enters route-map configuration mode and defines the
[sequence-number] conditions for redistributing routes from one routing
protocol into another.
Example:
Router(config)# route-map MY-LOCAL-POLICY
permit 10
Step 5 match ip address {access-list-number | Distributes any routes that have a destination network
access-list-name} [... access-list-number | number address that is permitted by a standard or extended
... access-list-name]
access list, or performs policy routing on packets.
Example:
Router(config-route-map)# match ip address 101
Step 6 set ip next-hop dynamic dhcp Sets the next hop to the gateway that was most recently
learned by the DHCP client.
Example:
Router(config-route-map)# set ip next-hop
dynamic dhcp
Step 7 exit Exits route-map configuration mode.
Example:
Router(config-route-map)# exit
Step 8 ip local policy route-map map-tag Identifies a route map to use for local policy routing.
Example:
Router(config)# ip local policy route-map
MY-LOCAL-POLICY
Configuring a Routing Policy for Static Routing with a Point-to-Point Primary Gateway
Perform this task to configure a routing policy if the primary interface is configured for static routing
and the primary gateway is a point-to-point gateway.
SUMMARY STEPS
1. enable
2. configure terminal
3. access-list access-list-number [dynamic dynamic-name [timeout minutes]] {deny | permit} icmp
source source-wildcard destination destination-wildcard [icmp-type [icmp-code] | icmp-message]
[precedence precedence] [tos tos] [log | log-input] [time-range time-range-name] [fragments]
4. route-map map-tag [permit | deny] [sequence-number]
5. match ip address {access-list-number | access-list-name} [... access-list-number |
... access-list-name]
6. set interface type number [...type number]
7. exit
8. ip local policy route-map map-tag
DETAILED STEPS
Example:
Router# configure terminal
Step 3 access-list access-list-number [dynamic Defines an extended IP access list.
dynamic-name [timeout minutes]] {deny | permit}
icmp source source-wildcard destination
destination-wildcard [icmp-type [icmp-code] |
icmp-message] [precedence precedence] [tos tos]
[log | log-input] [time-range time-range-name]
[fragments]
Example:
Router(config)# access-list 101 permit icmp any
host 172.16.23.7 echo
Step 4 route-map map-tag [permit | deny] Enters route-map configuration mode and defines the
[sequence-number] conditions for redistributing routes from one routing
protocol into another.
Example:
Router(config)# route-map MY-LOCAL-POLICY
permit 10
Example:
Router(config-route-map)# match ip address 101
Step 6 set interface type number [...type number] Indicates where to output packets that pass a match clause
of a route map for policy routing.
Example:
Router(config-route-map)# set interface dialer
0 Null 0
Step 7 exit Exits route-map configuration mode.
Example:
Router(config-route-map)# exit
Step 8 ip local policy route-map map-tag Identifies a route map to use for local policy routing.
Example:
Router(config)# ip local policy route-map
MY-LOCAL-POLICY
Configuring a Routing Policy for Static Routing with a Multipoint Primary Gateway
Perform this task to configure a routing policy if the primary interface is configured for static routing
and the primary gateway is a multipoint gateway.
SUMMARY STEPS
1. enable
2. configure terminal
3. access-list access-list-number [dynamic dynamic-name [timeout minutes]] {deny | permit} icmp
source source-wildcard destination destination-wildcard [icmp-type [icmp-code] | icmp-message]
[precedence precedence] [tos tos] [log | log-input] [time-range time-range-name] [fragments]
4. route-map map-tag [permit | deny] [sequence-number]
5. match ip address {access-list-number | access-list-name} [... access-list-number |
... access-list-name]
6. set ip next-hop ip-address [...ip-address]
7. set interface type number [...type number]
8. exit
9. ip local policy route-map map-tag
DETAILED STEPS
Example:
Router# configure terminal
Step 3 access-list access-list-number [dynamic Defines an extended IP access list.
dynamic-name [timeout minutes]] {deny | permit}
icmp source source-wildcard destination
destination-wildcard [icmp-type [icmp-code] |
icmp-message] [precedence precedence] [tos tos]
[log | log-input] [time-range time-range-name]
[fragments]
Example:
Router(config)# access-list 101 permit icmp any
host 172.16.23.7 echo
Step 4 route-map map-tag [permit | deny] Enters route-map configuration mode and defines the
[sequence-number] conditions for redistributing routes from one routing
protocol into another.
Example:
Router(config)# route-map MY-LOCAL-POLICY
permit 10
Step 5 match ip address {access-list-number | Distributes any routes that have a destination network
access-list-name} [... access-list-number | number address that is permitted by a standard or extended
... access-list-name]
access list, or performs policy routing on packets.
Example:
Router(config-route-map)# match ip address 101
Step 6 set ip next-hop ip-address [...ip-address] Indicates where to output packets that pass a match clause
of a route map for policy routing.
Example:
Router(config-route-map)# set ip next-hop
10.1.1.242
Step 7 set interface type number [...type number] Indicates where to output packets that pass a match clause
of a route map for policy routing.
Example:
Router(config-route-map)# set interface null 0
Example:
Router(config-route-map)# exit
Step 9 ip local policy route-map map-tag Identifies a route map to use for local policy routing.
Example:
Router(config)# ip local policy route-map
MY-LOCAL-POLICY
Configuring the Default Route for the Primary Interface Using Static Routing
Perform this task to configure the static default route only if you are using static routing.
SUMMARY STEPS
1. enable
2. configure terminal
3. ip route prefix mask {ip-address | interface-type interface-number [ip-address]} [distance] [name]
[permanent | track number] [tag tag]
DETAILED STEPS
Example:
Router# configure terminal
Step 3 ip route prefix mask {ip-address | Establishes static routes.
interface-type interface-number [ip-address]}
[distance] [name] [permanent | track number] • track number—Specifies that the static route will be
[tag tag] installed only if the configured track object is up.
Example:
Router(config)# ip route 0.0.0.0 0.0.0.0
10.1.1.242 track 123
SUMMARY STEPS
1. enable
2. configure terminal
3. ip route network-number network-mask {ip-address | interface} [distance] [name name]
DETAILED STEPS
Example:
Router# configure terminal
Step 3 ip route network-number network-mask Establishes static routes and defines the next hop.
{ip-address | interface} [distance] [name name]
Example:
Router(config)# ip route 0.0.0.0 0.0.0.0
10.2.2.125 254
Verifying the State of the Tracked Object for Reliable Static Routing Backup
Using Object Tracking
Perform the following task to determine if the state of the tracked object is up or down.
SUMMARY STEPS
1. enable
2. show ip route track-table
DETAILED STEPS
Example:
Router# show ip route track-table
interface serial 0
description backup-link
ip address 10.2.2.2 255.0.0.0
ip sla monitor 1
type echo protocol ipIcmpEcho 172.16.23.7
timeout 1000
frequency 3
threshold 2
interface Dialer 0
description backup-link
ip address 10.2.2.2 255.0.0.0
ip sla monitor 1
type echo protocol ipIcmpEcho 172.16.23.7
timeout 1000
frequency 3
threshold 2
The following example configures the Reliable Static Routing Backup Using Object Tracking feature
using static routing for a multipoint primary gateway. Both the primary interface and the backup
interface are Ethernet interfaces.
interface ethernet 0
description primary-link
ip address 10.1.1.1 255.0.0.0
interface ethernet 1
description backup-link
ip address 10.2.2.2 255.0.0.0
ip sla monitor 1
type echo protocol ipIcmpEcho 172.16.23.7
timeout 1000
frequency 3
threshold 2
Additional References
The following sections provide references related to the Reliable Static Routing Backup Using Object
Tracking feature.
Related Documents
Related Topic Document Title
IPSec configuration tasks The “Configuring Security for VPNs with IPSec” chapter in the
Cisco IOS Security Configuration Guide, Release 12.4
IPSec commands: complete command syntax, The Cisco IOS Security Command Reference, Release 12.4
command mode, command history, defaults, usage
guidelines, and examples
VPDN configuration tasks The Cisco IOS VPDN Configuration Guide, Release 12.4
VPDN commands: complete command syntax, The Cisco IOS VPDN Command Reference, Release 12.4
command mode, command history, defaults, usage
guidelines, and examples
PPPoE configuration tasks The “PPPoA, PPPoE, PPPoX” part in the Cisco IOS Broadband and
DSL Configuration Guide, Release 12.4
PPPoE commands: complete command syntax, The Cisco IOS Broadband and DSL Command Reference, Release
command mode, command history, defaults, usage 12.4
guidelines, and examples
DDR configuration tasks • The “Dial-on-Demand Routing Configuration” part in the
Cisco IOS Dial Technologies Configuration Guide,
Release 12.4
• Configuring and Troubleshooting DDR Backup
DDR commands: complete command syntax, The Cisco IOS Dial Technologies Command Reference,
command mode, command history, defaults, usage Release 12.4
guidelines, and examples
IP SLAs configuration tasks Cisco IOS IP SLAs Configuration Guide, Release 12.4
IP SLAs commands: complete command syntax, Cisco IOS IP SLAs Command Reference, Release 12.4
command mode, command history, defaults, usage
guidelines, and examples
Standards
Standards Title
None —
MIBs
MIBs MIBs Link
None To locate and download MIBs for selected platforms, Cisco IOS
releases, and feature sets, use Cisco MIB Locator found at the
following URL:
http://www.cisco.com/go/mibs
RFCs
RFCs Title
None —
Technical Assistance
Description Link
Technical Assistance Center (TAC) home page, http://www.cisco.com/public/support/tac/home.shtml
containing 30,000 pages of searchable technical
content, including links to products, technologies,
solutions, technical tips, and tools. Registered
Cisco.com users can log in from this page to access
even more content.
Command Reference
The following new and modified commands are pertinent to this feature. To see the command pages for
these commands and other commands used with this feature, go to the Cisco IOS Master Commands List,
Release 12.4, at http://www.cisco.com/univercd/cc/td/doc/product/software/ios124/124mindx/
124index.htm.
• ip dhcp client
• ip route
• set ip next-hop dynamic dhcp
• show ip route track-table
This chapter describes how to configure the Cisco Easy IP feature. It includes the following main
sections:
• Cisco Easy IP Overview
• How to Configure Cisco Easy IP
• Configuration Examples for Cisco Easy IP
To identify the hardware platform or software image information associated with a feature, use the
Feature Navigator on Cisco.com to search for information about the feature or refer to the software
release notes for a specific release. For more information, see the “Finding Additional Feature Support
Information” section on page lxxvii in the “Using Cisco IOS Software for Release 12.4” chapter.
For a complete description of the Cisco Easy IP commands in this chapter, refer to the Cisco IOS Dial
Technologies Command Reference. To locate documentation of other commands that appear in this
chapter, use the command reference master index or search online.
Settings
[N] Domain name
[V] VTP mode control
[F] VTP pruning mode
[O] VTP traps
Actions
[L] List VLANs ] Enter VLAN numbers
[S] Save
[N] Next VLAN
[M] Modify VLANs ] Select VLAN number [P] Previous VLAN
[G] Go to VLAN [Select a VLAN]
[X] Exit to previous menu
al
Step 1 When a SOHO host generates “interesting” traffic (as defined by Access Control Lists) for dialup (first
time only), the Easy IP router requests a single registered IP address from the access server at the central
site via PPP/IPCP. (See Figure 74.)
n name
ode control
uning mode
aps
WAN link
54720
Host B DHCP
server
Step 3 The Cisco Easy IP router uses port-level NAT functionality to automatically create a translation that
associates the registered IP address of the WAN interface with the private IP address of the client. (See
Figure 76.)
WAN link
54720
Host B DHCP
server
Step 4 The remote hosts contain multiple static IP addresses while the Cisco Easy IP router obtains a single
registered IP address using PPP/IPCP. The Cisco Easy IP router then creates port-level multiplexed NAT
translations between these addresses so that each remote host address (inside private address) is
translated to a single external address assigned to the Cisco Easy IP router. This many-to-one address
translation is also called port-level multiplexing or PAT. Note that the NAT port-level multiplexing
function can be used to conserve global addresses by allowing the remote routers to use one global
address for many local addresses. (See Figure 77.)
Host A Easy IP
10.0.0.1 router
Host B DHCP
10.0.0.2 server
NAT Table
Inside Outside
10.0.0.1 172.18.9.4 : 4880
54718
10.0.0.2 172.18.9.4 : 4881
Command Purpose
Step 1 Router(config)# access-list access-list-number Defines a standard access list permitting those addresses that
permit source [source-wildcard] are to be translated.
Step 2 Router(config)# ip nat inside source list Establishes dynamic source translation, identifying the
access-list-number interface dialer-name access list defined in the prior step.
overload
For information about creating access lists, refer to the chapter “Configuring IP Services” in the
Cisco IOS IP Configuration Guide.
Command Purpose
Step 1 Router(config)# interface type number Selects a specific LAN interface and begins interface
configuration mode.
Step 2 Router(config-if)# ip address address mask Defines the IP address and subnet mask for this interface.
For information about assigning IP addresses and subnet masks to network interfaces, refer to the chapter
“Configuring IP Services” in the Cisco IOS IP Configuration Guide.
Command Purpose
Router(config-if)# ip nat inside Defines the interface as internal for NAT.
Command Purpose
Step 1 Router(config)# interface type number Selects the WAN interface and begins interface
configuration mode.
Step 2 Router(config-if)# no ip address Removes any associated IP address from this interface.
Command Purpose
Step 3 Router(config-if)# encapsulation ppp Selects PPP as the encapsulation method for this interface.
Step 4 Router(config-if)# dialer pool-member number Binds the WAN interface to the dialer interface.
Command Purpose
Step 1 Router(config)# interface dialer-name Selects the dialer interface and begins interface
configuration mode.
Step 2 Router(config-if)# ip address negotiated Enables PPP/IPCP negotiation for this interface.
Command Purpose
Step 1 Router(config)# interface dialer-name Selects the dialer interface and begins interface
configuration mode.
Step 2 Router(config-if)# ip nat outside Defines the interface as external for network address
translation.
Command Purpose
Step 1 Router(config)# interface dialer-name Selects the dialer interface and begins interface
configuration mode.
Step 2 Router(config-if)# dialer Specifies for a dialer interface the length of time the
wait-for-carrier-time seconds interface waits for a carrier before timing out.
Step 3 Router(config-if)# dialer hold-queue packets Creates a dialer hold queue and specifies the number of
packets to be held in it.
Step 4 Router(config-if)# dialer remote-name username Specifies the remote router Challenge Handshake
Authentication Protocol (CHAP) authentication name.
Command Purpose
Step 5 Router(config-if)# dialer idle-timeout seconds Specifies the amount of idle time that can pass before calls
to the central access server are disconnected. See the next
section “Timeout Considerations,” for more details on this
setting.
Step 6 Router(config-if)# dialer string dialer-string Specifies the telephone number required to reach the central
access server.
Step 7 Router(config-if)# dialer pool number Specifies the dialing pool to use.
Step 8 Router(config-if)# dialer-group group-number Assigns the dialer interface to a dialer group.
Timeout Considerations
Dynamic NAT translations time out automatically after a predefined default period. Although
configurable, with the port-level NAT functionality in Cisco Easy IP, Domain Name System (DNS) User
Datagram Protocol (UDP) translations time out after 5 minutes, while DNS translations time out after 1
minute by default. TCP translations time out after 24 hours by default, unless a TCP Reset (RST) or TCP
Finish (FIN) is seen in the TCP stream, in which case the translation times out after 1 minute.
If the Cisco IOS Easy IP router exceeds the dialer idle-timeout period, it is expected that all active TCP
sessions were previously closed via an RST or FIN. NAT times out all TCP translations before the
Cisco Easy IP router exceeds the dialer idle-timeout period. The router then renegotiates another
registered IP address the next time the WAN link is brought up, thereby creating new dynamic NAT
translations that bind the IP addresses of the LAN host to the newly negotiated IP address.
!
! The following command defines interface dialer1 as external for NAT.
ip nat outside
dialer remote-name dallas
dialer idle-timeout 180
!
! The following command defines the dialer string for the central access server.
dialer string 4159991234
dialer pool 1
dialer-group 1
!
! The following commands define the static route to the WAN interface.
ip route 0.0.0.0 0.0.0.0 dialer1
access-list 101 permit ip 10.0.0.0 0.255.255.255 any
dialer-list 1 protocol ip list 101
The following example shows how to configure an asynchronous interface (interface async1) to obtain
its IP address via PPP/IPCP address negotiation:
! This command defines the NAT pool.
ip nat inside source list 101 interface dialer 1 overload
!
! The following commands define the LAN IP address and subnet mask.
interface ethernet0
ip address 10.0.0.4 255.0.0.0
!
! The following command defines ethernet0 as internal for NAT.
ip nat inside
!
! The following commands bind the physical dialer1 interface.
interface async1
no ip address
encapsulation ppp
async mode dedicated
dialer pool-member 1
!
interface dialer1
!
! The following command enables PPP/IPCP negotiation for this interface.
ip address negotiated
encapsulation ppp
!
! The following command defines interface dialer1 as external for NAT.
ip nat outside
dialer wait-for-carrier-time 30
dialer hold-queue 10
dialer remote-name dallas
dialer idle-timeout 180
!
! The following command defines the dialer string for the central access server.
dialer string 4159991234
dialer pool 1
dialer-group 1
!
! The following commands define the static route to the WAN interface.
ip route 0.0.0.0 0.0.0.0 dialer1
access-list 101 permit ip 10.0.0.0 0.255.255.255 any
dialer-list 1 protocol ip list 101
This chapter describes how to configure virtual template interfaces. It includes the following main
sections:
• Virtual Template Interface Service Overview
• How to Configure a Virtual Template Interface
• Monitoring and Maintaining a Virtual Access Interface
• Configuration Examples for Virtual Template Interface
The following template and virtual interface limitations apply:
• Although a system can generally support many virtual template interfaces, one template for each
virtual access application is a more realistic limit.
• When in use, each virtual access interface cloned from a template requires the same amount of
memory as a serial interface. Limits to the number of virtual access interfaces that can be configured
are determined by the platform.
• Virtual access interfaces are not directly configurable by users, except by configuring a virtual
template interface or including the configuration information of the user (through virtual profiles or
per-user configuration) on an authentication, authorization, and accounting (AAA) server. However,
information about an in-use virtual access interface can be displayed, and the virtual access interface
can be cleared.
• Virtual interface templates provide no direct value to users; they must be applied to or associated
with a virtual access feature using a command with the virtual-template keyword.
For example, the interface virtual-template command creates the virtual template interface and the
multilink virtual-template command applies the virtual template to a multilink stack group. The
virtual-profile virtual-template command specifies that a virtual template interface will be used
as a source of configuration information for virtual profiles.
To identify the hardware platform or software image information associated with a feature, use the
Feature Navigator on Cisco.com to search for information about the feature or refer to the software
release notes for a specific release. For more information, see the“Finding Additional Feature Support
Information” section on page lxxvii in the “Using Cisco IOS Software for Release 12.4” chapter.
For a complete description of the virtual template interface commands mentioned in this chapter, refer
to the Cisco IOS Dial Technologies Command Reference, Release 12.2. To locate documentation of other
commands that appear in this chapter, use the command reference master index or search online.
The virtual template interface service is intended primarily for customers with large numbers of dial-in
users and provides the following benefits:
• For easier maintenance, allows customized configurations to be predefined and then applied
dynamically when the specific need arises.
• For scalability, allows interface configuration to be separated from physical interfaces. Virtual
interfaces can share characteristics, no matter what specific type of interface the user called on.
• For consistency and configuration ease, allows the same predefined template to be used for all users
dialing in for a specific application.
• For efficient router operation, frees the virtual access interface memory for another dial-in use when
the call from the user ends.
Command Purpose
Step 1 Router(config)# interface virtual-template Creates a virtual template interface and enters interface
number configuration mode.
Step 2 Router(config-if)# ip unnumbered ethernet 0 Enables IP without assigning a specific IP address on the LAN.
Step 3 Router(config-if)# encapsulation ppp Enables PPP encapsulation on the virtual template Interface.
Step 4 Router(config-if)# virtual-profile (Optional) Creates virtual-access interfaces only if the inbound
if-needed connection requires one.
Note Configuring the ip address command within a virtual template is not recommended. Configuring a
specific IP address in a virtual template can result in the establishment of erroneous routes and the loss
of IP packets.
Optionally, other PPP configuration commands can be added to the virtual template configuration. For
example, you can add the ppp authentication chap command.
All configuration commands that apply to serial interfaces can also be applied to virtual template
interfaces, except shutdown and dialer commands.
For virtual template interface examples, see the “Configuration Examples for Virtual Template
Interface” section later in this chapter.
Command Purpose
Router> show interfaces virtual-access number Displays the configuration of the virtual access interface.
Router> clear interface virtual-access number Tears down the virtual access interface and frees the memory
for other dial-in uses.
interface virtual-template 1
ip unnumbered ethernet 0
encapsulation ppp
ppp authentication chap
This example displays the configuration of the active virtual access interface that was configured by
virtual-template 1, defined in the preceding example:
Note Effective with Cisco Release 12.4(11)T, the L2F protocol was removed in Cisco IOS Software.
virtual-profile if-needed
virtual-profile virtual-template 1
virtual-profile aaa
!
interface Virtual-Template1
ip unnumbered Ethernet 0
no ip directed-broadcast
no keepalive
ppp authentication chap
ppp multilink
This example shows a virtual profile AAA configuration for a RADIUS user profile:
RADIUS user profile:
foo Password = "test"
User-Service-Type = Framed-User,
Framed-Protocol = PPP,
cisco-avpair = "lcp:interface-config=keepalive 30\nppp max-bad-auth 4"
This example shows a virtual profile AAA configuration for a TACACS+ user profile:
TACACS+ user profile:
user = foo {
name = "foo"
global = cleartext test
service = PPP protocol= lcp {
interface-config="keepalive 30\nppp max-bad-auth 4"
}
service = ppp protocol = ip {
}
This chapter describes how to configure virtual profiles for use with virtual access interfaces. It includes
the following main sections:
• Virtual Profiles Overview
• How Virtual Profiles Work—Four Configuration Cases
• How to Configure Virtual Profiles
• Troubleshooting Virtual Profile Configurations
• Configuration Examples for Virtual Profiles
Virtual profiles run on all Cisco IOS platforms that support Multilink PPP (MLP).
We recommend that unnumbered addresses be used in virtual template interfaces to ensure that duplicate
network addresses are not created on virtual access interfaces.
Virtual profiles interoperate with Cisco dial-on-demand routing (DDR), MLP, and dialers such as ISDN.
To identify the hardware platform or software image information associated with a feature, use the
Feature Navigator on Cisco.com to search for information about the feature or refer to the software
release notes for a specific release. For more information, see the “Finding Additional Feature Support
Information” section on page lxxvii in the “Using Cisco IOS Software for Release 12.4” chapter.
For a complete description of the virtual profile commands mentioned in this chapter, refer to the Cisco
IOS Dial Technologies Command Reference, Release 12.2. To locate documentation of other commands
that appear in this chapter, use the command reference master index or search online.
Any commands for these encapsulations that can be configured under a serial interface can be configured
under a virtual profile stored in a user file on an authentication, authorization, and accounting (AAA)
server and a virtual profile virtual template configured locally. The AAA server daemon downloads them
as text to the network access server and is able to handle multiple download attempts.
The configuration information for a virtual profiles virtual access interface can come from a virtual
template interface or from user-specific configuration stored on a AAA server, or both.
If a B interface is bound by the calling line identification (CLID) to a created virtual access interface
cloned from a virtual profile or a virtual template interface, only the configuration from the virtual
profile or the virtual template takes effect. The configuration on the D interface is ignored unless
successful binding occurs by PPP name. Both the link and network protocols run on the virtual access
interface instead of the B channel, unless the encapsulation is PPP.
Moreover, in previous releases of Cisco IOS software, downloading a profile from an AAA server and
creating and cloning a virtual access interface was always done after the PPP call answer and link control
protocol (LCP) up processes. The AAA download is part of authorization. But in the current release,
these operations must be performed before the call is answered and the link protocol goes up. This
restriction is a new AAA nonauthenticated authorization step. The virtual profile code handles multiple
download attempts and identifies whether a virtual access interface was cloned from a downloaded
virtual profile.
When a successful download is done through nonauthenticated authorization and the configuration on
the virtual profile has encapsulation PPP and PPP authentication, authentication is negotiated as a
separate step after LCP comes up.
The per-user configuration feature also uses configuration information gained from a AAA server.
However, per-user configuration uses network configurations (such as access lists and route filters)
downloaded during Network Control Protocol (NCP) negotiations.
Two rules govern virtual access interface configuration by virtual profiles, virtual template interfaces,
and AAA configurations:
• Each virtual access application can have at most one template to clone from but can have multiple
AAA configurations to clone from (virtual profiles AAA information and AAA per-user
configuration, which in turn might include configuration for multiple protocols).
• When virtual profiles are configured by virtual template, its template has higher priority than any
other virtual template.
See the section “How Virtual Profiles Work—Four Configuration Cases” for a description of the possible
configuration sequences for configuration by virtual template or AAA or both. See the section “Multilink
PPP Effect on Virtual Access Interface Configuration” for a description of the possible configuration
sequences that depend on the presence or absence by MLP or another virtual access feature that clones
a virtual template interface.
Note If a dialer interface is used (including any ISDN dialer), its configuration is used on the physical
interface instead of the virtual profiles configuration.
The order of items in any cell of the table is important. Where VP VT is shown above VP AAA, it means
that first the virtual profile virtual template is cloned on the interface, and then the AAA interface
configuration for the user is applied to it. The user-specific AAA interface configuration adds to the
configuration and overrides any conflicting physical interface or virtual template configuration
commands.
The interaction between virtual profiles and other virtual template applications is as follows:
• If virtual profiles are enabled and a virtual template is defined for it, the virtual profile virtual
template is used.
• If virtual profiles are configured by AAA alone (no virtual template is defined for virtual profiles),
the virtual template for another virtual access application (virtual private dialup networks or
VPDNs, for example) can be cloned onto the virtual access interface.
• A virtual template, if any, is cloned to a virtual access interface before the virtual profiles AAA
configuration or AAA per-user configuration. AAA per-user configuration, if used, is applied last.
Note All cases assume that AAA is configured globally on the router, that the user has configuration
information in the user file on the AAA server, that PPP authentication and authorization proceed as
usual, and that the AAA server sends user-specific configuration information in the authorization
approval response packet to the router.
The cases also assume that AAA works as designed and that the AAA server sends configuration
information for the dial-in user to the router, even when virtual profiles by virtual template are
configured.
See the sections “Virtual Profiles Configured by Virtual Templates,” “Virtual Profiles Configured by
AAA Configuration,” “Virtual Profiles Configured by Virtual Templates and AAA Configuration,” and
“Virtual Profiles Configured by AAA Plus a VPDN Virtual Template on a VPDN Home Gateway” later
in this chapter for examples of how to configure these cases.
ISDN
Synchronous Asynchronous B1 B2
S5833
Serial
See the section “Configuring Virtual Profiles by Virtual Template” later in this chapter for configuration
tasks for this case.
Note If MLP is negotiated, the MLP virtual template is cloned first (this is the second row), and then
interface-specific commands included in the AAA response from the server for the user are applied. The
MLP virtual template overrides any conflicting interface configuration, and the AAA interface
configuration overrides any conflicting configuration from both the physical interface and the MLP
virtual template.
The router applies all the user-specific interface commands received from the AAA server.
Suppose, for example, that the router interpreted the response by the AAA server as including only the
following two commands for this user:
ip address 10.10.10.10 255.255.255.255
keepalive 30
In Figure 80, the dotted box represents the virtual profile configured only with the commands received
from the AAA server, no matter which interface the incoming call arrived on. On the AAA RADIUS
server, the attribute-value (AV) pair might have read as follows, where “\n” means to start a new
command line:
cisco-avpair = “lcp:interface-config=ip address 10.10.10.10 255.255.255.0\nkeepalive 30”,
ISDN
Synchronous Asynchronous B1 B2
Serial
56953
User ssmith User ssmith User ssmith
See the section “Configuring Virtual Profiles by AAA Configuration” later in this chapter for
configuration tasks for this case.
Suppose that the router had the virtual template as defined in Case 1 and the AAA user configuration as
defined in Case 2. In Figure 81 the dotted box represents the virtual profile configured with
configuration information from both sources, no matter which interface the incoming call arrived on.
The ip address command has overridden the ip unnumbered command.
ISDN
Synchronous Asynchronous B1 B2
56954
Serial
User ssmith User ssmith User ssmith
See the section “Configuring Virtual Profiles by Both Virtual Template and AAA Configuration” later
in this chapter for configuration tasks for this case.
Note Do not define a DDR dialer profile for a user if you intend to define virtual profiles for the user.
See the section “Configuration Examples for Virtual Profiles” at the end of this chapter for examples of
how to use virtual profiles in your network configuration.
Note The order in which these tasks is performed is not crucial. However, both tasks must be completed before
virtual profiles are used.
Command Purpose
Step 1 Router(config)# interface virtual-template Creates a virtual template interface and enters interface
number configuration mode.
Step 2 Router(config-if)# ip unnumbered ethernet 0 Enables IP without assigning a specific IP address on the
LAN.
Step 3 Router(config-if)# encapsulation ppp Enables PPP encapsulation on the virtual template interface.
Other optional PPP configuration commands can be added to the virtual template configuration. For
example, you can add the ppp authentication chap command.
Command Purpose
Router(config)# virtual-profile virtual-template Specifies the virtual template interface as the source of
number information for virtual profiles.
Command Purpose
Router(config)# virtual-profile aaa Specifies AAA as the source of user-specific interface
configuration.
If you also want to use per-user configuration for network protocol access lists or route filters for
individual users, see the chapter “Configuring Per-User Configuration” in this publication. In this case,
no virtual template interface is defined for virtual profiles.
The information that follows the equal sign (=) could be any Cisco IOS interface configuration
command. For example, the line might be the following:
cisco-avpair = “lcp:interface-config=ip address 192.168.200.200 255.255.255.0”,
Use of a virtual template interface with virtual profiles requires a virtual template to be defined
specifically for virtual profiles.
To configure virtual profiles by both virtual template interface and AAA configuration, complete the
following tasks in any order. All tasks must be completed before virtual profiles are used.
• On the AAA server, create user-specific interface configurations for each of the specific users to use
this method. See your AAA server documentation for more detailed configuration information about
your AAA server.
• Configure AAA on the router, as described in the Cisco IOS Security Configuration Guide
publication.
• Creating and Configuring a Virtual Template Interface, described later in this chapter.
• Specifying Virtual Profiles by Both Virtual Templates and AAA, described later in this chapter.
Command Purpose
Step 1 Router(config)# interface virtual-template Creates a virtual template interface and enters interface
number configuration mode.
Step 2 Router(config-if)# ip unnumbered ethernet 0 Enables IP without assigning a specific IP address on the
LAN.
Step 3 Router(config-if)# encapsulation ppp Enables PPP encapsulation on the virtual template interface.
Because the software treats a virtual template interface as a serial interface, all the configuration
commands that apply to serial interfaces can also be applied to virtual template interfaces, except
shutdown and dialer commands. Other optional PPP configuration commands can also be added to the
virtual template configuration. For example, you can add the ppp authentication chap command.
Command Purpose
Step 1 Router(config)# virtual-profile Defines the virtual template interface as the source of
virtual-template number information for virtual profiles.
Step 2 Router(config)# virtual-profile aaa Specifies AAA as the source of user-specific configuration
for virtual profiles.
If you also want to use per-user configuration for network protocol access lists or route filters for
individual users, see the chapter “Configuring Per-User Configuration” in this publication.
Command Purpose
Router# debug dialer Displays information about dial calls and negotiations and virtual profile
events.
Router# debug aaa per-user Displays information about the per-user configuration downloaded from
the AAA server.
Router# debug vtemplate Displays cloning information for a virtual access interface from the time it
is cloned from a virtual template to the time it comes down.
In this example, the same virtual template interface applies to both users; they have the same interface
configurations.
Router Configuration
! Enable AAA on the router.
aaa new-model
aaa authentication ppp default radius
! The following command is required.
aaa authorization network radius
enable secret 5 $1$koOn$/1QAylov6JFAElxRCrL.o/
enable password lab
!
! Specify configuration of virtual profiles by virtual template.
! This is the key command for this example.
virtual-profile virtual-template 1
!
! Define the virtual template.
interface Virtual-Template 1
ip unnumbered ethernet 0
encapsulation ppp
ppp authentication chap
!
switch-type basic-dms100
interface BRI 0
description Connected to 103
encapsulation ppp
no ip route-cache
dialer rotary-group 0
ppp authentication chap
!
interface BRI 1
description Connected to 104
encapsulation ppp
! Disable fast switching.
no ip route-cache
dialer pool-member 1
ppp authentication chap
!
! Configure dialer interface 0 for DDR for John and Rick.
interface dialer 0
ip address 10.1.1.1 255.255.255.0
encapsulation ppp
! Enable legacy DDR.
dialer in-band
! Disable fast switching.
no ip route-cache
dialer map ip 10.1.1.2 name john 1111
dialer map ip 10.1.1.3 name rick 2222
dialer-group 1
ppp authentication chap
!
! Configure dialer interface 1 for DDR to dial out to Rick.
interface dialer 1
ip address 10.2.2.2 255.255.255.0
encapsulation ppp
dialer remote-name rick
dialer string 3333
dialer pool 1
dialer-group 1
! Disable fast switching.
no ip route-cache
ppp authentication chap
dialer-list 1 protocol ip permit
Router Configuration
! Enable AAA on the router.
aaa new-model
aaa authentication ppp default radius
! This is a key command for this example.
aaa authorization network radius
enable secret 5 $1$koOn$/1QAylov6JFAElxRCrL.o/
enable password lab
!
! Specify configuration of virtual profiles by aaa.
! This is a key command for this example.
virtual-profiles aaa
!
! Interface BRI 0 is configured for legacy DDR.
interface BRI 0
description Connected to 103
encapsulation ppp
no ip route-cache
dialer rotary-group 0
ppp authentication chap
!
! Interface BRI 1 is configured for dialer profiles.
interface BRI 1
description Connected to 104
encapsulation ppp
! Disable fast switching.
no ip route-cache
dialer pool-member 1
ppp authentication chap
!
! Configure dialer interface 0 for DDR for John and Rick.
interface dialer 0
ip address 10.1.1.1 255.255.255.0
encapsulation ppp
! Enable legacy DDR.
dialer in-band
! Disable fast switching.
no ip route-cache
dialer map ip 10.1.1.2 name john 1111
dialer map ip 10.1.1.3 name rick 2222
dialer-group 1
ppp authentication chap
!
! Configure dialer interface 1 for DDR to dial out to Rick.
interface dialer 1
ip address 10.2.2.2 255.255.255.0
encapsulation ppp
dialer remote-name rick
dialer string 3333
dialer pool 1
dialer-group 1
! Disable fast switching.
no ip route-cache
ppp authentication chap
dialer-list 1 protocol ip permit
Router Configuration
! Enable AAA on the router.
aaa new-model
aaa authentication ppp default radius
! This is a key command for this example.
aaa authorization network radius
enable secret 5 $1$koOn$/1QAylov6JFAElxRCrL.o/
enable password lab
!
Router Configuration
!Configure the router as the VPDN home gateway.
!
!Enable VPDN and specify the VPDN virtual template to use on incoming calls from the
!network access server.
vpdn enable
vpdn incoming dallas_wan go_blue virtual-template 6
!
!Configure the virtual template interface for VPDN.
interface virtual template 6
ip unnumbered ethernet 0
encapsulation ppp
ppp authentication chap
!
!Enable AAA on the router.
aaa new-model
aaa authentication ppp default radius
aaa authorization network radius
enable secret 5 $1$koOn$/1QAylov6JFAElxRCrL.o/
enable password lab
!
!Specify configuration of virtual profiles by aaa.
virtual-profiles aaa
!
!Configure the physical synchronous serial 0 interface.
interface Serial 0
description Connected to 101
encapsulation ppp
This chapter describes how to configure asynchronous Serial Line Internet Protocol (SLIP) and PPP. It
includes the following main sections:
• Asynchronous SLIP and PPP Overview
• How to Configure Asynchronous SLIP and PPP
• Configuration Examples for Asynchronous SLIP and PPP
To identify the hardware platform or software image information associated with a feature, use the
Feature Navigator on Cisco.com to search for information about the feature or refer to the software
release notes for a specific release. For more information, see the “Finding Additional Feature Support
Information” section on page lxxvii in the “Using Cisco IOS Software for Release 12.4” chapter.
For a complete description of the commands in this chapter, refer to the Cisco IOS Dial Technologies
Command Reference. To locate documentation of other commands that appear in this chapter, use the
command reference master index or search online.
Note Most asynchronous serial links have very low bandwidth. Take care to configure your system so the links
will not be overloaded. Consider using default routes and filtering routing updates to prevent them from
being sent on these asynchronous lines.
AppleShare
Remote PC file server
PC server
Remote Macintosh
UNIX server
Access server
S1470a
UNIX host
The Cisco IOS software supports protocol translation for PPP and SLIP between other network devices
running Telnet, local-area transport (LAT), or X.25. For example, you can send IP packets across a public
X.25 packet assembler/disassembler (PAD) network using SLIP or PPP encapsulation when SLIP or PPP
protocol translation is enabled. For more information, see the chapter “Configuring Protocol Translation
and Virtual Asynchronous Devices” in this publication.
If asynchronous dynamic routing is enabled, you can enable routing at the user level by using the routing
keyword with the slip or ppp EXEC command.
Asynchronous interfaces offer both dedicated and dynamic address assignment, configurable hold
queues and IP packet sizes, extended BOOTP requests, and permit and deny conditions for controlling
access to lines. Figure 83 shows a sample asynchronous routing configuration.
TCP/IP
routing
Asynchronous
serial line
S1658
UNIX host
Command Purpose
Step 1 Router(config-if)# ip address ip-address mask Configures IP routing on the interface.
[secondary]
or
Router(config-if)# ip unnumbered type number Configures IP unnumbered routing on a serial interface.
Step 2 Router(config-if)# encapsulation ppp Enables PPP encapsulation on the serial interface.
Step 3 Router(config-if)# async mode interactive Enables interactive mode on an asynchronous interface.
Note If you are configuring IPX-PPP on asynchronous interfaces, you should filter routing updates on the
interface. Most asynchronous serial links have very low bandwidth, and routing updates take up a great
deal of bandwidth. The previous task table uses the ipx update interval command to filter SAP updates.
For more information about filtering routing updates, see the section about creating filters for updating
the routing table in the chapter “Configuring Novell IPX” in the Cisco IOS AppleTalk and Novell IPX
Configuration Guide.
IPX and PPP and Associating Asynchronous Interfaces with Loopback Interfaces
To permit IPX client connections to an asynchronous interface, the interface must be associated with a
loopback interface configured to run IPX. To permit such connections, use the following commands
beginning in global configuration mode:
Command Purpose
Step 1 Router(config)# ipx routing [node] Enables IPX routing.
Step 2 Router(config)# interface loopback number Creates a loopback interface, which is a virtual interface
existing only inside the router, and begins interface
configuration mode.
Step 3 Router(config-if)# ipx network network1 Enables IPX routing on the loopback interface.
Step 4 Router(config-if)# exit Exits to global configuration mode.
Step 5 Router(config)# interface async number Enters interface configuration mode for the asynchronous
interface.
Step 6 Router(config-if)# ip unnumbered type number Configures IP unnumbered routing on the interface.
Step 7 Router(config-if)# encapsulation ppp Enables PPP encapsulation on the interface.
Step 8 Router(config-if)# async mode interactive Enables interactive mode on an asynchronous interface.
Step 9 Router(config-if)# ipx ppp-client loopback Assigns the asynchronous interface to the loopback interface
number configured for IPX.
Step 10 Router(config-if)# ipx update interval Turns off Service Advertising Protocol (SAP) updates to
optimize bandwidth on asynchronous interfaces.
1. Every interface must have a unique IPX network number.
IPX and PPP Using Dedicated IPX Network Numbers for Each Interface
To enable IPX and PPP, use the following commands beginning in global configuration mode. The first
five steps are required. The last step is optional.
Command Purpose
Step 1 Router(config)# ipx routing [node] Enables IPX routing.
Step 2 Router(config)# interface loopback number Creates a loopback interface, which is a virtual interface
existing only inside the router, and begins interface
configuration mode.
Step 3 Router(config-if)# encapsulation ppp Enables PPP encapsulation on the interface.
Step 4 Router(config-if)# async mode interactive Enables interactive mode on an asynchronous interface.
1
Step 5 Router(config-if)# ipx network network Enables IPX routing on the interface.
Step 6 Router(config-if)# ipx update interval (Optional) Turns off SAP updates to optimize bandwidth on
asynchronous interfaces.
1. Every interface must have a unique IPX network number.
Enabling IPX and PPP over X.25 to an IPX Network on Virtual Terminal Lines
You can enable IPX-PPP on virtual terminal lines, which permits clients to log in to a virtual terminal
on a router, invoke a PPP session at the EXEC prompt to a host, and run IPX to the host.
For example, in Figure 84, the client terminal on the X.25 network logs in to the access server via a
virtual terminal line, which is configured for IPX-PPP. When the user connects to the access server and
the EXEC prompt appears, enter the PPP command to connect to the IPX host. The virtual terminal is
configured to run IPX, so when the PPP session is established from the access server, the terminal can
access the IPX host using an IPX application.
Access
server
X.25 WAN
S3752
running IPX-PPP Running protocol
translation
To enable IPX to run over your PPP sessions on virtual terminal lines, use the following commands
beginning in global configuration mode:
Command Purpose
Step 1 Router(config)# ipx routing [node] Enables IPX routing.
Step 2 Router(config)# interface loopback number Creates a loopback interface and begins interface
configuration mode.
Step 3 Router(config-if)# ipx network network1 Enables a virtual IPX network on the loopback interface.
Step 4 Router(config-if)# vty-async ipx ppp-client Enables IPX-PPP on virtual terminal lines by assigning it to
loopback number the loopback interface configured for IPX.
1. Every loopback interface must have a unique IPX network number.
Command Purpose
Step 1 Router(config-if)# encapsulation ppp Defines encapsulation as PPP on this interface.
Step 2 Router(config-if)# appletalk virtual-net Creates an internal network on the server.
network-number zone-name
Step 3 Router(config-if)# appletalk client-mode Enables client-mode on this interface.
Command Purpose
Step 1 Router(config-if)# ip address ip-address mask Configures IP routing on the interface.
or
Router(config-if)# ip unnumbered type number Configures IP unnumbered routing on a serial interface.
Step 2 Router(config-if)# encapsulation slip Enables SLIP encapsulation on the serial interface.
Step 3 Router(config-if)# async mode interactive Enables interactive mode on an asynchronous interface.
Company network
Internet
are translated
Telecommuting user
Asynchronous host mobility is enabled with the tunnel EXEC command and the ip tcp async-mobility
server global configuration command. The ip tcp async-mobility server command establishes
asynchronous listening on TCP tunnel port 57. The tunnel command sets up a network-layer connection
to the specified destination. Both commands must be used. The access server accepts the connection,
attaches it to a virtual terminal line, and runs a command parser capable of running the normal dial-in
services. After the connection is established, data is transferred between the modem and network
connection with a minimum of interpretations. When communications are complete, the network
connection can be closed and terminated from either end.
To enable asynchronous host mobility, use the following commands beginning in global configuration
mode:
Command Purpose
Step 1 Router(config)# ip tcp async-mobility server Enables asynchronous listening on TCP tunnel port 57.
Step 2 Router(config)# exit Returns to user EXEC mode.
Step 3 Router# tunnel host Sets up a network-layer connection to a router by specifying
its Internet name or address. Replace the host argument with
the name or address of the device that you want to connect
to.
To connect from a router other than a Cisco router, you must use Telnet. After a connection is
established, you receive an authentication dialog or prompt from your home router, and can proceed as
if you are connected directly to that router. When communications are complete, the network connection
can be closed and terminated from either end of the connection.
Command Purpose
Router> ppp {/default | {remote-ip-address | Creates a PPP connection.
remote-name} [@tacacs-server]} [/routing]
If you specify an address for the TACACS server using /default or tacacs-server, the address must be
the first parameter in the command after you type ppp. If you do not specify an address or enter /default,
you are prompted for an IP address or host name. You can enter /default at this point.
For example, if you are working at home on the device named ntpc in Figure 86 and want to connect to
Server 1 using PPP, you could dial in to the access server. When you connect to the EXEC prompt on
the access server, enter the ppp command to connect with the device.
Server 1
S1472a
ntpc
To terminate a session, disconnect from the device on the network using the command specific to that
device. Then, exit from EXEC mode by using the exit command.
Command Purpose
Router> slip [/default] {remote-ip-address | remote-name} Creates a SLIP connection.
[@tacacs-server] [/routing]} [/compressed]
Your system administrator can configure SLIP to expect a specific address or to provide one for you. It
is also possible to set up SLIP in a mode that compresses packets for more efficient use of bandwidth on
the line.
If you specify an address for the TACACS server using /default or tacacs-server, the address must be
the first parameter in the command after you type slip. If you do not specify an address or enter /default,
you are prompted for an IP address or host name. You can enter /default at this point.
If you do not use the tacacs-server argument to specify a TACACS server for SLIP address
authentication, the TACACS server specified at login (if any) is used for the SLIP address query.
To optimize bandwidth on a line, SLIP enables compression of the SLIP packets using Van Jacobson
TCP header compression as defined in RFC 1144.
To terminate a session, disconnect from the device on the network using the command specific to that
device. Then, exit from EXEC mode by using the exit command.
Remote
access client
Modem LLC2 Modem Router LLC2
PPP
NetBEUI connection
S3910
NetBEUI server
By supporting NetBEUI remote clients over PPP, Cisco routers function as a native NetBEUI dial-in
router for remote NetBEUI clients. Thus, you can offer remote access to a NetBEUI network through
asynchronous or ISDN connections.
To enable a remote access client using a NetBEUI application to connect with the remote router
providing NetBEUI services, configure interfaces on the remote access client side and the remote router
side by using the following command in interface configuration mode:
Command Purpose
Router(config-if)# netbios nbf Enables NBFCP on each side of a NetBEUI connection.
To view NetBEUI connection information, use the following command in EXEC mode:
Command Purpose
Router> show nbf sessions Views NetBEUI connection information.
header, so it has no effect on UDP packets or other protocol headers. The TCP header compression
technique, described fully in RFC 1144, is supported on serial lines using High-Level Data Link Control
(HDLC) or PPP encapsulation. You must enable compression on both ends of a serial connection.
You can optionally specify outgoing packets to be compressed only when TCP incoming packets on the
same interface are compressed. If you do not specify this option, the Cisco IOS software will compress
all traffic. The default is no compression.
You can also specify the total number of header compression connections that can exist on an interface.
You should configure one connection for each TCP connection through the specified interface.
To enable compression, use the following commands in interface configuration mode:
Command Purpose
Step 1 Router(config-if)# ip tcp header-compression Enables TCP header compression.
[passive]
Step 2 Router(config-if)# ip tcp Specifies the total number of header compression
compression-connections number connections that can exist on an interface.
Note When compression is enabled, fast switching is disabled. Fast processors can handle several fast
interfaces, such as T1 lines, that are running header compression. However, you should think carefully
about traffic characteristics in your network before compressing TCP headers. You might want to use the
monitoring commands to help compare network utilization before and after enabling header
compression.
Command Purpose
Router(config)# ip tcp synwait-time seconds Sets the amount of time for which the Cisco IOS software
will wait to attempt to establish a TCP connection.
Cisco routers support IPX Header Compression (CIPX) on all point-to-point Novell interfaces over
various WAN media.
CIPX is described in RFC 1553, Compressing IPX Headers Over WAN Media. The CIPX algorithm is
based on the same concepts as Van Jacobson TCP/IP header compression algorithm. CIPX operates over
PPP WAN links using either the IPXCP or IPXWAN communications protocols.
CIPX compresses all IPX headers and IPX/NCP headers for Novell packets with the following Network
Control Program (NCP) packet types:
• 0x2222—NCP request from workstation
• 0x3333—NCP replies from file server
In this version of software, CIPX is configurable only for PPP links.
CIPX header compression can reduce header information from 30 bytes down to as little as 1 byte. This
reduction can save bandwidth and reduce costs associated with IPX routing over WAN links that are
configured to use IPXCP or IPXWAN.
Consider the following issues before implementing CIPX:
• CIPX is supported on all point-to-point IPX interfaces using PPP or IPXWAN processing (or both).
• CIPX needs to be negotiated for both directions of the link, because it uses the reverse direction of
the link for communicating decompression problems back to the originating peer. In other words,
all peer routers must have CIPX enabled.
To configure CIPX, use the following command in global configuration mode:
Command Purpose
Router(config)# ipx compression cipx number-of-slots Compresses IPX packet headers in a PPP session.
Note We recommend that you keep a slot value of 16. Because slots are maintained in the router buffer, a larger
number can impact buffer space for other operations.
Command Purpose
Step 1 Router(config-if)# ip route-cache Enables fast-switching (use of a high-speed route cache for
IP routing).
Step 2 Router(config-if)# no ip route-cache Disables fast switching and enables load balancing on a
per-packet basis.
Note This task normally should not be necessary. It should be performed only under the guidance of technical
staff. Incorrect configuration can seriously degrade the performance of your router.
Command Purpose
Step 1 Router(config)# no ip cache-invalidate-delay Allows immediate invalidation of the cache.
Step 2 Router(config)# ip cache-invalidate-delay Delays invalidation of the cache.
[minimum maximum quiet-threshold]
Command Purpose
Router(config)# banner slip-ppp d message d Configures the SLIP-PPP banner to display a customized
message.
You can also use tokens in the banner message to display current IOS configuration variables. Tokens
are keywords of the form $(token). When you include tokens in a banner command, Cisco IOS will
replace $(token) with the corresponding configuration variable.
Table 55 lists the tokens that you can use in the banner slip-ppp command.
Note The peer default ip address command replaces the async default ip address command.
Once a correct password is entered, you are placed in SLIP mode, and the IP address appears:
Router> slip
Password:
Entering SLIP mode.
Your IP address is 192.168.7.28, MTU is 1524 bytes
The following example shows the prompts displayed and the response required when dynamic
addressing is used to assign the SLIP address:
Router> slip
IP address or hostname? 192.168.6.15
Password:
Entering SLIP mode
Your IP address is 192.168.6.15, MTU is 1524 bytes
In the previous example, the address 192.168.6.15 had been assigned as the default. Password
verification is still required before SLIP mode can be enabled, as follows:
Router> slip default
Password:
Entering SLIP mode
Your IP address is 192.168.6.15, MTU is 1524 bytes
The following example illustrates the implementation of header compression on the interface with the
IP address 172.16.2.1:
Router> slip 172.16.2.1 /compressed
Password:
In the preceding example, the interface is configured for ip tcp header-compression passive, which
permitted the user to enter the /compressed keyword at the EXEC mode prompt. The message “Header
compression will match your system” indicates that the user has specified compression. If the line was
configured for ip tcp header-compression on, this line would read “Header compression is On.”
The following example specifies a TACACS server named parlance for address authentication:
Router> slip 10.0.0.1@parlance
Password:
Entering SLIP mode.
Interface IP address is 10.0.0.1, MTU is 1500 bytes
Header compression will match your system.
The following example sets the SLIP-PPP banner using several tokens and the percent sign (%) as the
delimiting character:
Router(config)# banner slip-ppp %
Enter TEXT message. End with the character '%'.
Starting $(encap) connection from $(gate-ip) to $(peer-ip) using a maximum packet size of
$(mtu) bytes... %
When you enter the slip command, you will see the following banner. Notice that the $(token) syntax is
replaced by the corresponding configuration variables.
Starting SLIP connection from 192.168.69.96 to 172.16.80.8 using a maximum packet size of
1500 bytes...
Telecommuter
corporate traveler
Modem Modem Interface Router LLC2
async 7
NetBEUI connection
S3911
NetBEUI server
You would also need to configure security, such as TACACS+, RADIUS, or another form of login
authentication on the router.
Logical
network
S3290
This default address indicates the address of the remote PC to the server, unless the user explicitly
specifies another when starting the PPP session.
The server is configured for interactive mode with autoselect enabled, which allows the user to
automatically begin a PPP session upon detection of a PPP packet from the remote PC; or, the remote
PC can explicitly begin a PPP session by entering the ppp EXEC command at the prompt.
The configuration is as follows:
ip routing
!
interface ethernet 0
ip address 192.168.32.12 255.255.255.0
!
interface async 1
encapsulation ppp
async mode interactive
async default ip address 192.168.32.51
async dynamic address
ip unnumbered ethernet 0
line 1
autoselect ppp
modem callin
speed 19200
Logical
network
TCP/IP
(async)
S3291
The configuration is as follows:
interface async 1
encapsulation ppp
async mode interactive
async default ip address 192.168.32.10
async dynamic address
ip unnumbered ethernet 0
async dynamic routing
If you want to pass IP routing updates across the asynchronous link, enter the following commands:
line 1
autoselect ppp
modem callin
speed 19200
Next, enter the following commands to configure the asynchronous lines between the access servers
beginning in global configuration mode:
interface async 2
async default ip address 192.168.32.55
ip tcp header compression passive
Finally, configure routing as described in the Cisco IOS IP Configuration Guide using one of the
following methods. The server can route packets three different ways.
• Use ARP, which is the default behavior.
• Use a default-gateway by entering the command ip default-gateway x.x.x.x, where x.x.x.x is the IP
address of a locally attached router.
• Run an IP routing protocol such as Routing Information Protocol (RIP), Interior Gateway Routing
Protocol (IGRP), Enhanced IGRP (EIGRP), or Open Shortest Path First (OSPF).
Remote Network Access Using a Leased Line with Dial-Backup and PPP
Example
Figure 91 illustrates a scenario where two networks are connected via access servers on a leased line.
Redundancy is provided by a dial-backup line over the PSTN so that if the primary leased line goes
down, the dial-backup line will be automatically brought up to restore the connection. This configuration
would be useful for using an auxiliary port as the backup port for a synchronous port.
For this scenario, you would need to configure the following:
• Two asynchronous interfaces on each access server
• Two modem interfaces
• A default IP address for each interface
• Dial-backup on one modem interface per access server
• An interface connecting to the related network of an access server
Leased line
S3292
Access Access
server 1 server 2
Network A Network B
Dial-backup line
Feature History
Release Modification
12.2(4)T This feature was introduced.
12.2(11)T This feature was implemented on Cisco access server platforms.
This document describes the Optimized PPP Negotiation feature. It includes the following sections:
• Feature Overview, page 881
• Supported Platforms, page 882
• Supported Standards, MIBs, and RFCs, page 882
• Configuration Tasks, page 883
• Monitoring and Maintaining LCP and IPCP Predictive States, page 885
• Configuration Examples, page 885
• Command Reference, page 887
Feature Overview
The Optimized PPP Negotiation feature optimizes the time needed for PPP negotiation when a
connection is made. PPP negotiation can include several cycles before the negotiation options are
acknowledged. These negotiation cycles can cause a significant user-perceived delay, especially in
networks with slow links such as a wireless data connection, where the round-trip time for the
negotiation cycle can take 600 to 800 ms or more. Additionally, the PPP negotiation time can add
significantly to the total time the user stays connected in these types of connections. The following
changes to the PPP link control protocol (LCP) and PPP Internet Protocol Control Protocol (IPCP)
negotiation strategies make a reduction in the negotiation time possible:
• Send an LCP Configure-Ack packet, then send the next-level LCP Configure-Request packet before
receiving acknowledgment for the PPP Configure-Request packet.
• Send an LCP Configure-Ack packet after sending LCP Configure-Reject and Configure-Nak
packets for certain configuration options.
• Send an IPCP Configure-Ack packet after sending an IPCP Configure-Nak packet.
• Send IPCP Configure-Nak and Configure-Ack packets after rejecting certain configuration options.
Benefits
The Optimized PPP Negotiation feature reduces delay in PPP negotiation time by predicting responses
from peers and sending expected reply and request packets in advance, yet allows PPP negotiations to
remain compliant with RFC 1661, the industry standard for transporting multiprotocol datagrams over
point-to-point links.
Related Documents
Refer to the part “PPP Configuration” in the Cisco IOS Dial Technologies Configuration Guide,
Release 12.2, for more information about configuring PPP.
Supported Platforms
See the next section for information about Feature Navigator and how to use this tool to determine the
platforms and software images in which this feature is available.
MIBs
None
To obtain lists of supported MIBs by platform and Cisco IOS release, and to download MIB modules,
go to the Cisco MIB website on Cisco.com at the following URL:
http://www.cisco.com/public/sw-center/netmgmt/cmtk/mibs.shtml
RFCs
• RFC 1661, The Point-to-Point Protocol
Configuration Tasks
See the following sections for configuration tasks for the Optimized PPP Negotiation feature. Each task
in the list is identified as either required or optional:
• Configuring the LCP and IPCP Predictive States (required)
• Verifying LCP and IPCP Predictive States (required)
Command Purpose
Router(config-if)# ppp lcp predictive Sets LCP to a predictive state that reduces negotiation time by
predicting responses from peers and sending expected reply and
request packets in advance.
Router(config-if)# ppp ipcp predictive Sets IPCP to a predictive state that reduces negotiation time by
predicting responses from peers and sending expected reply and
request packets in advance.
See the section “Configuration Examples” for examples of how to configure a network that would make
use of the ppp lcp predictive and ppp ipcp predictive commands.
Refer to RFC 1661 for more information about the PPP link operation. To turn off debug messaging,
enter the undebug ppp negotiation command in privileged EXEC mode.
Troubleshooting Tips
See the section “Verifying LCP and IPCP Predictive States” to troubleshoot the LCP and IPCP predictive
states.
Command Purpose
Router# show interfaces serial Displays information about a serial interface.
Configuration Examples
This section provides the following configuration examples:
• Configuration with a Wireless Dialup Client Example
• Dialup Connection with Router as Client Example
All other commands listed in the “Configuration with a Wireless Dialup Client Example” remain
unchanged.
Command Reference
The following new commands are pertinent to this feature. To see the command pages for these
commands and other commands used with this feature, go to the Cisco IOS Master Commands List,
Release 12.4, at http://www.cisco.com/univercd/cc/td/doc/product/software/ios124/124mindx/
124index.htm.
• ppp lcp predictive
• ppp ipcp predictive
This chapter describes how to configure the PPP and Multilink PPP (MLP) features that can be
configured on any interface. It includes the following main sections:
• PPP Encapsulation Overview
• Configuring PPP and MLP
• Configuring MLP Interleaving and Queueing
• Configuring MLP Inverse Multiplexer and Distributed MLP
• Monitoring and Maintaining PPP and MLP Interfaces
• Configuration Examples for PPP and MLP
This chapter also describes address pooling for point-to-point links, which is available on all
asynchronous serial, synchronous serial, and ISDN interfaces. See the chapter “Configuring
Asynchronous SLIP and PPP” in this publication for information about PPP features and requirements
that apply only to asynchronous lines and interfaces.
To identify the hardware platform or software image information associated with a feature, use the
Feature Navigator on Cisco.com to search for information about the feature or refer to the software
release notes for a specific release. For more information, see the “Finding Additional Feature Support
Information” section on page lxxvii in the “Using Cisco IOS Software for Release 12.4” chapter.
For a complete description of the PPP commands in this chapter, refer to the Cisco IOS Dial
Technologies Command Reference. To locate documentation of other commands that appear in this
chapter, use the command reference master index or search online.
The current implementation of PPP supports option 3, authentication using Challenge Handshake
Authentication Protocol (CHAP) or Password Authentication Protocol (PAP), option 4, Link Quality
Monitoring (LQM), and option 5, Magic Number configuration options. The software always sends
option 5 and negotiates for options 3 and 4 if so configured. All other options are rejected.
Magic Number support is available on all serial interfaces. PPP always attempts to negotiate for Magic
Numbers, which are used to detect looped-back lines. Depending on how the down-when-looped
command is configured, the router might shut down a link if it detects a loop.
The software provides the CHAP and PAP on serial interfaces running PPP encapsulation. For detailed
information about authentication, refer to the Cisco IOS Security Configuration Guide.
Beginning with Cisco IOS Release 11.2 F, Cisco supported fast switching of incoming and outgoing
DECnet and CLNS packets over PPP.
Command Purpose
Router(config-if)# encapsulation ppp Enables PPP encapsulation.
PPP echo requests are used as keepalives to minimize disruptions to the end users of your network. The
no keepalive command can be used to disable echo requests.
When CHAP is enabled on an interface and a remote device attempts to connect to it, the local router or
access server sends a CHAP packet to the remote device. The CHAP packet requests or “challenges” the
remote device to respond. The challenge packet consists of an ID, a random number, and the host name
of the local router.
The required response has two parts:
• An encrypted version of the ID, a secret password, and the random number
• Either the host name of the remote device or the name of the user on the remote device
When the local router or access server receives the response, it verifies the secret password by
performing the same encryption operation as indicated in the response and looking up the required host
name or username. The secret passwords must be identical on the remote device and the local router.
Because this response is sent, the password is never sent in clear text, preventing other devices from
stealing it and gaining illegal access to the system. Without the proper response, the remote device
cannot connect to the local router.
CHAP transactions occur only when a link is established. The local router or access server does not
request a password during the rest of the call. (The local device can, however, respond to such requests
from other devices during a call.)
When PAP is enabled, the remote router attempting to connect to the local router or access server is
required to send an authentication request. If the username and password specified in the authentication
request are accepted, the Cisco IOS software sends an authentication acknowledgment.
After you have enabled CHAP or PAP, the local router or access server requires authentication from
remote devices. If the remote device does not support the enabled protocol, no traffic will be passed to
that device.
To use CHAP or PAP, you must perform the following tasks:
• Enable PPP encapsulation.
• Enable CHAP or PAP on the interface.
• For CHAP, configure host name authentication and the secret or password for each remote system
with which authentication is required.
To enable PPP encapsulation, use the following command in interface configuration mode:
Command Purpose
Router(config-if)# encapsulation ppp Enables PPP encapsulation on an interface.
To enable CHAP or PAP authentication on an interface configured for PPP encapsulation, use the
following command in interface configuration mode:
Command Purpose
Router(config-if)# ppp authentication {chap | chap pap | Defines the authentication methods supported and the
pap chap | pap} [if-needed] [list-name | default] [callin] order in which they are used.
The ppp authentication chap optional keyword if-needed can be used only with Terminal Access
Controller Access Control System (TACACS) or extended TACACS.
With authentication, authorization, and accounting (AAA) configured on the router and list names
defined for AAA, the list-name optional keyword can be used with AAA/TACACS+.
Caution If you use a list-name that has not been configured with the aaa authentication ppp command, you
disable PPP on the line.
Add a username entry for each remote system from which the local router or access server requires
authentication.
To specify the password to be used in CHAP or PAP caller identification, use the following command in
global configuration mode:
Command Purpose
Router(config)# username name [user-maxlinks link-number] Configures identification. Optionally, you can specify
password secret the maximum number of connections a user can
establish.
To use the user-maxlinks keyword, you must also use
the aaa authorization network default local command
and PPP encapsulation and name authentication on all
the interfaces the user will be accessing.
To configure TACACS on a specific interface as an alternative to global host authentication, use one of
the following commands in interface configuration mode:
Command Purpose
Router(config-if)# ppp use-tacacs [single-line] Configures TACACS.
or
Router(config-if)# aaa authentication ppp
Use the ppp use-tacacs command with TACACS and Extended TACACS. Use the aaa authentication
ppp command with AAA/TACACS+.
For an example of CHAP, see the section “CHAP with an Encrypted Password Examples” at the end of
this chapter. CHAP is specified in RFC 1994, PPP Challenge Handshake Authentication Protocol
(CHAP).
When LQM is enabled, Link Quality Reports (LQRs) are sent, in place of keepalives, every keepalive
period. All incoming keepalives are responded to properly. If LQM is not configured, keepalives are sent
every keepalive period and all incoming LQRs are responded to with an LQR.
LQR is specified in RFC 1989, PPP Link Quality Monitoring.
To enable LQM on the interface, use the following command in interface configuration mode:
Command Purpose
Router(config-if)# ppp quality percentage Enables LQM on the interface.
The percentage argument specifies the link quality threshold. That percentage must be maintained, or
the link is deemed to be of poor quality and is taken down.
Software Compression
Software compression is available in all router platforms. Software compression is performed by the
main processor in the router.
Compression is performed in software and might significantly affect system performance. We
recommend that you disable compression if the router CPU load exceeds 65 percent. To display the CPU
load, use the show process cpu EXEC command.
To configure compression over PPP, use the following commands in interface configuration mode:
Command Purpose
Step 1 Router(config-if)# encapsulation ppp Enables encapsulation of a single protocol on the serial
line.
Step 2 Router(config-if)# compress [predictor | stac | Enables compression.
mppc [ignore-pfc]]
Hardware-Dependent Compression
When you configure Stacker compression on Cisco 7000 series routers with a 7000 Series Route Switch
Processor (RSP7000), on Cisco 7200 series routers, and on Cisco 7500 series routers, there are three
methods of compression: hardware compression, distributed compression, and software compression.
Hardware and distributed compression are available on routers that have the SA-Comp/1 and
SA-Comp/4 data compression service adapters (CSAs). CSAs are available on Cisco 7200 series routers,
on Cisco 7500 series routers with second-generation Versatile Interface Processors (VIP2s), and on
Cisco 7000 series routers with the RSP7000 and 7000 Series Chassis Interface (RSP7000CI). (CSAs
require VIP2 model VIP2-40.)
To configure hardware or distributed compression over PPP, use the following commands in interface
configuration mode:
Command Purpose
Step 1 Router(config-if)# encapsulation ppp Enables encapsulation of a single protocol on
the serial line.
Step 2 Cisco 7000 series with RSP7000 and Cisco 7500 series routers Enables compression.
Router(config-if)# compress stac [distributed | software]
Specifying the compress stac command with no options causes the router to use the fastest available
compression method:
• If the router contains a CSA, compression is performed in the CSA hardware (hardware
compression).
• If the CSA is not available, compression is performed in the software installed on the VIP2
(distributed compression).
• If the VIP2 is not available, compression is performed in the main processor of the router (software
compression).
Using hardware compression in the CSA frees the main processor of the router for other tasks. You can
also configure the router to use the VIP2 to perform compression by using the distributed option, or to
use the main processor of the router by using the software option. If the VIP2 is not available,
compression is performed in the main processor of the router.
When compression is performed in software installed in the main processor of the router, it might
substantially affect system performance. We recommend that you disable compression in the main
processor of the router if the router CPU load exceeds 40 percent. To display the CPU load, use the
show process cpu EXEC command.
Specifying the compress stac command with no options causes the router to use the fastest available
compression method.
Exactly one MPPC datagram is encapsulated in the PPP information field. The PPP protocol field
indicates the hexadecimal type of 00FD for all compressed datagrams. The maximum length of the
MPPC datagram sent over PPP is the same as the MTU of the PPP interface; however, this length cannot
be greater than 8192 bytes because the history buffer is limited to 8192 bytes. If compressing the data
results in data expansion, the original data is sent as an uncompressed MPPC packet.
The history buffers between compressor and decompressor are synchronized by maintaining a 12-bit
coherency count. If the decompressor detects that the coherency count is out of sequence, the following
error recovery process is performed:
1. Reset Request (RR) packet is sent from the decompressor.
2. The compressor then flushes the history buffer and sets the flushed bit in the next packet it sends.
3. Upon receiving the flushed bit set packet, the decompressor flushes the history buffer.
Synchronization is achieved without CCP using the Reset Acknowledge (RA) packet, which can
consume additional time.
Compression negotiation between a router and a Windows 95 client occurs through the following
process:
1. Windows 95 sends a request for both STAC (option 17) and MPPC (option 18) compression.
2. The router sends a negative acknowledgment (NAK) requesting only MPPC.
3. Windows 95 resends the request for MPPC.
4. The router sends an acknowledgment (ACK) confirming MPPC compression negotiation.
MPPC Restrictions
The following restrictions apply to the MPPC feature:
• MPPC is supported only with PPP encapsulation.
• Compression can be processor intensive because it requires a reserved block of memory to maintain
the history buffer. Do not enable modem or hardware compression because it may cause
performance degradation, compression failure, or data expansion.
• Both ends of the point-to-point link must be using the same compression method (STAC, Predictor,
or MPPC, for example).
Configuring MPPC
PPP encapsulation must be enabled before you can configure MPPC. For information on how to
configure PPP encapsulation, see the section “Enabling PPP Encapsulation” earlier in this chapter.
There is only one command required to configure MPPC. The existing compress command supports the
mppc keyword, which prepares the interface to initiate CCP and negotiates MPPC with the Microsoft
client. To set MPPC once PPP encapsulation is configured on the router, use the following command in
interface configuration mode:
Command Purpose
Router(config-if)# compress [mppc [ignore-pfc]] Enables MPPC on the interface.
The ignore-pfc keyword instructs the router to ignore the protocol field compression flag negotiated by
LCP. For example, the uncompressed standard protocol field value for IP is 0x0021 and 0x21 when
compression is enabled. When the ignore-pfc option is enabled, the router will continue to use the
uncompressed value (0x0021). Using the ignore-pfc option is helpful for some asynchronous driver
devices that use an uncompressed protocol field (0x0021), even though the protocol field compression
is negotiated between peers. displays protocol rejections when the debug ppp negotiation command is
enabled. These errors can be remedied by setting the ignore-pfc option.
• Local address pool—The local address pool contains a set of contiguous IP addresses (a maximum
of 1024 addresses) stored in two queues. The free queue contains addresses available to be assigned
and the used queue contains addresses that are in use. Addresses are stored to the free queue in
first-in, first-out (FIFO) order to minimize the chance the address will be reused, and to allow a peer
to reconnect using the same address that it used in the last connection. If the address is available, it
is assigned; if not, another address from the free queue is assigned.
• Chat script (asynchronous serial interfaces only)—The IP address in the dialer map command entry
that started the script is assigned to the interface and overrides any previously assigned peer IP
address.
• Virtual terminal/protocol translation—The translate command can define the peer IP address for a
virtual terminal (pseudo asynchronous interface).
• The pool configured for the interface is used, unless TACACS+ returns a pool name as part of AAA.
If no pool is associated with a given interface, the global pool named default is used.
Precedence Rules
The following precedence rules of peer IP address support determine which address is used. Precedence
is listed from most likely to least likely:
1. AAA/TACACS+ provided address or addresses from the pool named by AAA/TACACS+
2. An address from a local IP address pool or DHCP (typically not allocated unless no other address
exists)
3. Dialer map lookup address (not done unless no other address exists)
4. Address from an EXEC-level PPP or SLIP command, or from a chat script
5. Configured address from the peer default ip address command or address from the protocol
translate command
6. Peer provided address from IPCP negotiation (not accepted unless no other address exists)
Interfaces Affected
Address pooling is available on all asynchronous serial, synchronous serial, ISDN BRI, and ISDN PRI
interfaces that are running PPP.
Command Purpose
Step 1 Router(config)# ip address-pool dhcp-proxy-client Specifies DHCP client-proxy as the global default
mechanism.
Step 2 Router(config)# ip dhcp-server [ip-address | name] (Optional) Specifies the IP address of a DHCP server
for the proxy client to use.
In Step 2, you can provide as few as one or as many as ten DHCP servers for the proxy-client (the Cisco
router or access server) to use. DHCP servers provide temporary IP addresses.
To specify that the global default mechanism to use is local pooling, use the following commands in
global configuration mode:
Command Purpose
Step 1 Router(config)# ip address-pool local Specifies local pooling as the global default mechanism.
Step 2 Router(config)# ip local pool {named-address-pool Creates one or more local IP address pools.
| default} {first-IP-address [last-IP-address]}
[group group-name] [cache-size size]}
If no other pool is defined, a local pool called “default” is used. Optionally, you can associate an address
pool with a named pool group.
Command Purpose
Router(config)# ip dhcp-client network-discovery informs Provides control of the DHCP network discovery
number-of-messages discovers number-of-messages period mechanism by allowing the number of DHCP Inform
seconds
and Discover messages to be sent, and a time-out period
for retransmission, to be configured.
The ip dhcp-client network-discovery global configuration command provides a way to control the
DHCP network discovery mechanism. The number of DHCP Inform or Discovery messages can be set
to 1 or 2, which determines how many times the system sends the DHCP Inform or Discover messages
before stopping network discovery. You can set a time-out period from 3 to 15 seconds, or leave the
default time-out period at 15 seconds. Default for the informs and discovers keywords is 0, which
disables the transmission of these messages.
To define a nondefault address pool for use on an interface, use the following commands beginning in
global configuration mode:
Command Purpose
Step 1 Router(config)# ip local pool Creates one or more local IP address pools.
{named-address-pool | default}
{first-IP-address [last-IP-address]} [group
group-name] [cache-size size]}
Step 2 Router(config)# interface type number Specifies the interface and begins interface configuration
mode.
Step 3 Router(config-if)# peer default ip address Specifies the pool or pools for the interface to use.
pool pool-name-list
To define DHCP as the IP address mechanism for an interface, use the following commands beginning
in global configuration mode:
Command Purpose
Step 1 Router(config)# interface type number Specifies the interface and begins interface configuration
mode.
Step 2 Router(config-if)# peer default ip address pool Specifies DHCP as the IP address mechanism on this
dhcp interface.
To define a specific IP address to be assigned to all dial-in peers on an interface, use the following
commands beginning in global configuration mode:
Command Purpose
Step 1 Router(config)# interface type number Specifies the interface and begins interface configuration
mode.
Step 2 Router(config-if)# peer default ip address Specifies the IP address to assign.
ip-address
Note PPP reliable link is available only on synchronous serial interfaces, including ISDN BRI and ISDN PRI
interfaces. PPP reliable link cannot be used over V.120, and does not work with Multilink PPP.
To configure PPP reliable link on a specified interface, use the following command in interface
configuration mode:
Command Purpose
Router(config-if)# ppp reliable-link Enables PPP reliable link.
Having reliable links enabled does not guarantee that all connections through the specified interface will
in fact use reliable link. It only guarantees that the router will attempt to negotiate reliable link on this
interface.
Troubleshooting PPP
You can troubleshoot PPP reliable link by using the debug lapb command and the debug ppp
negotiations, debug ppp errors, and debug ppp packets commands. You can determine whether LAPB
has been established on a connection by using the show interface command.
Command Purpose
Step 1 Router(config-if)# no peer neighbor-route Disables creation of neighbor routes.
Step 2 Router(config-if)# peer neighbor-route Reenables creation of neighbor routes.
Note If entered on a dialer or asynchronous group interface, this command affects all member interfaces.
Figure 92 shows a router with a serial interface configured as a PPP half-bridge. The interface functions
as a node on the Ethernet subnetwork with the bridge. Note that the serial interface has an IP address on
the same Ethernet subnetwork as the bridge.
ATM 4/0.100
S4763
172.31.5.9
Ethernet subnet
172.31.5.0
Note The Cisco IOS software supports no more than one PPP half-bridge per Ethernet subnetwork.
To configure a serial interface to function as a half-bridge, use the following commands beginning in
global configuration mode as appropriate for your network:
Command Purpose
Step 1 Router(config)# interface serial number Specifies the interface and begins interface
configuration mode.
Step 2 Router(config-if)# ppp bridge appletalk Enables PPP half-bridging for one or more routed
protocols: AppleTalk, IP, or Internet Protocol Exchange
Router(config-if)# ppp bridge ip
(IPX).
Router(config-if)# ppp bridge ipx [novell-ether |
arpa | sap | snap]
Step 3 Router(config-if)# ip address n.n.n.n Provides a protocol address on the same subnetwork as
the remote network.
Router(config-if)# appletalk address network.node
Note You must enter the ppp bridge command either when the interface is shut down or before you provide
a protocol address for the interface.
For more information about AppleTalk addressing, refer to the “Configuring AppleTalk” chapter of the
Cisco IOS AppleTalk and Novell IPX Configuration Guide. For more information about IPX addresses
and encapsulations, refer to the “Configuring Novell IPX” chapter of the Cisco IOS AppleTalk and
Novell IPX Configuration Guide.
Command Purpose
Step 1 Router(config)# interface serial number Specifies an asynchronous interface.
Step 2 Router(config-if)# no ip address Specifies no IP address for the interface.
Step 3 Router(config-if)# encapsulation ppp Enables PPP encapsulation.
Step 4 Router(config-if)# no fair-queue Disables WFQ on the interface.
Step 5 Router(config-if)# ppp multilink Enables Multilink PPP.
Step 6 Router(config-if)# pulse-time seconds Enables pulsing DTR signal intervals on the interface.
Command Purpose
Step 1 Router(config)# interface async number Specifies an asynchronous interface and begins
interface configuration mode.
Step 2 Router(config-if)# no ip address Specifies no IP address for the interface.
Step 3 Router(config-if)# encapsulation ppp Enables PPP encapsulation.
Step 4 Router(config-if)# dialer in-band Enables DDR on the interface.
Step 5 Router(config-if)# dialer rotary-group number Includes the interface in a specific dialer rotary group.
Command Purpose
Step 1 Router(config)# interface dialer number Defines a dialer rotary group.
Step 2 Router(config-if)# no ip address Specifies no IP address for the interface.
Step 3 Router(config-if)# encapsulation ppp Enables PPP encapsulation.
Step 4 Router(config-if)# dialer in-band Enables DDR on the interface.
Step 5 Router(config-if)# dialer load-threshold load Configures bandwidth on demand by specifying the
[inbound | outbound | either] maximum load before the dialer places another call to a
destination.
Step 6 Router(config-if)# ppp multilink Enables Multilink PPP.
To enable PPP on an ISDN BRI interface, use the following commands beginning in global configuration
mode:
Command Purpose
Step 1 Router(config)# interface bri number Specifies an interface and begins interface configuration
mode.
Step 2 Router(config-if)# ip address ip-address mask Provides an appropriate protocol address for the interface.
[secondary]
Step 3 Router(config-if)# encapsulation ppp Enables PPP encapsulation.
Step 4 Router(config-if)# dialer idle-timeout seconds Specifies the duration of idle time in seconds after which a
[inbound | either] line will be disconnected.
By default, outbound traffic will reset the dialer idle timer.
Adding the either keyword causes both inbound and
outbound traffic to reset the timer; adding the inbound
keyword causes only inbound traffic to reset the timer.
Step 5 Router(config-if)# dialer load-threshold load Specifies the dialer load threshold for bringing up additional
WAN links.
Step 6 Router(config-if)# dialer map protocol Configures the ISDN interface to call the remote site.
next-hop-address [name hostname] [spc] [speed
56 | 64] [broadcast]
[dial-string[:isdn-subaddress]]
Step 7 Router(config-if)# dialer-group group-number Controls access to this interface by adding it to a dialer
access group.
Step 8 Router(config-if)# ppp authentication pap (Optional) Enables PPP authentication.
Step 9 Router(config-if)# ppp multilink Enables MLP on the dialer rotary group.
If you do not use PPP authentication procedures (Step 8), your telephone service must pass caller ID
information.
The load threshold number is required. For an example of configuring MLP on a single ISDN BRI
interface, see the section “MLP on One ISDN BRI Interface Example” at the end of this chapter.
When MLP is configured and you want a multilink bundle to be connected indefinitely, use the dialer
idle-timeout command to set a very high idle timer. (The dialer-load threshold 1 command no longer
keeps a multilink bundle of n links connected indefinitely, and the dialer-load threshold 2 command no
longer keeps a multilink bundle of two links connected indefinitely.)
Command Purpose
Step 1 Router(config)# interface dialer number Specifies the dialer rotary interface and begins interface
configuration mode.
Step 2 Router(config-if)# ip address address mask Specifies the protocol address for the dialer rotary interface.
Command Purpose
Step 3 Router(config-if)# encapsulation ppp Enables PPP encapsulation.
Step 4 Router(config-if)# dialer in-band Specifies in-band dialing.
Step 5 Router(config-if)# dialer idle-timeout seconds Specifies the duration of idle time in seconds after which a
[inbound | either] line will be disconnected.
By default, both inbound and outbound traffic will reset the
dialer idle timer. Including the inbound keyword will cause
only inbound traffic to reset the timer.
Step 6 Router(config-if)# dialer map protocol Maps the next hop protocol address and name to the dial
next-hop-address [name hostname] [spc] [speed string needed to reach it.
56 | 64] [broadcast]
[dial-string[:isdn-subaddress]]
Step 7 Router(config-if)# dialer load-threshold load Specifies the dialer load threshold, using the same threshold
as the individual BRI interfaces.
Step 8 Router(config-if)# dialer-group number Controls access to this interface by adding it to a dialer
access group.
Step 9 Router(config-if)# ppp authentication chap (Optional) Enables PPP CHAP authentication.
Step 10 Router(config-if)# ppp multilink Enables Multilink PPP.
If you do not use PPP authentication procedures (Step 10), your telephone service must pass caller ID
information.
To configure each of the BRI interfaces to belong to the same rotary group, use the following commands
beginning in global configuration mode:
Command Purpose
Step 1 Router(config)# interface bri number Specifies one of the BRI interfaces.
Step 2 Router(config-if)# no ip address Specifies that it does not have an individual protocol address.
Step 3 Router(config-if)# encapsulation ppp Enables PPP encapsulation.
Step 4 Router(config-if)# dialer idle-timeout seconds Specifies the duration of idle time in seconds after which a
[inbound | either] line will be disconnected.
By default, outbound traffic will reset the dialer idle timer.
Adding the either keyword causes both inbound and
outbound traffic to reset the timer; adding the inbound
keyword causes only inbound traffic to reset the timer.
Step 5 Router(config-if)# dialer rotary-group number Adds the interface to the rotary group.
Step 6 Router(config-if)# dialer load-threshold load Specifies the dialer load threshold for bringing up additional
WAN links.
Repeat Steps 1 through 6 for each BRI that you want to belong to the same dialer rotary group.
When MLP is configured and you want a multilink bundle to be connected indefinitely, use the dialer
idle-timeout command to set a very high idle timer. (The dialer load-threshold 1 command no longer
keeps a multilink bundle of n links connected indefinitely and the dialer load-threshold 2 command no
longer keeps a multilink bundle of two links connected indefinitely.)
Note Previously, when MLP was used in a dialer profile, a virtual access interface was always created as the
bundle. It was bound to both the B channel and the dialer profile interfaces after creation and cloning.
The dialer profile interface could act as the bundle without help from a virtual access interface. But with
the Dynamic Multiple Encapsulations feature available in Cisco IOS Release 12.1, it is no longer the
virtual access interface that is added into the connected group of the dialer profile, but the dialer profile
itself. The dialer profile becomes a connected member of its own connected group. See the “Dynamic
Multiple Encapsulations over ISDN Example” in the chapter “” in this publication, for more information
about dynamic multiple encapsulations and its relation to Multilink PPP.
For an example of configuring MLP on multiple ISDN BRI interfaces, see the section “MLP on Multiple
ISDN BRI Interfaces Example” at the end of this chapter.
Command Purpose
Router(config)# interface multilink group-number Creates a multilink bundle and enters multilink interface
configuration mode to configure the bundle.
Router(config-if)# ip address address mask Sets a primary IP address for an interface.
Router(config-if)# encapsulation ppp Enables PPP encapsulation.
Router(config-if)# ppp multilink Enables MLP on an interface.
To assign the multilink group to a virtual template, perform the following task beginning in global
configuration mode:
Router(config)# interface virtual template number Creates a virtual template interface that can be configured and
applied dynamically in creating virtual access interfaces.
Router(config-if)# ppp multilink group group-number Restricts a physical link to joining only a designated
multilink-group interface.
To configure the physical interface and assign the virtual template to it, perform the following task
beginning in global configuration mode. This example is for an ATM interface. However, multilink
group interfaces can also be used with PPP over Frame Relay interfaces and serial interfaces.
Router(config-if)# pvc vpi/vci Creates or assigns a name to an ATM permanent virtual circuit
(PVC), specifies the encapsulation type on an ATM PVC, and
enters ATM virtual circuit configuration mode.
Router(config-if-atm-vc)# protocol ppp Configures VC multiplexed encapsulation on a PVC.
virtual-template name
To see an example of how to configure MLP over an ATM PVC using a multilink group, see the section
“MLP Using Multilink Group Interfaces over ATM Example” at the end of this chapter.
Command Purpose
Router(config-if)# ppp multilink endpoint {hostname Overrides or changes the default endpoint discriminator the
| ip IP-address | mac LAN-interface | none | phone system uses when negotiating the use of MLP with the peer.
telephone-number | string char-string}
To see an example of how to change the default endpoint discriminator, see the section “Changing the
Default Endpoint Discriminator Example” at the end of this chapter.
Fair queueing on MLP overcomes a prior restriction. Previously, fair queueing was not allowed on virtual
access interfaces and virtual interface templates. Interleaving provides the delay bounds for
delay-sensitive voice packets on a slow link that is used for other best-effort traffic.
Interleaving applies only to interfaces that can configure a multilink bundle interface. These restrictions
include virtual templates, dialer interfaces, and ISDN BRI or PRI interfaces.
Multilink and fair queueing are not supported when a multilink bundle is off-loaded to a different system
using Multichassis Multilink PPP (MMP). Thus, interleaving is not supported in MMP networking
designs.
MLP support for interleaving can be configured on virtual templates, dialer interfaces, and ISDN BRI
or PRI interfaces. To configure interleaving, complete the following tasks:
• Configure the dialer interface, BRI interface, PRI interface, or virtual template, as defined in the
relevant chapters of this manual.
• Configure MLP and interleaving on the interface or template.
Note Fair queueing, which is enabled by default, must remain enabled on the interface.
Command Purpose
Step 1 Router(config-if)# ppp multilink Enables Multilink PPP.
Step 2 Router(config-if)# ppp multilink interleave Enables interleaving of packets among the fragments of
larger packets on an MLP bundle.
Step 3 Router(config-if)# ppp multilink fragment delay Specifies a maximum size, in units of time, for packet
milliseconds fragments on an MLP bundle.
Step 4 Router(config-if)# ip rtp reserve Reserves a special queue for real-time packet flows to
lowest-udp-port range-of-ports specified destination UDP ports, allowing real-time traffic to
[maximum-bandwidth]
have higher priority than other flows.
Step 5 Router(config-if)# exit Exits interface configuration mode.
Step 6 Router(config)# multilink virtual-template 1 For virtual templates only, applies the virtual template to the
multilink bundle.1
1. This step is not used for ISDN or dialer interfaces.
Interleaving statistics can be displayed by using the show interfaces command, specifying the particular
interface on which interleaving is enabled. Interleaving data is displayed only if there are interleaves.
For example, the following line shows interleaves:
Output queue: 315/64/164974/31191 (size/threshold/drops/interleaves)
T1s
CT3 CT3
T1s
PSTN Cisco 7500
Before beginning the MLP Inverse Multiplexer configuration tasks, make note of the following
prerequisites and restrictions.
Prerequisites
• Distributed CEF switching must be enabled for distributed MLP.
• One of the following port adapters is required:
– CT3IP
– PA-MC-T3
– PA-MC-2T3+
– PA-MC-E3
– PA-MC-8T1
– PA-MC-4T1
– PA-MC-8E1
• All 16 E1s can be bundled from a PA-MC-E3 in a VIP4-80.
Restrictions
• The Multilink Inverse Multiplexer feature is supported only on the Cisco 7500 series routers.
• For bundles using IP, all lines in the bundle must have the same IP access list.
• Only one port adapter can be installed in a VIP.
• T1 and E1 lines cannot be mixed in a bundle.
• T1 lines in a bundle must have the same bandwidth.
• All lines in a bundle must have identical configurations.
• T1 lines can be combined in one bundle or up to 16 bundles per VIP.
• E1 lines can be combined in one bundle or up to 12 bundles per VIP.
• A maximum of eight T1 lines can be bundled on the VIP2-50 with two MB of SRAM.
• A maximum of 16 T1 lines can be bundled on the VIP2-50 with four or eight MB of SRAM.
• A maximum of 12 E1 lines can be bundled on the VIP2-50 with four or eight MB of SRAM.
• A maximum of 40 T1 lines can be bundled on the VIP4-80.
• Hardware compression is not supported.
• Encryption is not supported.
• Fancy/custom queueing is supported.
• MLP fragmentation is supported.
• Software compression is not recommended because CPU usage would negate performance gains.
• The maximum differential delay supported is 50 milliseconds.
• VIP CEF is limited to IP only; all other protocols are sent to the RSP.
Enabling fragmentation reduces the delay latency among bundle links, but adds some load to the CPU.
Disabling fragmentation may result in better throughput.
If your data traffic is consistently of a similar size, we recommend disabling fragmentation. In this case,
the benefits of fragmentation may be outweighed by the added load on the CPU.
To configure a multilink bundle, perform the tasks in the following sections:
• Enabling Distributed CEF Switching (Required for Distributed MLP)
• Creating a Multilink Bundle (Required)
• Assigning an Interface to a Multilink Bundle (Required)
• Disabling PPP Multilink Fragmentation (Optional)
• Verifying the MLP Inverse Multiplexer Configuration (Optional)
Command Purpose
Router(config)# ip cef distributed Enables dCEF switching.
Command Purpose
Step 1 Router(config)# interface multilink Assigns a multilink group number and begins interface
group-number configuration mode.
Step 2 Router(config-if)# ip address address mask Assigns an IP address to the multilink interface.
Step 3 Router(config-if)# encapsulation ppp Enables PPP encapsulation.
Step 4 Router(config-if)# ppp multilink Enables Multilink PPP.
Command Purpose
Step 1 Router(config-if)# no ip address Removes any specified IP address.
Step 2 Router(config-if)# keepalive Sets the frequency of keepalive packets.
Step 3 Router(config-if)# encapsulation ppp Enables PPP encapsulation.
Step 4 Router(config-if)# ppp multilink group Restricts a physical link to joining only the designated
group-number multilink-group interface.
Step 5 Router(config-if)# ppp multilink Enables Multilink PPP.
Step 6 Router(config-if)# ppp authentication chap (Optional) Enables CHAP authentication.
Step 7 Router(config-if)# pulse-time seconds (Optional) Configures DTR signal pulsing.
Command Purpose
Router(config-if)# ppp multilink fragment disable (Optional) Disables PPP multilink fragmentation.
Command Purpose
Router> show ppp multilink Displays MLP and MMP bundle information.
When you look at the configuration file, the passwords will be encrypted and the display will look
similar to the following:
hostname xxx
interface serial 0
encapsulation ppp
ppp authentication chap
username yyy password 7 121F0A18
username zzz password 7 1329A055
!
interface Serial0/0:23
no ip address
encapsulation ppp
dialer pool-member 1
ppp authentication chap
ppp multilink
!
interface Serial1/0
ip address 10.2.2.4 255.255.255.0
encapsulation ppp
dialer in-band
dialer map ip 10.2.2.13 name sTephen 12345
dialer-group 1
ppp authentication chap
!
interface Dialer0
ip address 10.1.1.4 255.255.255.0
encapsulation ppp
dialer remote-name sTephen
dialer string 23456
dialer pool 1
dialer-group 1
ppp authentication chap
ppp multilink
!
dialer-list 1 protocol ip permit
The following example creates a virtual access interface (virtual-template interface 1) and serial
interface 0, which is configured for X.25 encapsulation. MPPC values are configured on the
virtual-template interface and will ignore the negotiated protocol field compression flag.
interface ethernet0
ip address 172.20.30.102 255.255.255.0
!
interface virtual-template1
ip unnumbered ethernet0
peer default ip address pool vtemp1
compress mppc ignore-pfc
!
interface serial0
no ipaddress
no ip mroute-cache
encapsulation x25
x25 win 7
x25 winout 7
x25 ips 512
x25 ops 512
interface serial 1
no ip address
shutdown
!
interface serial 0:23
no ip address
encapsulation ppp
no ip mroute-cache
dialer rotary-group 1
dialer-group 1
isdn incoming-voice modem
no fair-queue
no cdp enable
!
interface group-async 1
ip unnumbered loopback 0
ip helper-address 10.47.0.131
ip tcp header-compression passive
encapsulation ppp
no ip route-cache
no ip mroute-cache
async mode interactive
peer default ip address dhcp
no fair-queue
no cdp enable
ppp authentication chap
group-range 1 24
!
interface dialer 1
ip unnumbered loopback 0
encapsulation ppp
dialer in-band
dialer-group 1
no peer default ip address
no fair-queue
no cdp enable
ppp authentication chap
ppp multilink
!
router ospf 172
redistribute connected subnets
redistribute static
network 10.47.0.0 0.0.3.255 area 0
network 10.47.156.0 0.0.3.255 area 0
network 10.47.168.0 0.0.3.255 area 0
network 10.47.252.0 0.0.3.255 area 0
!
ip local pool RemotePool 10.47.252.1 10.47.252.24
ip classless
ip route 10.0.140.0 255.255.255.0 10.59.254.254
ip route 10.2.140.0 255.255.255.0 10.59.254.254
ip route 10.40.0.0 255.255.0.0 10.59.254.254
ip route 10.59.254.0 255.255.255.0 10.59.254.254
ip route 172.23.0.0 255.255.0.0 10.59.254.254
ip route 192.168.0.0 255.255.0.0 10.59.254.254
ip ospf name-lookup
no logging buffered
access-list 101 deny ip any host 255.255.255.255
access-list 101 deny ospf any any
access-list 101 permit ip any any
dialer-list 1 protocol ip list 101
snmp-server community public RO
!
line con 0
line 1 24
autoselect during-login
autoselect ppp
modem InOut
transport input all
line aux 0
line vty 0 4
password PassWd5
!
scheduler interval 100
end
The following example shows output of the show interfaces command when PPP reliable link is
enabled. The LAPB output lines indicate that PPP reliable link is provided over LAPB.
Router# show interfaces serial 0
MLP Examples
This section contains the following MLP examples:
• MLP on Synchronous Serial Interfaces Example
• MLP on One ISDN BRI Interface Example
• MLP on Multiple ISDN BRI Interfaces Example
• MLP Using Multilink Group Interfaces over ATM Example
• Changing the Default Endpoint Discriminator Example
T1 connection
Ethernet Ethernet
60144
Router A Router B
The following example shows the configuration commands used to create the inverse multiplexing
application:
Router A Configuration
hostname RouterA
!
!
username RouterB password your_password
ip subnet-zero
multilink virtual-template 1
!
interface Virtual-Template1
ip unnumbered Ethernet0
ppp authentication chap
ppp multilink
!
interface Serial0
no ip address
encapsulation ppp
no fair-queue
ppp multilink
pulse-time 3
!
interface Serial1
no ip address
encapsulation ppp
no fair-queue
ppp multilink
pulse-time 3
!
interface Serial2
no ip address
encapsulation ppp
no fair-queue
ppp multilink
pulse-time 3
!
interface Serial3
no ip address
encapsulation ppp
no fair-queue
ppp multilink
pulse-time 3
!
interface Ethernet0
ip address 10.17.1.254 255.255.255.0
!
router rip
network 10.0.0.0
!
end
Router B Configuration
hostname RouterB
!
!
username RouterB password your_password
ip subnet-zero
multilink virtual-template 1
!
interface Virtual-Template1
ip unnumbered Ethernet0
ppp authentication chap
ppp multilink
!
interface Serial0
no ip address
encapsulation ppp
no fair-queue
ppp multilink
pulse-time 3
!
interface Serial1
no ip address
encapsulation ppp
no fair-queue
ppp multilink
pulse-time 3
!
interface Serial2
no ip address
encapsulation ppp
no fair-queue
ppp multilink
pulse-time 3
!
interface Serial3
no ip address
encapsulation ppp
no fair-queue
ppp multilink
pulse-time 3
!
interface Ethernet0
ip address 10.17.2.254 255.255.255.0
!
router rip
network 10.0.0.0
!
end
dialer-group 1
ppp authentication pap
ppp multilink
interface virtual-template 3
bandwidth 128
ppp multilink group 1
The following example enables MLP interleaving on a dialer interface that controls a rotary group of
BRI interfaces. This configuration permits IP packets to trigger calls.
interface BRI 0
description connected into a rotary group
encapsulation ppp
dialer rotary-group 1
!
interface BRI 1
no ip address
encapsulation ppp
dialer rotary-group 1
!
interface BRI 2
encapsulation ppp
dialer rotary-group 1
!
interface BRI 3
no ip address
encapsulation ppp
dialer rotary-group 1
!
interface BRI 4
encapsulation ppp
dialer rotary-group 1
!
interface Dialer 0
description Dialer group controlling the BRIs
ip address 10.1.1.1 255.255.255.0
encapsulation ppp
dialer map ip 10.1.1.2 name angus 14802616900
dialer-group 1
ppp authentication chap
! Enables Multilink PPP interleaving on the dialer interface and reserves
! a special queue.
ppp multilink
ppp multilink interleave
ip rtp reserve 32768 20 1000
! Keeps fragments of large packets small enough to ensure delay of 20 ms or less.
ppp multilink fragment delay 20
dialer-list 1 protocol ip permit
Feature History
Release Modification
12.2(4)T This feature was introduced.
12.2(11)T This feature was implemented on Cisco access server platforms.
This document describes the Customer Profile Idle Timer Enhancements for Interesting Traffic feature.
It includes the following sections:
• Feature Overview, page 929
• Supported Platforms, page 930
• Supported Standards, MIBs, and RFCs, page 931
• Configuration Tasks, page 931
• Configuration Examples, page 934
• Command Reference, page 938
• Glossary, page 939
Feature Overview
Before Cisco IOS Release 12.2(4)T, only the dialer idle timer could be reset for interesting traffic on a
dialer interface. The Customer Profile Idle Timer Enhancements for Interesting Traffic feature available
in Cisco IOS Release 12.2(4)T supports a PPP idle timer based on interesting traffic for dialer interfaces.
(Existing PPP idle timer behavior is not changed when traffic is not classified.) New commands and
functionality provided with this feature also address idle timer issues for virtual access dialup network
(VPDN) sessions, which use virtual access (projected) interfaces and rely on the PPP idle timer
mechanism.
The Resource Pool Manager (RPM) per-customer profile dialer idle timer function works with Multilink
PPP (MLP) and Multichassis Multilink PPP (MMP), providing that the master bundle interface is not a
virtual access (projected) interface. For virtual access interfaces such as those used in a VPDN or with
MMP where the dialer idle timer cannot be used, you can now classify the IP traffic that resets the PPP
idle timer. A named access list is also supported.
Additionally, because RPM customer profiles are applied on a per-Dialed Number Identification Service
(DNIS) basis and allow for configuring a per-customer profile dialer idle timer, the Customer Profile Idle
Timer Enhancements for Interesting Traffic feature associates idle timers based on call type and DNIS.
The idle timer implementation in the Customer Profile Idle Timer Enhancements for Interesting Traffic
feature specifies that for calls terminated on a network access server, a virtual access interface is cloned
from the virtual template. This virtual access interface is linked to a physical interface on which is
running a dialer timer. If the PPP idle timer is configured on the virtual template or provided by an
authentication, authorization, and accounting (AAA) per-user interface configuration, the result is two
idle timers, as follows:
• A PPP idle timer on the virtual access interface.
• A dialer idle timer on the physical interface.
Neither the dialer idle timer nor the PPP idle timer will run when the idle timer in the per-user
configuration is set to 0. When the per-user idle timer is set to some value besides 0, that value overrides
all local idle timer configurations.
Benefits
The Customer Profile Idle Timer Enhancements for Interesting Traffic feature provides the following
system idle timer benefits:
• Resets the PPP idle timer based on interesting inbound or outbound IP traffic for virtual access
interfaces on Layer 2 Tunnel Protocol (L2TP) access concentrators (LACs) and L2TP network
servers (LNSs).
• Associates the dialer timer with interesting traffic within RPM customer profiles.
• Applies the user idle-timer value RADIUS attribute 28 across all interfaces associated with the call.
Restrictions
The PPP idle timer can classify IP traffic only.
Supported Platforms
See the next section for information about Feature Navigator and how to use this tool to determine the
platforms and software images in which this feature is available.
Feature Navigator is updated when major Cisco IOS software releases and technology releases occur. As
of May 2001, Feature Navigator supports M, T, E, S, and ST releases. You can access Feature Navigator
at the following URL:
http://www.cisco.com/go/fn
MIBs
None
To obtain lists of supported MIBs by platform and Cisco IOS release, and to download MIB modules,
go to the Cisco MIB website on Cisco.com at the following URL:
http://www.cisco.com/public/sw-center/netmgmt/cmtk/mibs.shtml
RFCs
None
Configuration Tasks
See the following sections for configuration tasks for the Customer Profile Idle Timer Enhancements for
Interesting Traffic feature. Each task in the list is identified as either required or optional:
• Configuring an RPM Template to Accept Dialer Interface Timers (required)
• Configuring a PPP Idle Timer Based on Interesting IP Traffic (required)
• Configuring the Idle Timer in a RADIUS Profile (optional)
• Verifying the Customer Profile Idle Timer Enhancements for Interesting Traffic (optional)
Command Purpose
Step 1 Router(config)# template name Accesses the template configuration mode
for configuring a particular customer profile
template.
Step 2 Router(config-template)# dialer idle-timeout seconds Sets the dialer idle timeout period in a virtual
template interface.
Step 3 Router(config-template)# dialer-group dialer-list-number Controls access by configuring an interface
to belong to a specific dialing group.
Command Purpose
Step 1 Router(config)# interface virtual-template number Creates a virtual template interface that can
be configured and applied dynamically in
creating virtual access interfaces, and enters
interface configuration mode.
Step 2 Router(config-if)# ppp timeout idle time Sets PPP idle timeout parameters on the
virtual template interface.
Step 3 Router(config-if)# ip idle-group {access-list-number | Configures interesting inbound traffic (using
access-list-name} {in | out} the in keyword) or outbound traffic (using
the out keyword) on a virtual template
interface for the PPP idle timer.
See the configurations included in the “Configuration Examples” section for additional commands that
you might configure.
Verifying the Customer Profile Idle Timer Enhancements for Interesting Traffic
To verify that the Customer Profile Idle Timer Enhancements for Interesting Traffic is configured
correctly, perform the following verification steps:
Step 1 To display the idle time configured, and any remote caller that is connected and its IP address, enter the
show caller timeout EXEC command:
Router# show caller timeout
Step 2 Enter the show caller timeout EXEC command again. Notice that the show caller timeout command
displays the idle timeout configured as 20 seconds:
Router# show caller timeout
Session Idle Disconnect
Line User Timeout Timeout User in
con 0 - - - -
tty 47 st-5300-c3 - 00:30:00 00:29:43
As47 st-5300-c3 - 00:00:20 now
Step 3 Continue entering the show caller timeout command. The displays show the timers counting down and
then disconnecting.
Router# show caller timeout
Session Idle Disconnect
Line User Timeout Timeout User in
con 0 - - - -
tty 47 st-5300-c3 - 00:30:00 00:29:43
As47 st-5300-c3 - 00:00:20 now
Router#
Troubleshooting Tips
To troubleshoot the Customer Profile Idle Timer Enhancements for Interesting Traffic feature, use the
following debugging commands:
• debug cca
• debug aaa authen
• debug aaa author
• debug aaa per-user
• debug ppp authen
• debug ppp neg
• debug radius
• debug isdn q931
• debug dialer detail
• debug vaccess
• debug vprofile
Command Purpose
Router# show caller Displays caller information.
Router# show ip access-list Displays the contents of all current IP access lists.
Router# show users Displays information about the active lines on the router.
Configuration Examples
This section provides the following configuration examples:
• Two Templates with Different Dialer Idle Timer Settings Example
• Resetting the Dialer Idle Timer with Interesting Traffic Example
• Network Access Server Extended Configuration Example
!
template template2
dialer idle-timeout 90
dialer-group 2
!
dialer dnis group dnis_g1
number 11111111
!
dialer dnis group dnis_g2
number 22222222
ip subnet-zero
!
sgbp group MMP
sgbp member 2500-2 10.0.38.3
sgbp ppp-forward
!
vpdn enable
no vpdn logging
!
isdn switch-type primary-5ess
!
template template1
dialer idle-timeout 27
dialer-group 1
!
controller T1 0
framing esf
clock source line primary
linecode b8zs
pri-group timeslots 1-24
!
interface Loopback1
ip address 192.168.14.1 255.255.255.255
no ip route-cache
no ip mroute-cache
!
interface Ethernet0
ip address 10.0.38.14 255.255.255.0
no ip route-cache
no ip mroute-cache
!
interface Virtual-Template1
ip unnumbered Loopback1
peer default ip address pool local_pool
ppp authentication chap callin
ppp chap hostname name
ppp timeout idle 60
ip idle-group 101 in
ip idle-group 102 in
ppp multilink
!
interface Serial0:23
ip unnumbered Loopback1
encapsulation ppp
ip mroute-cache
load-interval 30
dialer load-threshold 1 outbound
dialer-group 2
isdn switch-type primary-5ess
isdn incoming-voice modem
Command Reference
The following new and modified commands are pertinent to this feature. To see the command pages for
these commands and other commands used with this feature, go to the Cisco IOS Master Commands List,
Release 12.4, at http://www.cisco.com/univercd/cc/td/doc/product/software/ios124/124mindx/
124index.htm.
New Commands
• ip idle-group
• dialer-group (template)
• dialer idle-timeout (template)
• ppp timeout idle (template)
Modified Command
• dialer-list protocol
Glossary
interesting packets—Dialer access lists are central to the operation of DDR. In general, access lists are
used as the screening criteria for determining when to initiate DDR calls. All packets are tested against
the dialer access list. Packets that match a permit entry are deemed interesting.
Feature History
Release Modification
12.2(13)T This feature was introduced.
This document describes the Multiclass Multilink PPP feature in Cisco IOS Release 12.2(13)T. It
includes the following sections:
• Feature Overview, page 941
• Supported Platforms, page 942
• Supported Standards, MIBs, and RFCs, page 943
• Prerequisites, page 944
• Configuration Tasks, page 944
• Configuration Examples, page 946
• Command Reference, page 947
Feature Overview
Previous implementations of Cisco IOS Multilink PPP (MLP) include support for Link Fragmentation
Interleaving (LFI). This feature allows the delivery of delay-sensitive packets, such as the packets of a
Voice call, to be expedited by omitting the PPP Multilink Protocol header and sending the packets as raw
PPP packets in between the fragments of larger data packets. This feature works well on bundles
consisting of a single link. However, when the bundle contains multiple links there is no way to keep the
interleaved packets in sequence with respect to each other.
The Multiclass Multilink PPP (MCMP) feature in Cisco IOS Release 12.2(13)T addresses the limitations
of MLP LFI on bundles containing multiple links by introducing multiple data classes. Normal data
traffic and delay-sensitive data traffic are divided into Class 0 and Class 1, respectively. Class 0 data
traffic is subject to fragmentation just as regular multilink packets are. Class 1 data traffic can be
interleaved but never fragmented. The next transmit sequence number, expected sequence number,
unassigned fragment list, working packet, lost fragment timer, fast-switching mode, and all statistics are
managed per class, rather than for the bundle as a whole.
Benefits
The Multiclass Multilink PPP feature in Cisco IOS Release 12.2(13)T allows rapid delivery of real-time
data over a bundle containing multiple links without loss of sequencing.
Restrictions
The ppp multilink multiclass command must be configured on each link that will be joining the bundle.
Failure to configure this command could result in the peer refusing to allow mismatched links to join the
bundle. The first link to join the bundle will determine whether MCMP is in effect for the bundle. Each
subsequent link must negotiate the same MCMP parameters in order to join the bundle.
Because real-time traffic is encapsulated with multilink headers, the receiver will be required to buffer
the packets when they arrive out of sequence. Therefore, the differential delay between the links must
be small relative to the tolerable delay for such traffic. Otherwise, packets may be subject to additional
delay while the receiver awaits the arrival of earlier sequence numbers sent over other links in the bundle.
The maximum number of links supported for an MCMP bundle is 64.
The Prefix Elision option specified in RFC 2686 is not supported.
Related Documents
• Cisco IOS Dial Technologies Configuration Guide, Release 12.2
• Cisco IOS Dial Technologies Command Reference, Release 12.2
Supported Platforms
• Cisco 2600 series
• Cisco 3600 series
• Cisco 3700 series
• Cisco 7200 series
• Cisco AS5300
• Cisco AS5350
• Cisco AS5400
Cisco Feature Navigator is a web-based tool that enables you to quickly determine which Cisco IOS
software images support a specific set of features and which features are supported in a specific
Cisco IOS image. You can search by feature or release. Under the release section, you can compare
releases side by side to display both the features unique to each software release and the features in
common.
To access Cisco Feature Navigator, you must have an account on Cisco.com. If you have forgotten or
lost your account information, send a blank e-mail to [email protected]. An automatic check
will verify that your e-mail address is registered with Cisco.com. If the check is successful, account
details with a new random password will be e-mailed to you. Qualified users can establish an account
on Cisco.com by following the directions found at this URL:
http://www.cisco.com/register
Cisco Feature Navigator is updated regularly when major Cisco IOS software releases and technology
releases occur. For the most current information, go to the Cisco Feature Navigator home page at the
following URL:
http://www.cisco.com/go/fn
MIBs
None
To locate and download MIBs for selected platforms, Cisco IOS releases, and feature sets, use
Cisco MIB Locator found at the following URL:
http://tools.cisco.com/ITDIT/MIBS/servlet/index
If Cisco MIB Locator does not support the MIB information that you need, you can also obtain a list of
supported MIBs and download MIBs from the Cisco MIBs page at the following URL:
http://www.cisco.com/public/sw-center/netmgmt/cmtk/mibs.shtml
To access Cisco MIB Locator, you must have an account on Cisco.com. If you have forgotten or lost your
account information, send a blank e-mail to [email protected]. An automatic check will verify
that your e-mail address is registered with Cisco.com. If the check is successful, account details with a
new random password will be e-mailed to you. Qualified users can establish an account on Cisco.com
by following the directions found at this URL:
http://www.cisco.com/register
RFCs
• RFC 2686, The Multi-Class Extension to Multi-Link PPP
Prerequisites
The dialer interface, BRI interface, PRI interface, multilink interface, or virtual template must be
configured, and PPP encapsulation must be enabled. For information on completing these tasks, refer to
the Cisco IOS Dial Technologies Configuration Guide, Release 12.2.
MLP LFI must be configured on the bundle. See the section “Configuring MLP LFI on a Bundle” in this
document.
Configuration Tasks
See the following sections for configuration tasks for the Multiclass Multilink PPP feature. Each task in
the list is identified as either required or optional.
• Configuring MLP LFI on a Bundle (required)
• Configuring MCMP on a Member Link (required)
• Verifying MCMP (optional)
Command Purpose
Step 4 Router(config-if)# ppp multilink Enables MLP.
Step 5 Router(config-if)# ppp multilink Enables interleaving of packets among the fragments of larger
interleave packets on an MLP bundle.
Step 6 Router(config-if)# ppp multilink fragment Specifies a maximum size, in units of time, for packet fragments
delay milliseconds on an MLP bundle.
Step 7 Router(config-if)# ip rtp reserve Reserves a special queue for real-time packet flows to specified
lowest-udp-port range-of-ports destination User Datagram Protocol (UDP) ports, allowing
[maximum-bandwidth]
real-time traffic to have higher priority than other flows.
Step 8 Router(config-if)# exit Exits interface configuration mode.
Step 9 Router(config)# multilink For virtual templates only, applies the virtual template to the
virtual-template number multilink bundle.1
1. This step is not used for dialer interfaces.
Command Purpose
Step 1 Router(config-if)# ppp multilink Enables MLP.
Step 2 Router(config-if)# ppp multilink Enables MCMP on an interface.
multiclass
Verifying MCMP
To verify that the Multiclass Multilink PPP feature is configured correctly, enter the show ppp multilink
EXEC command. The following output includes class-specific information for the PPP Multilink
bundles:
Router# show ppp multilink
Configuration Examples
This section provides the following configuration example:
• Configuring MCMP on a Dialer Example
• MCMP and MLP Interleaving and Queueing for Real-Time Traffic Examples
MCMP and MLP Interleaving and Queueing for Real-Time Traffic Examples
The following example enables MLP interleaving and MCMP on a dialer interface that controls a rotary
group of BRI interfaces. This configuration permits IP packets to trigger calls.
interface BRI 0
description connected into a rotary group
encapsulation ppp
dialer rotary-group 1
!
interface BRI 1
no ip address
encapsulation ppp
dialer rotary-group 1
!
interface BRI 2
encapsulation ppp
dialer rotary-group 1
!
interface BRI 3
no ip address
encapsulation ppp
dialer rotary-group 1
!
interface BRI 4
encapsulation ppp
dialer rotary-group 1
!
interface Dialer 0
description Dialer group controlling the BRIs
ip address 10.1.1.1 255.255.255.0
encapsulation ppp
dialer map ip 10.1.1.2 name remote 14802616900
dialer-group 1
The following example defines a virtual interface template that enables MLP interleaving and a
maximum real-time traffic delay of 20 milliseconds. The bundle interface will be a virtual access
interface cloned from the virtual template. MCMP is then configured on a member link, Serial0.
interface virtual-template 1
ip unnumbered ethernet 0
ppp multilink
ppp multilink interleave
ppp multilink fragment delay 20
ip rtp interleave 32768 20 1000
!
multilink virtual-template 1
!
interface Serial0
encapsulation ppp
ppp authentication chap
ppp multilink
ppp multilink multiclass
The following example configures MLP interleaving and a maximum real-time traffic delay of
20 milliseconds on a multilink interface. MCMP is then configured on a member link, Serial1, and the
member link is restricted to joining only the designated multilink group interface.
interface Multilink1
ip address 10.2.3.4 255.255.255.0
ppp multilink
ppp multilink interleave
ppp multilink fragment delay 20
!
interface Serial1
encapsulation ppp
ppp authentication chap
ppp multilink
ppp multilink multiclass
ppp multilink group 1
Command Reference
The following new and modified commands are pertinent to this feature. To see the command pages for
these commands and other commands used with this feature, go to the Cisco IOS Master Commands List,
Release 12.4, at http://www.cisco.com/univercd/cc/td/doc/product/software/ios124/124mindx/
124index.htm.
• ppp multilink multiclass
• show ppp multilink
The PPP/MLP MRRU Negotiation Configuration feature allows a router to send and receive frames over
Multilink PPP (MLP) bundles that are larger than the default Maximum Receive Reconstructed Unit
(MRRU) limit of 1524 bytes.
Finding Support Information for Platforms and Cisco IOS Software Images
Use Cisco Feature Navigator to find information about platform support and Cisco IOS software image
support. Access Cisco Feature Navigator at http://www.cisco.com/go/fn. You must have an account on
Cisco.com. If you do not have an account or have forgotten your username or password, click Cancel at
the login dialog box and follow the instructions that appear.
Contents
• Prerequisites for PPP/MLP MRRU Negotiation Configuration, page 949
• Restrictions for PPP/MLP MRRU Negotiation Configuration, page 950
• Information About PPP/MLP MRRU Negotiation Configuration, page 950
• How to Configure PPP/MLP MRRU Negotiation Configuration, page 951
• Configuration Examples for PPP/MLP MRRU Negotiation Configuration, page 959
• Additional References, page 960
• Command Reference, page 961
Note Be careful when configuring MLP MRRU negotiation in a virtual private dialup network (VPDN)
environment with an L2TP network server (LNS) that is not running Cisco IOS Release 12.3(7)T. The
software performs strict matching on the MRRU values in earlier versions of the Cisco IOS software.
SUMMARY STEPS
1. enable
2. configure terminal
3. multilink virtual-template number
4. interface virtual-template number
5. ip address ip-address mask
6. mtu bytes
7. exit
8. interface serial slot/port
9. ppp multilink
10. ppp multilink mrru [local | remote] mrru-value
11. mtu bytes
12. exit
DETAILED STEPS
Example:
Router# configure terminal
Step 3 multilink virtual-template number Specifies a virtual template from which the specified MLP
bundle interface can clone its interface parameters.
Example:
Router(config)# multilink virtual-template 1
Step 4 interface virtual-template number Creates a virtual template interface that can be configured
and applied dynamically in creating virtual access
interfaces, and enters interface configuration mode.
Example:
Router(config)# interface virtual-template 1
Example:
Router(config-if)# ip address 10.13.1.1
255.255.255.0
Step 6 mtu bytes (Optional) Adjusts the maximum packet size or MTU size.
• Once you configure the MRRU on the bundle interface,
Example: you enable the router to receive large reconstructed
Router(config-if)# mtu 1600 MLP frames. You may want to configure the bundle
MTU so the router can transmit large MLP frames,
although it is not strictly necessary.
• The maximum recommended value for the bundle MTU
is the value of the peer’s MRRU. The default MTU for
serial interfaces is 1500. The software will
automatically reduce the bundle interface MTU if
necessary, to avoid violating the peer’s MRRU.
Step 7 exit Exits interface configuration mode and returns to global
configuration mode.
Example:
Router(config-if)# exit
Step 8 interface serial slot/port Selects a serial interface to configure and starts interface
configuration mode.
Example:
Router(config)# interface serial 0/0
Step 9 ppp multilink Enables MLP on an interface.
Example:
Router(config-if)# ppp multilink
Step 10 ppp multilink mrru [local | remote] mrru-value Configures the MRRU value negotiated on a multilink
bundle when MLP is used.
Example: • local—(Optional) Configures the local MRRU value.
Router(config-if)# ppp multilink mrru local The default values for the local MRRU are the value of
1600 the multilink group interface MTU for multilink group
members, and 1524 bytes for all other interfaces.
• remote—(Optional) Configures the minimum value
that software will accept from the peer when it
advertises its MRRU. By default, the software accepts
any peer MRRU value of 128 or higher. You can specify
a higher minimum acceptable MRRU value in a range
from 128 to 16384 bytes.
Troubleshooting Tips
Use the debug ppp negotiation command to verify and troubleshoot MRRU negotiation on virtual
templates. Use the show interface command to verify MRRU negotiation on the interfaces.
SUMMARY STEPS
1. enable
2. configure terminal
3. interface multilink number
4. ip address ip-address mask
5. ppp multilink mrru [local | remote] mrru-value
6. mtu bytes
7. exit
8. interface serial slot/port
9. ppp multilink
10. ppp multilink group group-number
11. mtu bytes
12. exit
DETAILED STEPS
Example:
Router# configure terminal
Step 3 interface multilink number Creates a virtual template interface that can be configured
and applied dynamically in creating virtual access
interfaces, and enters interface configuration mode.
Example:
Router(config)# interface multilink 10
Step 4 ip address ip-address mask Sets the IP address for the interface.
Example:
Router(config-if)# ip address 10.13.1.1
255.255.255.0
Step 5 ppp multilink mrru [local | remote] mrru-value Configures the MRRU value negotiated on a multilink
bundle when MLP is used.
Example: • local—(Optional) Configures the local MRRU value.
Router(config-if)# ppp multilink mrru local The default values for the local MRRU are the value of
1600 the multilink group interface MTU for multilink group
members, and 1524 bytes for all other interfaces.
• remote—(Optional) Configures the minimum value
that software will accept from the peer when it
advertises its MRRU. By default, the software accepts
any peer MRRU value of 128 or higher. You can specify
a higher minimum acceptable MRRU value in a range
from 128 to 16384 bytes.
Step 6 mtu bytes (Optional) Adjusts the maximum packet size or MTU size.
• Once you configure the MRRU on the bundle interface,
Example: you enable the router to receive large reconstructed
Router(config-if)# mtu 1600 MLP frames. You may want to configure the bundle
MTU so the router can transmit large MLP frames,
although it is not strictly necessary.
• The maximum recommended value for the bundle MTU
is the value of the peer’s MRRU. The default MTU for
serial interfaces is 1500. The software will
automatically reduce the bundle interface MTU if
necessary, to avoid violating the peer’s MRRU.
Example:
Router(config-if)# ppp multilink
Step 10 ppp multilink group group-number Restricts a physical link to joining only a designated
multilink-group interface.
Example:
Router(config-if)# ppp multilink group 1
Step 11 mtu bytes (Optional) Adjusts the maximum packet size or MTU size.
• The default MTU for serial interfaces is 1500.
Example: • When the bundle interface MTU is tuned to a higher
Router(config-if)# mtu 1600
number, then depending upon the fragmentation
configuration, the link interface may be given larger
frames to transmit.
• You must ensure that fragmentation is performed such
that fragments are sized less than the link interface
MTU (refer to command pages for the ppp multilink
fragmentation and ppp multilink fragment-delay
commands for more information about packet
fragments), or configure the MTUs of the link
interfaces such that they can transmit the larger frames.
Step 12 exit Exits interface configuration mode and returns to global
configuration mode.
Example:
Router(config-if)# exit
Troubleshooting Tips
Use the debug ppp negotiation command to verify and troubleshoot MRRU negotiation on multilink
groups. Use the show interface command to verify MRRU negotiation on the interfaces.
SUMMARY STEPS
1. enable
2. configure terminal
3. interface dialer number
4. ip address ip-address mask
5. encapsulation ppp
6. dialer configuration-commands
7. ppp multilink
8. ppp multilink mrru [local | remote] mrru-value
9. mtu bytes
10. exit
DETAILED STEPS
Example:
Router# configure terminal
Step 3 interface dialer number Defines a dialer rotary group and enters interface
configuration mode.
Example:
Router(config)# interface dialer 1
Step 4 ip address ip-address mask Sets the IP address for the interface.
Example:
Router(config-if)# ip address 10.13.1.1
255.255.255.0
Step 5 encapsulation ppp Sets the PPP encapsulation method.
Example:
Router(config-if)# encapsulation ppp
Example:
Router(config-if)# ppp multilink
Step 8 ppp multilink mrru [local | remote] mrru-value Configures the MRRU value negotiated on a multilink
bundle when MLP is used.
Example: • local—(Optional) Configures the local MRRU value.
Router(config-if)# ppp multilink mrru local The default values for the local MRRU are the value of
1600 the multilink group interface MTU for multilink group
members, and 1524 bytes for all other interfaces.
• remote—(Optional) Configures the minimum value
that the software will accept from the peer when it
advertises its MRRU. By default, the software accepts
any peer MRRU value of 128 or higher. You can specify
a higher minimum acceptable MRRU value in a range
from 128 to 16384 bytes.
Step 9 mtu bytes (Optional) Adjusts the maximum packet size or MTU size.
• The default MTU for serial interfaces is 1500.
Example:
Router(config-if)# mtu 1600
Step 10 exit Exits interface configuration mode and returns to global
configuration mode.
Example:
Router(config-if)# exit
Troubleshooting Tips
Use the debug ppp negotiation command to verify and troubleshoot MRRU negotiation on multilink
groups. Use the show interface command to verify MRRU negotiation on dialer interfaces.
Additional References
The following sections provide references related to the PPP/MLP MRRU Negotiation Configuration
feature.
Related Documents
Related Topic Document Title
Configuring media-independent PPP and Multilink “Part 9: PPP Configuration,” in the Cisco IOS Dial Technologies
PPP Configuration Guide
PPP and MLP commands Cisco IOS Dial Technologies Command Reference, Release 12.3 T
Standards
Standards Title
None —
MIBs
MIBs MIBs Link
None To locate and download MIBs for selected platforms, Cisco IOS
releases, and feature sets, use Cisco MIB Locator found at the
following URL:
http://www.cisco.com/go/mibs
RFCs
RFCs Title
RFC 1990 The PPP Multilink Protocol (MP)
Technical Assistance
Description Link
Technical Assistance Center (TAC) home page, http://www.cisco.com/public/support/tac/home.shtml
containing 30,000 pages of searchable technical
content, including links to products, technologies,
solutions, technical tips, and tools. Registered
Cisco.com users can log in from this page to access
even more content.
Command Reference
The following new command is pertinent to this feature. To see the command pages for this command
and other commands used with this feature, go to the Cisco IOS Master Commands List, Release 12.4,
at http://www.cisco.com/univercd/cc/td/doc/product/software/ios124/124mindx/124index.htm.
• ppp multilink mrru
The Troubleshooting Enhancements for Multilink PPP over ATM Link Fragmentation and Interleaving
enhance the output of the show atm pvc, show multilink ppp, and show interfaces virtual-access
commands to display multilink PPP (MLP) over ATM link fragmentation and interleaving (LFI)
information. This feature also introduces the debug atm lfi command, which can be used to display MLP
over ATM LFI debugging information.
Feature History for Troubleshooting Enhancements for Multilink PPP over ATM LFI
Release Modification
12.3(7)T This feature was introduced.
Finding Support Information for Platforms and Cisco IOS Software Images
Use Cisco Feature Navigator to find information about platform support and Cisco IOS software image
support. Access Cisco Feature Navigator at http://www.cisco.com/go/fn. You must have an account on
Cisco.com. If you do not have an account or have forgotten your username or password, click Cancel at
the login dialog box and follow the instructions that appear.
Contents
• How to Troubleshoot Multilink PPP over ATM LFI, page 963
• Additional References, page 965
• Command Reference, page 966
Prerequisites
This task assumes that you have configured multilink PPP over ATM LFI in your network. For
information about how to configure multilink PPP over ATM LFI, see the “Additional References”
section on page 965.
SUMMARY STEPS
1. enable
2. show atm pvc vpi/vci
3. show ppp multilink [active | inactive | interface bundle-interface | [username name] [endpoint
endpoint]]
4. show interfaces virtual-access [type number]
5. debug atm lfi
DETAILED STEPS
Example:
Router# show ppp multilink username blue
Step 4 show interfaces virtual-access number Displays status, traffic data, and configuration information
about a specified virtual access interface.
Example: • Display will indicate if the interface is a member of a
Router# show interfaces virtual-access 3 multilink PPP bundle.
Step 5 debug atm lfi Displays MLP over ATM LFI debug information.
Example:
Router# debug atm lfi
Examples
See the show atm pvc, show ppp multilink, show interfaces virtual-access, and debug atm lfi
command pages for examples of output and descriptions of the fields in the output. For information about
where to find the command pages for these commands, see Command Reference, page 966.
Additional References
The following sections provide references related to multilink PPP over ATM LFI.
Related Documents
Related Topic Document Title
LFI for multilink PPP configuration tasks “Configuring Link Fragmentation and Interleaving for Multilink
PPP” chapter in the Cisco IOS Quality of Service Solutions
Configuration Guide, Release 12.2
LFI for ATM virtual circuits configuration tasks “Configuring Link Fragmentation and Interleaving for Frame Relay
and ATM Virtual Circuits” chapter in the Cisco IOS Quality of
Service Solutions Configuration Guide, Release 12.2
Multilink PPP over ATM LFI commands Cisco IOS Quality of Service Solutions Command Reference,
Release 12.3 T
Multilink PPP configuration tasks “PPP Configuration” section in the Cisco IOS Dial Technologies
Configuration Guide, Release 12.3
Multilink PPP commands Cisco IOS Dial Technologies Command Reference, Release 12.3 T
ATM configuration tasks “WAN Protocols” section in the Cisco IOS Wide-Area Networking
Configuration Guide, Release 12.3
ATM commands Cisco IOS Wide-Area Networking Command Reference,
Release 12.3 T
MIBs
MIBs MIBs Link
No new or modified MIBs are supported by this To locate and download MIBs for selected platforms, Cisco IOS
feature. releases, and feature sets, use Cisco MIB Locator found at the
following URL:
http://www.cisco.com/go/mibs
Technical Assistance
Description Link
Technical Assistance Center (TAC) home page, http://www.cisco.com/public/support/tac/home.shtml
containing 30,000 pages of searchable technical
content, including links to products, technologies,
solutions, technical tips, and tools. Registered
Cisco.com users can log in from this page to access
even more content.
Command Reference
This section documents new and modified commands.
• debug atm lfi
• show atm pvc
• show interfaces virtual-access
• show ppp multilink
Multilink PPP (MLP) provides the capability of splitting and recombining packets to a single end system
across a logical pipe formed by multiple links. MLP provides bandwidth on demand, reduces
transmission latency across WAN links, and provides a method of increasing the size of the maximum
receive unit. Multichassis Multilink PPP (MMP) provides the additional capability for links to terminate
at multiple routers with different remote addresses. MMP allows network access servers and routers to
be stacked together and to appear as a single network access server chassis. MMP handles both analog
and digital traffic. MMP allows for easy expansion and scalability and for assured fault tolerance and
redundancy.
Module History
This module was first published on May 2, 2005, and last updated on September 26, 2005.
Contents
• Prerequisites for Implementing Multichassis Multilink PPP, page 967
• Restrictions for Implementing Multichassis Multilink PPP, page 968
• Information About Multichassis Multilink PPP, page 968
• How to Implement Multichassis Multilink PPP, page 971
• Configuration Examples for Multichassis Multilink PPP, page 990
• Where to Go Next, page 993
• Additional References, page 993
• Feature Information for Multichassis Multilink PPP, page 994
MMP support on a group of routers requires that each router be configured to support the following:
• Multilink PPP
• Layer 2 Forwarding Protocol (L2F) or Layer 2 Tunnel Protocol (L2TP)
L2TP or L2F
tunnel
Analog
A
Digital
Call
Router
Internet service B
provider
117713
Remote user
C
In this scenario, the first call coming in to the stack group is answered by router A. Router A wins the
bidding because it already has the call. When the remote device that initiated the call needs more
bandwidth it makes a second call to the stack group. Router D answers the second call, but router A wins
the bidding because it is already handling a session with that remote device. Router D then establishes
a tunnel to router A and forwards the raw PPP data to router A, which reassembles and resequences the
packets. If router D receives more calls from that remote device, it enlarges the tunnel to router A to
handle the additional traffic. Router D will not establish an additional tunnel to router A. If more calls
come in from that remote device and they are answered by any other router in the stack, that router also
establishes a tunnel to router A and forwards the raw PPP data. Router A reassembles the data from all
calls from that remote device and passes it to the corporate network as if it had all come through on a
single link.
Note High-latency WAN lines between stack group members can make stack group operation inefficient.
When a more powerful router is available, it can be configured as an offload server for the stack group.
The offload server automatically wins the bid for any call. Other members of the stack group answer
calls and forward all traffic to the offload server.
Figure 96 shows a stack group scenario with an offload server configured.
L2TP or L2F
tunnels
Analog
Cisco 7600
Digital Call
Router
Internet service Call A
provider
Remote user
B
117714
C
In this scenario, the Cisco 7200 is configured as an offload server. The platform that is configured as an
offload server automatically wins the bidding for any call. Other members of the stack group answer
calls, establish tunnels, and forward all raw PPP data to the offload server. The offload server
reassembles and resequences all the packets that arrive through the stack group and passes it to the
corporate network as if it had all come through on a single link.
Note High-latency WAN lines between stack group members can make stack group operation inefficient.
Note Effective with Cisco Release 12.4(11)T, the L2F protocol was removed in Cisco IOS Software.
When a call must be forwarded from one member of the stack group to the member that owns the call,
Layer 2 Forwarding (L2F) or Layer 2 Tunneling Protocol (L2TP) is used. L2F or L2TP performs
standard PPP operations up to the authentication phase, but the authentication phase is not completed
locally. L2F or L2TP projects the link to the target stack member (the owner of the call), where the
authentication phase is resumed and completed.
For more information on the L2TP and L2F protocols, refer to the “VPDN Technology Overview”
module in the Cisco IOS VPDN Configuration Guide, Release 12.4.
Restrictions
• A router or access server can belong to only one stack group.
• All members of a stack group must have the same stack group name and password defined.
• The following tunneling protocols are supported for forwarding SGBP calls between stack group
members:
– Releases prior to Cisco IOS Release 12.2(4)T—L2F is the only supported tunneling protocol.
– Cisco IOS Release 12.2(4)T and later releases—Both L2TP and L2F are supported.
• If the stack group will receive incoming MLP calls over a VPDN tunnel, each stack group member
must be configured to accept incoming VPDN tunnels, and multihop VPDN must be enabled. For
more information about configuring stack group members to accept incoming VPDN tunnels and
enabling multihop VPDN, refer to the “Configuring Multihop VPDN” module in the Cisco IOS
VPDN Configuration Guide, Release 12.4.
SUMMARY STEPS
1. enable
2. configure terminal
3. username name password secret
4. sgbp group name
5. sgbp member peer-name [peer-ip-address]
6. sgbp protocol {any | l2f | l2tp}
7. sgbp seed-bid {default | offload | forward-only | bid}
DETAILED STEPS
Example:
Router# configure terminal
Step 3 username name password secret Establishes a username-based authentication system.
Example:
Router(config)# username user1 password
mypassword
Step 4 sgbp group name Defines a named stack group and make this router a member
of that stack group.
Example:
Router(config)# sgbp group stack1
Step 5 sgbp member peer-name [peer-ip-address] Specifies the hostname and IP address of a router or access
server that is a peer member of a stack group.
Example: Note You should configure a sgbp member command for
Router(config)# sgbp member routera 10.1.1.1 each other member of the stack group.
What to Do Next
• To verify the configuration of your stack group, you may perform the optional tasks in the “Verifying
and Troubleshooting Stack Group Configuration” section.
• You must perform the required task in the “Configuring MMP” section.
SUMMARY STEPS
1. enable
2. show sgbp
3. debug sgbp hellos
4. debug sgbp error
DETAILED STEPS
Step 1 enable
Enter this command to enable privileged EXEC mode. Enter your password if prompted:
Routera> enable
The State field displays the status of the member. The State is 0 for the stack group itself, and should
be ACTIVE for each of the members of the group. IDLE is a valid state for remote stack members that
are intentionally inactive.
This output shows Router A sending a successful Challenge Handshake Authentication Protocol (CHAP)
challenge to and receiving a response from routerb. Similarly, Router B sends out a challenge and
receives a response from routera.
If authentication fails, you may see one of the following messages in your debug output:
Routera# debug sgbp hellos
This error message means that the remote Router B password for the stack group does not match the
password defined on Router A. To correct this error, make sure that both Router A and Router B have
the same password defined.
Routera# debug sgbp hellos
%SGBP-7-NORESP -Fail to respond to routerb group stack1, may not have password
This error message means that Router A does not have a username or password defined. To correct this
error, define a common password across all stack members.
One common configuration error is setting a source IP address for a stack member that does not match
the locally defined IP address for the same stack member. The following debug output shows the error
message that results from this misconfiguration:
Routera# debug sgbp error
This error message means that the source IP address of the SGBP hello received from Router B does not
match the IP address configured locally for Router B (through the sgbp member command). Correct this
configuration error by going to Router B and checking for multiple interfaces by which the SGBP hello
can transmit the message.
Another common error message is:
Routera# debug sgbp error
This error message means that you do not have Router K defined locally, but another stack member does.
Correct this configuration error by defining Router K across all members of the stack group.
The following error message indicates that an SGBP peer is leaving the stack group:
Routera# debug sgbp error
This error message indicates that the peer Router C is leaving the stack group. Router C could be leaving
the stack group intentionally, or a connectivity problem may exist.
The following error message indicates that an SGBP event was detected from an unknown peer:
Routera# debug sgbp error
An SGBP event came from a network host that was not recognizable as an SGBP peer. Check to see if a
network media error could have corrupted the address, or if peer equipment is malfunctioning to generate
corrupted packets. Depending on the network topology and firewall, SGBP packets from a nonpeer host
could indicate probing and attempts to breach security. If there is a chance your network is under attack,
obtain knowledgeable assistance.
What to Do Next
Once your stack group has been configured, proceed to the “Configuring MMP” section.
Configuring MMP
Once a stack group has been configured, you must configure MMP on the members of the stack group.
The MMP configuration of the stack group members depends on the type of interfaces you have. You
must choose the configuration task that matches the type of interface you are configuring.
If you are configuring MMP on asynchronous, serial, or other nondialer interfaces, you may choose to
support MMP without any dialer configuration on those interfaces. In this case, you must define a virtual
template to serve as the source of configuration information for the virtual access interfaces. Virtual
access interfaces serve as both bundle interfaces and projected PPP links. These interfaces are
dynamically created on demand.
If dialers are configured on physical interfaces, or the interface is a native dialer such as ISDN PRIs and
BRIs, no virtual template needs to be defined. The virtual access interface acts as a passive interface,
buttressed between the dialer interface and the physical interfaces associated with the dialer interface.
Only the PPP commands from the dialer interface configuration will be applied to the bundle interface
and projected PPP links.
Perform one of the following tasks depending on the type of interface you are configuring:
• Configuring MMP on a Nondialer Interface, page 976
• Configuring MMP on an Explicitly Defined Dialer Interface with a T1 Controller, page 978
• Configuring MMP on an Explicitly Defined Dialer Interface with an E1 Controller, page 982
• Configuring MMP on a Native Dialer Interface, page 986
This section also contains an optional Troubleshooting Tips section, which applies to MMP
configurations on all types of interfaces.
• Verifying and Troubleshooting MMP Configurations, page 988 (optional)
Prerequisites
A stack group must be configured before MMP is implemented. To configure a stack group, perform the
task in the “Configuring a Stack Group” section.
SUMMARY STEPS
1. enable
2. configure terminal
3. multilink virtual-template number
4. ip local pool {default | poolname} [low-ip-address [high-ip-address]] [group group-name]
[cache-size size]
5. interface virtual-template number
6. ip unnumbered type number
7. no ip route-cache
8. encapsulation type
9. ppp multilink [bap]
10. ppp authentication protocol1 [protocol2...] [if-needed] [list-name | default] [callin] [one-time]
[optional]
DETAILED STEPS
Example:
Router# configure terminal
Step 3 multilink virtual-template number Specifies a virtual template from which the specified MLP
bundle interface can clone its interface parameters.
Example:
Router(config)# multilink virtual-template 1
Step 4 ip local pool {default | poolname} Configures a local pool of IP addresses to be used when a
[low-ip-address [high-ip-address]] [group remote peer connects to a point-to-point interface.
group-name] [cache-size size]
Example:
Router(config)# ip local pool default 10.10.1.1
10.10.1.100
Step 5 interface virtual-template number Creates a virtual template interface that can be configured
and applied dynamically in creating virtual access
interfaces and enters interface configuration mode.
Example:
Router(config)# interface virtual-template 1
Step 6 ip unnumbered type number Enables IP processing on a serial interface without
assigning an explicit IP address to the interface.
Example: Note Do not define a specific IP address in the virtual
Router(config-if)# ip unnumbered ethernet 0 template. If a specific IP address is defined in the
virtual template, multiple virtual access interfaces
with the same IP address can be established on a
stack member. IP will erroneously route between
the two virtual access interfaces.
Step 7 no ip route-cache (Optional) Controls the use of high-speed switching caches
for IP routing.
Example:
Router(config-if)# no ip route-cache
Step 8 encapsulation type Sets the encapsulation method used by the interface.
Example:
Router(config-if)# encapsulation ppp
Example:
Router(config-if)# ppp authentication chap
What to Do Next
You may perform the optional tasks in the “Verifying and Troubleshooting MMP Configurations”
section.
Prerequisites
A stack group must be configured before MMP is implemented. To configure a stack group, perform the
task in the “Configuring a Stack Group” section.
SUMMARY STEPS
1. enable
2. configure terminal
3. interface dialer dialer-rotary-group-number
4. ip unnumbered type number
5. dialer in-band [no-parity | odd-parity]
6. dialer-group group-number
7. dialer idle-timeout seconds [inbound | either]
8. encapsulation type
9. ppp multilink [bap]
10. ppp authentication protocol1 [protocol2...] [if-needed] [list-name | default] [callin] [one-time]
[optional]
11. exit
12. controller t1 number
13. framing {sf | esf}
14. linecode {ami | b8zs}
15. pri-group timeslots timeslot-range [nfas_d {backup | none | primary {nfas_int number |
nfas_group number | rlm-group number}} | service]
16. exit
17. interface serial controller-number:timeslot
18. no ip address
19. encapsulation type
20. ppp multilink [bap]
21. ppp authentication protocol1 [protocol2...] [if-needed] [list-name | default] [callin] [one-time]
[optional]
22. dialer rotary-group interface-number
23. dialer-group group-number
DETAILED STEPS
Example:
Router# configure terminal
Step 3 interface dialer dialer-rotary-group-number Defines a dialer rotary group and enters interface
configuration mode.
Example:
Router(config)# interface dialer 1
Step 4 ip unnumbered type number Enables IP processing on a serial interface without
assigning an explicit IP address to the interface.
Example: Note Do not define a specific IP address on the interface.
Router(config-if)# ip unnumbered ethernet 0 If a specific IP address is defined on the interface,
multiple virtual access interfaces with the same IP
address can be established on a stack member. IP
will erroneously route between the two virtual
access interfaces.
Step 5 dialer in-band [no-parity | odd-parity] (Optional) Specifies that dial-on-demand routing (DDR) is
to be supported.
Example:
Router(config-if)# dialer in-band
Step 6 dialer-group group-number Controls access by configuring an interface to belong to a
specific dialing group.
Example:
Router(config-if)# dialer group 1
Example:
Router(config-if)# encapsulation ppp
Step 9 ppp multilink [bap] Enables MLP on an interface and, optionally, enables BACP
and its BAP subset for dynamic bandwidth allocation.
Example:
Router(config-if)# ppp multilink
Step 10 ppp authentication protocol1 [protocol2...] Enables CHAP or PAP or both and specifies the order in
[if-needed] [list-name | default] [callin] which CHAP and PAP authentication is selected on the
[one-time] [optional]
interface.
Example:
Router(config-if)# ppp authentication chap
Step 11 exit Exits interface configuration mode.
Example:
Router(config-if)# exit
Step 12 controller t1 number Configures a T1 controller and enters controller
configuration mode.
Example: Note Specific platforms may have different command
Router(config)# controller t1 0 syntax available for the controller command. To
determine the command syntax that applies to your
platform, refer to the controller command
documentation in the Cisco IOS Dial Technologies
Command Reference, Release 12.4, or use the
command line help system.
Step 13 framing {sf | esf} Selects the frame type for the T1 data line.
Example:
Router(config-controller)# framing esf
Step 14 linecode {ami | b8zs} Selects the line-code type for T1 lines.
Example:
Router(config-controller)# linecode b8zs
Example:
Router(config-controller)# pri-group timeslots
1-24
Step 16 exit Exits controller configuration mode.
Example:
Router(config-controller)# exit
Step 17 interface serial controller-number:timeslot Specifies a serial interface created on a channelized E1 or
channelized T1 controller (for ISDN PRI,
channel-associated signaling, or robbed-bit signaling) and
Example:
Router(config)# interface serial 0:23
enters interface configuration mode.
Note Specific platforms may have different command
syntax available for the interface serial command.
To determine the command syntax that applies to
your platform, refer to the interface serial
command documentation in the Cisco IOS Dial
Technologies Command Reference, Release 12.4, or
use the command line help system.
Step 18 no ip address Disables IP processing on an interface.
Example:
Router(config-if)# no ip address
Step 19 encapsulation type Sets the encapsulation method used by the interface.
Example:
Router(config-if)# encapsulation ppp
Step 20 ppp multilink [bap] Enables MLP on an interface and, optionally, enables BACP
and its BAP subset for dynamic bandwidth allocation.
Example:
Router(config-if)# ppp multilink
Step 21 ppp authentication protocol1 [protocol2...] Enables CHAP or PAP or both and specifies the order in
[if-needed] [list-name | default] [callin] which CHAP and PAP authentication is selected on the
[one-time] [optional]
interface.
Example:
Router(config-if)# ppp authentication chap
Example:
Router(config-if)# dialer rotary-group 1
Step 23 dialer-group group-number (Optional) Controls access by configuring an interface to
belong to a specific dialing group.
Example:
Router(config-if)# dialer-group 1
What to Do Next
You may perform the optional tasks in the “Verifying and Troubleshooting MMP Configurations”
section.
Prerequisites
A stack group must be configured before MMP is implemented. To configure a stack group, perform the
task in the “Configuring a Stack Group” section.
SUMMARY STEPS
1. enable
2. configure terminal
3. interface dialer dialer-rotary-group-number
4. ip unnumbered type number
5. dialer in-band [no-parity | odd-parity]
6. dialer-group group-number
7. dialer idle-timeout seconds [inbound | either]
8. encapsulation type
9. ppp multilink [bap]
10. ppp authentication protocol1 [protocol2...] [if-needed] [list-name | default] [callin] [one-time]
[optional]
11. exit
12. controller e1 number
13. framing {crc4 | no-crc4} [australia]
14. linecode {ami | hdb3}
15. pri-group timeslots timeslot-range [nfas_d {backup | none | primary {nfas_int number |
nfas_group number | rlm-group number}} | service]
16. exit
17. interface serial controller-number:timeslot
18. no ip address
19. encapsulation type
20. ppp multilink [bap]
21. ppp authentication protocol1 [protocol2...] [if-needed] [list-name | default] [callin] [one-time]
[optional]
22. dialer rotary-group interface-number
23. dialer-group group-number
DETAILED STEPS
Example:
Router# configure terminal
Step 3 interface dialer dialer-rotary-group-number Defines a dialer rotary group and enters interface
configuration mode.
Example:
Router(config)# interface dialer 1
Step 4 ip unnumbered type number Enables IP processing on a serial interface without
assigning an explicit IP address to the interface.
Example: Note Do not define a specific IP address on the interface.
Router(config-if)# ip unnumbered ethernet 0 If a specific IP address is defined on the interface,
multiple virtual access interfaces with the same IP
address can be established on a stack member. IP
will erroneously route between the two virtual
access interfaces.
Step 5 dialer in-band [no-parity | odd-parity] (Optional) Specifies that dial-on-demand routing (DDR) is
to be supported.
Example:
Router(config-if)# dialer in-band
Step 6 dialer-group group-number Controls access by configuring an interface to belong to a
specific dialing group.
Example:
Router(config-if)# dialer group 1
Example:
Router(config-if)# encapsulation ppp
Step 9 ppp multilink [bap] Enables MLP on an interface and, optionally, enables BACP
and its BAP subset for dynamic bandwidth allocation.
Example:
Router(config-if)# ppp multilink
Step 10 ppp authentication protocol1 [protocol2...] Enables CHAP or PAP or both and specifies the order in
[if-needed] [list-name | default] [callin] which CHAP and PAP authentication is selected on the
[one-time] [optional]
interface.
Example:
Router(config-if)# ppp authentication chap
Step 11 exit Exits interface configuration mode.
Example:
Router(config-if)# exit
Step 12 controller e1 number Configures an E1 controller and enters controller
configuration mode.
Example: Note Specific platforms may have different command
Router(config)# controller e1 0 syntax available for the controller command. To
determine the command syntax that applies to your
platform, refer to the controller command
documentation in the Cisco IOS Dial Technologies
Command Reference, Release 12.4, or use the
command line help system.
Step 13 framing {crc4 | no-crc4} [australia] Selects the frame type for the E1 data line.
Example:
Router(config-controller)# framing sfadm
Step 14 linecode {ami | hdb3} Selects the line-code type for E1 lines.
Example:
Router(config-controller)# linecode ami
Example:
Router(config-controller)# pri-group timeslots
1-31
Step 16 exit Exits controller configuration mode.
Example:
Router(config-controller)# exit
Step 17 interface serial controller-number:timeslot Specifies a serial interface created on a channelized E1 or
channelized T1 controller (for ISDN PRI,
channel-associated signaling, or robbed-bit signaling) and
Example:
Router(config)# interface serial 0:15
enters interface configuration mode.
Note Specific platforms may have different command
syntax available for the interface serial command.
To determine the command syntax that applies to
your platform, refer to the interface serial
command documentation in the Cisco IOS Dial
Technologies Command Reference, Release 12.4, or
use the command line help system.
Step 18 no ip address Disables IP processing on an interface.
Example:
Router(config-if)# no ip address
Step 19 encapsulation type Sets the encapsulation method used by the interface.
Example:
Router(config-if)# encapsulation ppp
Step 20 ppp multilink [bap] Enables MLP on an interface and, optionally, enables BACP
and its BAP subset for dynamic bandwidth allocation.
Example:
Router(config-if)# ppp multilink
Step 21 ppp authentication protocol1 [protocol2...] Enables CHAP or PAP or both and specifies the order in
[if-needed] [list-name | default] [callin] which CHAP and PAP authentication is selected on the
[one-time] [optional]
interface.
Example:
Router(config-if)# ppp authentication chap
Example:
Router(config-if)# dialer rotary-group 1
Step 23 dialer-group group-number (Optional) Controls access by configuring an interface to
belong to a specific dialing group.
Example:
Router(config-if)# dialer-group 1
What to Do Next
You may perform the optional tasks in the “Verifying and Troubleshooting MMP Configurations”
section.
Prerequisites
A stack group must be configured before MMP is implemented. To configure a stack group, perform the
task in the “Configuring a Stack Group” section.
SUMMARY STEPS
1. enable
2. configure terminal
3. interface serial number
4. ip unnumbered type number
5. dialer-group group-number
6. dialer rotary-group interface-number
7. encapsulation type
8. ppp multilink [bap]
9. ppp authentication protocol1 [protocol2...] [if-needed] [list-name | default] [callin] [one-time]
[optional]
DETAILED STEPS
Example:
Router# configure terminal
Step 3 interface serial number Specifies a serial interface created on a channelized E1 or
channelized T1 controller (for ISDN PRI,
channel-associated signaling, or robbed-bit signaling) and
Example:
Router(config)# interface serial 0:23
enters interface configuration mode.
Note Specific platforms may have different command
syntax available for the interface serial command.
To determine the command syntax that applies to
your platform, refer to the interface serial
command documentation in the Cisco IOS Dial
Technologies Command Reference, Release 12.4, or
use the command line help system.
Step 4 ip unnumbered type number Enables IP processing on a serial interface without
assigning an explicit IP address to the interface.
Example:
Router(config-if)# ip unnumbered ethernet 0
Step 5 dialer-group group-number Controls access by configuring an interface to belong to a
specific dialing group.
Example:
Router(config-if)# dialer-group 1
Step 6 dialer rotary-group interface-number Includes a specified interface in a dialer rotary group.
Example:
Router(config-if)# dialer rotary-group 1
Step 7 encapsulation type Sets the encapsulation method used by the interface.
Example:
Router(config-if)# encapsulation ppp
Example:
Router(config-if)# ppp authentication chap
What to Do Next
You may perform the optional tasks in the “Verifying and Troubleshooting MMP Configurations”
section.
SUMMARY STEPS
1. enable
2. show interfaces virtual-access number [configuration]
3. show interfaces [type number]
DETAILED STEPS
Step 1 enable
Enter this command to enable privileged EXEC mode. Enter your password if prompted:
Router> enable
SUMMARY STEPS
1. enable
2. debug vpdn event
3. debug vpn error
4. debug vpdn l2f-error
DETAILED STEPS
Step 1 enable
Enter this command to enable privileged EXEC mode. Enter your password if prompted:
Router> enable
The following debug output shows an incoming call being successfully forwarded to the target stack
member from the router that accepted the call:
Serial0:21 VPN Forwarding
Serial0:21 VPN vpn_forward_user userx is forwarded
The following debug output shows the target stack member successfully receiving the projected link:
Virtual-Access1 VPN PPP LCP accepted sent & rcv CONFACK
If you see the following debug output on the target stack member, verify the definitions of your virtual
template interface. The virtual template interface must match the PPP interface parameters of the
physical interface that accepted the call.
Virtual-Access1 VPN PPP LCP not accepting rcv CONFACK
Virtual-Access1 VPN PPP LCP not accepting sent CONFACK
Note Effective with Cisco Release 12.4(11)T, the L2F protocol was removed in Cisco IOS Software.
Enter this command to enable the display of debug messages used to troubleshoot L2TPv3 and the
surrounding Layer 2 tunneling infrastructure.
If you see the following debug output on a stack member, the stack group name and password may not
match across all stack members:
Router# debug vpdn l2f-error
Router A Configuration
username user1 password mypassword
sgbp group stack1
sgbp member routerb 10.1.1.2
sgbp member routerc 10.1.1.3
Router B Configuration
username user1 password mypassword
sgbp group stack1
Router C Configuration
username user1 password mypassword
sgbp group stack1
sgbp member routera 10.1.1.1
sgbp member routerb 10.1.1.2
Router A Configuration
username user1 password mypassword
sgbp group stack1
sgbp member routerb 10.1.1.2
sgbp member routerc 10.1.1.3
sgbp member routerd 10.1.1.4
sgbp protocol l2tp
Router B Configuration
username user1 password mypassword
sgbp group stack1
sgbp member routera 10.1.1.1
sgbp member routerc 10.1.1.3
sgbp member routerd 10.1.1.4
sgbp protocol l2tp
Router C Configuration
username user1 password mypassword
sgbp group stack1
sgbp member routera 10.1.1.1
sgbp member routerb 10.1.1.2
sgbp member routerd 10.1.1.4
sgbp protocol l2tp
encapsulation ppp
ppp multilink
ppp authentication chap
Where to Go Next
MMP stack groups that receive calls over L2TP VPDN tunnels can be configured to perform L2TP
redirect. Enabling L2TP redirect allows a tunnel server in a stack group to send a redirect message to the
NAS if it receives a link that belongs to another tunnel server in the stack group. L2TP redirect increases
the scalability of VPDN MMP deployments, and can also be used to load balance calls across a stack
group.
For more information about configuring L2TP redirect functionality, refer to the “Configuring Multihop
VPDN” module in the Cisco IOS VPDN Configuration Guide, Release 12.4.
Additional References
The following sections provide references related to Multichassis Multilink PPP.
Related Documents
Related Topic Document Title
Information about Multilink PPP “Configuring Media-Independent PPP and Multilink PPP” chapter
of the Cisco IOS Dial Technologies Configuration Guide, Release
12.4
Information about virtual templates The “Configuring Virtual Template Interfaces” chapter of the
Cisco IOS Dial Technologies Configuration Guide, Release 12.4
Information about L2F and L2TP “VPDN Technology Overview” module in the Cisco IOS VPDN
Configuration Guide, Release 12.4
Information on multihop VPDN and L2TP redirect “Configuring Multihop VPDN” module in the Cisco IOS VPDN
Configuration Guide, Release 12.4
VPDN commands: complete command syntax, Cisco IOS VPDN Command Reference, Release 12.4
command mode, defaults, usage guidelines, and
examples
Dial Technologies commands: complete command Cisco IOS Dial Technologies Command Reference, Release 12.4
syntax, command mode, defaults, usage guidelines,
and examples
Standards
Standards Title
None —
MIBs
MIBs MIBs Link
None To locate and download MIBs for selected platforms, Cisco IOS
releases, and feature sets, use Cisco MIB Locator found at the
following URL:
http://www.cisco.com/go/mibs
RFCs
RFCs Title
None —
Technical Assistance
Description Link
The Cisco Technical Support website contains http://www.cisco.com/techsupport
thousands of pages of searchable technical content,
including links to products, technologies, solutions,
technical tips, and tools. Registered Cisco.com users
can log in from this page to access even more content.
Note Table 56 lists only the Cisco IOS software release that introduced support for a given feature in a given
Cisco IOS software release train. Unless noted otherwise, subsequent releases of that Cisco IOS
software release train also support that feature.
This chapter describes how to configure Cisco IOS software to call back an asynchronous device that
dials in, requests a callback from the router, and then disconnects. It includes the following main
sections:
• Asynchronous Callback Overview
• How to Configure Asynchronous Callback
• Configuration Examples for Asynchronous Callback
To identify the hardware platform or software image information associated with a feature, use the
Feature Navigator on Cisco.com to search for information about the feature or refer to the software
release notes for a specific release. For more information, see the “Finding Additional Feature Support
Information” section on page lxxvii in the “Using Cisco IOS Software for Release 12.4” chapter.
For a complete description of the commands mentioned in this chapter, refer to the Cisco IOS Dial
Technologies Command Reference. To locate documentation of other commands that appear in this
chapter, use the command reference master index or search online.
Command Purpose
Router(config-if)# ppp callback accept Enables callback requests from RFC 1570 PPP-compliant
clients on an asynchronous interface.
To configure Cisco IOS software to call back the originating PPP client, see the section “Enabling PPP
Callback on Outgoing Lines” later in this chapter.
Accepting Callback Requests from Non-RFC-Compliant PPP Clients Placing Themselves in Answer
Mode
A PPP client can put itself in answer-mode and can still be called back by the router, even though it
cannot specifically request callback. To enable callback on the router to this type of client, use the
following command in interface (asynchronous) configuration mode:
Command Purpose
Router(config-if)# ppp callback initiate Initiates callback requests from non-RFC 1570
PPP-compliant clients on an asynchronous interface.
To configure Cisco IOS software to call back the originating PPP client, see the next section, “Enabling
PPP Callback on Outgoing Lines.”
Command Purpose
Step 1 Router(config)# chat-script script-name Defines a chat script to be applied when a PPP client requests
expect-send callback.
Step 2 Router(config)# username name Specifies a per-username callback dial string.
[callback-dialstring telephone-number]
Step 3 Router(config)# username name Specifies a per-username rotary group for callback.
[callback-rotary rotary-group-number]
Step 4 Router(config)# username name [callback-line Specifies a per-username line or set of lines for callback.
[tty] line-number [ending-line-number]]
Step 5 Router(config)# line [tty] line-number Enters line configuration mode.
[ending-line-number]
Step 6 Router(config-line)# autoselect ppp Configures automatic PPP startup on a line or set of lines.
Step 7 Router(config-line)# login {authentication | Enables authentication on the line.
local}
Step 8 Router(config-line)# script callback regexp Applies a chat script to a line or set of lines.
Step 9 Router(config-line)# callback forced-wait Delays the callback for client modems that require a rest
number-of-seconds period before receiving a callback.
A client can issue a callback dial string; that dial string is used only if the dial string on the router is
specified as NULL or is not defined. The recommended PPP chat script follows:
chat-script name ABORT ERROR ABORT BUSY ““ “ATZ” OK “ATDT \T” TIMEOUT 30 CONNECT \c
See the section “Callback to a PPP Client Example” at the end of this chapter for a configuration
example.
Note Normally a router avoids line and modem noise by clearing the initial data received within the first one
or two seconds. However, when the autoselect PPP feature is configured, the router flushes characters
initially received and then waits for more traffic. This flush causes time out problems with applications
that send only one carriage return. To ensure that the input data sent by a modem or other asynchronous
device is not lost after line activation, enter the no flush-at-activation line configuration command.
Enabling Callback Clients That Dial In and Connect to the EXEC Prompt
You can call back clients that dial in to a TTY line and connect to the EXEC prompt. To enable callback,
use the following commands beginning in global configuration mode:
Command Purpose
Step 1 Router(config)# service exec-callback Enables EXEC callback.
Step 2 Router(config)# chat-script script-name Defines a chat script to be applied when clients dial in to the
expect-send EXEC prompt.
Step 3 Router(config)# username name Specifies a per-username callback dial string.
[callback-dialstring telephone-number]
Step 4 Router(config)# username name Specifies a per-username rotary group for callback.
[callback-rotary rotary-group-number]
Step 5 Router(config)# username name [callback-line Specifies a per-username line or set of lines for callback.
[aux | tty] line-number [ending-line-number]]
Step 6 Router(config)# username name Does not require authentication on EXEC callback.
[nocallback-verify]
Step 7 Router(config)# line [tty] line-number Enters line configuration mode.
[ending-line-number]
Step 8 Router(config-line)# script callback regexp Applies a chat script to the line or a set of lines.
Step 9 Router(config-line)# callback forced-wait Delays the callback for client modems that require a rest
number-of-seconds period before receiving a callback.
See the section “Callback Clients That Connect to the EXEC Prompt Example” at the end of this chapter
for a configuration example.
Command Purpose
Step 1 Router(config)# arap callback Enables callback to an ARA client.
Step 2 Router(config)# chat-script script-name Defines a chat script to be applied when an ARA client
expect-send connects to a TTY line and requests callback.
Step 3 Router(config)# line [tty] line-number Enters line configuration mode.
[ending-line-number]
Step 4 Router(config-line)# arap enable Enables ARA on the line.
Step 5 Router(config-line)# autoselect arap Configures automatic protocol startup on the line.
Step 6 Router(config-line)# login {authentication | Enables authentication on the line.
local}
Step 7 Router(config-line)# script arap-callback Applies an ARA-specific chat script to a line or set of lines.
regexp
Step 8 Router(config-line)# callback forced-wait Delays the callback for client modems that require a rest
number-of-seconds period before receiving a callback.
Step 9 Router(config-line)# exit Returns to global configuration mode.
Step 10 Router(config)# username name Specifies a per-username callback dial string.
[callback-dialstring telephone-number]
Step 11 Router(config)# username name Specifies a per-username rotary group for callback.
[callback-rotary rotary-group-number]
Step 12 Router(config)# username name [callback-line Specifies a per-username line or set of lines for callback.
[tty] line-number [ending-line-number]]
The recommended ARA chat script follows and includes vendor-specific extensions on the Telebit 3000
modem to disable error control. Refer to the manual for your modem for the specific commands to
disable error correction for ARA.
chat-script name ABORT ERROR ABORT BUSY ““ “ATZ” OK “ATS180=0” OK “ATS181=1” OK “ATDT \T”
TIMEOUT 60 CONNECT \c
See the section “Callback to an ARA Client Example” at the end of this chapter for an example of calling
back a PPP client.
interface async 8
ip unnumbered ethernet 0
encapsulation ppp
no keepalive
async default ip address 10.1.1.2
async mode interactive
ppp callback accept
ppp authentication pap
interface async 9
ip unnumbered ethernet 0
encapsulation ppp
no keepalive
async default ip address 10.1.1.3
async mode interactive
ppp callback accept
ppp authentication pap
line 7
login local
modem InOut
rotary 77
autoselect ppp
line 8
login local
modem InOut
rotary 77
autoselect ppp
line 9
login local
modem InOut
rotary 77
autoselect ppp
This chapter describes how to configure PPP callback for dial-on-demand routing (DDR). It includes the
following main sections:
• PPP Callback for DDR Overview
• How to Configure PPP Callback for DDR
• MS Callback Overview
• How to Configure MS Callback
• Configuration Examples for PPP Callback
This feature implements the following callback specifications of RFC 1570:
• For the client—Option 0, location is determined by user authentication.
• For the server—Option 0, location is determined by user authentication; Option 1, dialing string;
and Option 3, E.164 number.
Return calls are made through the same dialer rotary group but not necessarily the same line as the initial
call.
To identify the hardware platform or software image information associated with a feature, use the
Feature Navigator on Cisco.com to search for information about the feature or refer to the software
release notes for a specific release. For more information, see the “Finding Additional Feature Support
Information” section on page lxxvii in the “Using Cisco IOS Software for Release 12.4” chapter.
For a complete description of the PPP callback commands mentioned in this chapter, refer to the Cisco
IOS Dial Technologies Command Reference. To locate documentation of other commands that appear in
this chapter, use the command reference master index or search online.
Both routers on a point-to-point link must be configured for PPP callback; one must function as a
callback client and one must be configured as a callback server. The callback client must be configured
to initiate PPP callback requests, and the callback server must be configured to accept PPP callback
requests and place return calls.
See the section “MS Callback Overview” later in this chapter if you are using PPP callback between a
Cisco router or access server and client devices configured for Windows 95 and Windows NT.
Note If the return call fails (because the line is not answered or the line is busy), no retry occurs. If the callback
server has no interface available when attempting the return call, it does not retry.
Command Purpose
Step 1 Router(config)# interface type number Specifies the interface and enters interface configuration
mode.
Step 2 Router(config-if)# dialer in-band [no-parity Enables DDR. Specifies parity, if needed, on synchronous or
| odd-parity] asynchronous serial interfaces.
Step 3 Router(config-if)# encapsulation ppp Enables PPP encapsulation.
Step 4 Router(config-if)# ppp authentication {chap | Enables CHAP or PAP authentication.
pap}
Step 5 Router(config-if)# dialer map protocol Maps the next hop address to the host name and phone
next-hop-address name hostname dial-string number.
Step 6 Router(config-if)# ppp callback request Enables the interface to request PPP callback for this callback
map class.
Step 7 Router(config-if)# dialer hold-queue packets (Optional) Configures a dialer hold queue to store packets for
timeout seconds this callback map class.
Command Purpose
Step 1 Router(config)# interface type number Specifies the interface and enters interface configuration
mode.
Step 2 Router(config-if)# dialer in-band [no-parity Enables DDR. Specifies parity, if needed, on synchronous or
| odd-parity] asynchronous serial interfaces.
Step 3 Router(config-if)# encapsulation ppp Enables PPP encapsulation.
Step 4 Router(config-if)# ppp authentication {chap | Enables CHAP or PAP authentication.
pap}
Step 5 Router(config-if)# dialer map protocol Maps the next hop address to the host name and phone
next-hop-address name hostname class number, using the name of the map class established for PPP
classname dial-string
callback on this interface.
Step 6 Router(config-if)# dialer hold-queue number (Optional) Configures a dialer hold queue to store packets to
timeout seconds be transferred when the callback connection is established.
Step 7 Router(config-if)# dialer enable-timeout (Optional) Configures a timeout period between calls.
seconds
Step 8 Router(config-if)# ppp callback accept Configures the interface to accept PPP callback.
Step 9 Router(config-if)# isdn fast-rollover-delay (ISDN only) Configures the time to wait before another call
seconds is placed on a B channel to allow the prior call to be torn
down completely.
Step 10 Router(config-if)# dialer callback-secure (Optional) Enables callback security, if desired.
Step 11 Router(config-if)# exit Returns to global configuration mode.
Step 12 Router(config-map-class)# map-class dialer Configures a dialer map class for PPP callback.
classname
Step 13 Router(config-map-class)# dialer Configures a dialer map class as a callback server.
callback-server [username]
Note On the PPP callback server, the dialer enable-timeout command functions as the timer for returning
calls to the callback client.
MS Callback Overview
MS Callback provides client/server callback services for Microsoft Windows 95 and Microsoft
Windows NT clients. MS Callback supports the Microsoft Callback Control Protocol (MSCB). MSCB
is a Microsoft proprietary protocol that is used by Windows 95 and Windows NT clients. MS Callback
supports negotiated PPP Link Control Protocol (LCP) extensions initiated and agreed upon by the
Microsoft client. The MS Callback feature is added to existing PPP Callback functionality. Therefore, if
you configure your Cisco access server to perform PPP Callback using Cisco IOS Release 11.3(2)T or
later, MS Callback is automatically available.
MS Callback supports authentication, authorization, and accounting (AAA) security models using a
local database or AAA server.
MSCB uses LCP callback options with suboption type 6. The Cisco MS Callback feature supports clients
with a user-specified callback number and server specified (preconfigured) callback number.
MS Callback does not affect non-Microsoft machines that implement standard PPP LCP extensions as
described in RFC 1570. In this scenario, MS Callback is transparent.
The following are restrictions of the MS Callback feature:
• The Cisco access server and client must be configured for PPP and PPP callback.
• The router or access server must be configured to use CHAP or PAP authorization.
• MS Callback is only supported on the Public Switched Telephone Network (PSTN) and ISDN links.
• MS Callback is only supported for IP.
This chapter describes how to configure the ISDN Caller ID Callback feature. It includes the following
main sections:
• ISDN Caller ID Callback Overview
• How to Configure ISDN Caller ID Callback
• Monitoring and Troubleshooting ISDN Caller ID Callback
• Configuration Examples for ISDN Caller ID Callback
The ISDN Caller ID Callback feature conflicts with dialer callback security inherent in the dialer profiles
feature for dial-on-demand routing (DDR). If dialer callback security is configured, it takes precedence;
ISDN caller ID callback is ignored.
Caller ID screening requires a local switch that is capable of delivering the caller ID to the router or
access server. If you enable caller ID screening but do not have such a switch, no calls will be allowed in.
ISDN caller ID callback requires DDR to be configured and bidirectional dialing to be working between
the calling and callback routers. Detailed DDR prerequisites depend on whether you have configured
legacy DDR or dialer profiles.
For a legacy DDR configuration, ISDN caller ID callback has the following prerequisite:
• A dialer map command is configured for the dial string that is used in the incoming call setup
message. The dial string is used in the callback.
For a dialer profiles configuration, ISDN caller ID callback has the following prerequisites:
• A dialer caller command is configured to screen for the dial-in number.
• A dialer string command is configured with the number to use in the callback.
To identify the hardware platform or software image information associated with a feature, use the
Feature Navigator on Cisco.com to search for information about the feature or refer to the software
release notes for a specific release. For more information, see the“Finding Additional Feature Support
Information” section on page lxxvii in the “Using Cisco IOS Software for Release 12.4” chapter.
For a complete description of the ISDN caller ID callback commands mentioned in this chapter, refer to
the Cisco IOS Dial Technologies Command Reference, Release 12.2. To locate documentation of other
commands that appear in this chapter, use the command reference master index or search online.
Legacy DDR
If legacy DDR is configured for the host or user that is identified in the incoming call message, the router
performs the following actions:
1. Checks the table of configured numbers for caller ID callback.
2. Searches the dialer map entries for a number that “best matches” the incoming call string.
Dialer Profiles
If the dialer profiles are configured for the host or user identified in the incoming call message, the router
performs the following actions:
1. Searches through all the dialer pool members to match the incoming call number to a dialer caller
number.
2. Initiates a callback to the dialer profile.
3. Waits for a configured length of time to expire.
4. Calls the number identified in the dialer string command associated with the dialer profile.
Note The remote site cannot be configured for multiple dial-in numbers because a busy callback number or a
rejected call causes the second number to be tried. That number might be located at a different site,
defeating the purpose of the callback.
On the callback (local) side, to configure ISDN caller ID callback when legacy DDR is configured, use
the following commands in interface configuration mode:
Command Purpose
Step 1 Router(config-if)# isdn caller remote-number Configures caller ID screening and callback when a dialer
callback rotary is not configured.
or
Router(config-if)# dialer caller number Configures caller ID screening and callback when a dialer
callback rotary (dialer interface) is configured.
Step 2 Router(config-if)# dialer enable-timeout Configures the time to wait before initiating callback.
seconds
On the calling (remote) side, to set the timer for fast call rerouting, use the following command in
interface configuration mode:
Command Purpose
Router(config-if)# dialer wait-for-carrier-time Changes the ISDN fast call rerouting timer to double the
seconds length of the enable timeout timer.
Command Purpose
Step 1 Router(config-if)# dialer caller number Configures caller ID screening and callback.
callback
Step 2 Router(config-if)# dialer enable-timeout Configures the time to wait before initiating callback.
seconds
On the calling (remote) side, to set the timer for fast call rerouting, use the following command in
interface configuration mode:
Command Purpose
Router(config-if)# dialer wait-for-carrier-time Changes the ISDN fast call rerouting timer to double the
seconds length of the enable timeout timer.
Command Purpose
Router# show dialer Displays information about the status and configuration of the
ISDN interface on the router.
Router# debug isdn event Displays ISDN events occurring on the user side (on the
router) of the ISDN interface. The ISDN events that can be
displayed are Q.931 events (call setup and tear down of ISDN
network connections).
Router# debug isdn q931 Displays Layer 3 signaling messages, protocol transitions and
processes, the line protocol state, and the channel IDs for each
ISDN interface.
The first number listed is the best match for the incoming number (in the configured number, the three
numbers and four Xs all match the incoming number); the line indicates that callback is to be initiated.
The last line has five Xs; it is not the best match for the calling number.
Note The last number in the list shown allows calls from any other number to be accepted without callback.
When you use such a line, you must make sure that the number of Xs in the line exceeds the number of
Xs in any other line. In the last line, five Xs are used; the other lines use at most four Xs.
The order of configured numbers is not important; the router searches the entire list and then determines
the best match.
In this case, the best match is in the final line listed, so the incoming call is accepted but callback is not
initiated.
In this case, there is no match at all, and the call is just rejected.
The following example configures the router to accept a call with a delivered caller ID
equal to 4155551234:
isdn caller 4155551234
The following example configures the router to accept a call with a delivered caller ID equal to 41555512
with any digits in the last two positions:
isdn caller 41555512xx
The following example configures the router to make a callback to a delivered caller ID equal
to 41555512 with any digits in the last two positions. (The router rejects the call initially, and then makes
the callback.) The router accepts calls from any other numbers.
isdn caller 41555512xx callback
isdn caller xxx
!
interface bri 0
encapsulation PPP
! BRI 0 has a higher priority than BRI 1 in dialer pool 1.
dialer pool-member 1 priority 100
ppp authentication chap
!
interface bri 1
encapsulation ppp
dialer pool-member 1 priority 50
dialer pool-member 2 priority 50
! BRI 1 has a reserved channel in dialer pool 3; the channel remains inactive
! until BRI 1 uses it to place calls.
dialer pool-member 3 min-link 1
ppp authentication chap
!
interface bri 2
encapsulation ppp
! BRI 2 has a higher priority than BRI 1 in dialer pool 2.
dialer pool-member 2 priority 100
ppp authentication chap
!
interface bri 3
encapsulation ppp
! BRI 3 has the highest priority in dialer pool 2.
dialer pool-member 2 priority 150
ppp authentication chap
This chapter describes how to configure the Bandwidth Allocation Control Protocol (BACP), described
in RFC 2125. It includes the following main sections:
• BACP Overview
• How to Configure BACP
• Monitoring and Maintaining Interfaces Configured for BACP
• Troubleshooting BACP
• Configuration Examples for BACP
BACP requires a system only to have the knowledge of its own phone numbers and link types. A system
must be able to provide the phone numbers and link type to its peer to satisfy the call control mechanism.
(Certain situations might not be able to satisfy this requirement; numbers might not be present because
of security considerations.)
BACP is designed to operate in both the virtual interface environment and the dialer interface
environment. It can operate over any physical interface that is Multilink PPP-capable and has a dial
capability; at initial release, BACP supports ISDN and asynchronous serial interfaces.
The addition of any link to an existing multilink bundle is controlled by a Bandwidth Allocation Protocol
(BAP) call or callback request message, and the removal of a link can be controlled by a link drop
message.
To identify the hardware platform or software image information associated with a feature, use the
Feature Navigator on Cisco.com to search for information about the feature or refer to the software
release notes for a specific release. For more information, see the “Finding Additional Feature Support
Information” section on page lxxvii in the “Using Cisco IOS Software for Release 12.4” chapter.
For a complete description of the PPP BACP commands in this chapter, refer to the Cisco IOS Dial
Technologies Command Reference, Release 12.2. To locate documentation of other commands that
appear in this chapter, use the command reference master index or search online.
BACP Overview
The BACP provides Multilink PPP (MLP) peers with the ability to govern link utilization. Once peers
have successfully negotiated BACP, they can use the BAP, which is a subset of BACP, to negotiate
bandwidth allocation. BAP provides a set of rules governing dynamic bandwidth allocation through call
control; a defined method for adding and removing links from a multilink bundle for Multilink PPP is
used.
BACP provides the following benefits:
• Allows multilink implementations to interoperate by providing call control through the use of link
types, speeds, and telephone numbers.
• Controls thrashing caused by links being brought up and removed in a short period of time.
• Ensures that both ends of the link are informed when links are added or removed from a multilink
bundle.
For simplicity, the remaining text of this chapter makes no distinction between BACP and BAP; only
BACP is mentioned.
Note You can configure one interface in passive mode and another in active mode so that one interface accepts
incoming call requests and makes callback requests (passive mode), and the other interface makes call
requests and accepts callback requests (active mode).
A dialer or virtual template interface should be configured to reflect the required dial capability of the
interface. A dial-in pool (in passive mode) might have no requirement to dial out but might want remote
users to add multiple links, with the remote user incurring the cost of the call. Similarly, a dial-out
configuration (active mode) suggests that the router is a client, rather than a server, on that link. The
active-mode user incurs the cost of additional links.
You might need to configure a base telephone number, if it is applicable to your dial-in environment.
This number is one that remote users can dial to establish a connection. Otherwise, individual PPP BACP
links might need numbers. Information is provided in the task lists for configuring passive mode or
active mode PPP BACP. See the ppp bap number command options in the task lists.
You can also troubleshoot BACP configuration and operations and monitor interfaces configured for PPP
BACP. For details, see the “Troubleshooting BACP” and “Monitoring and Maintaining Interfaces
Configured for BACP” sections later in this chapter.
See the section “Configuration Examples for BACP” at the end of this chapter for examples of PPP
BACP configuration.
Enabling BACP
To enable PPP bandwidth allocation control and dynamic allocation of bandwidth, use one of the
following commands in interface configuration mode:
Command Purpose
Router(config-if)# ppp multilink bap Enables PPP BACP bandwidth allocation negotiation.
or
Router(config-if)# ppp multilink bap required Enables PPP BACP bandwidth allocation negotiation and
enforces mandatory negotiation of BACP for the multilink
bundle.
When PPP BACP is enabled, it is in passive mode by default and the following settings are in effect:
• Allows a peer to initiate link addition.
• Allows a peer to initiate link removal.
• Requests that a peer initiate link addition.
• Waits 20 seconds before timing out on pending actions.
• Waits 3 seconds before timing out on not receiving a response from a peer.
• Makes only one attempt to call a number.
• Makes up to three retries for sending a request.
• Searches for and logs up to five free dialers.
• Makes three attempts to send a call status indication.
• Adds only ISDN links to a multilink bundle.
• Monitors load.
The default settings will be in effect in the environment for which the ppp multilink bap command is
entered:
• Virtual template interface, if that is where the command is entered.
When the command is entered in a virtual template interface, configuration applies to any virtual
access interface that is created dynamically under Multilink PPP, the application that defines the
template.
• Dialer interface, if that is where the command is entered.
See the section “Basic BACP Configurations” at the end of this chapter for an example of how to
configure BACP.
Command Purpose
Router(config-if)# ppp bap timeout pending seconds Modifies the timeout on pending actions.
Router(config-if)# ppp bap timeout response seconds Modifies the timeout on not receiving a response from a peer.
Router(config-if)# ppp bap max dial-attempts number Modifies the number of attempts to call a number.
Router(config-if)# ppp bap max ind-retries number Modifies the number of times to send a call status indication.
Router(config-if)# ppp bap max req-retries number Modifies the number of retries of a particular request.
Router(config-if)# ppp bap max dialers number Modifies the maximum number of free dialers logged.
Router(config-if)# ppp bap link types analog Specifies that only analog links can be added to a multilink
bundle.
or
Router(config-if)# ppp bap link types isdn analog Allows both ISDN and analog links to be added.
Router(config-if)# ppp bap number default For all DDR-capable interfaces in the group, specifies a
phone-number primary telephone number for the peer to call for PPP BACP
negotiation, if different from any base number defined on the
dialer interface or virtual template interface.
Router(config-if)# ppp bap number secondary For BRI interfaces on which a different number is provided
phone-number for each B channel, specifies the secondary telephone
number.
Router(config-if)# ppp bap drop timer seconds Specifies a time to wait between outgoing link drop requests.
Router(config-if)# no ppp bap monitor load Disables the default monitoring of load and the validation of
peer requests against load thresholds.
See the section “Passive Mode Dialer Rotary Group Members with One Dial-In Number” later in this
chapter for an example of how to configure passive mode parameters.
Command Purpose
Router(config-if)# ppp bap call request Enables the interface to initiate the addition of links to the
multilink bundle.
Router(config-if)# ppp bap callback accept Enables the interface to initiate the addition of links upon peer
request.
Command Purpose
Router(config-if)# ppp bap drop after-retries Enables the interface to drop a link without negotiation after
receiving no response to retries to send a drop request.
Router(config-if)# ppp bap call timer seconds Sets the time to wait between outgoing call requests.
Router(config-if)# ppp bap timeout pending seconds Modifies the timeout on pending actions.
Router(config-if)# ppp bap timeout response seconds Modifies the timeout on not receiving a response from a peer.
Router(config-if)# ppp bap max dial-attempts number Modifies the number of attempts to call a number.
Router(config-if)# ppp bap max ind-retries number Modifies the number of times to send a call status indication.
Router(config-if)# ppp bap max req-retries number Modifies the number of retries of a particular request.
Router(config-if)# ppp bap max dialers number Modifies the maximum number of free dialers logged.
Router(config-if)# ppp bap link types analog Specifies that only analog links can be added to a multilink
bundle.
or
Router(config-if)# ppp bap link types isdn analog Allows both ISDN and analog links to be added.
Router(config-if)# ppp bap number default For all DDR-capable interfaces in the group, specifies a
phone-number primary telephone number for the peer to call for PPP BACP
negotiation, if different from any base number defined on the
dialer interface or virtual template interface.
Router(config-if)# ppp bap number secondary For BRI interfaces on which a different number is provided
phone-number for each B channel, specifies the secondary telephone number.
When BACP is enabled, multiple dialer maps to one destination are not needed when they differ only by
number. That is, once the initial call has been made to create the bundle, further dialing attempts are
realized through the BACP phone number negotiation.
Outgoing calls are supported through the use of dialer maps. However, when an initial incoming call
creates a dynamic dialer map, the router can dial out if the peer supplies a phone number. This capability
is achieved by the dynamic creation of static dialer maps for BACP. These temporary dialer maps can be
displayed by using the show dialer map command. These temporary dialer maps last only as long as the
BACP group lasts and are removed when the BACP group or the associated map is removed.
Command Purpose
Router> show ppp bap group [name] Displays information about all PPP BACP multilink bundle
groups or a specific, named multilink bundle group.
Router> show ppp bap queues Displays information about the BACP queues.
Router> show ppp multilink Displays information about the dialer interface, the multilink
bundle, and the group members.
Router> show dialer Displays BACP numbers dialed and the reasons for the calls.
Router> show dialer map Displays configured dynamic and static dialer maps and
dynamically created BACP temporary static dialer maps.
Troubleshooting BACP
To troubleshoot the BACP configuration and operation, use the following debug commands:
Command Purpose
Router> debug ppp bap [error | event | negotiation] Displays BACP errors, protocol actions, and negotiation
events and transitions.
Router> debug ppp multilink events Displays information about events affecting multilink
bundles established for BACP.
The following example configures a dialer rotary group to accept incoming calls:
interface async 1
no ip address
encapsulation ppp
dialer rotary-group 1
ppp bap number default 5663456
!
! Set the bandwidth to suit the modem/line speed on the remote side.
interface bri 0
no ip address
bandwidth 38400
encapsulation ppp
dialer rotary-group 1
ppp bap number default 5663457
!
interface bri 1
no ip address
encapsulation ppp
dialer rotary-group 1
ppp bap number default 5663458
!
interface dialer1
ip unnumbered ethernet 0
encapsulation ppp
ppp multilink bap
ppp bap call accept
ppp bap link types isdn analog
dialer load threshold 30
ppp bap timeout pending 60
The following example configures a virtual template interface to use BACP in passive mode:
multilink virtual-template 1
!
interface virtual-template 1
ip unnumbered ethernet 0
encapsulation ppp
ppp multilink bap
ppp authentication chap callin
interface bri 2
no ip address
encapsulation ppp
dialer rotary-group 1
no fair-queue
no cdp enable
ppp bap number default 6666668
!
interface bri 3
no ip address
encapsulation ppp
dialer rotary-group 1
no fair-queue
no cdp enable
ppp bap number default 6666669
!
interface dialer 1
ip unnumbered Ethernet0
encapsulation ppp
dialer in-band
dialer idle-timeout 300
dialer-group 1
no fair-queue
no cdp enable
ppp authentication chap
ppp multilink bap
ppp bap call accept
ppp bap callback request
ppp bap timeout pending 20
ppp bap timeout response 2
ppp bap max dial-attempts 2
ppp bap monitor load
Passive Mode Dialer Rotary Group Members with One Dial-In Number
The following example, a dialer rotary group with two members each with the same number, accepts
incoming dial attempts. The dialer interface has a base phone number because each of its member
interfaces is in a hunt group and the same number can be used to access each individual interface.
interface bri 0
no ip address
encapsulation ppp
dialer rotary-group 1
no fair-queue
no cdp enable
!
interface bri 1
no ip address
encapsulation ppp
dialer rotary-group 1
no fair-queue
no cdp enable
!
interface dialer 1
ip unnumbered Ethernet0
encapsulation ppp
dialer in-band
dialer idle-timeout 300
dialer-group 1
no fair-queue
no cdp enable
This chapter describes how to configure large-scale dial-out. It includes the following main sections:
• Large-Scale Dial-Out Overview
• How to Configure Large-Scale Dial-Out
• Monitoring and Maintaining the Large-Scale Dial-Out Network
• Configuration Examples for Large-Scale Dial-Out
Consider these restrictions when configuring large-scale dial-out:
Note Effective with Cisco Release 12.4(11)T, the L2F protocol was removed in Cisco IOS Software.
MMP also provides stacked network access servers access to a local Internet point of presence (POP)
using a single telephone number. This capability allows for easy expansion and scalability and for
assured fault tolerance and redundancy. Now, with large-scale dial-out, these features are available for
both outgoing and incoming calls.
Large-scale dial-out eliminates the need to configure dialer maps on every network access server for
every destination. Instead, you create remote site profiles that contain outgoing call attributes (telephone
number, service type, and so on) on the AAA server. The profile is downloaded by the network access
server when packet traffic requires a call to be placed to a remote site.
Additionally, large-scale dial-out addresses congestion management by seeking an uncongested,
alternative network access server within the same POP when the designated primary network access
server experiences port congestion.
Large-scale dial-out also enables scalable dial-out service to many remote sites across one or more Cisco
network access servers or Cisco routers. This capability is especially beneficial to both Internet service
providers (ISPs) and large-scale enterprise customers because it can simplify network configuration and
management. Large-scale dial-out streamlines activities such as service maintenance and scheduled
activities like application upgrades from a centralized location. Large enterprise networks such as those
used by retail stores, supermarket chains, and franchise restaurants can use large-scale dial-out to easily
update daily prices and inventory information from a central server to all branch locations in one process,
using the same network access servers that they currently use for dial-in functions.
Additional benefits of using large-scale dial-out include the following:
• Allows dialing the same router from any router in a stack group. Using a primary network access
server, you can configure static routes for a given remote host or network. If the primary network
access server is congested or has no links available, it will search for an alternate server within the
stack, and force that server to dial out.
• Eliminates the need to configure dialer maps in individual network access servers. The user profiles,
along with dial parameters, can be centrally stored on an AAA server such as a Cisco Secure Access
Control Server (ACS).
• Supports extended TACACS (also TACACS+), RADIUS using Cisco attribute-value (AV) pairs, and
the Ascend proprietary RADIUS extension for dial-out operation.
• Provides a way to associate an IP address with a user name and user profile using the static route
and host name association features. If there are no names on the IP static route, the Domain Name
System (DNS) support function can be used to determine the user name that is associated with the
IP address. If a name is not found, the destination IP address is used for the name.
• Allows dynamic static routes to be configured on the centralized AAA server, that is, static routes
stored centrally on an AAA server that can be dynamically downloaded by the router as needed.
• Provides support for MMP and the Stack Group Bidding Protocol (SGBP). SGBP unites each Cisco
access server in a virtual stack, which enables the access servers to become virtually tied together.
If all ports on a given network access server are already being used, the other network access servers
on the stack can be used for outbound calls. Single calls and multilink calls are now supported across
the multichassis stack group.
• Supports dial-out over an asynchronous line, when a chat script is configured.
• Allows ports to be reserved for dial-in and dial-out.
Large-scale dial-out enables scalable dial-out service; that is, configuration information is stored in a
central server, and many network access servers can access this information using either the RADIUS or
extended TACACS protocols. One or more network access servers can advertise summary routes to the
remote destinations and then dynamically download the dial-out profile configurations as needed.
Large-scale dial-out also allows dialing the same remote network or host from any router in a stack
group. You configure static routes for a particular remote host or network on a router in a stack group
that you designate as the primary network access server for that remote network or host. When a primary
network access server experiences port congestion, it searches for an alternate network access server
within the stack group to dial out and, when found, forces the alternate to dial the remote network.
Figure 97 illustrates the large-scale dial-out solution.
Remote LAN
router
SGBP
stack
ISDN
Modem
Analog
AAA server
18079
DNS server
Large-scale dial-out relies on per-user static routes in AAA and redistributed static and redistributed
connected routes to put better routes pointing to the same remote on the alternate network access server.
You can use any routing protocol that supports redistributing static and connected routes and that
supports Flash memory updates when a routing topology changes. The Open Shortest Path First (OSPF)
and Enhanced Interior Gateway Routing Protocol (EIGRP) routing protocols are recommended.
Static Routes
Static routes can be dynamically downloaded from an AAA server by the network access servers or can
be manually configured on the network access servers.
Dynamic static routes are installed on the network access server by an AAA server. The routes are
downloaded at system startup and updated periodically, so that route changes are reflected within a
configurable interval of time. Large-scale dial-out allows multiple AAA transactions with 50 static
routes per AAA server transaction. There is no set limit for the number of AAA server transactions
which can be configured, however configuring too many transactions may impact the performance of
your network. Performance effects will depend on the configurations and platforms used in your
network.
Stack Groups
The network access server stack group redistributes the routes of the remote networks. If the number is
large, the routes are summarized. Packets destined for remote networks are routed to the primary
network access server for the remote network.
If the static route that points to the next hop of the network access server has a name, that name with the
-out suffix attached becomes the profile name. If no profile name is configured in the route statement
that defines the remote location, the router can use reverse DNS lookup to map the IP route to a profile
name. The next hop address on the static route is used in reverse DNS to obtain the name of the remote
network. This name is then used in the AAA server lookup to retrieve the remote user profile. If no name
is returned by DNS, the network access server uses the destination IP address with the -out suffix
appended as the name.
If the primary network access server is congested, an alternate network access server may dial out. The
primary network access server initiates stack group bidding for the outgoing call. The least congested
network access server wins the bid and downloads the user profile. After a call is connected on an
alternate network access server, a better per-user route from the AAA profile is installed on the alternate
network access server. Subsequent packets destined for the remote network are routed to the alternate
network access server while the call is connected. Packets stored in the dialer hold queue on the primary
network access server are switched to the alternate network access server when the new route is
distributed to the primary network access server.
bid for dial-out connection. Configuring SGBP is described in the chapter “Configuring
Multichassis Multilink PPP” in this publication. The Cisco IOS Dial Technologies Command
Reference describes the commands to configure a stack group.
Additionally, all members of the stack group must be in the same routing autonomous system, and
the redistribute static and redistribute connected commands must already be configured. The
stack group supports all routing protocols, but routing protocols such as EIGRP and OSPF, which
support redistributing static and connected routes and Flash memory updates when topology
changes, are recommended.
• You must configure AAA network security services using the aaa new-model, aaa authentication,
aaa authorization, and aaa accounting global configuration commands. For more information
about AAA, see the chapter “AAA Overview” in the Cisco IOS Security Configuration Guide. The
Cisco IOS Security Command Reference describes the commands to configure AAA.
You will also need to configure your network access server to communicate with the applicable
security server, either an extended TACACS or RADIUS daemon.
If you are using RADIUS and Ascend attributes, use the non-standard keyword with the
radius-server host command to enable your Cisco router, acting as a network access server, to
recognize that the RADIUS security server is using a vendor-proprietary version of RADIUS. Use
the radius-server key command to specify the shared secret text string used between your Cisco
router and the RADIUS server. For more information, see the chapter “Configuring RADIUS” in the
Cisco IOS Security Configuration Guide.
If you are using extended TACACS, use the tacacs-server host command to specify the IP address
of one or more extended TACACS daemons. Use the tacacs-server key command to specify the
shared secret text string used between your Cisco router and the extended TACACS daemon. For
more information, see the chapter about configuring extended TACACS in the Cisco IOS Security
Configuration Guide.
Command Purpose
Router(config)# ip route network-number [network-mask] {address Establishes a static route to a remote network to
| interface} [distance] [name name] obtain a user profile.
The name you define is used in an AAA server lookup to retrieve the AAA profile of the remote network.
Enabling the static route download feature allows static routes to be configured at a centrally located
AAA server. Static routes are downloaded when the system is started, and you define a period of time
between route updates when you enable the feature.
Note Static route download is not mandatory for the large-scale dial-out feature; however, it makes
configuration of static routes more manageable by allowing the configuration to be centralized on a
server.
To enable the static route download feature, use the following commands in global configuration mode:
Command Purpose
Step 1 Router(config)# aaa new-model Enables the AAA server.
Step 2 Router(config)# aaa route download [time] Downloads static routes from the AAA server periodically
using the host name of the router.
Step 3 Router(config)# aaa authorization Downloads configuration information from the AAA server.
configuration default [radius | tacacs+]
Use the show ip route command to see the routes installed by these commands.
Command Purpose
Router(config-if)# dialer aaa Allows the dialer to use the AAA server to locate profiles for
dialing information.
Command Purpose
Router(config-if)# dialer dns Uses reverse DNS to obtain the name of the user profile of the
remote network.
The user profile name passed to the AAA server by the system is reverse-dns-name-out; the -out suffix
is automatically appended to the DNS name and is required to create unique dial-out and dial-in profiles.
Command Purpose
Router(config)# sgbp dial-bids Allows the stack group to bid for the dial-out call.
Once the stack group has been configured and enabled for dial-out connection bidding, configure the
dialer interface to search for an alternate network access server in the event of port congestion. Use the
following commands in interface configuration mode:
Command Purpose
Step 1 Router(config-if)# dialer Forces the dialer to search for another uncongested system in the
congestion-threshold links stack group.
Step 2 Router(config-if)# dialer reserved-links Reserves links for dial in and dial-out.
{dialin-link | dialout-link}
See the section “Stack Group and Static Route Download Configuration Example” at the end of this
chapter for an example of how to configure stack groups and static routes.
Note For the attributes listed in Table 4, the value of a string is 0 to 253 octects; the value of an integer is a
32-bit value ordered high byte first.
Value:
Password string
Note The password is encrypted. This attribute requires
a special RADIUS daemon that supports CHAP or
PAP authentication.
TACACS+ Support:
service = outbound {
dial-number = VALUE
}
Value:
Dial string
Note This attribute defines the plain dial number. It can
be used in different profiles, whereas the
callback-dialstring attribute is only for callbacks.
TACACS+ Support:
service = outbound {
send-auth = none/pap/chap
}
Value:
0: Send-Auth-None
1: Send-Auth-PAP
2: Send-Auth-CHAP
#247 Ascend-Data-SVC Specifies the type of data service that the link uses for
outgoing calls.
Cisco AV Pair:
cisco-avpair="outbound:data-service=VALUE"
TACACS+ Support:
service = outbound {
data-service = VALUE
}
Value:
0: Switched-Voice-Bearer
#248 Ascend-Force-56 Determines whether the network access server uses only
the 56K portion of a channel, even when all 64K appear to
be available.
Cisco AV Pair:
cisco-avpair="outbound:force-56=VALUE"
TACACS+ Support:
service = outbound {
force-56 = VALUE
}
Value:
0: Force-56-No
1: Force-56-Yes
Value:
0: None
1: Broadcast
2: Listen
3: Broadcast-Listen
Note This attribute is currently supported only for PPP
service.
#19 Callback-Number Defines a dialing string to be used for call back. (Service is
both outbound and PPP.)
Cisco AV Pair:
cisco-avpir="outbound:callback-dialstring=VALUE"
TACACS+ Support:
Equivalent to the existing callback-dialstring attribute.
Value:
Dial string
Note This is an alternate way of setting a callback
number using a standard RADIUS attribute.
TACACS+ Support:
service = outbound {
map-class = VALUE
}
Value:
Name string, which must match the name of a map class on
the dial-out network access server.
Command Purpose
Router> clear dialer sessions Removes all dialer sessions and disconnects links.
Router> clear ip route download {* | network-number Removes all or specified IP routes on the router. With the
network-mask | reload} reload option, forces reload of dynamic static routes before
the update timer expires.
Router> show dialer sessions Displays all dialer sessions.
Router> show ip route [static [download]] Displays all static IP routes or those installed using the AAA
route download function.
Remote
NAS1 SGBP
ISDN stack
NAS2
AAA server
18080
DNS server
At the console for NAS1, ping 20.1.1.1. This action creates a multilink bundle with two links. NAS1
dials out the first link, and NAS2 dials out the second link. The router named Remote is using the CHAP
host name echo-8.cisco.com.
A user profile for NAS1 on an Ascend RADIUS server is listed in the section “User Profile on an Ascend
RADIUS Server for NAS1 Example” later in this chapter.
dialer rotary-group 1
isdn switch-type basic-5ess
no fair-queue
!
interface Dialer 1
ip unnumbered Ethernet 0
no ip directed-broadcast
encapsulation ppp
no ip mroute-cache
dialer in-band
dialer dns
dialer aaa
dialer hold-queue 5
dialer congestion-threshold 5
dialer reserved-links 1 0
dialer-group 1
no fair-queue
ppp authentication chap callin
ppp multilink
!
router eigrp 200
redistribute connected
redistribute static
network 172.21.0.0
!
ip default-gateway 172.21.17.1
ip classless
ip route 0.0.0.0 0.0.0.0 172.21.17.1
!
dialer-list 1 protocol ip permit
radius-server host 172.31.61.87 auth-port 1645 acct-port 1646
radius-server key foobar
!
end
sgbp dial-bids
isdn switch-type basic-5ess
!
interface Ethernet 0
ip address 172.21.17.17 255.255.255.0
no ip directed-broadcast
media-type 10BaseT
!
interface Virtual-Template 1
ip address 10.1.1.1 255.255.255.252
no ip directed-broadcast
!
interface Virtual-Template 2
ip unnumbered Virtual-Template 1
no ip directed-broadcast
ppp multilink
multilink load-threshold 1 outbound
!
interface BRI 0
no ip address
no ip directed-broadcast
encapsulation ppp
dialer rotary-group 0
isdn switch-type basic-5ess
no fair-queue
!
interface Dialer 0
ip unnumbered Ethernet 0
no ip directed-broadcast
encapsulation ppp
dialer in-band
dialer dns
dialer aaa
dialer hold-queue 5
dialer congestion-threshold 5
dialer reserved-links 1 0
dialer-group 1
no fair-queue
ppp authentication chap callin
ppp multilink
!
router eigrp 200
redistribute connected
redistribute static
network 172.21.0.0
!
ip default-gateway 172.21.17.1
ip classless
ip route 0.0.0.0 0.0.0.0 172.21.17.1
!
dialer-list 1 protocol ip permit
!
radius-server host 172.31.61.87 auth-port 1645 acct-port 1646
radius-server key foobar
!
end
encapsulation ppp
no ip route-cache
no ip mroute-cache
dialer in-band
dialer idle-timeout 10000
dialer-group 1
no fair-queue
ppp authentication chap callin
ppp chap hostname echo-8.cisco.com
ppp chap password 7 045802150C2E
ppp multilink
!
ip default-gateway 172.21.12.1
ip classless
ip route 0.0.0.0 0.0.0.0 1.1.1.1
!
dialer-list 1 protocol ip permit
Note Note that all text between quotation marks must be typed on one line.
Static routes can also be defined using the Framed-Route Internet Engineering Task Force (IETF)
standard. The following example shows how the previous example for NAS1 would look using the
Framed-Route IETF standard:
NAS1-1 Password = "cisco" User-Service-Type = Outbound-User,
Framed-Route = "10.1.3.0/24 172.31.229.41.200",
Framed-Route = "10.1.2.0/24 172.31.229.41.200",
Framed-Route = "10.1.1.0/24 172.31.229.41.200",
Framed-Route = "172.31.229.41/32 Dialer1 200 name echo-8.cisco.com"
The Dial-Out DS0 Level Trunk Group feature directs an outbound synchronous or asynchronous call
initiated by dial-on-demand routing (DDR) to use a specific channel of a T1 or E1 circuit.
Finding Support Information for Platforms and Cisco IOS Software Images
Use Cisco Feature Navigator to find information about platform support and Cisco IOS software image
support. Access Cisco Feature Navigator at http://www.cisco.com/go/fn. You must have an account on
Cisco.com. If you do not have an account or have forgotten your username or password, click Cancel at
the login dialog box and follow the instructions that appear.
Contents
• Prerequisites for Dial-Out DS0 Level Trunk Groups, page 1055
• Restrictions for Dial-Out DS0 Level Trunk Groups, page 1056
• Information About Dial-Out DS0 Level Trunk Groups, page 1056
• How to Configure Dial-Out DS0 Level Trunk Groups and Enable for DDR, page 1059
• Configuration Examples for Dial-Out DS0 Level Trunk Groups, page 1067
• Additional References, page 1070
• Command Reference, page 1071
Dial-out trunk groups are configured on an NAS. The feature provides the ability to direct an outbound
synchronous or asynchronous call initiated by DDR to use a specific DS0 on one of the following
circuits:
• PRI
• NFAS and SS7
• T1/CAS
• E1/R2
Note Although the tasks and examples in this document focus on T1 trunks, this feature also applies to E1
circuits.
Trunk group 20
Member DS0s:
10–17 from Trunk1
Trunk group 10
11–17 from Trunk 2
Member DS0s:
1–5 from Trunk 1
T1
121499
Signaling circuit
with time slots 1–24
Each dial-out trunk group is typically associated with one or more dial-out user profiles. Figure 100
shows various DS0s aggregated into trunk groups, which are referenced by dial-out profiles that reside
on a AAA server.
Figure 100 Relationship of Dial-Out DS0 Level Trunk Groups to RADIUS Profiles
AAA interface
Dialer 0 Dialer 1
Target of dialer Target of dialer Static
string 1 TG11 string 2 TG33
0 1 2 3 4 23 0 1 2 3 4 23
DS0s
The dial-out trunk group configuration must be explicitly defined on the NAS and cannot be set up using
other external components such as AAA, because they represent static functional configurations or
configurable system resources on the NAS.
Configuring Dial-Out DS0 Level Trunk Groups on a DS1 Configured for CAS
Signaling
You can configure single or multiple dial-out trunk groups on CAS. The following task shows how to
configure a single dial-out trunk group. Repeat steps 4 through 6 to configure additional DS0 groups.
SUMMARY STEPS
1. enable
2. configure terminal
3. controller {e1 | t1} slot/port
4. ds0-group ds0-group-number timeslots timeslot-list
5. cas-custom channel
6. trunk-group name [timeslots timeslot-list [preference preference-number]]
7. exit
DETAILED STEPS
Example:
Router# configure terminal
Example:
Router(config-controller)# ds0-group 4
timeslots 1-24
Step 5 cas-custom channel Customizes signaling parameters for a particular E1 or T1
channel group on a channelized line.
Example:
Router(config-controller)# cas-custom 4
Step 6 trunk-group name [timeslots timeslot-list Directs an outbound synchronous or asynchronous call
[preference preference-number]] initiated by DDR to use specific DS0 channels of an ISDN
circuit.
Example: • timeslots timeslot-list—Selectively adds one or more
Router(config-controller)# trunk-group label5 DS0s from a signaling circuit to a trunk group. The
timeslots 1-24 preference 3
timeslot-list argument accepts DS0s numbered from
1 to 24 for T1 links, and from 1 to 15 and 17 to 31 for
E1 links.
• preference preference-number—Assigns a preference
for DS0 members in a trunk group. Range is from 1
(highest preference) to 64 (lowest preference).
Step 7 exit Exits the current configuration mode.
Example:
Router(config-controller)# exit
SUMMARY STEPS
1. enable
2. configure terminal
3. controller {e1 | t1} slot/port
4. pri-group timeslots timeslot-range nfas_d none nfas_int number nfas_group number
5. trunk-group name [timeslots timeslot-list [preference preference-number]]
6. exit
DETAILED STEPS
Example:
Router# configure terminal
Step 3 controller {e1 | t1} slot/port Configures a T1 or E1 controller and enters controller
configuration mode.
Example:
Router(config)# controller t1 6/1
Step 4 pri-group timeslots timeslot-range nfas_d none Specifies an ISDN PRI group on a channelized T1
nfas_int number nfas_group number controller and releases the ISDN PRI signaling time slots.
• timeslot-range—A value or range of values for time
Example: slots on a T1 or E1 controller that consist of an ISDN
Router(config-controller)# pri-group timeslots PRI group. Use a hyphen to indicate a range.
1-24 nfas_d none nfas_int 2 nfas_group 0
Note Values and groups of time slot range values
separated by commas (1,3-5,8-23, for example) are
accepted.
Example:
Router(config-controller)# exit
Configuring Dial-Out DS0 Level Trunk Groups on DS1 Configured for ISDN PRI
The task in this section configures a dial-out trunk group on a PRI.
SUMMARY STEPS
1. enable
2. configure terminal
3. controller {e1 | t1} slot/port
4. framing framing-type
5. linecode linecode-type
6. pri-group timeslots timeslot-range
7. trunk-group name [timeslots timeslot-list [preference preference-number]]
8. exit
DETAILED STEPS
Example:
Router# configure terminal
Step 3 controller {e1 | t1} slot/port Configures an E1 or T1 controller and enters controller
configuration mode.
Example:
Router(config)# controller t1 6/1
Step 4 framing framing-type Selects the frame type for the data line.
• Framing type choices are as follows:
Example: – sf—Specifies super frame as the T1 frame type.
Router(config-controller)# framing esf
This is the default.
– esf—Specifies extended super frame as the T1
frame type.
– crc4—Specifies CRC4 frame as the E1 frame
type. This is the default for Australia.
– no-crc4—Specifies no CRC4 frame as the E1
frame type.
– australia (Optional)—Specifies the E1 frame
type used in Australia.
Example:
Router(config-controller)# exit
SUMMARY STEPS
1. enable
2. configure terminal
3. controller {e1 | t1} slot/port
4. framing framing-type
5. linecode linecode-type
6. pri-group timeslots timeslot-range
7. trunk-group name [timeslots timeslot-list [preference preference-number]]
8. exit
9. interface dialer dialer-rotary-group-number
10. dialer string dial-string trunkgroup trunkgroup-label
11. dialer aaa [suffix string] [password string]
12. exit
DETAILED STEPS
Example:
Router# configure terminal
Step 3 controller {e1 | t1} slot/port Configures an E1 or T1 controller and enters controller
configuration mode.
Example:
Router(config)# controller t1 6/1
Step 4 framing framing-type Selects the frame type for the data line.
• Framing type choices are as follows:
Example: – sf—Specifies super frame as the T1 frame type.
Router(config-controller)# framing esf
This is the default.
– esf—Specifies extended super frame as the T1
frame type.
– crc4—Specifies CRC4 frame as the E1 frame type.
This is the default for Australia.
– no-crc4—Specifies no CRC4 frame as the E1
frame type.
– australia (Optional)—Specifies the E1 frame type
used in Australia.
Example:
Router(config-controller)# exit
Step 9 interface dialer dialer-rotary-group-number Defines a dialer rotary group and enters interface
configuration mode.
Example:
Router(config)# interface dialer 0
Step 10 dialer string dial-string trunkgroup Specifies the telephone number to be dialed and a dial-out
trunkgroup-label trunk group name for a static configuration on an NAS.
Example:
Router(config-if)# dialer string rotary1
trunkgroup trunk1
Example:
Router(config-if)# exit
What to Do Next
Use the following dial-out trunk group statements in the profile file that sets up the AAA server to apply
a static dial-out DS0 trunk configuration on an NAS.
RADIUS VSA
trunkgroup = trunk-group-label
Example:
trunkgroup = trunk1
AAA Cisco-AVPair
Cisco-AVPair = "outbound:trunkgroup=trunk-group-label"
Example:
dialout-out Password="cisco"
Cisco-AVPair = "outbound:trunkgroup=16"
.
.
.
Note The trunk group specified in the RADIUS vendor-specific attribute (VSA) must match the name defined
in the trunk group configuration.
Configure a Dial-Out DS0 Level Trunk Group on a DS1 Configured for CAS:
Example
The following example shows how to configure a single DS0 group on a CAS:
controller t1 0
ds0-group 2 timeslots 1-24
cas-custom 2
trunk-group label3 timeslots 1-12
trunk-group label4 timeslots 13-24 preference 2
controller t1 2
ds0-group 4 timeslots 1-24
cas-custom 4
trunk-group label5 timeslots 1-24 preference
Configure Multiple Dial-Out DS0 Level Trunk Groups on a PRI Trunk: Example
The following example shows how to configure B channels from a PRI channel into a DS0 trunk group:
controller T1 0
pri-group timeslots 1-24
trunk-group L1 timeslots 1-5 preference 10
!
The following example shows how to include all the B channels of the PRI channel into a trunk group:
interface serial 0:23
trunk-group L2 20
Note The trunk group configuration under the PRI channel and the controller are mutually exclusive.
added into the trunk group. The NFAS primary serial interface will not have the timeslots keyword
enabled under its configuration mode. The timeslots option is not available in the serial interface
configuration mode, because a serial interface may represent an NFAS serial interface.
controller T1 0
pri-group timeslots 1-24 nfas_d primary nfas_int 0 nfas_group 0
trunk-group L1 timeslots 1-5 preference 1
trunk-group L2 timeslots 12-14 preference 2
!
controller T1 1
pri-group timeslots 1-24 nfas_d backup nfas_int 1 nfas_group 0
trunk-group L3 timeslots 1-5
trunk-group L4 timeslots 12-14 preference 4
!
controller T1 3
pri-group timeslots 1-24 nfas_d none nfas_int 2 nfas_group 0
trunk-group L5 timeslots 7,9,11
trunk-group L6 timeslots 2,4,6,14-16 preference 6
The following example shows how to include all the B channels of the PRI channel into a trunk group:
interface serial 0:23
trunk-group trunk5 20
Note The trunk group configuration under the NFAS group member and the corresponding NFAS member
serial interface are mutually exclusive.
Configure Dial-Out DS0 Level Trunk Groups in a Dialer Rotary Group: Examples
In the following examples, dial-out trunk groups 15 and 16 have DS0s from PRI interfaces 0:23 and 6:23.
These interfaces are also rotary members of dialer interface 0. The AAA profile named dialout-out refers
to trunk group 16, implying that a DS0 from trunk group 16 will be assigned for the outgoing call for
this user using the dialout-out profile.
RAS-5400-1 Password="cisco"
Service-Type = Outbound,
Framed-Route="10.121.94.254/32 Dialer0 200 name dialout"
Framed-Route="10.121.94.0/24 10.121.94.254 200"
controller T1 6
pri-group timeslots 1-24
trunk-group 16 timeslots 21-22
trunk-group 15 timeslots 18-19 preference 2
.
.
.
interface serial 6:23
dialer rotary-group 0
interface dialer 0
dialer aaa
In the following examples, trunk group 15 has member DS0s from PRI interfaces 0:23, 6:23, and 7:23.
PRI interfaces 6:23, and 7:23 are assigned to the same rotary group. When an outgoing call is placed
through interface dialer 0, TGRM could return a DS0 that belongs to PRI interfaces 6:23, 7:23, or 0:23.
But because PRI interfaces 0:23 are not rotary members of interface dialer 0, the call would fail.
RAS-5400-1 Password="cisco"
Service-Type = Outbound,
Framed-Route="10.121.94.254/32 Dialer0 200 name dialout"
Framed-Route="10.121.94.0/24 10.121.94.254 200"
.
.
.
Incorrect Static Dial-Out DS0 Level Trunk Group Configuration on the NAS
controller t1 0
pri-group timeslots 1-24
trunk-group 15 timeslots 1,21-22 preference 1
trunk-group 16 timeslots 18-19
interface serial 0:23
dialer rotary-group 0
controller t1 6
pri-group timeslots 1-24
trunk-group 15 timeslots 21-22
trunk-group 16 timeslots 18-19 preference 2
interface serial 6:23
dialer rotary-group 1
controller t1 7
pri-group timeslots 1-24
trunk-group 15 timeslots 18-19
interface serial 7:23
dialer rotary-group 1
interface dialer 0
dialer aaa
Additional References
The following sections provide references related to dial-out trunk groups.
Related Documents
Related Topic Document Title
Large-scale dial-out “Configuring Large-Scale Dial-Out” chapter in the Cisco IOS Dial
Technologies Configuration Guide, Release 12.3
ISDN signaling circuits “Signaling Configuration” part in the Cisco IOS Dial Technologies
Configuration Guide, Release 12.3
ISDN signaling circuit and large-scale dial-out Cisco IOS Dial Technologies Command Reference, Release 12.3
commands, including syntax and examples
Standards
Standards Title
None —
MIBs
MIBs MIBs Link
None To locate and download MIBs for selected platforms, Cisco IOS
releases, and feature sets, use Cisco MIB Locator found at the
following URL:
http://www.cisco.com/go/mibs
RFCs
RFCs Title
None —
Technical Assistance
Description Link
Technical Assistance Center (TAC) home page, http://www.cisco.com/public/support/tac/home.shtml
containing 30,000 pages of searchable technical
content, including links to products, technologies,
solutions, technical tips, and tools. Registered
Cisco.com users can log in from this page to access
even more content.
Command Reference
The following new and modified commands are pertinent to this feature. To see the command pages for
these commands and other commands used with this feature, go to the Cisco IOS Master Commands List,
Release 12.4, at http://www.cisco.com/univercd/cc/td/doc/product/software/ios124/124mindx/
124index.htm.
New Commands
• dialer string trunkgroup
• trunk-group (timeslots)
Modified Command
• show trunk group
Feature History
Release Modification
12.2(4)T This feature was introduced.
12.2(11)T This feature was implemented on Cisco access server platforms.
This document describes the L2TP Large-Scale Dial-Out feature. It includes the following sections:
• Feature Overview, page 1073
• Supported Platforms, page 1075
• Supported Standards, MIBs, and RFCs, page 1076
• Configuration Tasks, page 1076
• Monitoring and Maintaining L2TP Large-Scale Dial-Out, page 1084
• Configuration Examples, page 1084
• Command Reference, page 1086
Feature Overview
The L2TP Large-Scale Dial-Out feature enables the router to dial multiple Layer 2 Tunnel Protocol
(L2TP) access concentrators (LACs) from a single L2TP network server (LNS). The LACs are signaled
through the LNS and use L2TP to establish the dial sessions. User-defined profiles can be configured on
an authentication, authorization, and accounting (AAA) server and retrieved by the LNS when dial-out
occurs.The L2TP Large-Scale Dial-Out feature also supports multiple LACs bound into one stack group,
call traffic load balancing, and outbound call congestion management.
Figure 101 provides an example of L2TP large-scale dial-out session startup. Each part of the process is
numbered and described in text following the figure.
2 ISDN
Secondary PPP
60514
AAA
server LAC client
1. The IP packets arrive at the LNS and are forwarded to the dialer interface by the routing protocol.
(A virtual access interface has not been created yet.)
2. A dialer session is created and placed in a pending state while the dialer interface sends a Dial Out
Request message to the AAA server requesting the user profile. The AAA server sends the user
profile, and the LNS builds a dynamic map based on the reply.
3. The dialer interface looks for its dial resources and finds the virtual private dialup network (VPDN)
group. The dialer interface then issues a dial call request to the VPDN group, which creates a virtual
access interface. The virtual access interface becomes a member of a rotary group.
4. If there is no existing L2TP tunnel between the LNS and the primary LAC, the LNS would establish
one; otherwise, it uses the existing tunnel. The LNS sends an Outgoing Call ReQuest (OCRQ)
message, inside of which is the dynamic dialer map, to the primary LAC.
5. Upon receiving the OCRQ message, the primary LAC determines whether it is congested. If the
primary LAC is congested, it sends a Stack Group Bidding Protocol (SGBP) Discover message
through a new tunnel to the secondary LAC in the scenario depicted in Figure 1, but it could send
the message to any other LAC configured in the SGBP stack group.
After the secondary LAC receives the SGBP Discover message from the LNS, it responds with an
SGBP Offer message describing available resources.
6. If neither LAC has resources to dial out, the primary LAC would send a Call Disconnect Notification
(CDN) message to the LNS. The LNS would then tear down the tunnel.
If the secondary LAC has more resources, the primary LAC can choose to dial through the secondary
LAC. The primary LAC sends a CDN message to the LNS with error code 7, which means “Try
another” as defined in RFC 2661. Inside this message, the LNS learns that its dial-out request should
be redirected to the secondary LAC, and the LNS clears the session to the primary LAC.
7. The LNS creates a new tunnel to the secondary LAC if one does not exist. The dial-out LAC creates
a VPDN session and sets it in a pending state. It then places a call to the PPP client. Once the call
is connected, the LAC determines to which pending VPDN session the connected interface belongs
and binds the connected interface with the session. The secondary LAC sends an Outgoing Call
Connected (OCCN) message to the LNS. The LNS determines for which pending virtual access
interface and VPDN session this OCCN is meant, and then the LNS brings up the virtual access
interface.
Benefits
Large-Scale Dial-Out Integrated with L2TP
Before Cisco IOS Release 12.2(4)T, L2TP required that requests for tunneled dial-out calls be from a
single LNS to a single LAC, and that configurations be available on the local server. The L2TP
Large-Scale Dial-Out feature introduced in Cisco IOS Release 12.2(4)T allows dialing multiple LACs
from a single LNS. The LACs are signaled through the LNS using L2TP to establish the dial sessions.
User-defined profiles can also be configured on a AAA server and retrieved by the LNS when dial-out
occurs.
Supported Platforms
See the next section for information about Feature Navigator and how to use this tool to determine the
platforms and software images in which this feature is available.
Feature Navigator is updated when major Cisco IOS software releases and technology releases occur. As
of May 2001, Feature Navigator supports M, T, E, S, and ST releases. You can access Feature Navigator
at the following URL:
http://www.cisco.com/go/fn
MIBs
None
To obtain lists of supported MIBs by platform and Cisco IOS release, and to download MIB modules,
go to the Cisco MIB website on Cisco.com at the following URL:
http://www.cisco.com/public/sw-center/netmgmt/cmtk/mibs.shtml
RFCs
• RFC 2661, Layer Two Tunneling Protocol (L2TP)
Configuration Tasks
See the following sections for configuration tasks for the L2TP Large-Scale Dial-Out feature. Each task
in the list is identified as either required or optional:
• Configuring the LNS to Request Dial-Out (required)
• Configuring a LAC to Accept Dial-Out (required)
If you are using TACACS+, use the tacacs-server host global configuration command to specify the IP
address of one or more TACACS+ daemons. Use the tacacs-server key global configuration command
to specify the shared secret text string used between your Cisco router and the TACACS+ daemon. For
more information, see the Cisco IOS Security Configuration Guide, Release 12.2.
To configure the LNS to request dial-out tunneled PPP connections from a LAC, use the following
commands beginning in global configuration mode:
Command Purpose
Step 1 Router(config)# vpdn enable Enables VPDN and directs the router to look
for tunnel definitions on a remote authorization
server.
Step 2 Router(config)# vpdn group 1 Creates VPDN group 1 and enters VPDN group
configuration mode.
Step 3 Router(config-vpdn)# request-dialout Enters VPDN request-dialout group
configuration mode and enables the tunnel
server to send L2TP dial-out requests.
Step 4 Router(config-vpdn-req-ou)# protocol l2tp Specifies L2TP as the tunneling protocol.
Note L2TP is the only protocol that supports
dial-out.
Step 5 Router(config-vpdn-req-ou)# rotary-group group-number Specifies the dialer rotary group that will be
used to dial out.
Note You can configure only one dialer
rotary group. Attempting to configure a
second dialer resource will remove the
first from the configuration.
Step 6 Router(config-vpdn-req-ou)# virtual-template Specifies the number of the virtual template
template-number that will be used to clone the virtual access
interface.
Step 7 Router(config-vpdn-req-ou)# exit Returns to VPDN group configuration mode.
Step 8 Router(config-vpdn)# initiate-to ip ip-address Specifies the IP address that will be dialed out.
This is the IP address of the LAC.
Note The limit and priority keywords are
not available for VPDN dial-out.
Step 9 Router(config-vpdn)# local name hostname Specifies that the L2TP tunnel will identify
itself with this host name.
Step 10 Router(config-vpdn)# exit Returns to global configuration mode.
Step 11 Router(config)# virtual-template template-number Specifies the number of the virtual template
that will be used to clone the virtual access
interface. Enters interface configuration mode
so that you can set the configuration parameters
that you want applied to virtual access
interfaces.
Step 12 Router(config-if)# interface virtual-template number Creates a virtual template interface that can be
configured and applied dynamically in creating
virtual access interfaces.
Command Purpose
Step 13 Router(config-if)# no ip directed-broadcast Disables the translation of a directed broadcast
to physical broadcasts.
Step 14 Router(config-if)# encapsulation ppp Sets the PPP encapsulation method on the
interface.
Step 15 Router(config-if)# ppp multilink Enables Multilink PPP (MLP) on an interface.
Step 16 Router(config-if)# exit Returns to global configuration mode.
Step 17 Router(config)# aaa new-model Enables AAA access control .
Step 18 Router(config)# aaa authentication arguments Specifies one or more AAA authentication
methods for use on serial interfaces that are
running PPP. Refer to the Cisco IOS security
guides for specific authentication arguments
for your network security configuration.
Step 19 Router(config)# aaa authorization arguments Sets parameters that restrict user access to a
network. Refer to the Cisco IOS security guides
for specific authentication arguments for your
network security configuration.
Step 20 Router(config)# interface dialer 1 Enters interface configuration mode for dialer
interface 1.
Step 21 Router(config-if)# dialer in-band Specifies that DDR is to be supported.
Step 22 Router(config-if)# dialer vpdn Enables a dialer profile to use L2TP dial-out.
Step 23 Router(config-if)# dialer aaa [suffix suffix password Allows a dialer to access the AAA server for
password] dialing information or, optionally, specifies a
suffix and nondefault password for
authentication.
Step 24 Router(config-if)# no ip directed-broadcast Disables the translation of a directed broadcast
to physical broadcasts.
Step 25 Router(config-if)# dialer-group group-number Controls access by configuring an interface to
belong to a specific dialing group.
Step 26 Router(config-if)# dialer-list dialer-group protocol Defines a DDR dialer list to control dialing by
protocol-name {permit | deny | list access-list-number | protocol or by a combination of a protocol and
access-group}
a previously defined access list.
Step 27 Router(config-if)# encapsulation ppp Sets the PPP encapsulation method on the
dialer interface.
Step 28 Router(config-if)# ppp multilink Enables MLP on an interface.
The MLP feature provides load-balancing functionality over multiple WAN links and offers load
calculation on both inbound and outbound traffic. Refer to the part “PPP Configuration” and the chapter
“Configuring Media-Independent PPP and Multilink PPP” in the Cisco IOS Dial Technologies
Configuration Guide, Release 12.2, for more information.
See the configuration examples later in this document for additional commands that may be configured
on the LAC.
Command Purpose
Step 1 Router(config)# vpdn enable Enables VPDN and directs the router to look for
tunnel definitions on a remote authorization server.
Step 2 Router(config)# vpdn group 1 Creates VPDN group 1 and enters VPDN group
configuration mode.
Step 3 Router(config-vpdn)# accept-dialout Enters VPDN accept-dialout group configuration
mode and enables the NAS to accept L2TP dial-out
requests.
Step 4 Router(config-vpdn-acc-ou)# protocol l2tp Specifies L2TP as the tunneling protocol.
Note L2TP is the only protocol that supports
dial-out.
Step 5 Router(config-vpdn-acc-ou)# dialer dialer-interface Specifies the dialer that is used to dial out to the
client.
Step 6 Router(config-vpdn-acc-ou)# exit Returns to VPDN group configuration mode.
Step 7 Router(config-vpdn)# initiate-to ip ip-address [limit Specifies the IP address that will be tunneled to.
limit-number] [priority priority-number]
Step 8 Router(config-vpdn)# local name hostname Specifies that the L2TP tunnel will identify itself
with this host name.
Step 9 Router(config-vpdn)# exit Returns to global configuration mode.
Step 10 Router(config)# aaa new-model Enables the AAA access control model.
Step 11 Router(config)# aaa authentication arguments Specifies one or more AAA authentication
methods for use on serial interfaces that are
running PPP. Refer to the Cisco IOS security
guides for specific authentication arguments for
your network security configuration.
Step 12 Router(config)# aaa authorization arguments Sets parameters that restrict user access to a
network. Refer to the Cisco IOS security guides for
specific authorization arguments for your network
security configuration.
Step 13 Router(config)# username name password password Creates authentication credentials for the stack
group.
Step 14 Router(config)# sgbp group name Creates the stack group and assigns this router to it.
Command Purpose
Step 15 Router(config)# sgbp member peer-name [peer-ip-address] Specifies a peer member of the stack group.
Step 16 Router(config)# interface dialer 1 Enters interface configuration mode for dialer
interface 1.
Step 17 Router(config-if)# dialer aaa Allows a dialer to access the AAA server for
dialing information.
Step 18 Router(config-if)# dialer in-band Specifies that DDR is to be supported.
Step 19 Router(config-if)# no ip directed-broadcast Disables the translation of a directed broadcast to
physical broadcasts.
Step 20 Router(config-if)# encapsulation ppp Sets the PPP encapsulation method on the dialer
interface.
Step 21 Router(config-if)# ppp multilink Enables MLP on an interface.
See the configuration examples later in this document for additional commands that may be configured
on the LAC.
Note Effective with Cisco Release 12.4(11)T, the L2F protocol was removed in Cisco IOS Software.
Step 1 From the LNS, display tunnel statistics by entering the show vpdn and the show vpdn tunnel all EXEC
commands:
Router# show vpdn
Step 2 From the LNS, enter the show interfaces virtual-access EXEC command to verify that the interface is
up and that no errors are reported:
Router# show interfaces virtual-access 1
Step 3 From the LNS, display information for MLP bundles by entering the show ppp multilink EXEC
command:
Router# show ppp multilink
Step 4 From the LAC, display active tunnel statistics by entering the show vpdn and show vpdn tunnel all
EXEC commands:
Router# show vpdn
Step 5 From the LAC, confirm active SGBP group members by entering the show sgbp EXEC command:
Router# show sgbp
Step 6 From the LAC, display connection status by entering the show isdn status EXEC command or the show
user EXEC command:
Router# show isdn status
Command Purpose
Router> clear dialer sessions Removes all dialer sessions and disconnects links.
Router# clear vpdn tunnel l2tp Shuts down a specific tunnel and all the sessions within the
network-access-server gateway-name tunnel.
Router> show dialer sessions Displays all dialer sessions.
Router# show interfaces virtual access number Displays information about the virtual access interface, LCP,
protocol states, and interface statistics. The status of the virtual
access interface should be:
Virtual-Accessn is up, line protocol is up
Router> show ip route [static [download]] Displays all static IP routes or those installed using the AAA
route download function.
Router> show ppp multilink Displays MLP and Multichassis Multilink PPP (MMP) bundle
information.
Router# show vpdn Displays a summary of all active VPDN tunnels.
Router# show vpdn group [name | name domain | name Displays a summary of the relationships among VPDN groups
endpoint] and customer or VPDN profiles.
Note When you include the name of the VPDN group, the
output displays information on domain or DNIS, tunnel
endpoint, session limits, group priority, active sessions,
group status, and reserved sessions.
Router# show vpdn history failure Displays information about VPDN user failures.
Router# show vpdn multilink Displays VPDN multilink information.
Router# show vpdn session [all | packets | sequence Displays VPDN session information including interface, tunnel,
| state | timers | window] [interface | tunnel | username, packets, status, and window statistics.
username]
Router# show vpdn tunnel [all | packets | state | Displays VPDN tunnel information including tunnel protocol,
summary | transport] [id | local-name | ID, local and remote tunnel names, packets sent and received,
remote-name]
tunnel, and transport status.
Configuration Examples
This section provides the following configuration examples:
• LNS Configured to Request Dial-Out Example
• LAC Configured to Accept Dial-Out Example
interface dialer 2
ip address 172.19.2.3 255.255.128
encapsulation ppp
dialer remote-name group1
dialer string 5551234
dialer aaa
dialer pool 1
dialer-group 1
ppp authentication chap
.
.
.
end
Command Reference
This feature uses no new or modified commands. To see the command pages for the commands used with
this feature, go to the Cisco IOS Master Commands List, Release 12.4, at http://www.cisco.com/
univercd/cc/td/doc/product/software/ios124/124mindx/124index.htm.
This feature makes it possible for IP per-user attributes to be applied to a Layer 2 Tunneling Protocol
(L2TP) dial-out session.
Feature Specifications for L2TP Large-Scale Dial-Out per-User Attribute via AAA
Feature History
Release Modification
12.2(15)T This feature was introduced.
Supported Platforms
Cisco 7200, Cisco 7400
Finding Support Information for Platforms and Cisco IOS Software Images
Use Cisco Feature Navigator to find information about platform support and Cisco IOS software image
support. Access Cisco Feature Navigator at http://www.cisco.com/go/fn. You must have an account on
Cisco.com. If you do not have an account or have forgotten your username or password, click Cancel at
the login dialog box and follow the instructions that appear.
Contents
• Restrictions for Using L2TP Large-Scale Dial-Out per-User Attribute via AAA, page 1088
• Information About L2TP Large-Scale Dial-Out per-User Attribute via AAA, page 1088
• How to Configure L2TP Large-Scale Dial-Out per-User Attribute via AAA, page 1089
• Configuration Examples for L2TP Large-Scale Dial-Out per-User Attribute via AAA, page 1093
• Additional References, page 1096
• Command Reference, page 1098
How the L2TP Large-Scale Dial-Out per-User Attribute via AAA Feature Works
The L2TP Large-Scale Dial-Out per-User Attribute via AAA feature makes it possible for IP and other
per-user attributes to be applied to an L2TP dial-out session from an LNS. Before this feature was
released, IP per-user configurations from authentication, authorization, and accounting (AAA) servers
were not supported; the IP configuration would come from the dialer interface defined on the router.
The L2TP Large-Scale Dial-Out per-User Attribute via AAA feature works in a way similar to virtual
profiles and L2TP dial-in. The L2TP virtual access interface is first cloned from the virtual template,
which means that configurations from the virtual template interface will be applied to the L2TP virtual
access interface. After authentication, the AAA per-user configuration is applied to the virtual access
interface. Because AAA per-user attributes are applied only after the user has been authenticated, the
LNS must be configured to authenticate the dial-out user (configuration authentication is needed for this
feature).
With the L2TP Large-Scale Dial-Out per-User Attribute via AAA feature, all software components can
now use the configuration present on the virtual access interface rather than what is present on the dialer
interface. For example, IP Control Protocol (IPCP) address negotiation uses the local address of the
virtual access interface as the router address while negotiating with the peer.
All Cisco IOS commands that can be configured as AAA per-user commands are supported by the L2TP
Large-Scale Dial-Out per-User Attribute via AAA feature. Following is a list of some of the commands
that are typically configured on a per-user basis:
• The ip vrf forwarding interface configuration command
• The ip unnumbered loopback0 interface configuration command
• Per-user static routes
• Access lists
• Multilink bundles
• Idle timers
Prerequisites
The L2TP Large-Scale Dial-Out per-User Attribute via AAA feature provides additional functionality
for large-scale dial-out networks and Layer 2 tunneling. It is assumed that a network is already
configured and operational, and that the tasks in this document will be performed on an operational
network. See the “Additional References” section for more information about large-scale dial-out
networks, Layer 2 tunneling, and virtual template interfaces.
Restrictions
If the tasks in this section are not performed, the software will operate in the original mode, that is, IP
per-user configurations from a AAA server will not be recognized and IP addresses will come from the
dialer interface defined on the router.
To configure the VPDN group that makes it possible for IP per-user attributes to be applied to an L2TP
dial-out session, use the following commands:
SUMMARY STEPS
1. enable
2. configure terminal
3. vpdn-group name
4. request-dialout
5. protocol l2tp
6. rotary-group group-number
7. virtual-template template-number
8. exit
DETAILED STEPS
Example:
Router# configure terminal
Step 3 vpdn-group name Creates a VPDN group and starts VPDN group
configuration mode.
Example:
Router(config)# vpdn-group 1
Step 4 request-dialout Enables an LNS to request VPDN dial-out calls by using
L2TP, and starts VPDN request-dialout configuration mode.
Example:
Router(config-vpdn)# request-dialout
Step 5 protocol l2tp Specifies the L2TP tunneling protocol.
Example:
Router(config-vpdn-req-ou)# protocol l2tp
Step 6 rotary-group group-number Assigns a request-dialout VPDN subgroup to a dialer rotary
group.
Example:
Router(config-vpdn-req-ou)# rotary-group 1
Example:
Router(config-vpdn-req-ou)# exit
What to Do Next
The configuration for the L2TP Large-Scale Dial-Out per-User Attribute via AAA feature must include
a AAA profile to specify the per-user attributes. See the “Per-User AAA Attributes Profile Example” for
an example of such a profile.
SUMMARY STEPS
1. enable
2. show interfaces virtual-access number [configuration]
DETAILED STEPS
SUMMARY STEPS
DETAILED STEPS
Example:
Router# configure terminal
Step 4 no logging console Disables all logging to the console terminal.
• To reenable logging to the console, use the logging
Example: console command in global configuration mode.
Router(config)# no logging console
Step 5 Use Telnet to access a router port and repeat Enters global configuration mode in a recursive Telnet
Steps 2 and 3. session, which allows the output to be redirected away from
the console port.
Step 6 terminal monitor Enables logging output on the virtual terminal.
Example:
Router(config)# terminal monitor
Example:
Router(config)# exit
Step 8 debug aaa per-user Displays what attributes are applied to each user as the user
authenticates.
Example:
Router# debug aaa per-user
Step 9 debug vtemplate events Displays the virtual template events to form a virtual access
interface.
Example:
Router# debug vtemplate events
Step 10 debug vtemplate cloning Displays the virtual template cloning to form a virtual access
interface.
Example: • Use this command to verify when the interface is
Router# debug vtemplate cloning
created (cloned from the virtual template) at the
beginning of the dialup connection and when the
interface is destroyed when the connection is
terminated.
Step 11 configure terminal Enters global configuration mode.
Example:
Router# configure terminal
Step 12 no terminal monitor Disables logging on the virtual terminal.
Example:
Router(config)# no terminal monitor
Step 13 exit Exits to privileged EXEC mode.
Example:
Router(config)# exit
interface Virtual-Access3
ip vrf forwarding V1.25.com
ip unnumbered Loopback25
no peer default ip address
ppp authentication chap
end
Sample Output for the debug vtemplate events and debug vtemplate cloning Commands
Router# debug vtemplate events
Router# debug vtemplate cloning
Additional References
For additional information related to L2TP large-scale dial-out per-user attributes using a AAA server,
see to the following sections:
• Related Documents, page 1096
• Standards, page 1097
• MIBs, page 1097
• RFCs, page 1097
• Technical Assistance, page 1097
Related Documents
Related Topic Document Title
Large-scale dial-out Cisco IOS Dial Technologies Configuration Guide, Release 12.2;
refer to the chapter “Configuring Large-Scale Dial-Out.”
VPDN groups Cisco IOS Dial Technologies Configuration Guide, Release 12.2;
refer to the chapter “Configuring Virtual Private Networks.”
Virtual interfaces Cisco IOS Dial Technologies Configuration Guide, Release 12.2;
refer to the chapter “Configuring Virtual Template Interfaces.”
Per-user configuration Cisco IOS Dial Technologies Configuration Guide, Release 12.2;
refer to the chapter “Configuring Per-User Configuration.”
Descriptions of debug command output Cisco IOS Debug Command Reference, Release 12.2.
Standards
Standards Title
None —
MIBs
MIBs MIBs Link
None To obtain lists of supported MIBs by platform and Cisco IOS
release, and to download MIB modules, go to the Cisco MIB website
on Cisco.com at the following URL:
http://www.cisco.com/public/sw-center/netmgmt/cmtk/mibs.shtml
To locate and download MIBs for selected platforms, Cisco IOS releases, and feature sets, use
Cisco MIB Locator found at the following URL:
http://tools.cisco.com/ITDIT/MIBS/servlet/index
If Cisco MIB Locator does not support the MIB information that you need, you can also obtain a list of
supported MIBs and download MIBs from the Cisco MIBs page at the following URL:
http://www.cisco.com/public/sw-center/netmgmt/cmtk/mibs.shtml
To access Cisco MIB Locator, you must have an account on Cisco.com. If you have forgotten or lost your
account information, send a blank e-mail to [email protected]. An automatic check will verify
that your e-mail address is registered with Cisco.com. If the check is successful, account details with a
new random password will be e-mailed to you. Qualified users can establish an account on Cisco.com
by following the directions found at this URL:
http://www.cisco.com/register
RFCs
RFCs Title
None —
Technical Assistance
Description Link
Technical Assistance Center (TAC) home page, http://www.cisco.com/public/support/tac/home.shtml
containing 30,000 pages of searchable technical
content, including links to products, technologies,
solutions, technical tips, tools, and lots more.
Registered Cisco.com users can log in from this page to
access even more content.
Command Reference
The following modified commands are pertinent to this feature. To see the command pages for these
commands and other commands used with this feature, go to the Cisco IOS Master Commands List,
Release 12.4, at http://www.cisco.com/univercd/cc/td/doc/product/software/ios124/124mindx/
124index.htm.
• virtual-template
Feature History
Release Modification
12.2(8)T This feature was introduced.
This document describes the LSDO VRF Aware feature in Cisco IOS Release 12.2(8)T and includes the
following sections:
• Feature Overview, page 1099
• Supported Platforms, page 1101
• Supported Standards, MIBs, and RFCs, page 1101
• Prerequisites, page 1102
• Configuration Tasks, page 1102
• Configuration Examples, page 1103
• Command Reference, page 1103
• Glossary, page 1104
Feature Overview
Currently, the Cisco large-scale dial-out (LSDO) feature is not supported in a Multiprotocol Label
Switching (MPLS) virtual private network (VPN), which means it does not support tunneling protocols
and cannot take advantage of cost benefits inherent in an MPLS VPN. (See the sections “Benefits” and
the “Related Documents” for more details on the benefits of MPLS VPN.) Beginning with Cisco IOS
Release 12.2(8)T, large-scale dial-out will support the Layer 2 Tunnel Protocol (L2TP) in an MPLS
VPN.
The basic operation of large-scale dial-out relies on per-user static routes stored in an authentication,
authorization, and accounting (AAA) server, and redistributed static and redistributed connected routes
to put better routes pointing to the same remote network or host on the alternate network access server
(NAS).
A static route is manually configured on a NAS. If the static route that pointed to the next hop of the
NAS has a name, that name with the -out suffix attached becomes the profile name.
When a packet arrives on a dialer interface where a static map is not configured, the dial string is
retrieved from the AAA server. The query made to the AAA server is based on the destination IP address
of the packet received.
When using L2TP VPN large-scale dial-out, overlapping IP addresses are often present in virtual routing
and forwarding instances (VRFs), so that a unique key is needed to retrieve the correct route from the
AAA server. With VPDN as a dial-out resource, a virtual access interface is created for maintaining each
PPP session. Software prior to Cisco IOS Release 12.2(8)T did not update the VRF information on the
virtual access interface; rather, this information was cloned from the dialer interface.
In the Cisco IOS Release 12.2(8)T software, the VRF table identifier is retrieved from the incoming
packet and is mapped to the VRF name. This VRF name and the destination IP address are combined to
make the unique key needed to retrieve the dial string and other user profile information from the AAA
server. When response from the AAA server is received and the virtual access interface is created, the
virtual access interface is updated with VRF information that was retrieved from the incoming packet.
As with profile names on dialer interfaces, the IP address and VRF name combination with the -out
suffix attached becomes the profile name for large-scale dial-out in MPLS VPN using L2TP.
Note Another way to build a unique key is to use the name of the IP route. In this situation, the key is made
from the IP route name and VRF name combination with the -out suffix attached. Refer to the technical
note listed in the “Related Documents” section for more information.
Benefits
Layer 2 Tunneling Technologies Trim Costs by Forwarding Calls over the Internet
Access VPNs use Layer 2 tunneling technologies to create a virtual point-to-point connection between
users and the customer network. These tunneling technologies provide the same direct connectivity as
the expensive Public Switched Telephone Network (PSTN) by using the Internet. Instead of connecting
directly to the network by using the PSTN, access VPN users need only use the PSTN to connect to the
Internet service provider (ISP) local point of presence (POP). The ISP then uses the Internet to forward
users from the POP to the customer network. Forwarding a user call over the Internet provides cost
savings for the customer.
Restrictions
Cisco IOS Release 12.2(8)T supports only L2TP large-scale dial-out, and this feature makes it possible
to retrieve only the dialer string that large-scale dial-out needs to construct the dynamic dialer map. This
feature cannot create virtual access interfaces in the large-scale dial-out environment.
Related Documents
Additional information about configuring networks that can take advantage of this feature can be found
in the following Cisco IOS documentation:
• Cisco IOS Dial Technologies Command Reference, Release 12.2.
• Cisco IOS Dial Technologies Configuration Guide, Release 12.2. Refer to the chapter “Configuring
Large-Scale Dial-Out” in the part “Dial Access Specialized Features,” and the chapter “Configuring
Virtual Private Networks” in the part “Virtual Templates, Profiles, and Networks.”
• Cisco IOS Switching Services Command Reference, Release 12.2.
• Cisco IOS Switching Services Configuration Guide, Release 12.2. Refer to the chapter
“Multiprotocol Label Switching Overview” in the part “Multiprotocol Label Switching.”
• “Large Scale Dialout—L2TP LSDO VRF Aware” technical note at
http://fvanderh-sun.cisco.com:8080/naiad/docs/lsdo/lsdo_l2tp_04
Supported Platforms
Use Cisco’s Feature Navigator tool to determine which platforms support the LSDO VRF Aware feature.
MIBs
None
To obtain lists of supported MIBs by platform and Cisco IOS release, and to download MIB modules,
go to the Cisco MIB website on Cisco.com at the following URL:
http://www.cisco.com/public/sw-center/netmgmt/cmtk/mibs.shtml
RFCs
None
Prerequisites
No new Cisco IOS commands are introduced with the LSDO VRF Aware feature. Before configuring
this feature, read through the chapters listed in the “Related Documents” section, to be sure you know
how to configure VPDNs, dialer interfaces, and MPLS, then use the examples in the section
“Configuration Examples” to help you determine the configuration you need for your network.
Configuration Tasks
No new configuration tasks are required for configuring the LSDO VRF Aware feature. See the sections
“Prerequisites” and “Related Documents” for more information.
To monitor and maintain LSDO VRF Aware feature, use the following EXEC commands:
Command Purpose
Router# show dialer Displays general diagnostic information for interfaces configured for DDR.
Router# show ip protocols vrf Displays the routing protocol information associated with a VRF.
Router# show ip route vrf Displays the IP routing table associated with a VPN routing and VRF forwarding
instance.
Router# show ip vrf Displays the set of defined VRF instances and associated interfaces.
Router# show vpdn Displays information about active L2F protocol tunnel and L2F message identifiers
in a VPDN.
Router# show vpdn domain Displays all VPDN domains and DNIS groups configured on the NAS.
Router# show vpdn group Displays a summary of the relationships among VPDN groups and customer or
VPDN profiles, and summarizes the configuration of a VPDN group including
domain or DNIS, loadsharing information, and current session information.
Router# show vpdn history failure Displays the content of the failure history table.
Router# show vpdn multilink Displays the multilink sessions authorized for all VPDN groups.
Command Purpose
Router# show vpdn session Displays information about active L2TP or L2F sessions in a VPDN.
Router# show vpdn tunnel Displays information about active L2TP or L2F tunnels in a VPDN.
Configuration Examples
This section contains partial sample configurations of the LSDO VRF Aware feature. (Additional
examples can be found in the technical note listed in the “Related Documents” section.)
In the following examples, VRF VPN_A has two hosts with the IP address 1.1.1.1 and 2.2.2.2 and,
similarly, VRF VPN_B has two hosts with IP address 1.1.1.1 and 2.2.2.2. The AAA server is configured
with a list containing “10.10.10.10-VPN_A-out” and “10.10.10.10-VPN_B-out” as keys to search on.
Note The network addresses used in the following configuration are examples only and will not work if tried
in an actual network configuration.
LNS Configuration
This partial example configures L2TP dial-out tunnels to an L2TP access concentrator (LAC) from an
L2TP network server (LNS):
request-dialout
protocol l2tp
rotary-group 1
! LAC IP address:
initiate-to ip 172.16.0.2
local name PE2_LNS
l2tp tunnel password 7 13!9@61&
Dialer Configuration
This partial example configures the dialer interface:
interface Dialer 1
! Global IP address:
ip address 10.10.10.10
encapsulation ppp
dialer in-band
dialer aaa
dialer vpdn
dialer-group 1
ppp authentication chap
Routing Configuration
This partial example configures the VRF static routes:
ip route vrf VPN_A 1.1.1.1 255.255.255.255 Dialer1
ip route vrf VPN_A 2.2.2.2 255.255.255.255 Dialer1
ip route vrf VPN_B 1.1.1.1 255.255.255.255 Dialer1
ip route vrf VPN_B 2.2.2.2 255.255.255.255 Dialer1
Command Reference
This feature uses no new or modified commands. To see the command pages for the commands used with
this feature, go to the Cisco IOS Master Commands List, Release 12.4, at http://www.cisco.com/
univercd/cc/td/doc/product/software/ios124/124mindx/124index.htm.
Glossary
L2TP—Layer 2 Tunnel Protocol. A tunneling protocol that permits separating the remote access
network function—terminating the PSTN circuit, for example—from the local network access
operations such as authenticating and authorizing the remote user.
L2TP access concentrator—See LAC.
L2TP network server—See LNS.
LAC—L2TP access concentrator. A node that acts as one side of an L2TP tunnel endpoint and is a peer
to the LNS. The LAC sits between an LNS and a remote system and forwards packets to and from each.
Packets sent from the LAC to the LNS require tunneling with the L2TP protocol. The connection from
the LAC to the remote system is either local or a PPP link.
Layer 2 Tunnel Protocol—See L2TP.
LNS—L2TP network server. A device that terminates an L2TP tunnel. It receives the remote user PPP
connection over an L2TP tunnel. The LNS authenticates and authorizes the remote user and then
forwards packets between the remote user and the data network.
MPLS—Multiprotocol Label Switching. Switching method that forwards IP traffic using a label. This
label instructs the routers and the switches in the network where to forward the packets based on
pre-established IP routing information.
Multiprotocol Label Switching—See MPLS.
NAS—network access server. A device that provides local network access to users across a remote
access network such as the PSTN. For example, a NAS may provide access to a user dialing in from the
PSTN to the data network, that is, it terminates the PSTN circuit, terminates the remote user PPP session,
authenticates and authorizes the remote user, and finally forwards packets between the remote user and
the data network.
network access server—See NAS.
virtual private dialup network—See VPDN.
virtual routing and forwarding instance—See VRF.
VPDN—virtual private dialup network. A type of access VPN that uses PPP to interface with the
subscriber. VPDN enables the service provider to configure VPNs across an IP access network that
connects to the VRFs on a PE. VPDN uses the Layer 2 Tunnel Protocol (L2TP) to extend or "tunnel" a
PPP session across the IP access network.
VRF—virtual routing and forwarding instance. Identifies a separate VPN within a particular MPLS
VPN network domain.
This feature module describes the Modem Script and System Script Support in Large-Scale Dial-Out
feature and includes the following sections:
• Feature Overview, page 1105
• Supported Platforms, page 1106
• Supported Standards, MIBs, and RFCs, page 1106
• Configuration Tasks, page 1107
• Monitoring and Maintaining Large-Scale Dial-Out Sessions, page 1108
• Configuration Examples, page 1108
• Command Reference, page 1109
• Appendix, page 1110
• Glossary, page 1111
Feature Overview
Modem connection and system login chat scripts are often used when asynchronous dial-on-demand
routing (DDR) is configured. Currently, however, the large-scale dial-out network architecture does not
allow chat scripts for a particular session to be passed through the network. Cisco IOS Release 12.2(2)T
allows modem and system chat scripts to pass through large-scale dial-out networks by allocating two
new authentication, authorization, and accounting (AAA) attributes for outbound service.
The AAA attributes define specific AAA elements in a user profile. Large-scale dial-out supports Cisco
attribute-value (AV) pairs and TACACS+ attributes. The Modem Script and System Script Support in
Large-Scale Dial-Out feature provides two new outbound service attributes for passing chat scripts:
modem-script and system-script.
Benefits
The Modem Script and System Script Support in Large-Scale Dial-Out feature allows users to use
modem and system chat scripts by linking them to AAA service outbound attributes for use by Cisco
network access servers in large-scale dial-out networks.
Related Documents
• Cisco IOS Dial Technologies Configuration Guide, Release 12.2
• Cisco IOS Security Configuration Guide, Release 12.2
• CiscoSecure ACS for Windows NT User Guide 2.0
Supported Platforms
The Modem Script and System Script Support in Large-Scale Dial-Out feature was developed for and
tested on several Cisco device platforms. Check Feature Navigator for the feature sets in which the
Modem Script and System Script Support in Large-Scale Dial-Out is available.
MIBs
No new or modified MIBs are supported by this feature.
To obtain lists of supported MIBs by platform and Cisco IOS release, and to download MIB modules,
go to the Cisco MIB website on Cisco.com at
http://www.cisco.com/public/sw-center/netmgmt/cmtk/mibs.shtml.
RFCs
No new or modified RFCs are supported by this feature.
Configuration Tasks
See the following sections for configuration tasks for the Modem Script and System Script Support in
Large-Scale Dial-Out feature. Each task in the list is identified as either optional or required.
• Creating the Dial-Out Profile (required)
• Creating the Chat Script (required)
• Verifying Modem and System Chat Scripts with Large-Scale Dial-Out (optional but recommended)
Once these tasks are complete, you will need to complete the configuration tasks required for large-scale
dial-out. See the chapter “Configuring Large-Scale Dial-Out” in the Cisco IOS Dial Technologies
Configuration Guide, Cisco IOS Release 12.2.
To specify a name for the modem script and, if needed, a system script using TACACS+ attributes for
outbound service, use the following syntax to enter these attributes in the dial-out profile:
service = outbound {
modem-script = script-name
system-script = script-name
}
Timesaver Remember that the dial-out profile name must have the characters “-out” appended to it and that the only
required attribute for a profile is the Cisco AV pair outbound:dial-number.
See the section “Dial-Out Profile Examples” for examples of dial-out profiles.
For more information about defining profiles, see the Cisco IOS Security Configuration Guide and the
chapter “Configuring Large-Scale Dial-Out” in the Cisco IOS Dial Services Configuration Guide:
Network Services.
Command Purpose
Router(config)# chat-script script-name expect-send Provides commands to dial a modem and commands to log on
to remote systems when using DDR.
See the section “Chat Script Example” for an example of a chat script that works with a dial-out-profile.
Command Purpose
Router# clear dialer sessions Removes all dialer sessions and disconnects links.
Router# debug aaa authorization Displays configuration information and information about
AAA/TACACS+ authorization.
Router# show dialer sessions Displays all dialer sessions.
Configuration Examples
This section provides the following configuration examples:
• Dial-Out Profile Examples
• Chat Script Example
• Verification Example
The following is an example of how to define the same profile for TACACS+:
user = evergreen-out
{
service = outbound {
dial-number = 5551212
addr = 5.1.1.1
send-secret = cisco
modem-script = dialer-script
}
service = ppp protocol = ip {
default attribute = permit
}
}
Verification Example
Once connection is made, you can verify the configuration using the debug aaa authorization
privileged EXEC command:
Router# debug aaa authorization
00:01:07: %LSDialout: temporary debug to verify the data integrity
00:01:07: dial number = 5551212
00:01:07: dialnum_count = 1
00:01:07: force_56 = 0
00:01:07: routing = 0
00:01:07: data_svc = -1
00:01:07: port_type = -1
00:01:07: map_class =
00:01:07: modem_script = dialer-script
00:01:07: system_script =
00:01:07: ip_address = 5.1.1.1
00:01:07: send_secret = cisco
00:01:07: send_auth = -1
00:01:07: send_name =
00:01:07: class =
Command Reference
This feature uses no new or modified commands. To see the command pages for the commands used with
this feature, go to the Cisco IOS Master Commands List, Release 12.4, at http://www.cisco.com/
univercd/cc/td/doc/product/software/ios124/124mindx/124index.htm.
Appendix
The following new Cisco AV pairs and TACACS+ attributes are added to the large-scale dial outbound
service attributes:
TACACS+ Support:
service = outbound {
modem-script = VALUE
}
Value:
Modem script name that you assign.
TACACS+ Support:
service = outbound {
system-script = VALUE
}
Value:
System script name that you assign.
Glossary
AAA—authentication, authorization, and accounting. Suite of network security services that provide the
primary framework through which access control can be set up on your Cisco router or access server.
attributes—Data items sent between a network access server and a daemon that are used to direct AAA
activities.
authentication, authorization, and accounting—See AAA.
chat script—Strings of text used to send commands for modem dialing, logging in to remote systems,
and initializing asynchronous devices connected to an asynchronous line.
dial-out profile—Attributes that define specific AAA elements in a user profile. Large-scale dial-out
supports a subset of Ascend AV pairs, RADIUS attributes, and a map class attribute providing outbound
dialing services.
The Peer Pool Backup feature provides control over selection of IP address pools in large-scale dial-out
networks where authentication, authorization, and accounting (AAA) servers and network access servers
(NASs) are controlled by different groups. This feature allows you to define alternate sources for IP
address pools in the event the original address pool is not present or is exhausted.
Finding Support Information for Platforms and Cisco IOS Software Images
Use Cisco Feature Navigator to find information about platform support and Cisco IOS software image
support. Access Cisco Feature Navigator at http://www.cisco.com/go/fn. You must have an account on
Cisco.com. If you do not have an account or have forgotten your username or password, click Cancel at
the login dialog box and follow the instructions that appear.
Contents
• Prerequisites for Peer Pool Backup, page 1113
• Information About Peer Pool Backup, page 1114
• How to Configure Peer Pool Backup, page 1115
• Configuration Examples for Peer Pool Backup, page 1119
• Additional References, page 1122
• Command Reference, page 1123
Configuring IP Pools
Perform the following task to create one or more local IP address pools and directs the pool software to
use the local pool name that is configured with the peer default ip address pool interface configuration
command, to supplement the pool names supplied by AAA.
SUMMARY STEPS
1. enable
2. configure terminal
3. interface type number
4. peer pool backup
5. peer default ip address pool pool-name-list
6. exit
7. ip local pool {named-address-pool | default} {first-IP-address [last-IP-address]} [group
group-name] [cache-size size]
8. exit
DETAILED STEPS
Example:
Router# configure terminal
Step 3 interface type number Specifies the interface and enters interface configuration
mode.
Example:
Router(config)# interface serial 1:23
Example:
Router(config)# ip local pool pool3 10.4.4.2
Step 8 exit Exits configuration mode.
Example:
Router(config)# exit
This task configures basic IP address pooling and pool backup. See the “Configuration Examples for
Peer Pool Backup” section on page 1119 for additional configuration information.
SUMMARY STEPS
1. enable
2. configure terminal
3. interface type number
4. peer pool static
5. exit
DETAILED STEPS
Example:
Router# configure terminal
Step 3 Router(config)# interface type number Specifies the interface and enters interface configuration
mode.
Example:
Router(config)# interface Virtual-Template 1
Step 4 Router(config-if)# peer pool static Suppresses an attempt to load all dynamic pools from the
AAA server.
Example:
Router(config-if)# peer pool static
Step 5 Router(config-if)# exit Exits interface configuration mode.
Example:
Router(config-if)# exit
See the “Configuration Examples for Peer Pool Backup” section on page 1119 for additional
configuration information.
SUMMARY STEPS
1. enable
2. debug ip peer
DETAILED STEPS
Step 1 enable
Use this command to enter privileged EXEC mode. Enter your password if prompted.
Router> enable
In the following example, a pool named poolA is added to the peer default ip address pool command
list, so that now poolA will be used by the pool software and the search order will be poolA, pool1, and
then pool2. The pool named poolA is used first because AAA-supplied data is always given precedence
over local data.
interface serial 1:23
ip address 10.4.4.1 255.255.255.0
encapsulation ppp
ppp authentication chap
dialer-group 1
peer pool backup
peer match aaa-pools
peer default ip address pool poolA pool1 pool2
isdn switch-type primary-5ess
The debug ip peer command would show the following messages for these configurations (comments
are in <angle brackets> and use bold text to indicate commands involved in the reports.):
*Jan1 02:08:23.919: Se0:22 AAA/AUTHOR/IPCP: Says use pool poolA
*Jan1 02:08:23.919: Se0:22: IPPOOL: using pool poolA
*Jan1 02:08:23.919: Se0:22: AAA pools to match: poolA
*Jan1 02:08:23.919: Se0:22: Configured pools: pool1 pool2
*Jan1 02:08:23.919: Se0:22: Matched AAA pools :
< The peer match aaa-pools command was specified, but pool named poolA was>
< not in the configured pool list, so the pool name provided by AAA is discarded >
*Jan1 02:08:23.919: Se0:22: Use AAA pools:
*Jan1 02:08:23.919: Se0:22: Backup pools : pool1 pool2
*Jan1 02:08:23.919: Se0:22: Pools to search : pool1 pool2
*Jan1 02:08:23.919: Se0:22 AAA/AUTHOR/CONFIG: Pools refreshed for pool pool1
*Jan1 02:08:23.919: Se0:22 AAA/AUTHOR/CONFIG: Pools refreshed for pool pool1
*Jan1 02:08:23.919: AAA/AUTHOR (0x3): Pick method list 'default'
.
.
.
*Jan1 02:08:23.967: Se0:22 AAA/AUTHOR/CONFIG: Set pool timeout to 2 mins
*Jan1 02:08:23.967: Se0:22 AAA/AUTHOR/CONFIG: Pools will timeout in 2 mins
*Jan1 02:08:23.967: Se0:22: Pool pool2 returned address = 10.2.2.2
*Jan1 02:08:23.967: Se0:22 AAA/AUTHOR/IPCP: Pool returned 10.2.2.2
Additional References
The following sections provide references related to the Peer Pool Backup feature.
Related Documents
Related Topics Document Title
IP address pooling Cisco IOS Dial Technologies Configuration Guide; refer to the
section “Configuring IP Address Pooling” in the chapter
“Configuring Media-Independent PPP and Multilink PPP”
Standards
Standards Title
None —
MIBs
MIBs MIBs Link
None To locate and download MIBs for selected platforms, Cisco IOS
releases, and feature sets, use Cisco MIB Locator found at the
following URL:
http://www.cisco.com/go/mibs
RFCs
RFCs Title
None —
Technical Assistance
Description Link
Technical Assistance Center (TAC) home page, http://www.cisco.com/public/support/tac/home.shtml
containing 30,000 pages of searchable technical
content, including links to products, technologies,
solutions, technical tips, and tools. Registered
Cisco.com users can log in from this page to access
even more content.
Command Reference
The following new commands are pertinent to this feature. To see the command pages for these
commands and other commands used with this feature, go to the Cisco IOS Master Commands List,
Release 12.4, at http://www.cisco.com/univercd/cc/td/doc/product/software/ios124/124mindx/
124index.htm.
• peer pool backup
• peer pool static
This chapter describes per-user configuration, a large-scale dial solution. It includes the following main
sections:
• Per-User Configuration Overview
• How to Configure a AAA Server for Per-User Configuration
• Monitoring and Debugging Per-User Configuration Settings
• Configuration Examples for Per-User Configuration
This set of features is supported on all platforms that support Multilink PPP (MLP).
A virtual access interface created dynamically for any user dial-in session is deleted when the session
ends. The resources used during the session are returned for other dial-in uses.
When a specific user dials in to a router, the use of a per-user configuration from an authentication,
authorization, and accounting (AAA) server requires that AAA is configured on the router and that a
configuration for that user exists on the AAA server.
To identify the hardware platform or software image information associated with a feature, use the
Feature Navigator on Cisco.com to search for information about the feature or refer to the software
release notes for a specific release. For more information, see the “Finding Additional Feature Support
Information” section on page lxxvii in the “Using Cisco IOS Software for Release 12.4” chapter.
For a complete description of the commands mentioned in this chapter, refer to the Cisco IOS Dial
Technologies Command Reference, Release 12.2 and the Cisco IOS Security Command Reference,
Release 12.2. To locate documentation of other commands that appear in this chapter, use the command
reference master index or search online.
• Virtual profiles, which can use either or both of the two sources of information listed in the previous
bullets for virtual interface configuration. When a user dials in, virtual profiles can apply the generic
interface configuration and then apply the per-user configuration to create a unique virtual access
interface for that user. This configuration is described in the chapter “Configuring Virtual Profiles”
in this publication.
The per-user configuration feature provides these benefits:
• Maintenance ease for service providers with a large number of access servers and a very large
number of dial-in users. Service providers need not update all their routers and access servers when
user-specific information changes; instead, they can update one AAA server.
• Scalability. By separating generic virtual interface configuration on the router from the
configuration for each individual, Internet service providers and other enterprises with large
numbers of dial-in users can provide a uniquely configured interface for each individual user. In
addition, by separating the generic virtual interface configuration from the physical interfaces on the
router, the number and types of physical interfaces on the router or access server are not intrinsic
barriers to growth.
Note TACACS servers treat authentication and authorization as two phases; RADIUS servers combine
authentication and authorization into a single step. For more detailed information, refer to your server
documentation.
2. Authorization
request
AAA server
3. Approval response
1. ISDN user Network access packet contains
dials in server or router AV pairs
S5870
server or router
caches the AV pairs
Note The use of virtual profiles can modify the process that occurs between the user dial-in and the use of
AAA configuration information. For more information, see the chapter “Configuring Virtual Profiles”
in this publication.
where nas-name is the configured name of the network access server. In response, the AAA server
downloads the configuration of the required pool.
This pool username can be changed using Cisco IOS configuration, for example:
aaa configuration config-name nas1-pools-definition.cisco.us
This command has the effect of changing the username that is used to download the pool definitions from
the default name “pools-nas-name” to “nas1-pools-definition.cisco.com.”
On a TACACS+ server, the entries for an IP address pool and a user of the pool might be as follows:
user = nas1-pools {
service = ppp protocol = ip {
pool-def#1 = "aaa 10.0.0.1 10.0.0.3"
pool-def#2 = "bbb 10.1.0.1 10.1.0.10"
pool-def#3 = "ccc 10.2.0.1 10.2.0.20"
pool-timeout=60
}
}
user = georgia {
login = cleartext lab
service = ppp protocol = ip {
addr-pool=bbb
}
}
On a RADIUS server, the entries for the same IP address pool and user would be as follows:
nas1-pools Password = “cisco” User-Service-Type=Outbound-User
cisco-avpair = "ip:pool-def#1=aaa 10.0.0.1 10.0.0.3",
cisco-avpair = "ip:pool-def#2=bbb 10.1.0.1 10.1.0.10",
cisco-avpair = "ip:pool-def#3=ccc 10.2.0.1 10.2.0.20",
cisco-avpair = "ip:pool-timeout=60”
Note This entry specifies a User-Service-Type of Outbound-User. This attribute is supplied by the network
access server to prevent ordinary logins from using the well-known username and password combination
of nas1-pools/cisco.
Pools downloaded to a Cisco network access server are not retained in nonvolatile memory and
automatically disappear whenever the access server or router restarts. Downloaded pools can also be
made to time out automatically by adding a suitable AV pair. For more information, see the section
“Supported Attrubutes for AV Pairs” and the pool-timeout attribute in Table 58. Downloaded pools are
marked as dynamic in the output of the show ip local pool command.
Attribute Meaning
inacl# An input access list definition. For IP, standard or extended access list syntax can
be used, although you cannot mix them within a single list. For Internet Protocol
Exchange (IPX), only extended syntax is recognized. The value of this attribute
is the text that comprises the body of a named access list definition.
outacl#1 An output access list definition. For IP, standard or extended access list syntax
can be used. For IPX, only extended syntax is recognized. The value of this
attribute is the text that comprises the body of a named access list definition.
rte-fltr-in# An input route filter. For IP, standard or extended access list syntax can be used,
although you cannot mix them within a single list. For IPX, only extended syntax
is recognized. The first line of this filter must specify a routing process.
Subsequent lines comprise the body of a named access list.
rte-fltr-out# An output route filter. For IP, standard or extended access list syntax can be used,
although you cannot mix them within a single list. For IPX, only extended syntax
is recognized. The first line of this filter must specify a routing process.
Subsequent lines comprise the body of a named access list.
route#2 Static routes, for IP and IPX.
The value is text of the form destination-address mask [gateway].
sap# IPX static Service Advertising Protocol (SAP). The value is text from the body
of an ipx sap configuration command.
sap-fltr-in# IPX input SAP filter. Only extended access list syntax is recognized. The value
is text from the body of an extended IPX access-list configuration command.
(The Novell socket number for SAP filtering is 452.)
sap-fltr-out# IPX output SAP filter. Only extended access-list command syntax is recognized.
The value is text from the body of an extended IPX access-list configuration
command.
pool-def# An IP pool definition. The value is text from the body of an ip local pool
configuration command.
pool-timeout An IP pool definition. The body is an integer representing a timeout, in minutes.
1. The “outacl” attribute still exists and retains its old meaning.
2. The “route” attribute, without a trailing #, is still recognized for backward compatibility with the TACACS+ protocol
specification, but if multiple static routes are required in TACACS+, full “route#” names will need to be employed.
IPX:
inacl#1="deny 3C01.0000.0000.0001"
inacl#2="deny 4C01.0000.0000.0002"
outacl# outacl#2="permit ip any any precedence immediate"
outacl#3="deny igrp 10.0.9.10 255.255.0.0 any"
rte-fltr-in# IP:
rte-fltr-in#1="router igrp 60"
rte-fltr-in#3="permit 10.0.3.4 255.255.0.0"
rte-fltr-in#4="deny any"
IPX:
rte-fltr-in#1="deny 3C01.0000.0000.0001"
rte-fltr-in#2="deny 4C01.0000.0000.0002"
rte-fltr-out# rte-fltr-out#1="router igrp 60"
rte-fltr-out#3="permit 10.0.5.6 255.255.0.0"
rte-fltr-out#4="permit any"
route# IP:
route#1="10.0.0.0 255.0.0.0 1.2.3.4"
route#2="10.1.0.0 255.0.0.0"
IPX:
route#1="4C000000 ff000000 10.12.3.4"
route#2="5C000000 ff000000 10.12.3.5"
sap# sap#1="4 CE1-LAB 1234.0000.0000.0001 451 4"
sap#2="5 CE3-LAB 2345.0000.0000.0001 452 5"
sap-fltr-in# sap-fltr-in#1="deny 6C01.0000.0000.0001"
sap-fltr-in#2="permit -1"
sap-fltr-out# sap-fltr-out#1="deny 6C01.0000.0000.0001"
sap-fltr-out#2="permit -1"
pool-def# pool-def#1 = "aaa 10.0.0.1 1.0.0.3"
pool-def#2 = "bbb 10.1.0.1 2.0.0.10"
pool-def#3 = "ccc 10.2.0.1 3.0.0.20"
pool-timeout pool-timeout=60
IPX:
cisco-avpair = "ipx:rte-fltr-in=deny 3C01.0000.0000.0001",
rte-fltr-out# cisco-avpair = "ip:rte-fltr-out#1=router igrp 60",
cisco-avpair = "ip:rte-fltr-out#3=permit 10.0.5.6 255.255.0.0",
cisco-avpair = "ip:rte-fltr-out#4=permit any",
route# IP:
cisco-avpair = "ip:route=3.10.0.0 255.0.0.0 1.2.3.4",
cisco-avpair = "ip:route=4.10.0.0 255.0.0.0",
IPX:
cisco-avpair = "ipx:route=4C000000 ff000000 10.12.3.4",
cisco-avpair = "ipx:route=5C000000 ff000000 10.12.3.5"
sap# cisco-avpair = "ipx:sap=4 CE1-LAB 1234.0000.0000.0001 451 4",
cisco-avpair = "ipx:sap=5 CE3-LAB 2345.0000.0000.0001 452 5",
sap-fltr-in# cisco-avpair = "ipx:sap-fltr-in=deny 6C01.0000.0000.0001",
cisco-avpair = "ipx:sap-fltr-in=permit -1"
sap-fltr-out# cisco-avpair = "ipx:sap-fltr-out=deny 6C01.0000.0000.0001",
cisco-avpair = "ipx:sap-fltr-out=permit -1"
pool-def# cisco-avpair = "ip:pool-def#1=aaa 10.0.0.1 1.0.0.3",
cisco-avpair = "ip:pool-def#2=bbb 10.1.0.1 2.0.0.10",
cisco-avpair = "ip:pool-def#3=ccc 10.2.0.1 3.0.0.20",
pool-timeout cisco-avpair = "ip:pool-timeout=60"
1. This attribute is specific to RADIUS servers. It can be used to add Cisco IOS interface configuration commands to specific
user configuration information.
The freeware TACACS user entry form is also shown by the following examples for specific users:
user= Router1
Password= cleartext welcome
Service= PPP protocol= ip {
ip:route=10.0.0.0 255.0.0.0
ip:route=10.1.0.0 255.0.0.0
ip:route=10.2.0.0 255.0.0.0
ip:inacl#5=deny 10.5.0.1
}
user= Router2
Password= cleartext lab
Service= PPP protocol= ip {
ip:addr-pool=bbb
}
For more requirements and detailed information, refer to your AAA server documentation.
}
user = joe { # joe uses the group password.
member = "staff"
}
user = pete { # pete has his own password.
member = "staff"
password = des "alkd9Ujiqp2y"
}
user = anita {
# Use the "default" user password mechanism defined above.
service = shell {
cmd = telnet { # Allow Telnet to any destination
}
}
}
For more information about the requirements and details of configuring the CiscoSecure server, see the
CiscoSecure UNIX Server User Guide.
Note All these AV pairs are vendor specific. To use them, RADIUS servers must support the use of
vendor-specific AV pairs. Patches for some servers are available from the Cisco Consulting Engineering
(CE) customer-support organization.
The structure of an AV pair for Cisco platforms starts with cisco-avpair followed by a space, an equal
sign, and another space. The rest of the line is within double quotation marks and, for all lines but the
last, ends with a comma. Inside the double quotation marks is a phrase indicating the supported attribute,
another equal sign, and a Cisco IOS command. The following examples show two different partial user
configurations on a RADIUS server.
Router1
Password = "welcome"
User-Service-Type = Framed-User,
Framed-Protocol = PPP,
cisco-avpair = “ip:route=10.0.0.0 255.0.0.0”,
cisco-avpair = “ip:route=10.1.0.0 255.0.0.0”,
cisco-avpair = “ip:route=10.2.0.0 255.0.0.0”,
cisco-avpair = “ip:inacl#5=deny 10.5.0.1”
Router2
Password = "lab"
User-Service-Type = Framed-User,
Framed-Protocol = PPP,
cisco-avpair = "ip:addr-pool=bbb"
IP Access Lists and Static Routes Using Virtual Profiles over ISDN BRI
The following example provides configurations for the TACACS+ freeware daemon, the network access
server, and the peer router named Router1. On the TACACS+ AAA server, peer router Router1 has a
configuration that includes static routes and IP access lists.
interface Virtual-Template1
ip unnumbered Ethernet0
no cdp enable
!
!
interface BRI0
ip unnumbered Ethernet0
no ip mroute-cache
encapsulation ppp
no ip route-cache
dialer idle-timeout 300
dialer map ip 10.5.0.1 name Router1 broadcast 61482
dialer-group 1
no fair-queue
ppp authentication chap
!
!
ip default-gateway 172.21.114.129
no ip classless
ip route 0.0.0.0 0.0.0.0 172.21.114.129
!
virtual-profile virtual-template 1
dialer-list 1 protocol ip permit
tacacs-server host 172.21.114.130
tacacs-server key tac123
IPX Per-User SAP Filters Using IPXWAN and Virtual Profiles by a Synchronous Interface
The following example provides configurations for the TACACS+ daemon and the peer router named
Router1. On the TACACS+ AAA server, user ny has a configuration that includes inbound and outbound
SAP filters.
ip name-server 172.19.2.132
ipx routing 0000.0c47.12d3
ipx internal-network 40
!
interface Ethernet0
ip address 172.21.114.133 255.255.255.224
!
interface Virtual-Template1
no ip address
ipx ipxwan 0 unnumbered nas-Router2
no cdp enable
!
interface Serial1
ip unnumbered Ethernet0
encapsulation ppp
ipx ipxwan 0 unnumbered nas-Router2
ppp authentication chap
!
ipx sap 333 DEEP9 40.0000.0000.0001 999 10
!
virtual-profile virtual-template 1
tacacs-server host 172.21.114.130
tacacs-server key tac123
RADIUS Examples
This section provides the RADIUS versions of the following examples:
• IP Access Lists and Static Routes Using Virtual Profiles over ISDN BRI
• IPX Per-User SAP Filters Using IPXWAN and Virtual Profiles by a Synchronous Interface
IP Access Lists and Static Routes Using Virtual Profiles over ISDN BRI
The following example shows a remote peer (Router1) configured to dial in to a BRI on a Cisco network
access server (Router2), which requests user configuration information from an AAA server (radiusd):
!
username Router1 password 7 15050E0007252621
ip host Router2 172.21.114.132
ip domain-name cisco.com
ip name-server 172.19.2.132
ip name-server 192.168.30.32
isdn switch-type basic-5ess
interface Ethernet0
ip address 172.21.114.132 255.255.255.224
no ip mroute-cache
media-type 10BaseT
!
interface Virtual-Template1
ip unnumbered Ethernet0
no cdp enable
!
interface BRI0
ip unnumbered Ethernet0
no ip mroute-cache
encapsulation ppp
no ip route-cache
dialer idle-timeout 300
dialer map ip 10.5.0.1 name Router1 broadcast 61482
dialer-group 1
no fair-queue
ppp authentication chap
!
ip default-gateway 172.21.114.129
no ip classless
ip route 0.0.0.0 0.0.0.0 172.21.114.129
!
virtual-profile vtemplate 1
dialer-list 1 protocol ip permit
radius-server host 172.21.114.130
radius-server key rad123
!
ip default-gateway 172.21.114.129
no ip classless
ip route 172.21.0.0 255.255.0.0 BRI0
dialer-list 1 protocol ip permit
!
line con 0
exec-timeout 0 0
line vty 0 4
password lab
login
!
end
General OS:
AAA Authorization debugging is on
PPP:
PPP authentication debugging is on
Multilink activity debugging is on
ISDN:
ISDN events debugging is on
Dial on demand:
Dial on demand events debugging is on
VTEMPLATE:
Virtual Template debugging is on
IP packet debugging is on
Router2#
*Apr 4 08:30:42: IP: s=172.21.114.129 (Ethernet0), d=255.255.255.255, len 186, rcvd 2
*Apr 4 08:30:42: IP: s=10.0.0.1 (Virtual-Access1), d=172.21.114.132, len 104, a*Apr 4
08:30:42: IP: s=10.0.0.1 (Virtual-Access1), d=172.21.114.132, len 104, access denied
*Apr 4 08:30:42: IP: s=172.21.114.132 (local), d=10.0.0.1 (Virtual-Access1), len 4,
sending
*Apr 4 08:30:42: IP: s=10.0.0.1 (Virtual-Access1), d=172.21.114.132, len 104, access
denied
*Apr 4 08:30:44: IP: s=10.0.0.1 (Virtual-Access1), d=172.21.114.132, len 104, access
denied
*Apr 4 08:30:44: IP: s=172.21.114.132 (local), d=10.0.0.1 (Virtual-Access1), len 16,
sending
*Apr 4 08:30:44: IP: s=10.0.0.1 (Virtual-Access1), d=172.21.114.132, len 104, access
denied
IPX Per-User SAP Filters Using IPXWAN and Virtual Profiles by a Synchronous Interface
The following examples show a remote peer (Router1) configured to dial in to a synchronous interface
on a Cisco network access server (Router2), which requests user configuration information from an AAA
server (radiusd):
interface Serial1
no ip address
encapsulation ppp
ipx ipxwan 0 unnumbered peer-Router1
clockrate 4000000
!
ipx sap 444 ZEON-4 30.0000.0000.0001 444 10
ipx sap 555 ZEON-5 30.0000.0000.0001 555 10
ipx sap 666 ZEON-6 30.0000.0000.0001 666 10
!
...
version 12.1
service timestamps debug uptime
!
hostname Router2
!
aaa new-model
aaa authentication ppp default radius
aaa authorization network radius
enable password lab
!
username Router1 password 7 044C0E0A0C2E414B
ip host Router2 172.21.114.133
ip name-server 172.22.30.32
ip name-server 192.168.2.132
ipx routing 0000.0c47.12d3
ipx internal-network 40
!
interface Ethernet0
ip address 172.21.114.133 255.255.255.224
!
interface Virtual-Template1
no ip address
ipx ipxwan 0 unnumbered nas-Router2
no cdp enable
!
interface Serial1
ip unnumbered Ethernet0
encapsulation ppp
ipx ipxwan 0 unnumbered nas-Router2
ppp authentication chap
!
ipx sap 333 DEEP9 40.0000.0000.0001 999 10
!
virtual-profile vtemplate 1
radius-server host 172.21.114.130
radius-server key rad123
This chapter describes the Cisco Resource Pool Management (RPM) feature. It includes the following
main sections:
• RPM Overview
• How to Configure RPM
• Verifying RPM Components
• Troubleshooting RPM
• Configuration Examples for RPM
To identify the hardware platform or software image information associated with a feature, use the
Feature Navigator on Cisco.com to search for information about the feature, or refer to the software
release notes for a specific release. For more information, see the “Finding Additional Feature Support
Information” section on page lxxvii in the “Using Cisco IOS Software for Release 12.4” chapter.
For a complete description of the commands mentioned in this chapter, refer to the Cisco IOS Dial
Technologies Command Reference, Release 12.2. To locate documentation of other commands that
appear in this chapter, use the command reference master index or search online.
RPM Overview
Cisco RPM enables telephone companies and Internet service providers (ISPs) to share dial resources
for wholesale and retail dial network services. With RPM, telcos and ISPs can count, control, and
manage dial resources and provide accounting for shared resources when implementing different
service-level agreements.
You can configure RPM in a single, standalone Cisco network access server (NAS) by using RPM or,
optionally, across multiple NAS stacks by using one or more external Cisco Resource Pool Manager
Servers (RPMS).
Cisco RPM gives data network service providers the capability to do the following:
• Have the flexibility to include local retail dial services in the same NAS with the wholesale dial
customers.
• Manage customer use of shared resources such as modems or High-Level Data Link Control
(HDLC) controllers for data calls.
• Offer advanced wholesale dialup services using a Virtual Private Dialup Network (VPDN) to
enterprise accounts and ISPs.
• Deploy Data over Voice Bearer Service (DoVBS).
• Manage call sessions by differentiating dial customers through customer profiles. The customer
profile determines where resources are allocated and is based on the incoming Dialed Number
Information Service (DNIS) number or Calling Line Identification (CLID).
• Efficiently use resource groups such as modems to offer differing over subscription rates and dial
service-level agreements.
Note Ear and Mouth Feature Group B (E&M-FGB) is the only signaling type supported for channel-associated
signaling (CAS) on T1 and T3 facilities; R2 is supported for E1 facilities. FG D is not supported. Cisco
IOS software collects DNIS digits for the signaling types FGB, PRI, and SS7 and only E&M-FGB and
R2 CAS customer profiles are supported. For all other CAS signaling types, use the default DNIS group
customer profiles.
Note These components of Cisco RPM are enabled after the NAS and other equipment has been initially set
up, configured, and verified for proper operation of the dial, PPP, VPDN, and authentication,
authorization, and accounting (AAA) segments. Refer to the Cisco IOS documentation for these other
segments for installation, configuration, and troubleshooting information before attempting to use RPM.
Configured DNIS groups and resource data can be associated to customer profiles. These customer
profiles are selected by the incoming call DNIS number and call type and then used to identify resource
allocations based on the associated resource groups and defined resource services.
After the call is answered, customer profiles can also be associated with VPDN groups so the configured
VPDN sessions and other data necessary to set up or reject a VPDN session are applied to the answered
calls. VPDN group data includes associated domain name or DNIS, IP addresses of endpoints, maximum
sessions per endpoint, maximum Multilink PPP (MLP) bundles per VPDN group, maximum links per
MLP bundle, and other tunnel information.
Customer Profiles
A customer profile defines how and when to answer a call. Customer profiles include the following
components (see Figure 103):
• Customer profile name and description—Name and description of the customer.
• Session limits—Maximum number of standard sessions.
• Overflow limits—Maximum number of overflow sessions.
• DNIS groups.
• CLID.
• Resource groups.
• Resource services.
• VPDN groups and VPDN profiles.
• Call treatment—Determines how calls that exceed the session and overflow limits are treated.
Accept call
Incoming Outgoing
call management session management
The incoming side of the customer profile determines if the call will be answered using parameters such
as DNIS and call type from the assigned DNIS group and session limits. The call is then assigned the
appropriate resource within the resource group defined in the customer profile. Each configured
customer profile includes a maximum allowed session value and an overflow value. As sessions are
started and ended, session counters are incremented and decremented so customer status is kept current.
This information is used to monitor the customer resource limit and determine the appropriate call
treatment based on the configured session limits.
The outgoing side of the customer profile directs the answered call to the appropriate destination:
• To a local AAA server of retail dial applications and Internet/intranet access.
• To a tunnel that is established between the NAS or L2TP Access Concentrator (LAC) to a wholesale
VPDN home gateway of a dial customer, or L2TP Network Server (LNS) using Layer 2 Forwarding
Protocol (L2F) or Layer 2 Tunneling Protocol (L2TP) technology.
Default customer profiles are identical to standard customer profiles, except that they do not have any
associated DNIS groups. Default customer profiles are created using the reserved keyword default for
the DNIS group.
Default customer profiles are used to provide session counting and resource assignment to incoming
calls that do not match any of the configured DNIS groups. Although specific resources and DNIS
groups can be assigned to customer profiles, default customer profiles allow resource pooling for the
calls that do not match the configured DNIS groups or where the DNIS is not provided. Retail dial
services and domain-based VPDN use default customer profiles.
When multiple default customer profiles are used, the call type (speech, digital, V.110, or V.120) of the
default DNIS group is used to identify which default customer profile to use for an incoming call. At
most, four default profiles (one for each call type) can be configured.
Note If default customer profiles are not defined, then calls that do not match a DNIS group in a customer
profile are rejected with a “no answer” or “busy” call treatment sent to the switch.
Backup customer profiles are customer profiles configured locally on the Cisco NAS and are used to
answer calls based on a configured allocation scheme when the link between the Cisco NAS and Cisco
RPMS is disabled. See the section “Configuring Customer Profiles Using Backup Customer Profiles”
for more information about configuring backup customer profiles.
With RPM, users can also implement wholesale dial services without using VPDN tunnels to complete
dial-in calls to destinations of the end customer. This capability is accomplished with components of the
AAA groups and the PPP configurations.
The AAA group provides IP addresses of AAA servers for authentication and accounting. The PPP
configurations allow users to configure the Cisco IOS PPP feature set on each customer profile. In this
current implementation, PPP configuration is based on the following:
• Applicable IP address pool(s) or default local list of IP addresses
• Primary and secondary Domain Name System (DNS) or Windows Internet naming service (WINS)
• Number of links allowed for each call using MLP
Note The AAA and PPP integration applies to a single NAS environment.
To add PPP configurations to a customer profile, you must create a customer profile template. Once you
create the template and associate it with a customer profile using the source template command, it is
integrated into the customer profile.
The RPM customer profile template for the PPP command set, when used with the Cisco IOS feature,
Server Groups Selected by DNIS, presents a strong single NAS solution for providers of wholesale dial
services, as follows:
• Call acceptance is determined by the RPM before call answering, using the configured size limits
and resource availability.
• The answered call then uses the PPP configuration defined in the template to initiate authentication,
obtain an IP address, and select a DNS or WINS that is located at the customer site.
• The same DNIS that was used to choose the customer profile selects the servers for
authentication/authorization and accounting that are located at the wholesale customer’s site.
The section “Configuring a Customer Profile Template” later in this chapter describes how to create a
customer profile template so that you can configure the Cisco IOS PPP features on a customer profile,
but this section does not list the existing PPP command set. For information about the PPP command set,
refer to the Cisco IOS Dial Technologies Command Reference.
DNIS Groups
A DNIS group is a configured list of DNIS called party numbers that correspond to the numbers dialed
to access particular customers, service offerings, or both. For example, if a customer from phone number
000-1234 calls a number 000-5678, the DNIS provides information on the number dialed—000-5678.
Cisco RPM checks the DNIS number of inbound calls against the configured DNIS groups, as follows:
• If Cisco RPM finds a match, it uses the configured information in the customer profile to which the
DNIS group is assigned.
• If Cisco RPM does not find a match, it uses the configured information in the customer profile to
which the default DNIS group is assigned.
• The DNIS/call type sequence can be associated only with one customer profile.
CLID Groups
A CLID group is a configured list of CLID calling party numbers. The CLID group specifies a list of
numbers to reject if the group is associated with a call discriminator. For example, if a customer from
phone number 000-1234 calls a number 000-5678, the CLID provides information on the calling party
number—000-1234.
A CLID can be associated with only one CLID group.
Call Types
Call types from calls originating from ISDN, SS7, and CAS (CT1, CT3, and CE1) are used to assign
calls to the appropriate resource. Call types for ISDN and SS7 are based on Q.931 bearer capability. Call
types for CAS are assigned based on static channel configuration.
Supported call types are as follows:
• Speech
• Digital
• V.110
• V.120
Note Voice over IP, fax over IP, and dial-out calls are not supported in RPM.
Resource Groups
Cisco RPM enables you to maximize the use of available shared resources within a Cisco NAS for
various resource allocation schemes to support service-level agreements. Cisco RPM allows you to
combine your Cisco NAS resource groups with call types (speech, digital, V.110, and V.120) and
optional resource modem services. Resource groups and services are configured for customer profiles
and assigned to incoming calls through DNIS groups and call types.
Resource groups have the following characteristics:
• Are configured on the Cisco NAS and applied to a customer profile.
• Represent groupings of similar hardware or firmware that are static and do not change on a per-call
basis.
• Can define resources that are port-based or not port-based:
– Port-based resources are identified by physical location, such as a range of port/slot numbers
(for example, modems or terminal adapters).
– Non-port-based resources are identified by a single size parameter (for example, HDLC framers
or V.120 terminal adapters—V.120 terminal adapters are currently implemented as part of Cisco
IOS software).
Resource assignments contain combinations of Cisco NAS resource groups, optional resource modem
services, and call types. The NAS resources in resource groups that have not been assigned to a customer
profile will not be used.
Note To support ISDN DoVBS, use a DNIS group and a configured customer profile to direct the speech call
to the appropriate digital resource. The resource group assigned to this customer profile will be “digital
resources” and also have a call type of “speech,” so the call will terminate on an HDLC controller rather
than a modem.
Resource Services
A resource service contains a finite series of resource command strings that can be used to help
dynamically configure an incoming connection. Services supported by a resource group are determined
by the combination of hardware and firmware installed. Currently, resource service options can be
configured and applied to resource groups. Resource services can be defined to affect minimum and
maximum speed, modulation, error correction, and compression, as shown in Table 62.
VPDN Groups
The VPDN group contains the data required to build a VPDN tunnel from the RPM NAS LAC to the
LNS. In the context of RPM, VPDN is authorized by first associating a customer profile with a VPDN
group, and second by associating the VPDN group to the DNIS group used for that customer profile.
VPDN group data includes the endpoint IP addresses.
Cisco RPM enables you to specify multiple IP endpoints for a VPDN group, as follows:
• If two or more IP endpoints are specified, Cisco RPM uses a load-balancing method to ensure that
traffic is distributed across the IP endpoints.
• For DNIS-based VPDN dial service, VPDN groups are assigned to customer profiles based on the
incoming DNIS number and the configured DNIS groups.
• For domain-based VPDN dial service, VPDN groups are assigned to the customer profile or the
default customer profile with the matching call-type assignment.
• For either DNIS-based or domain-based VPDN dial services, there is a customer profile or default
customer profile for the initial resource allocation and customer session limits.
The VPDN group provides call management by allowing limits to be applied to both the number of MLP
bundles per tunnel and the number of links per MLP bundle. Limits can also restrict the number of
sessions per IP endpoint. If you require more granular control of VPDN counters, use VPDN profiles.
VPDN Profiles
VPDN profiles allow session and overflow limits to be imposed for a particular customer profile. These
limits are unrelated to the limits imposed by the customer profile. A customer profile is associated with
a VPDN profile. A VPDN profile is associated with a VPDN group. VPDN profiles are required only
when these additional counters are required for VPDN usage per customer profile.
Call Treatments
Call treatment determines how calls are handled when certain events require the call to be rejected. For
example, if the session and overflow limits for one of your customers have been exceeded, any additional
calls will receive a busy signal (see Table 63).
5. If resources are available from the resource group defined in the customer profile, the call is
answered. Otherwise, the call is rejected.
6. As sessions start and end, the session counters increase and decrease, so the customer profile call
counters are kept current.
See Figure 104 for a graphical illustration of the RPM call processes.
Resource Limit
group
Incoming
DNIS Call Apply
call Customer Accept
group/ discriminator Base Overflow resource
DNIS/call type profile service call
call type
Virtual Resource
group Range
26421
Physical
After the call is answered and if VPDN is enabled, Cisco RPM checks the customer profile for an
assigned VPDN group or profile. The outgoing session management of the customer profile directs the
answered call to the appropriate destination (see Figure 105), as follows:
• To a local AAA server of retail dial applications and Internet/intranet access.
• To a tunnel that is established between the NAS or LAC and a wholesale VPDN home gateway from
a dial customer or LNS using L2F or L2TP tunneling technology.
Figure 105 Outgoing Call Management: RPM Functional Description for VPDN Profiles and
Groups
26420
= Optional
If a VPDN group is found within the customer profile, the VPDN group data is used to build a VPDN
tunnel, as follows:
• If the VPDN group limits (number of multilink bundles, number of links per bundle) have not been
exceeded, a VPDN tunnel is built.
• If the limits have been reached, the call is disconnected.
If no VPDN profile is assigned to the customer profile and VPDN is enabled, non-RPM VPDN service
is attempted. If the attempt fails, the call is processed as a retail dial service call if local AAA service is
available.
Accounting Data
You can generate accounting data for network dial service usage in NAS AAA attribute format.
You can configure the Cisco NAS to generate AAA accounting records for access to external AAA server
option. The accounting start and stop records in AAA attribute format are sent to the external AAA
server using either RADIUS server hosts or TACACS+ protocols for accounting data storage. Table 64
lists the new fields in the AAA accounting packets.
DNIS groups
dnis123 dnisabc dnisspeech Reserved keyword
identifying default
5267000 527 1299 5274999 DNIS reaching all
5267001 values
Call discriminator
definitions
CD Name DNIS Group Call Types
CD123 dnis123 speech Reject calls to DNIS group dnis123 with speech call type
CDabc dnisabc digital Reject calls to DNIS group dnisabc with digital call type
CDspeech dnisspeech digitalv110v120 Reject calls to DNIS group dnisspeech that are not speech
CDv120 default v120 Reject all calls that are V.120
23734
527499 digitalv110v120 Accept only speech calls to 5274999
default v120 Reject all V.120 calls
Note This implementation does not use Cisco RPM CLID/DNIS Call Discriminator Feature. If you are not
using Cisco RPMS and you have more than one Cisco NAS, you must manually configure each NAS by
using Cisco IOS commands. Resource usage information is not shared between NASes.
AAA
server
Modem
PRI
(Optional)
Terminal CAS
adapter SS7
PSTN Internet/
intranet
Router
Cisco AS5300
(NAS)
18021
Remote user
Figure 108 shows a method of implementing wholesale dial services without using VPDN tunnels by
creating individual customer profiles that consist of AAA groups and PPP configurations. The AAA
groups provide IP addresses of AAA servers for authentication and accounting. The PPP configurations
enable you to set different PPP parameter values on each customer profile. A customer profile typically
includes the following PPP parameters:
• Applicable IP address pools or a default local list of IP addresses
• Primary and secondary DNS or WINS
• Authentication method such as the Password Authentication Protocol (PAP), Challenge Handshake
Authentication Protocol (CHAP), or Microsoft CHAP Version 1 (MS-CHAP)
• Number of links allowed for each call using Multilink PPP
Note The AAA and PPP integration applies to a single NAS environment; the external RPMS solution is not
supported.
Customer A
Optional
local AAA
AAA
DNS
Modem
WAN
Cisco AS5300
Terminal infrastructure
(NAS)
adapter
PSTN
Router DNIS
Customer AAA
profiles DNS
28307
Remote user
Customer B
Call Processing
For call processing, incoming calls are matched to a DNIS group and the customer profile associated
with that DNIS group. If a match is found, the customer profile session and overflow limits are applied
and if available, the required resources are allocated. If a DNIS group is not found, the customer profile
associated with the default DNIS group is used. The call is rejected if a customer profile using the default
DNIS group cannot be found.
After the call is answered and if VPDN is enabled, the Cisco RPM checks the customer profile for an
assigned VPDN group or profile. If a VPDN group is found, Cisco RPM authorizes VPDN by matching
the group domain name or DNIS with the incoming call. If a match is found, VPDN profile session and
overflow limits are applied, and, if the limits are not exceeded, tunnel negotiation begins. If the VPDN
limits are exceeded, the call is disconnected.
If no VPDN profile is assigned to the customer profile and VPDN is enabled, non-RPM VPDN service
will be attempted. If it fails, the call is processed as a retail dial service call if local AAA service is
available.
The session overflow limit determines the allowable number of sessions above the session limit. If the
session overflow limit is greater than zero, overflow sessions are enabled and the maximum number of
allowed sessions is the session limit plus the session overflow limit. While the session overflow limit has
been reached, any new calls are rejected. Table 65 summarizes the effects of session and session
overflow limits.
Enabling overflow sessions is useful for allocating extra sessions for preferred customers at premium
rates. Overflow sessions can also be useful for encouraging customers to adequately forecast bandwidth
usage or for special events when normal session usage is exceeded. For example, if a customer is having
a corporate-wide program and many people are expected to request remote access, you could enable
many overflow sessions and charge a premium rate for the excess bandwidth requirements.
Note An overflow call is a call received while the session limit is exceeded and is in an overflow state. When
a call is identified as an overflow call, the call maintains the overflow status throughout its duration, even
if the number of current sessions returns below the session limit.
Table 65 Effects of Session Limit and Session Overflow Limit Settings Combinations
Note The VDPN session and session overflow limits are independent of the limits set in the customer profiles.
The base VPDN session limit determines the maximum number of nonoverflow sessions supported for
a VPDN profile. When the VPDN session limit is reached, if overflow sessions are not enabled, any new
VPDN calls using the VPDN profile sessions are rejected. If overflow sessions are enabled, new sessions
up to the session overflow limit are processed and marked as overflow for VPDN accounting.
The VPDN session overflow limit determines the number of sessions above the session limit allowed in
the VPDN group. If the session overflow limit is greater than zero, overflow sessions are enabled and
the maximum number of allowed sessions is the session limit plus the session overflow limit. While the
session overflow limit has been reached, any new calls are rejected.
Enabling VPDN overflow sessions is useful for allocating extra sessions for preferred customers at
premium rates. Overflow sessions are also useful for encouraging customers to adequately forecast
bandwidth usage or for special events when normal session usage is exceeded. For example, if a
customer is having a corporate-wide program and many people are expected to request remote access,
you could enable many overflow sessions and charge a premium rate for the extra bandwidth
requirements.
Figure 109 RPM Call-Processing Flowchart for a Standalone Network Access Server
DNIS and
call type Call Yes Reject
discriminator call treatment:
match No answer
No
Default Reject—No CP
Mapped DNIS No No call treatment:
customer profile customer profile
match No answer (default)
exists or busy
Yes
Yes
Has CP
No
reached maximum
connections
Yes
Overflow
configured and No Reject—Session limit
maximum not call treatment busy
exceeded
Yes
Yes
Figure 110 Flowchart for a Standalone Network Access Server with RPM Direct Remote Services
DNIS and
call type Call Yes Reject
discriminator call treatment:
match No answer
No
Reject—No CP
Mapped DNIS No call treatment:
customer profile No answer (default)
exists or busy
Yes
Has CP
No
reached maximum
connections
Yes
Overflow
configured and No Reject—Session limit
maximum not call treatment busy
exceeded
Yes
Yes
Check
Answer call PPP
29584
Template
AAA
server
Cisco RPMS
Customer A
Modem
AAA AAA
proxy server
server
(Optional) Customer B
Modem
Internet/
17243
intranet
Figure 112 Cisco RPM CLID/DNIS Call Discriminator Feature and RMP
RMP protocol
RMP interface
17244
Note RMP must be enabled on all NASes that communicate with the Cisco RPM CLID/DNIS Call
Discriminator Feature.
Note If the AAA server sends back to the NAS a named IP address pool and that name does not exist on the
NAS, the request for service is denied. If the AAA server does not send anything back to the NAS and
there is an IP address pool name configured in the customer profile template, an address from that pool
is used for the session.
• Accomplish initial configuration as described in the appropriate Universal Access Server Software
Configuration Guide. Perform the following tasks as required.
– Set your local AAA
– Define your TACACS+ server for RPM
– Define AAA accounting
– Ensure PPP connectivity
– Ensure VPDN connectivity
Refer to the document Configuring the NAS for Basic Dial Access for more information.
To configure your NAS for RPM, perform the following tasks:
• Enabling RPM (Required)
• Configuring DNIS Groups (As required)
• Creating CLID Groups (As required)
• Configuring Discriminator Profiles (As required)
• Configuring Resource Groups (As required)
• Configuring Service Profiles (As required)
• Configuring Customer Profiles (As required)
• Configuring a Customer Profile Template (As required)
• Placing the Template in the Customer Profile (As required)
• Configuring AAA Server Groups (As required)
• Configuring VPDN Profiles (As required)
• Configuring VPDN Groups (As required)
• Counting VPDN Sessions by Using VPDN Profiles (As required)
• Limiting the Number of MLP Bundles in VPDN Groups (As required)
• Configuring Switched 56 over CT1 and RBS (As required)
See the section “Troubleshooting RPM” later in this chapter for troubleshooting tips. See the section
“Configuration Examples for RPM” at the end of this chapter for examples of how to configure RPM in
your network.
Enabling RPM
To enable RPM, use the following commands beginning in global configuration mode:
Command Purpose
Step 1 Router(config)# resource-pool enable Turns on RPM.
Step 2 Router(config)# resource-pool call treatment Creates a resource group for resource management.
resource channel-not-available
Step 3 Router(config)# resource-pool call treatment Sets up the signal sent back to the telco switch in response
profile no-answer to incoming calls.
Step 4 Router(config) # resource-pool aaa protocol Specifies which protocol to use for resource management.
local
Note If you have an RPMS, you need not define VPDN groups/profiles, customer profiles, or DNIS groups on
the NAS; you need only define resource groups. Configure the remaining items by using the RPMS
system.
Command Purpose
Step 1 Router(config)# dialer dnis group Creates a DNIS group. The name you specify in this step
dnis-group-name must match the name entered when configuring the
customer profile.
Step 2 Router(config-called-group)# call-type cas Statically sets the call-type override for incoming CAS
{digital | speech} calls.
Step 3 Router(config-called-group)# number number Enters DNIS numbers to be used in the customer profile.
(Wildcards can be used.)
For default DNIS service, no DNIS group configuration is required. The following characteristics and
restrictions apply to DNIS group configuration:
• Each DNIS group/call-type combination can apply to only one customer profile.
• You can use up to four default DNIS groups (one for each call type).
• You must statically configure CAS call types.
• You can use x, X or . as wildcards within each DNIS number.
Command Purpose
Step 1 Router(config)# dialer clid group clid-group-name Creates a CLID group, assigns it a name of up to 23
characters, and enters CLID configuration mode.
The CLID group must be the same as the group
specified in the customer profile configuration.
Refer to the Resource Pool Management with
Direct Remote Services document for information
on configuring customer profiles.
Step 2 Router(config-clid-group)# number clid-group-number Enters CLID configuration mode, and adds a CLID
number to the dialer CLID group that is used in the
customer profile. The CLID number can have up to
65 characters. You can use x, X or . as wildcards
within each CLID number. The CLID screening
feature rejects this number if it matches the CLID
of an incoming call.
Command Purpose
Step 1 Router(config)# resource-pool profile discriminator Creates a call discriminator profile and assigns it a
name name of up to 23 characters.
Step 2 Router(config-call-d)# call-type {all | digital | Specifies the type of calls you want to block. The
speech | v110 | v120} NAS will not answer the call-type you specify.
Command Purpose
Step 3 Router(config-call-d)# clid group {clid-group-name | Optional. Associates a CLID group with the
default} discriminator. If you do not specify a
clid-group-name, the default discriminator in the
RM is used. Any CLID number coming in on a call
is in its respective default group unless it is
specifically assigned a clid-group-name.
After a CLID group is associated with a call type in
a discriminator, it cannot be used in any other
discriminator.
Step 4 Router(config-call-d)# dnis group {dnis-group-name | Optional. Associates a DNIS group with the
default} discriminator. If you do not specify a
dnis-group-name, the default discriminator in the
RM is used. Any DNIS number coming in on a call
is in its respective default group unless it is
specifically assigned a dnis-group-name.
After a DNIS group is associated with a call type in
a discriminator, it cannot be used in any other
discriminator.
Step 1 Use the show resource-pool discriminator name command to verify the call discriminator profiles that
you configured.
If you enter the show resource-pool discriminator command without including a call discriminator
name, a list of all current call discriminator profiles appears.
If you enter a call discriminator profile name with the show resource-pool discriminator command, the
number of calls rejected by the selected call discriminator appears.
Router# show resource-pool discriminator
1 calls rejected
Step 2 Use the show dialer command to display general diagnostic information for interfaces configured for
the dialer.
Router# show dialer [interface] type number
Command Purpose
Step 1 Router(config)# resource-pool group resource name Creates a resource group and assign it a name of up to
23 characters.
Step 2 Router(config-resource-group)# range {port Associates a range of modems or other physical
{slot/port slot/port}} | {limit number} resources with this resource group:
• For port-based resources, use the physical locations
of the resources.
• For non-port-based resources, use a single integer
limit. Specify the maximum number of
simultaneous connections supported by the
resource group. Up to 192 connections may be
supported, depending on the hardware
configuration of the access server.
For external Cisco RPMS environments, configure resource groups on the NAS before defining them on
external RPMS servers.
For standalone NAS environments, first configure resource groups before using them in customer
profiles.
Resource groups can apply to multiple customer profiles.
Note You can separate physical resources into groups. However, do not put heterogeneous resources in the
same group. Do not put MICA technologies modems in the same group as Microcom modems. Do not
put modems and HDLC controllers in the same resource group. Do not configure the port and limit
command parameters in the same resource group.
Command Purpose
Step 1 Router(config)# resource-pool profile service name Creates a service profile and assign it a name of up to 23
characters.
Step 2 Router(config-service-profil)# modem min-speed Specifies the desired modem parameter values. The
{speed | any} max-speed {speed | any [modulation range for min-speed and max-speed is 300 to 56000
value]}
bits per second.
Service profiles are used to configure modem service parameters for Nextport and MICA technologies
modems, and support speech, digital, V.110, and V.120 call types. Error-correction and compression are
hidden parameters that may be included in a service profile.
Command Purpose
Step 1 Router(config)# resource-pool profile customer Creates a customer profile.
name
Step 2 Router(config-customer-pro)# dnis group Includes a group of DNIS numbers in the customer profile.
{dnis-group-name | default}
Step 3 Router(config-customer-pro)# limit base-size Specifies the base size usage limit.
{number | all}
Step 4 Router(config-customer-pro)# limit Specifies the oversize size usage limit.
overflow-size {number | all}
Step 5 Router(config-customer-pro)# resource WORD Assigns resources and supported call types to the customer
{digital | speech | v110 | v120} [service WORD] profile.
Customer profiles are used so that service providers can assign different service characteristics to
different customers. Note the following characteristics of customer profiles:
• Multiple resources of the same call type are used sequentially.
• The limits imposed are per customer (DNIS)—not per resource.
• A digital resource with a call type of speech allows for Data over Speech Bearer Service (DoSBS).
Command Purpose
Step 1 Router(config)# resource-pool profile customer Assigns a name to the default customer profile.
name
Step 2 Router(config-customer-pro)# dnis group default Assigns the default DNIS group to the customer profile. This
sets up the customer profile such that it will use the default
DNIS configuration, which is automatically set on the NAS.
The rest of the customer profile is configured as shown in the previous section “Configuring Customer
Profiles.”
The backup customer profile can contain all of the elements defined in a standard customer profile,
including base size or overflow parameters. However, when the connection between the Cisco NAS and
Cisco RPMS is unavailable, session counting and session limits are not applied to incoming calls. Also,
after the connection is reestablished, there is no synchronization of call counters between the Cisco NAS
and Cisco RPMS.
Command Purpose
Step 1 Router(config)# resource-pool profile customer Assigns a name to a customer profile.
name
Step 2 Router(config-customer-pro)# dnis group name Assigns a DNIS group to the customer profile. DNIS
numbers are assigned as shown in the previous section.
Step 3 Router(config)# limit base-size {number | all} Specifies the VPDN base size usage limit.
Step 4 Router(config)# limit overflow-size {number | all} Specifies the VPDN overflow size usage limit.
Step 5 Router(config-customer-pro)# resource name {digital Specifies resource names to use within the customer
| speech | v110 | v120} [service name] profile.
To support ISDN DoVBS, use a DNIS group and a configured customer profile to direct the speech call
to the appropriate digital resource. The DNIS group assigned to the customer profile should have a call
type of speech. The resource group assigned to this customer profile will be digital resources and also
have a call type of speech, so the call will terminate on an HDLC controller rather than a modem.
See the section “Customer Profile Configuration for DoVBS Example” at the end of this chapter for a
configuration example.
To configure a template in RPM, use the following commands beginning in global configuration mode:
Command Purpose
Step 1 Router(config)# template name Creates a customer profile template and assign a unique
name that relates to the customer that will be receiving it.
Note Steps 2, 3, and 4 are optional. Enter multilink, peer,
and ppp commands appropriate to the application
requirements of the customer.
Step 2 Router(config-template)# peer default ip (Optional) Specifies that the customer profile to which this
address pool pool-name template is attached will use a local IP address pool with the
specified name.
Step 3 Router(config-template)# ppp authentication (Optional) Sets the PPP link authentication method.
chap
Step 4 Router(config-template)# ppp multilink (Optional) Enables Multilink PPP for this customer profile.
Step 5 Router(config-template)# exit Exits from template configuration mode; returns to global
configuration mode.
Step 6 Router(config)# resource-pool profile customer Enters customer profile configuration mode for the customer
name to which you wish to assign this template.
Step 7 Router(config-customer-profi)# source template Attaches the customer profile template you have just
name configured to the customer profile.
template acme_direct
peer default ip address pool tahoe
ppp authentication chap isdn-users
ppp multilink
Step 1 Enter the show running-config EXEC command (where the template name is “PPP1”):
Router#
Router# show running-config begin template
.
.
.
template PPP1
peer default ip address pool pool1 pool2
ppp ipcp dns 10.1.1.1 10.1.1.2
ppp ipcp wins 10.1.1.3 10.1.1.4
ppp multilink max-links 2
.
.
.
Command Purpose
Step 1 Router(config)# resource-pool profile Assigns a name to a customer profile.
customer name
Step 2 Router(config-customer-pr)# source template Associates the template with the customer profile.
To verify the placement of your template in the customer profile, perform the following steps:
Step 2 Look at the list of customer profiles and make sure that your profile appears in the list.
Step 3 To verify a particular customer profile configuration, enter the show resource-pool customer name
EXEC command (where the customer profile name is “CP1”):
Router# show resource-pool customer CP1
97 active connections
120 calls accepted
210 max number of simultaneous connections
50 calls rejected due to profile limits
0 calls rejected due to resource unavailable
90 minutes spent with max connections
5 overflow connections
2 overflow states entered
0 overflow connections rejected
0 minutes spent in overflow
13134 minutes since last clear command
Command Purpose
Step 1 Router(config)# aaa new-model Enables AAA on the NAS.
Step 2 Router(config)# radius-server key key Set the authentication and encryption key used for
all RADIUS or TACACS+ communications
or between the NAS and the RADIUS or TACACS+
Router(config)# tacacs-server key key daemon.
Step 3 Router(config)# radius-server host {hostname | Specifies the host name or IP address of the server
ip-address key} [auth-port port acct-port port] host before configuring the AAA server group. You
can also specify the UDP destination ports for
or
authentication and for accounting.
Router(config)# tacacs-server host ip-address key
Step 4 Router(config)# aaa group server {radius | tacacs+} Selects the AAA server type you want to place into
group-name a server group and assign a server group name.
Step 5 Router(config-sg radius)# server ip-address Specifies the IP address of the selected server type.
This must be the same IP address that was assigned
to the server host in Step 3.
Step 6 Router(config-sg radius)# exit Returns to global configuration mode.
Step 7 Router(config)# resource-pool profile customer name Enters customer profile configuration mode for the
customer to which you wish to assign this AAA
server group.
Step 8 Router(config-customer-profil)# aaa Associates this AAA server group (named in Step 4)
group-configuration group-name with the customer profile named in Step 7.
AAA server groups are lists of AAA server hosts of a particular type. The Cisco RPM currently supports
RADIUS and TACACS+ server hosts. A AAA server group lists the IP addresses of the selected server
hosts.
You can use a AAA server group to define a distinct list of AAA server hosts and apply this list to the
Cisco RPM application. Note that the AAA server group feature works only when the server hosts in a
group are of the same type.
To configure VPDN profiles, use the following commands beginning in global configuration mode:
Command Purpose
Step 1 Router(config)# resource-pool profile vpdn Creates a VPDN profile and assigns it a profile name
profile-name
Step 2 Router(config-vpdn-profile)# limit base-size Specifies the maximum number of simultaneous base
{number | all} VPDN sessions to be allowed for this VPDN group
under the terms of the service-level agreement (SLA).
The range is 0 to 1000 sessions. If all sessions are to be
designated as base VPDN sessions, specify all.
Step 3 Router(config-vpdn-profile)# limit overflow-size Specifies the maximum number of simultaneous
{number | all} overflow VPDN sessions to be allowed for this VPDN
group under the terms of the SLA. The range is 0 to
1000 sessions. If all sessions are to be designated as
overflow VPDN sessions, specify all.
Step 4 Router(config-vpdn-profile)# exit Returns to global configuration mode.
Step 5 Router(config)# resource-pool profile customer Enters customer profile configuration mode for the
name customer to which you wish to assign this VPDN group.
Step 6 Router(config-customer-profi)# vpdn profile Attaches the VPDN profile you have just configured to
profile-name the customer profile to which it belongs, or, if the limits
or imposed by the VPDN profile are not required, attaches
Router(config-customer-profi)# vpdn group VPDN group instead (see the section “Configuring
group-name VPDN Groups” later in this chapter).
Command Purpose
Step 1 Router(config)# vpdn enable Enables VPDN sessions on the NAS.
Step 2 Router(config)# vpdn-group group-name Creates a VPDN group and assigns it a unique name.
Each VPDN group can have multiple endpoints
(HGW/LNSs).
Step 3 Router(config-vpdn)# request dialin {l2f | l2tp} Specifies the tunneling protocol to be used to reach the
{ip ip-address} {domain domain-name | dnis remote peer defined by a specific IP address if a dial-in
dnis-number}
request is received for the specified domain name or
DNIS number. The IP address that qualifies the session
is automatically generated and need not be entered
again.
Step 4 Router(config-vpdn)# multilink {bundle-number | Specifies the maximum number of bundles and links for
link-number} all multilink users in the VPDN group. The range for
both bundles and links is 0 to 32767. In general, each
user requires one bundle.
Command Purpose
Step 5 Router(config-vpdn)# loadsharing ip ip-address Configures the endpoints for loadsharing. This router
[limit number] will share the load of IP traffic with the first router
specified in Step 2. The limit keyword limits the
number of simultaneous sessions that are sent to the
remote endpoint (HGW/LNS). This limit can be 0 to
32767 sessions.
Step 6 Router(config-vpdn)# backup ip ip-address [limit Sets up a backup HGW/LNS router. The number of
number] [priority number] sessions per backup can be limited. The priority
number can be 2 to 32767. The highest priority is 2,
which is the first HGW/LNS router to receive backup
traffic. The lowest priority, which is the default, is
32767.
Step 7 Router(config-vpdn)# exit Returns to global configuration mode.
Step 8 Router(config)# resource-pool profile vpdn Enters either VPDN profile configuration mode or
profile-name customer profile configuration mode, depending on
whether you want to allow VPDN connections for a
or
customer profile, or allow combined session counting
Router(config)# resource-pool profile customer on all of the VPDN sessions within a VPDN profile.
name
Step 9 Router(config-vpdn-profile)# vpdn group group-name Attaches the VPDN group to either the VPDN profile or
the customer profile specified in Step 8.
or
Router(config-customer-profi)# vpdn group
group-name
A VPDN group consists of VPDN sessions that are combined and placed into a customer profile or a
VPDN profile. Note the following characteristics of VPDN groups:
• The dnis-group-name argument is required to authorize the VPDN group with RPM.
• A VPDN group placed in a customer profile allows VPDN connections for the customer using that
profile.
• A VPDN group placed in a VPDN profile allows the session limits configured for that profile to
apply to all of the VPDN sessions within that VPDN group.
• VPDN data includes an associated domain name or DNIS, an endpoint IP address, the maximum
number of MLP bundles, and the maximum number of links per MLP bundle; this data can
optionally be located on a AAA server.
See the sections “VPDN Configuration Example” and “VPDN Load Sharing and Backing Up Between
Multiple HGW/LNSs Example” at the end of this chapter for examples of using VPDN with RPM.
To configure VPDN profile session counting, use the following commands beginning in global
configuration mode:
Command Purpose
Step 1 Router(config)# resource-pool profile vpdn name Creates a VPDN profile.
Step 2 Router(config-vpdn-profile)# vpdn-group name Associates a VPDN group to the VPDN profile. VPDN
Router(config-vpdn-profile)# exit sessions done within this VPDN group will be counted
by the VPDN profile.
Step 3 Router(config)# resource-pool profile customer Links the VPDN group to a customer profile.
name
Router(config-customer-profi)# vpdn profile name
Step 4 Router(config-customer-profi)# ^Z Returns to EXEC mode to perform verification steps.
Router#
To verify session counting and view VPDN group information configured under resource pooling, use
the show resource-pool vpdn group command. In this example, two different VPDN groups are
configured under two different customer profiles:
Router# show resource-pool vpdn group
Tunnel (L2TP)
------
dnis:cg1
dnis:cg2
dnis:jan
To display the contents of a specific VPDN profile, use the show resource-pool vpdn profile name
command, as follows:
Router# show resource-pool vpdn profile ?
0 active connections
0 max number of simultaneous connections
0 calls rejected due to profile limits
Note Use the debug vpdn event command to troubleshoot VPDN profile limits, session limits, and MLP
connections. First, enable this command; then, send a call into the access server. Interpret the debug
output and make configuration changes as needed.
To debug the L2F or L2TP protocols, use the debug vpdn l2x command:
Router# debug vpdn l2x ?
Command Purpose
Step 1 Router(config)# vpdn-group name Creates a VPDN group.
Step 2 Router(config-vpdn)# multilink {bundle number Limits the number of MLP bundles per VPDN group and
| link number} links per bundle.1 These settings limit the number of users
that can multilink.
1. Both the NAS/LAC and the HGW/LNS router must be configured to support multilink before a client can use multilink to connect to a
HGW/LNS.
The following example shows the show vpdn multilink command output for verifying MLP bundle
limits:
Router# show vpdn multilink
Multilink Bundle Name VPDN Group Active links Reserved links Bundle/Link Limit
--------------------- ---------- ------------ -------------- -----------------
[email protected] vgdnis 0 0 */*
Note Use the debug vpdn event and debug resource-pooling commands to troubleshoot VPDN profile
limits, session limits, and MLP connections. First, enable this command; then, send a call into the access
server. Interpret the debug output and make configuration changes as needed.
Command Purpose
Step 1 Router(config)# controller t1 number Specifies a controller and begins controller
configuration mode.
Step 2 Router(config-controller)# cas-group 0 timeslots Creates a CAS group and assigns time slots.
1-24 type e&m-fgb {dtmf | mf} {dnis}
Step 3 Router(config-controller)# framing {sf | esf} Specifies framing.
Step 4 Router(config-controller)# linecode {ami | b8zs} Enters the line code.
Step 5 Router(config-controller)# exit Returns to global configuration mode.
Step 6 Router(config)# dialer dnis group name Creates a dialer called group.
Step 7 Router(config-called-group)# call-type cas digital Assigns a call type as digital (switch 56).
Step 8 Router(config-called-group)# exit Returns to global configuration mode.
Step 9 Router(config)# interface serial number:number Specifies the logical serial interface, which was
dynamically created when the cas-group command was
Router(config-if)#
issued.
This command also enters interface configuration mode,
where you configure the core protocol characteristics
for the serial interface.
To verify switched 56 over CT1, use the show dialer dnis command as follows:
Router# show dialer dnis group
Called Number:2001
0 total connections
0 peak connections
0 calltype mismatches
Called Number:2002
0 total connections
0 peak connections
0 calltype mismatches
Called Number:2003
0 total connections
0 peak connections
0 calltype mismatches
Called Number:2004
0 total connections
0 peak connections
0 calltype mismatches
.
.
.
List of Numbers:
default
2001
2002
2003
2004
.
.
.
3 active connections
41 calls accepted
3 max number of simultaneous connections
1 calls rejected
List of Resources:
isdn-ports
MICA-modems
DNIS Number:301001
11 total connections
5 peak connections
0 calltype mismatches
2 active connections
2 max number of simultaneous connections
0 calls rejected due to profile limits
0 calls rejected due to resource unavailable
0 overflow connections
0 overflow states entered
0 overflow connections rejected
215 minutes since last clear command
Tunnel (L2F)
------
dnis:301001
dnis:ACME_dnis_numbers
Building configuration...
.
.
.
vpdn-group customer1-vpdng
request dialin
protocol l2f
domain cisco.com
domain cisco2.com
dnis customer1-calledg
initiate-to ip 172.21.9.67
loadsharing ip 172.21.9.68 limit 100
backup ip 172.21.9.69 priority 5
vpdn-group customer2-vpdng
request dialin
protocol l2tp
dnis customer2-calledg
domain acme.com
initiate-to ip 172.22.9.5
Troubleshooting RPM
Test and verify that ISDN, CAS, SS7, PPP, AAA, and VPDN are working properly before implementing
RPM. Once RPM is implemented, the only debug commands needed for troubleshooting RPM are as
follows:
• debug resource pool
• debug aaa authorization
The debug resource-pool command is useful as a first step to ensure proper operation. It is usually
sufficient for most cases. Use the debug aaa authorization command for troubleshooting VPDN and
modem service problems.
Problems that might typically occur are as follows:
• No DNIS group found or no customer profile uses a default DNIS
• Call discriminator blocks the DNIS
• Customer profile limits exceeded
• Resource group limits exceeded
Note Always enable the debug and log time stamps when troubleshooting RPM.
Resource-Pool Component
The resource-pool component contains two modules—a dispatcher and a local resource-pool manager.
The dispatcher interfaces with the signaling stack, resource-group manager, and AAA, and is responsible
for maintaining resource-pool call state and status information. The state transitions can be displayed by
enabling the resource-pool debug traces. Table 66 summarizes the resource pooling states.
State Description
RM_IDLE No call activity.
RM_RES_AUTHOR Call waiting for authorization; message sent to AAA.
RM_RES_ALLOCATING Call authorized; resource group manager allocating.
RM_RES_ALLOCATED Resource allocated; connection acknowledgment sent to signaling state.
Call should get connected and become active.
RM_AUTH_REQ_IDLE Signaling module disconnected call while in RM_RES_AUTHOR.
Waiting for authorization response from AAA.
RM_RES_REQ_IDLE Signaling module disconnected call while in RM_RES_ALLOCATING.
Waiting for resource allocation response from resource group manager.
The resource-pool state can be used to isolate problems. For example, if a call fails authorization in the
RM_RES_AUTHOR state, investigate further with AAA authorization debugs to determine whether the
problem lies in the resource-pool manager, AAA, or dispatcher.
The resource-pool component also contains local customer profiles and discriminators, and is
responsible for matching, configuring, and maintaining the associated counters and statistics. The
resource-pool component is responsible for the following:
• Configuration of customer profiles or discriminators
• Matching a customer profile or discriminator for local profile configuration
• Counters/statistics for customer profiles or discriminators
• Active call information displayed by the show resource-pool call command
The RPMS debug commands are summarized in Table 67.
Command Purpose
debug resource-pool This debug output should be sufficient for most RPM
troubleshooting situations.
debug aaa authorization This debug output provides more specific information and shows
the actual DNIS numbers passed and call types used.
Dialer Component
The dialer component contains DNIS groups and is responsible for configuration, and maintenance of
counters and statistics. The resource-pool component is responsible for the following:
• DNIS number statistics or counters
• Configuring DNIS groups
Signaling Stack
The signaling stacks currently supported in resource pooling are CAS and ISDN. The signaling stack
delivers the incoming call to the resource-pool dispatcher and provides call-type and DNIS number
information to the resource-pool dispatcher. Depending on configuration, call connect attempts may fail
if the signaling stacks do not send the DNIS number and the call type to the resource-pool dispatcher.
Call attempts will also fail if signaling stacks disconnect prematurely, not giving enough time for
authorization or resource allocation processes to complete.
Therefore, investigate the signaling stack when call attempts or call treatment behavior does not meet
expectations. For ISDN, the debug isdn q931 command can be used to isolate errors between resource
pooling, signaling stack, and switch. For CAS, the debug modem csm, service internal, and
modem-mgmt csm debug-rbs commands are used on Cisco AS5200 and Cisco AS5300 access servers,
while the debug csm and debug trunk cas port number timeslots number commands are used on the
Cisco AS5800 access server.
AAA Component
In context with resource pooling, the AAA component is responsible for the following:
• Authorization of profiles between the resource-pool dispatcher and local or external resource-pool
manager
• Accounting messages between the resource-pool dispatcher and external resource-pool manager for
resource allocation
• VPDN authorization between VPDN and the local or external resource-pool manager
• VPDN accounting messages between VPDN and the external resource-pool manager
• Overflow accounting records between the AAA server and resource-pool dispatcher
• Resource connect speed accounting records between the AAA server and resource group
VPDN Component
The VPDN component is responsible for the following:
• Creating VPDN groups and profiles
• Searching or matching groups based on domain or DNIS
• Maintaining counts and statistics for the groups and profiles
• Setting up the tunnel between the NAS/LAC and HGW/LNS
The VPDN component interfaces with AAA to get VPDN tunnel authorization on the local or remote
resource-pool manager. VPDN and AAA debugging traces should be used for troubleshooting.
Troubleshooting VPDN
Troubleshooting problems that might typically occur are as follows:
• Customer profile is not associated with a VPDN profile or VPDN group (the call will be locally
terminated in this case. Regular VPDN can still succeed even if RPM/VPDN fails).
• VPDN profile limits have been reached (call answered but disconnected).
• VPDN group limits have been reached (call answered but disconnected).
• VPDN endpoint is not reachable (call answered but disconnected).
Whenever the debug resource-pool command offers no further assistance besides the indication that
authorization has failed, enter the debug aaa authorization command to further troubleshoot the
problem. In this case, the debug aaa authorization command output appears as follows:
*Mar 1 04:03:49.846: Se0:19 RM/VPDN/rm-session-request: Allocated vpdn info for domain
NULL MLP Bundle SOHO
*Mar 1 04:03:49.854: Se0:19 AAA/AUTHOR/RM vpdn-session (3912941997): Port='DS0:0:0:0:19'
list='default' service=RM
*Mar 1 04:03:49.858: AAA/AUTHOR/RM vpdn-session: Se0:19 (3912941997) user='301001'
*Mar 1 04:03:49.862: Se0:19 AAA/AUTHOR/RM vpdn-session (3912941997): send AV
service=resource-management
*Mar 1 04:03:49.866: Se0:19 AAA/AUTHOR/RM vpdn-session (3912941997): send AV
protocol=vpdn-session
*Mar 1 04:03:49.866: Se0:19 AAA/AUTHOR/RM vpdn-session (3912941997): send AV
rm-protocol-version=1.0
*Mar 1 04:03:49.870: Se0:19 AAA/AUTHOR/RM vpdn-session (3912941997): send AV
rm-nas-state=3278356
*Mar 1 04:03:49.874: Se0:19 AAA/AUTHOR/RM vpdn-session (3912941997): send AV
rm-call-handle=27
Troubleshooting RPMS
In general, the debug aaa authorization command is not used for RPM troubleshooting unless the
debug resource-pool command display is too vague. The debug aaa authorization command is more
useful for troubleshooting with RPMS. Following is sample output:
Router# debug aaa authorization
General OS:
AAA Authorization debugging is on
Resource Pool:
resource-pool general debugging is on
The following output from the debug resource-pool and debug aaa authorization commands shows a
successful RPM connection:
*Mar 1 06:10:35.450: AAA/MEMORY: create_user (0x723D24) user='301001'
ruser=''port='DS0:0:0:0:12' rem_addr='102' authen_type=NONE service=NONE priv=0
*Mar 1 06:10:35.462: DS0:0:0:0:12 AAA/AUTHOR/RM call-accept (2784758907):
Port='DS0:0:0:0:12' list='default' service=RM
*Mar 1 06:10:35.466: AAA/AUTHOR/RM call-accept: DS0:0:0:0:12 (2784758907) user= '301001'
*Mar 1 06:10:35.470: DS0:0:0:0:12 AAA/AUTHOR/RM call-accept (2784758907): send AV
service=resource-management
*Mar 1 06:10:35.470: DS0:0:0:0:12 AAA/AUTHOR/RM call-accept (2784758907): send AV
protocol=call-accept
*Mar 1 06:10:35.474: DS0:0:0:0:12 AAA/AUTHOR/RM call-accept (2784758907): send AV
rm-protocol-version=1.0
*Mar 1 06:10:35.478: DS0:0:0:0:12 AAA/AUTHOR/RM call-accept (2784758907): send AV
rm-nas-state=7513368
*Mar 1 06:10:35.482: DS0:0:0:0:12 AAA/AUTHOR/RM call-accept (2784758907): send AV
rm-call-type=speech
*Mar 1 06:10:35.486: DS0:0:0:0:12 AAA/AUTHOR/RM call-accept (2784758907): send AV
rm-request-type=dial-in
*Mar 1 06:10:35.486: DS0:0:0:0:12 AAA/AUTHOR/RM call-accept (2784758907): send AV
rm-link-type=isdn
Tip • Replace the command string resource isdn-ports digital in the previous example with resource
isdn-ports speech to set up DoVBS. See the section, “Customer Profile Configuration for DoVBS
Example,” for more information.
Digital calls to 301001 are associated with the customer ACME by using the resource group
“isdn-ports.”
• Speech calls to 301001 are associated with the customer ACME by using the resource group
“mica-modems” and allow for V.90 connections (anything less than V.90 is also allowed).
• Digital calls to 301005 are denied.
• All other speech calls to any other DNIS number are associated with the customer profile
“DEFAULT” by using the resource group “mica-modems” and allow for V.34 connections (anything
more than V.34 is not allowed; anything less than V.34 is also allowed).
• All other digital calls to any other DNIS number are not associated with a customer profile and are
therefore not allowed.
• The customer profile named “DEFAULT” serves as the default customer profile for speech calls
only. If the solution uses an external RPMS server, this same configuration can be used for backup
resource pooling if communication is lost between the NAS and the RPMS.
This change causes ISDN speech calls (in addition to ISDN digital calls) to be directed to the resource
“isdn-ports”; thus, ISDN speech calls provide DoVBS.
interface Serial0
no ip address
no ip route-cache
no ip mroute-cache
shutdown
no fair-queue
clockrate 2015232
!
interface Serial1
no ip address
no ip route-cache
no ip mroute-cache
shutdown
no fair-queue
clockrate 2015232
!
interface Serial2
no ip address
no ip route-cache
no ip mroute-cache
shutdown
no fair-queue
clockrate 2015232
!
interface Serial3
no ip address
no ip route-cache
no ip mroute-cache
shutdown
no fair-queue
clockrate 2015232
!
interface Serial0:23
ip unnumbered Loopback1
encapsulation ppp
ip mroute-cache
dialer-group 1
isdn switch-type primary-5ess
no peer default ip address
ppp authentication chap pap
!
interface FastEthernet0
ip address 10.0.38.15 255.255.255.0
no ip route-cache
no ip mroute-cache
duplex half
speed 100
!
!
ip local pool default 192.168.13.181 192.168.13.226
ip classless
ip route 172.25.0.0 255.0.0.0 Ethernet0
ip route 172.19.0.0 255.0.0.0 Ethernet0
no ip http server
!
!
! Configure DNIS groups
dialer dnis group blot
number 4085551003
number 5552003
number 2223333
number 3456789
number 2345678
number 1234567
!
dialer dnis group ok
number 89898989
number 4084442002
number 4085552002
number 5551003
!
dialer clid group splat
number 12321224
!
! Configure CLID groups
dialer clid group zot
number 2121212121
number 4085552002
!
dialer clid group snip
number 1212121212
!
dialer clid group stompIt
number 4089871234
!
dialer clid group squash
number 5656456
dialer-list 1 protocol ip permit
!
!
!
line con 0
exec-timeout 0 0
logging synchronous
transport input none
line 1 96
no exec
exec-timeout 0 0
autoselect ppp
line aux 0
line vty 0 4
exec-timeout 0 0
transport input none
!
scheduler interval 1000
end
Note If the limits imposed by the VPDN profile are not required, do not configure the VPDN profile. Replace
the vpdn profile ACME_VPDN command under the customer profile ACME with the vpdn group
outgoing-2 command.
Cisco 7246
home gateway
200 sessions
Cisco 776 BRI
line
L2TP
PRI tunnel
PSTN
AS5000 series
NAS
POTS IP
line network
Modem
PC
L2TP
tunnel
16747
Cisco 3640
home gateway
50 sessions
In a standalone NAS environment (no RPMS server used), the NAS has complete knowledge of the status
of tunnel endpoints. Balancing across endpoints is done by a “least-filled tunnel” or a “next-available
round robin” approach. In an RPMS-controlled environment, RPMS has the complete knowledge of
tunnel endpoints. However, the NAS still has the control over those tunnel endpoints selected by RPMS.
A standalone NAS uses the following default search criteria for load-balancing traffic across multiple
endpoints (HGW/LNS):
• Select any idle endpoint—an HGW/LNS with no active sessions.
• Select an active endpoint that currently has a tunnel established with the NAS.
• If all specified load-sharing routers are busy, select the backup HGW. If all endpoints are busy,
report that the NAS cannot find an IP address to establish the call.
Note This default search order criteria is independent of the Cisco RPMS application scenario. A standalone
NAS uses a different load-sharing algorithm than the Cisco RPMS. This search criteria will change as
future enhancements become available.
This chapter describes the Wholesale Dial Performance Optimization feature in the following sections:
• Wholesale Dial Performance Optimization Feature Overview
• How to Configure Automatic Command Execution
• How to Configure TCP Clear Performance Optimization
• Verifying Configuration of TCP Clear Performance Optimization
Note This task provides inbound and outbound performance optimization for wholesale dial customers who
provide ports to America Online (AOL). It is configured only on Cisco AS5800 access servers.
Command Purpose
Step 1 Router(config)# line 1/3/00 1/11/143 Selects the lines to be configured and begins line
configuration mode.
Step 2 Router(config-line)# autocommand telnet Configures autocommand on the lines.
aol-host 5190 /stream
To configure automatic command execution using a user ID and password on a Cisco AS5800 universal
network access server, use the following commands beginning in global configuration mode:
Command Purpose
Step 1 Router(config)# username aol password aol Defines the user ID and password.
Step 2 Router(config)# username aol autocommand telnet Configures autocommand on the user ID.
aol-host 5190 /stream
You can also configure automatic command execution at a TACACS/RADIUS server if the username
authentication is to be performed there rather than on the router. The AV-pair processing allows
autocommand to be configured.
Command Purpose
Step 1 Router(config)# line 1/3/00 1/11/143 Selects the lines to be configured and begins line
configuration mode.
Step 2 Router(config-line)# autocommand Enables the TCP Clear performance optimization on the
telnet-faststream selected lines.
Tty Typ Tx/Rx A Modem Roty AccO AccI Uses Noise Overruns Int
* 1/4/00 Digital modem - inout - - - 1 0 0/0 -
This chapter provides an introduction to common dial networking scenarios used by service providers
and enterprises and includes the following sections:
• Dial Networking for Service Providers and Enterprises
• Common Dial Applications
• IP Address Strategies
Providing dial access means to set up one or more access servers or routers to allow on-demand
connectivity for individual remote nodes or remote offices. The dial network solutions described in this
chapter are based on business case scenarios. Depending on your business application, dial access has
different implementations.
Note Many additional dial network strategies exist for different business applications. This overview is
intended to provide only a sample of the most common dial business needs as experienced by the Cisco
dial escalation team.
Internet access
Internet service
provider for remote
nodes and remote LANs
ISDN or analog
network provided by
telephone company
Large business
LAN dialing in
to the Internet
Standalone remote
node dialing in
S6555
to the Internet
Enterprises can provide bidirectional access services with remote LANs and one-way dial-in access for
standalone remote nodes. Bidirectional access means that remote LANs can dial in to the enterprise, and
the enterprise can dial out to the remote LANs. A remote LAN can be a large remote office or a small
home office. A standalone remote node can be an individual PC that is dynamically assigned an IP
address from the modem pool of the enterprise. In most cases, an enterprise has complete administrative
control over its local and remote devices. (See Figure 115.)
Enterprise resources
such as file servers
and e-mail hosts
ISDN or analog
network provided by
Headquarters telephone company
dialing out to
remote office
Remote office
dialing in to
S6554
headquarters
Service providers and enterprises both benefit from a hybrid dial solution called VPDN. Service
providers offer virtually private access to enterprises by providing the dial-in access devices for the
enterprise to use (for example, access servers and modem pools). In this solution, service providers
construct the networking fabric for city-to-city dial connectivity for the enterprise. Enterprises provide
only a home gateway router (with no attached modems) and a WAN connection to their service provider.
VPDN dial solutions enable the enterprise to continue to maintain complete administrative control over
its remote locations and network resource privileges. (See Figure 116.)
Firewall
Cisco 4500
home gateway
Terminal for 0com.com
adapter ATM
BRI
ISDN or analog IP
PRI HSSI
network provided by network
telephone company
Service provider leasing
access servers and
large modem pools out
to enterprise customers
T3 T1
Analog
Firewall
Firewall
S6556
making a modem home gateway home gateway
call in to cisco.com for cisco.com for descend.com
IP Address Strategies
Exponential growth in the remote access router market has created new addressing challenges for ISPs
and enterprise users. Companies that use dial technologies seek addressing solutions that will:
• Minimize Internet access costs for remote offices
• Minimize configuration requirements on remote access routers
• Enable transparent and dynamic IP address allocation for hosts in remote environments
• Improve network security capabilities at each remote small office, home office site
• Conserve registered IP addresses
• Maximize IP address manageability
Remote networks have variable numbers of end systems that need access to the Internet; therefore, some
ISPs are interested in allocating just one IP address to each remote LAN.
In enterprise networks where telecommuter populations are increasing in number, network
administrators need solutions that ease configuration and management of remote routers and provide
conservation and dynamic allocation of IP addresses within their networks. These solutions are
especially important when network administrators implement large dial-up user pools where ISDN plays
a major role.
Classic IP Addressing
This section describes two classic IP addressing strategies that you can use to set up dial-in access.
Classic IP addresses are statically or dynamically assigned from your network to each site router or
dial-in client. The IP address strategy you use depends on whether you are allowing remote LANs or
individual remote clients to dial in.
A remote LAN usually consists of a single router at the gateway followed by multiple nodes such as 50
PCs. The IP address on the gateway router is fixed or statically assigned (for example, 3.3.3.3). This
device always uses the address 3.3.3.3 to dial in to the enterprise or service provider network. There is
also a segment or subnet associated with the gateway router (for example, 2.1.1.0 255.255.255.0), which
is defined by the dial-in security server.
For individual remote clients dialing in, a specific range or pool of IP addresses is defined by the gateway
access server and dynamically assigned to each node. When a remote node dials in, it receives an address
from the specified address pool. This pool of addresses usually resides locally on the network access
server. Whereas, the remote LANs have predefined or statically assigned addresses. The accompanying
subnet is usually statically assigned too. (See Figure 117.)
PC PC
BRI
ISDN or PRI TACACS+
analog network server
Cisco AS5200
Laptop 10.1.1.1
56955
User 760
10.3.3.3
10.2.1.0 255.255.255.0
Laptop 10.1.1.2
Cisco Easy IP
Two of the key problems facing the Internet are depletion of IP address space and scaling in routing. The
Cisco Easy IP feature combines Network Address Translation (NAT) and PPP/Internet Protocol Control
Protocol (IPCP). This feature enables a Cisco router to automatically negotiate its own registered WAN
interface IP address from a central server and allows all remote hosts to access the global Internet using
this single registered IP address. Because Cisco Easy IP uses existing port-level multiplexed NAT
functionality within the Cisco IOS software, IP addresses on the remote LAN are invisible to the
Internet.
Inside Outside
PC
Service
provider
10.0.0.2 network
ISDN BRI ISDN
network
PC
Inside Outside registered
interface address borrowed
10.0.0.1 from service provider DHCP
10.0.0.3 172.29.2.1 server
NAT table
Inside IP Outside
Address Address
For a more detailed description of how Cisco Easy IP works, see the chapter “Configuring Cisco Easy
IP.”
This chapter provides sample configurations for specific dial scenarios used by enterprise networks (not
telephone companies or Internet service providers). Each configuration is designed to support IP
network traffic with basic security for the specified scenario.
The following scenarios are described:
• Scenario 1—Remote Offices and Telecommuters Dialing In to a Central Site
• Scenario 2—Bidirectional Dial Between Central Sites and Remote Offices
• Scenario 3—Telecommuters Dialing In to a Mixed Protocol Environment
Note If you use Token card-based security in your dial network, we recommend that you enable Password
Authentication Protocol (PAP) authentication and disable the Multilink protocol to maximize dial-in
performance.
Note Dial-on-demand routing (DDR) uses static routes or snapshot routing. For IP-only configurations, static
routes are commonly used for remote dial-in. For Internet Protocol Exchange (IPX) networking,
snapshot routing is often used to minimize configuration complexity.
Network Topologies
Figure 119 shows an example of a remote office that places digital calls in to a central site network. The
remote office router can be any Cisco router with a BRI physical interface, such as a Cisco 766 or
Cisco 1604 router. The central office gateway router can be any Cisco router that supports PRI
connections, such as a Cisco 3600 series, Cisco 4000 series, or Cisco 7000 series router.
PC running Windows 95
and dialing in to the
S6692
central site
Figure 120 shows an example of a remote office and telecommuter dialing in to a central site. The remote
office places digital calls. The telecommuter places analog calls. The remote office router can be any
Cisco router with a BRI interface, such as a Cisco 766, Cisco 1604, or Cisco 2503 router. The central
office gateway router is a Cisco AS5300 series access server or a Cisco 3640 router, which supports both
PRI and analog connections.
PC running
Windows 95
Telecommuter dialing in
to the central site with S6693
Windows 95 and a
28.8 internal modem
Dial-In Scenarios
The configuration examples in the following sections provide different combinations of dial-in
scenarios, which can be derived from Figure 119 and Figure 120:
• Cisco 1604 Remote Office Router Dialing In to a Cisco 3620 Access Router
• Remote Office Router Dialing In to a Cisco 3620 Router
• Cisco 700 Series Router Using Port Address Translation to Dial In to a Cisco AS5300 Access Server
• Cisco 3640 Central Site Router Configuration to Support ISDN and Modem Calls
• Cisco AS5300 Central Site Configuration Using Remote Security
Note Be sure to include your own IP addresses, host names, and security passwords where appropriate if you
use these examples in your own network.
Cisco 1604 Remote Office Router Dialing In to a Cisco 3620 Access Router
This section provides a common configuration for a Cisco 1604 remote office router dialing in to a
Cisco 3620 access router positioned at a central enterprise site. Only ISDN digital calls are supported in
this scenario. No analog modem calls are supported. All calls are initiated by the remote router on an
as-needed basis. The Cisco 3620 router is not set up to dial out to the Cisco 1604 router. (Refer to
Figure 119.)
The Cisco 1604 and Cisco 3620 routers use the IP unnumbered address configurations, MLP, and the
dial-load threshold feature, which brings up the second B channel when the first B channel exceeds a
certain limit. Because static routes are used, a routing protocol is not configured. A default static route
is configured on the Cisco 1604 router, which points back to the central site. The central site also has a
static route that points back to the remote LAN. Static route configurations assume that you have only
one LAN segment at each remote office.
The following configuration runs on the Cisco 1604 router, shown in Figure 119. This SOHO router
places digital calls in to the Cisco 3620 central site access router. See the next example for the running
configuration of the Cisco 3620 router.
version xx.x
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
no service udp-small-servers
no service tcp-small-servers
!
hostname remotelan1
!
enable secret cisco
!
username NAS password dialpass
username admin password cisco
!
ip classless
ip route 0.0.0.0 0.0.0.0 10.1.1.10
ip route 10.1.1.10 255.255.255.255 BRI0
dialer-list 1 protocol ip permit
!
line con 0
line vty 0 4
login local
!
end
The following sample configuration runs on the Cisco 3620 router shown in Figure 119. This modular
access router has one 2-port PRI network module installed in slot 1 and one 1-port Ethernet network
module installed in slot 0. The router receives only digital ISDN calls from the Cisco 1604 router. The
configuration for the Cisco 1604 router was provided in the previous example.
version xx.x
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
no service udp-small-servers
no service tcp-small-servers
!
hostname NAS
!
aaa new-model
aaa authentication login default local
aaa authentication login console enable
aaa authentication login vty local
aaa authentication login dialin local
aaa authentication ppp default local
aaa authentication ppp dialin if-needed local
enable secret cisco
!
username admin password cisco
username remotelan1 password dialpass
ip classless
!
dialer-list 1 protocol ip permit
!
line con 0
login authentication console
line aux 0
login authentication console
line vty 0 4
login authentication vty
transport input telnet rlogin
!
end
The following configuration task is for a Cisco 700 series ISDN router placing digital calls in to a central
site router that supports ISDN PRI, such as the Cisco 3620 router. In this scenario, ISDN unnumbered
interfaces with static routes are pointing back to the Cisco 3620.
To configure the router, use the following commands in EXEC mode. However, this configuration
assumes that you are starting from the router’s default configuration. To return the router to its default
configuration, issue the set default command.
Command Purpose
Step 1 > At the system prompt level, specifies the host name of the
> set systemname remotelan1 router, which is also used when responding to Challenge
remotelan1>
Handshake Authentication Protocol (CHAP) authentication
with the Cisco 3620. For CHAP authentication, the system’s
name must match the username configured on the
Cisco 3620.
Step 2 remotelan1> set ppp secret client Sets the transmit and receive password for the client. This is
remotelan1> Enter new password: dialpass the password which is used in response to CHAP
remotelan1> Enter new password: dialpass
authentication requests, and it must match the username
password configured on the Cisco 3620 router.
Step 3 remotelan1> set encapsulation ppp Sets PPP encapsulation for incoming and outgoing
authentication instead of CPP.
Step 4 remotelan1> set ppp multilink on Enables Multilink PPP (MLP).
Step 5 remotelan1> set user nas Creates the profile named nas, which is reserved for the
remotelan1> New user nas being created Cisco 3620 router.
Step 6 remotelan1:nas> set ip 0.0.0.0 Specifies the LAN IP address. The sequence 0.0.0.0 means
that it will use the address assigned to it from the central
Cisco 3620 router. See Step 14.
Step 7 remotelan1:nas> set ip framing none Configures the profiles to not use Ethernet framing.
Step 8 remotelan1:nas> set ip route destination Sets the default route to point to the Ethernet IP address of the
0.0.0.0 gateway 10.1.1.10 Cisco 3620 router.
Step 9 remotelan1:nas> set timeout 300 Sets the idle time at which the B channel will be dropped. In
this case, the line is dropped after 300 seconds of idle time.
Step 10 remotelan1:nas> set 1/2 number 5551234 Sets the number to call when dialing out of the first and
second B channel.
Step 11 remotelan1:nas> cd lan Enters LAN profile mode.
Step 12 remotelan1:LAN> set bridging off Turns bridging off.
Step 13 remotelan1:LAN> set ip routing on Turns on IP routing.
Step 14 remotelan1:LAN> set ip address 10.2.1.1 Sets the LAN IP address for the interface.
After you configure the Cisco 760 or Cisco 770 series router, the final configuration should resemble the
following:
set systemname remotelan1
set ppp secret client
set encapsulation ppp
set ppp multilink on
cd lan
set bridging off
set ip routing on
set ip 10.2.1.1
set subnet 255.255.255.0
set user nas
set bridging off
set ip 0.0.0.0
set ip netmask 0.0.0.0
set ip framing none
set ip route destination 0.0.0.0 gateway 10.1.1.10
set timeout 300
set 1 number 5551234
set 2 number 5551234
The previous software configuration does not provide for any access security. To provide access security,
use the following optional commands in EXEC mode:
Command Purpose
Router> set ppp authentication incoming chap Provides CHAP authentication to incoming calls.
Router> set callerid Requires the calling parties number to be matched against the
configured receive numbers (such as set by the set
callidreceive # command). This command also denies all
incoming calls if no callidreceive number is configured.
Router> set remoteaccess protected Specifies a remote system password, which enables you to
make changes on the router from a remote location.
Router> set localaccess protected Specifies a local system password, which enables you to make
changes on the router from a local console connection.
Router> set password system Sets the system password for the previous access
configurations.
The following example provides a sample configuration for the Cisco 3620 router. This modular access
router has one 2-port PRI network module installed in slot 1 and one 1-port Ethernet network module
installed in slot 0. The router receives only digital ISDN calls over T1 lines from the Cisco 700 series
remote office router, which was described in the previous example.
version xx.x
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
no service udp-small-servers
no service tcp-small-servers
hostname NAS
!
aaa new-model
aaa authentication login default local
router eigrp 10
network 10.0.0.0
passive-interface Dialer0
default-metric 64 100 250 100 1500
redistribute static
no auto-summary
!
ip local pool dialin_pool 10.1.2.1 10.1.2.50
ip default-gateway 10.1.1.1
ip classless
!
dialer-list 1 protocol ip permit
!
line con 0
login authentication console
line aux 0
login authentication console
line vty 0 4
login authentication vty
transport input telnet rlogin
!
end
Cisco 700 Series Router Using Port Address Translation to Dial In to a Cisco AS5300 Access Server
This section shows a Cisco 700 series router using the port address translation (PAT) feature to dial in
to a Cisco AS5300 central site access server. IP addresses are assigned from the central site, which
leverages the PAT feature to streamline multiple devices at the remote site through a single assigned
address. In this example, the Cisco 700 series router has a private range of IP addresses used on the
Ethernet side. However, the router is able to translate between the local private addresses and the
dynamically registered address on the WAN interface. (See Figure 119.)
The sample configuration in this section allows PCs on a LAN to boot up and acquire their IP address
dynamically from a Cisco 700 series router, which in turn translates the private addresses into a single
IP address assigned from a Cisco AS5300 central site router. The Cisco 700 series router also passes
information via DHCP regarding the Domain Name System (DNS) server (in this example, 10.2.10.1)
and the Windows Internet naming service (WINS) server (in this example, 10.2.11.1) along with the
domain name.
A possible sequence of events would be a remote PC running Windows 95 boots up on the Ethernet
segment and gets its IP address and network information from the Cisco 700 series router. The PC then
opens up Netscape and attempts to view a web page at the central site, which causes the router to dial in
to the central site. The router dynamically obtains its address from the central site pool of addresses and
uses it to translate between the private address on the local Ethernet segment and the registered IP
address borrowed from the central site router.
To configure a remote router, use the following commands beginning in EXEC mode:
Command Purpose
Step 1 > At the system prompt level, specifies the host name of the
> set systemname remotelan1 router, which is also used when responding to CHAP
Router>
authentication with the Cisco 3620 router. For CHAP
authentication, the system’s name must match the username
configured on the Cisco 3620.
Step 2 Router> set ppp secret client Sets the transmit and receive password for the client. This is
Router> Enter new password: dialpass the password which is used in response to CHAP
Router> Enter new password: dialpass
authentication requests, and it must match the username
password configured on the Cisco 3620 router.
Step 3 Router> set encapsulation ppp Sets PPP encapsulation for incoming and outgoing
authentication instead of CPP.
Step 4 Router> set ppp multilink on Enables MLP.
Step 5 Router> set dhcp server Enables the router to act as a DHCP server and assign
addresses from the private network. By default, all DHCP
client addresses are assigned from the 10.0.0.0 network.
Step 6 Router> set dhcp dns primary 10.2.10.1 Passes the DNS server IP address to the DHCP client.
Step 7 Router> set dhcp wins 10.2.11.1 Passes the IP address of the WINS server to the DHCP client.
Step 8 Router> set dhcp domain nas.com Sets the DHCP domain name for the Cisco 3620 central site
router.
Step 9 Router> set user nas Creates the profile named nas, which is setup for the
Router> New user nas being created Cisco 3620 router.
Step 10 Router:nas> set ip pat on Enables Port Address Translation (PAT) on the router.
Step 11 Router:nas> set ip framing none Configures the profiles to not use Ethernet framing.
Step 12 Router:nas> set ip route destination 0.0.0.0 Sets the default route to point to the Ethernet IP address of
gateway 10.1.1.0 Cisco 3620 router.
Step 13 Router:nas> set 1 number 5551234 Sets the number to call when dialing out of the first
B channel.
Step 14 Router:nas> set 2 number 5551234 Sets the number to call when dialing out of the second
B channel.
Step 15 Router:nas> cd lan Enters LAN profile mode.
Step 16 Router:LAN> set bridging off Turns bridging off.
Step 17 Router:LAN> set ip routing on Turns IP routing on.
After you configure the router, the configuration should resemble the following:
set systemname remotelan1
set encapsulation ppp
set ppp secret client
set ppp multilink on
set dhcp server
set dhcp dns primary 10.2.10.1
set dhcp wins 10.2.11.1
set dhcp domain nas.com
set user nas
set bridging off
set ip routing on
set ip framing none
set ip pat on
set ip route destination 0.0.0.0 gateway 10.1.1.0
set 1 number 5551234
set 2 number 5551234
The following example configures a Cisco AS5300 router for receiving calls from the router in the
previous example.
Note This configuration can also run on a Cisco 4000, Cisco 3600, or Cisco 7000 series router. However, the
interface numbering scheme for these routers will be in the form of slot/port. Additionally, the clocking
will be set differently. Refer to your product configuration guides and configuration notes for more
details.
!
version xx.x
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
no service udp-small-servers
no service tcp-small-servers
!
hostname NAS
!
aaa new-model
aaa authentication login default local
aaa authentication login console enable
aaa authentication login vty local
aaa authentication login dialin local
aaa authentication ppp default local
aaa authentication ppp dialin if-needed local
enable secret cisco
!
username admin password cisco
username remotelan1 password dialpass
!
async-bootp dns-server 10.1.3.1 10.1.3.2
isdn switch-type primary-5ess
!
controller T1 0
framing esf
clock source line primary
linecode b8zs
pri-group timeslots 1-24
!
controller T1 1
framing esf
clock source line secondary
linecode b8zs
pri-group timeslots 1-24
!
interface Loopback0
ip address 10.1.2.254 255.255.255.0
!
interface Ethernet0
ip address 10.1.1.10 255.255.255.0
ip summary address eigrp 10 10.1.2.0 255.255.255.0
!
interface Serial0
no ip address
shutdown
!
interface Serial1
no ip address
shutdown
!
interface Serial0:23
no ip address
encapsulation ppp
isdn incoming-voice modem
dialer rotary-group 0
dialer-group 1
no fair-queue
no cdp enable
!
interface Serial1:23
no ip address
encapsulation ppp
isdn incoming-voice modem
dialer rotary-group 0
dialer-group 1
no fair-queue
no cdp enable
!
interface Dialer0
ip unnumbered Loopback0
no ip mroute-cache
encapsulation ppp
peer default ip address pool dialin_pool
dialer in-band
dialer-group 1
no fair-queue
no cdp enable
ppp authentication chap pap dialin
ppp multilink
!
router eigrp 10
network 10.0.0.0
passive-interface Dialer0
default-metric 64 100 250 100 1500
redistribute static
no auto-summary
!
ip local pool dialin_pool 10.1.2.1 10.1.2.50
ip default-gateway 10.1.1.1
ip classless
!
dialer-list 1 protocol ip permit
!
line con 0
login authentication console
line aux 0
login authentication console
line vty 0 4
login authentication vty
transport input telnet rlogin
!
end
In this configuration, the local pool is using a range of unused addresses on the same subnet on which
the Ethernet interface is configured. The addresses will be used for the remote devices dialing in to the
Cisco AS5300 access server.
Cisco 3640 Central Site Router Configuration to Support ISDN and Modem Calls
The following configuration allows remote LANs and standalone remote users with modems to dial in
to a central site. Figure 120 shows the network topology.
The Cisco 3640 router has the following hardware configuration for this scenario:
• One 2-port ISDN-PRI network module installed in slot 1.
• One digital modem network module installed in slot 2 and slot 3.
• One 1-port Ethernet network module installed in slot 0.
Note Each MICA technologies digital modem card has its own group async configuration. Additionally, a
single range of asynchronous lines is used for each modem card. For additional interface numbering
information, refer to the document Digital Modem Network Module Configuration Note.
version xx.x
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
no service udp-small-servers
no service tcp-small-servers
!
hostname NAS
!
aaa new-model
aaa authentication login default local
aaa authentication login console enable
aaa authentication login vty local
aaa authentication login dialin local
aaa authentication ppp default local
aaa authentication ppp dialin if-needed local
enable secret cisco
!
username admin password cisco
username remotelan1 password dialpass1
username remotelan2 password dialpass2
username PCuser1 password dialpass3
username PCuser2 password dialpass4
!
async-bootp dns-server 10.1.3.1 10.1.3.2
isdn switch-type primary-5ess
!
controller T1 1/0
framing esf
clock source line
linecode b8zs
pri-group timeslots 1-24
!
controller T1 1/1
framing esf
clock source line
linecode b8zs
pri-group timeslots 1-24
!
interface Loopback0
ip address 10.1.2.254 255.255.255.0
!
interface Ethernet0/0
ip address 10.1.1.10 255.255.255.0
ip summary address eigrp 10 10.1.2.0 255.255.255.0
!
interface Serial 1/0:23
no ip address
encapsulation ppp
isdn incoming-voice modem
dialer rotary-group 0
dialer-group 1
no fair-queue
no cdp enable
!
interface Serial 1/1:23
no ip address
encapsulation ppp
isdn incoming-voice modem
dialer rotary-group 0
dialer-group 1
no fair-queue
no cdp enable
!
interface Group-Async1
ip unnumbered Loopback0
encapsulation ppp
async mode interactive
peer default ip address pool dialin_pool
no cdp enable
ppp authentication chap pap dialin
group-range 65 88
!
interface Group-Async2
ip unnumbered Loopback0
encapsulation ppp
async mode interactive
peer default ip address pool dialin_pool
no cdp enable
ppp authentication chap pap dialin
group-range 97 120
!
interface Dialer0
ip unnumbered Loopback0
no ip mroute-cache
encapsulation ppp
peer default ip address pool dialin_pool
dialer in-band
dialer-group 1
no fair-queue
no cdp enable
ppp authentication chap pap dialin
ppp multilink
!
router eigrp 10
network 10.0.0.0
passive-interface Dialer0
no auto-summary
!
ip local pool dialin_pool 10.1.2.1 10.1.2.50
ip default-gateway 10.1.1.1
ip classless
!
dialer-list 1 protocol ip permit
!
line con 0
login authentication console
line 65 88
autoselect ppp
autoselect during-login
login authentication dialin
modem DialIn
line 97 120
autoselect ppp
autoselect during-login
login authentication dialin
modem DialIn
line aux 0
login authentication console
line vty 0 4
login authentication vty
transport input telnet rlogin
!
end
The following example assumes that you are running TACACS+ on the remote security server:
version xx.x
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
no service udp-small-servers
no service tcp-small-servers
!
hostname NAS
!
aaa new-model
aaa authentication login console enable
aaa authentication login vty tacacs+
aaa authentication login dialin tacacs+
aaa authentication ppp default tacacs+
aaa authentication ppp dialin if-needed tacacs+
enable secret cisco
!
no fair-queue
no cdp enable
ppp authentication chap pap dialin
ppp multilink
!
router eigrp 10
network 10.0.0.0
passive-interface Dialer0
redistribute static
default-metric 64 100 250 100 1500
no auto-summary
!
ip local pool dialin_pool 10.1.2.1 10.1.2.50
ip default-gateway 10.1.1.1
ip classless
!
dialer-list 1 protocol ip permit
!
line con 0
login authentication console
line 1 48
autoselect ppp
autoselect during-login
login authentication dialin
modem DialIn
line aux 0
login authentication console
line vty 0 4
login authentication vty
transport input telnet rlogin
end
The following example can be configured on a remote TACACS+ security server, which complements
the Cisco AS5300 access server configuration listed in the previous example:
user = remotelan1 {
chap = cleartext "dialpass1"
service = ppp protocol = ip {
addr = 10.2.1.1
route = "10.2.1.0 255.255.255.0"
}
}
user = PCuser1 {
login = cleartext "dialpass2"
chap = cleartext "dialpass2"
service = ppp protocol = ip {
addr-pool = dialin_pool
}
service = exec {
autocmd = "ppp negotiate"
}
}
user = PCuser2 {
login = cleartext "dialpass3"
chap = cleartext "dialpass3"
service = ppp protocol = ip {
addr-pool = dialin_pool
}
service = exec {
autocmd = "ppp negotiate"
}
PC responding to
dial-out calls from
headquarters
Inventory
Inventory child host
totals ISDN BRI
parent host
Analog Cisco 1604
Dial-out
PRI
Headquarters
Cisco AS5200
PRI
configured for
dial-in and PC running
dial-out calling Dial-in
Windows 95
ISDN BRI
PC dialing
in to
headquarters
There are some restrictions for dial-out calling. Dial-out analog and digital calls are commonly made to
remote ISDN routers, such as the Cisco 1604 router. On the whole, dial out calls are not made from a
central site router to a remote PC but rather from a remote PC in to the central site. However, central site
post offices often call remote office routers on demand to deliver E-mail. Callback is enabled on dial-in
scenarios only. The majority of a dial out software configuration is setup on the router at headquarters,
not the remote office router. Dialing out to a stack group of multiple chassis is not supported by
Cisco IOS software. Note that Multichassis Multilink PPP (MMP) and virtual private dialup networks
(VPDNs) are dial-in only solutions.
Note For more information about dialer profiles, see the chapters “Configuring Peer-to-Peer DDR with Dialer
Profiles” and “Configuring Dial Backup with Dialer Profiles.”
Remote office
network
BRI
Cisco 1600 series
router configured
Headquarter PRI without dialer profiles
ISDN telephone
network network
Cisco AS5200 configured BRI
with one dialer profile
for each Cisco 1600
remote office router Remote office
network
Virtual profiles are user-specific profiles for large-scale dial solutions; however, these profiles are not
manually configured on each router or access server. A virtual profile is a unique PPP application that
can create and configure a virtual access interface dynamically when a dial-in call is received, and tear
down the interface dynamically when the call ends.
The configuration information for a virtual access interface in a virtual profile can come from the virtual
template interface, or from user-specific configuration information stored on an AAA server, or both.
The virtual profile user-specific configuration stored on the AAA server is identified by the
authentication name for the call-in user. (That is, if the AAA server authenticates the user as samson, the
user-specific configuration is listed under samson in the AAA user file.) The virtual profile user-specific
configuration should include only the configuration that is not shared by multiple users. Shared
configuration should be placed in the virtual template interface, where it can be cloned on many virtual
access interfaces as needed.
AAA configurations are much easier to manage for large numbers of dial-in users. Virtual profiles can
span across a group of access servers, but a AAA server is required. Virtual profiles are set up
independently of which access server, interface, or port number users connect to. For users that share
duplicate configuration information, it is best to enclose the configuration in a virtual template. This
requirement eliminates the duplication of commands in each of the user records on the AAA server.
The user-specific AAA configuration used by virtual profiles is interface configuration information and
downloaded during link control protocol (LCP) negotiations. Another feature, called per-user
configuration, also uses configuration information gained from a AAA server. However, per-user
configuration uses network configuration (such as access lists and route filters) downloaded during NCP
negotiations.
Figure 123 shows an example of how virtual profiles are used:
• A large-scale dial-in solution is available, which includes many access servers or routers (for
example, three or more devices stacked together in an MMP scenario).
• Discrimination between large numbers of users is needed.
• Setup and maintenance of a user profile for each dial-in user on each access server or router is much
too time consuming.
• A security server, such as a AAA TACACS or RADIUS server, is available for use.
Note For a virtual profile configuration example, see the section “Large-Scale Dial-In Configuration Using
Virtual Profiles” later in this chapter. For more information about virtual profiles, see the chapters
“Configuring Virtual Profiles” and “Configuring Per-User Configuration” in this publication.
Cisco AS5200s
getting user-profile
Headquarters information from the
network AAA security server
PRI
PRI
AAA TACACS+ Hunt group
security server telephone number
configured with 555-1234
S6816
user-profile
information
Figure 124 Remote Cisco 1600s Dialing In to a Cisco AS5300 at the Central Site
Headquarters network
Cisco AS5200
receiving calls
from Cisco 1600
series routers
PRI
ISDN telephone
network
Access servers or routers that only place calls (not receive calls) do not need any awareness of configured
dialer profiles. Remote routers do not need to discriminate on the basis of which device they are calling
in to. For example, if multiple Cisco 1600 series routers are dialing in to one Cisco AS5300 access
server, the Cisco 1600 series routers should not be configured with dialer profiles. The Cisco AS5300
access server should be configured with dialer profiles. Do not configure dialer profiles on devices that
only make calls.
The configurations examples in the following section are provided for different types of dial scenarios,
which can be derived from Figure 121 through Figure 124:
• Examples with dialer profiles:
– Cisco AS5300 Access Server Configuration with Dialer Profiles
– Cisco 1604 ISDN Router Configuration with Dialer Profiles
– Cisco 1604 Router Asynchronous Configuration with Dialer Profiles
• Examples without dialer profiles:
– Cisco AS5300 Access Server Configuration Without Dialer Profiles
– Cisco 1604 ISDN Router Configuration Without Dialer Profiles
– Cisco 1604 Router Asynchronous Configuration Without Dialer Profiles
• Large-Scale Dial-In Configuration Using Virtual Profiles
Note Be sure to include your own IP addresses, host names, and security passwords where appropriate if
configuring these examples in your network.
interface Dialer16
ip unnumbered loopback 1
encapsulation ppp
no peer default ip address pool
dialer remote-name async7
dialer string 14085267631
dialer hold-queue 10
dialer pool 1
dialer-group 1
ppp authentication pap chap callin
ppp pap sent-username DialupAdmin password 7 07063D11542
!
interface Dialer17
ip unnumbered loopback 2
encapsulation ppp
no peer default ip address pool
dialer remote-name async8
dialer string 14085265153
dialer hold-queue 10
dialer pool 2
dialer-group 1
ppp authentication chap pap
!
interface Dialer18
ip unnumbered loopback 2
encapsulation ppp
no peer default ip address pool
dialer remote-name isdn1
dialer string 14085267887
dialer hold-queue 10
dialer pool 2
dialer-group 1
ppp authentication chap pap
!
interface Dialer19
ip unnumbered loopback 2
encapsulation ppp
no peer default ip address pool
dialer remote-name isdn2
dialer string 14085261591
dialer hold-queue 10
dialer pool 2
dialer-group 1
ppp authentication chap pap
!
interface Dialer20
ip unnumbered loopback 2
encapsulation ppp
no peer default ip address pool
dialer remote-name isdn3
dialer string 14085262118
dialer hold-queue 10
dialer pool 2
dialer-group 1
ppp authentication chap pap
!
interface Dialer21
ip unnumbered loopback 2
encapsulation ppp
no peer default ip address pool
dialer remote-name isdn4
dialer string 14085263757
dialer hold-queue 10
dialer pool 2
dialer-group 1
ppp authentication chap pap
!
interface Dialer22
ip unnumbered loopback 2
encapsulation ppp
no peer default ip address pool
dialer remote-name isdn5
dialer string 14085263769
dialer hold-queue 10
dialer pool 2
dialer-group 1
ppp authentication chap pap
!
interface Dialer23
ip unnumbered loopback 2
encapsulation ppp
no peer default ip address pool
dialer remote-name isdn6
dialer string 14085267884
dialer hold-queue 10
dialer pool 2
dialer-group 1
ppp authentication chap pap
!
interface Dialer24
ip unnumbered loopback 2
encapsulation ppp
no peer default ip address pool
dialer remote-name isdn7
dialer string 14085267360
dialer hold-queue 10
dialer pool 2
dialer-group 1
ppp authentication chap pap
!
interface Dialer25
ip unnumbered loopback 2
encapsulation ppp
no peer default ip address pool
dialer remote-name isdn8
dialer string 14085260361
dialer hold-queue 10
dialer pool 2
dialer-group 1
ppp authentication chap pap
!
router ospf 1
redistribute static subnets
passive-interface Dialer1
passive-interface Dialer2
network 172.18.0.0 0.0.255.255 area 0
!
ip local pool dialin_pool 10.1.2.1 10.1.2.50
ip domain-name cisco.com
ip classless
!
dialer-list 1 protocol ip permit
!
line con 0
exec-timeout 0 0
line 1 24
no exec
exec-timeout 0 0
autoselect during-login
autoselect ppp
script dialer cisco-default
login local
modem InOut
modem autoconfigure type microcom_hdms
transport input telnet
line aux 0
line vty 0 1
exec-timeout 60 0
password cisco
login
line vty 2 5
exec-timeout 5 0
password cisco
login
!
end
password cisco
login
password cisco
login
!
end
interface Serial0:23
no ip address
no ip mroute-cache
encapsulation ppp
isdn incoming-voice modem
dialer rotary-group 2
!
interface Serial1:23
no ip address
no ip mroute-cache
encapsulation ppp
isdn incoming-voice modem
dialer rotary-group 2
!
interface Group-Async1
no ip address
no ip mroute-cache
encapsulation ppp
async dynamic address
async mode interactive
dialer in-band
dialer rotary-group 1
ppp authentication pap callin
ppp pap sent-username HQ5300 password 7 09434678520A
group-range 1 24
!
interface Dialer1
ip address 172.18.38.40 255.255.255.128
encapsulation ppp
no peer default ip address pool
dialer in-band
dialer map ip 172.18.38.41 name async1 14445558983
dialer map ip 172.18.38.42 name async2 14445552012
dialer map ip 172.18.38.43 name async3 14445550706
dialer map ip 172.18.38.44 name async4 14445552731
dialer map ip 172.18.38.45 name async5 14445554431
dialer map ip 172.18.38.46 name async6 14445551933
dialer map ip 172.18.38.47 name async7 14445557631
dialer map ip 172.18.38.48 name async8 14445555153
dialer hold-queue 10
dialer-group 1
ppp authentication pap chap callin
ppp pap sent-username DialupAdmin password 7 07063D11542
!
interface Dialer2
ip address 172.18.38.130 255.255.255.128
encapsulation ppp
no peer default ip address pool
dialer in-band
dialer map ip 172.18.38.131 name isdn1 14445557887
dialer map ip 172.18.38.132 name isdn2 14445551591
dialer map ip 172.18.38.133 name isdn3 14445552118
dialer map ip 172.18.38.134 name isdn4 14445553757
dialer map ip 172.18.38.135 name isdn5 14445553769
dialer map ip 172.18.38.136 name isdn6 14445557884
dialer map ip 172.18.38.137 name isdn7 14445557360
dialer map ip 172.18.38.138 name isdn8 14445550361
dialer hold-queue 10
dialer-group 1
ppp authentication chap pap
ppp multilink
!
router ospf 1
redistribute static subnets
passive-interface Dialer1
passive-interface Dialer2
network 172.18.0.0 0.0.255.255 area 0
!
ip domain-name cisco.com
ip classless
!
dialer-list 1 protocol ip permit
!
line con 0
exec-timeout 0 0
line 1 24
no exec
exec-timeout 0 0
autoselect during-login
autoselect ppp
script dialer cisco-default
login local
modem InOut
modem autoconfigure type microcom_hdms
transport input telnet
line aux 0
line vty 0 1
exec-timeout 60 0
password cisco
login
line vty 2 5
exec-timeout 5 0
password cisco
login
!
end
dialer-group 1
ppp authentication chap pap
!
ip classless
ip route 0.0.0.0 0.0.0.0 172.18.38.130
dialer-list 1 protocol ip permit
!
line con 0
line vty 0 4
password cisco
login
password cisco
login
!
end
The following example configures an entry running on a RADIUS security server, which is queried by
each central site stack member when a call comes in. This entry includes the virtual profile configuration
information for remote users dialing in to the central site stack solution.
In this example, virtual profiles are configured by both virtual templates and AAA configuration. John
and Rick can dial in from anywhere and have their same keepalive settings and their own IP addresses.
The remaining attribute-value pair settings are not used by virtual profiles. They are the
network-protocol access lists and route filters used by AAA-based per-user configuration.
In the AAA configuration cisco-avpair lines, “\n” is used to indicate the start of a new Cisco IOS
command line.
john Password = “welcome”
User-Service-Type = Framed-User,
Framed-Protocol = PPP,
cisco-avpair = “lcp:interface-config=keepalive 75\nip address 100.100.100.100
255.255.255.0”,
cisco-avpair = “ip:rte-fltr-out#0=router igrp 60”,
cisco-avpair = “ip:rte-fltr-out#3=deny 171.0.0.0 0.255.255.255”,
cisco-avpair = “ip:rte-fltr-out#4=deny 172.0.0.0 0.255.255.255”,
cisco-avpair = “ip:rte-fltr-out#5=permit any”
rick Password = “emoclew”
User-Service-Type = Framed-User,
Framed-Protocol = PPP,
cisco-avpair = “lcp:interface-config=keepalive 100\nip address 200.200.200.200
255.255.255.0”,
cisco-avpair = “ip:inacl#3=permit ip any any precedence immediate”,
cisco-avpair = “ip:inacl#4=deny igrp 0.0.1.2 255.255.0.0 any”,
cisco-avpair = “ip:outacl#2=permit ip any any precedence immediate”,
cisco-avpair = “ip:outacl#3=deny igrp 0.0.9.10 255.255.0.0 any”
Description
Sometimes an enterprise conducts its daily business operations across internal mixed protocol
environments. (See Figure 125 and Table 68.) For example, an enterprise might deploy an IP base across
the entire intranet while still allowing file sharing with other protocols such as AppleTalk and AppleTalk
Remote Access (ARA).
NT External/internal AppleTalk
server web server server
IP AppleTalk
S6553
bigcompany.com
Note Depending on your networking needs, the Cisco 7200 series routers could be substituted by one or more
Cisco 3640 series routers. Additionally, the Cisco AS5300 access servers could be replaced by
Cisco 3640 routers loaded with MICA digital modem cards.
Telecommuter PCs
Headquarters network fitted with terminal
adapters dialing in to
headquarters
Cisco 7200 #1
Hunt group
dial-in number
Mixed 1-800-555-1212
protocol
network ISDN and
2 backbone
leading analog
switches
to clients, network
hosts, Catalyst 1900
and other
routers
Cisco 7200 #2
Sales people
Cisco AS5200 dialing in with
S6552
stack group internal modem
If you are setting up dial-in access for remote terminal adapters, the settings configured on the terminal
adapters must match the setting on the access server or router. Depending on your business application,
terminal adapters can operate in many different modes. (See Table 69.)
Note Be sure to include your own IP addresses, host names, and security passwords where appropriate.
interface Serial0:23
no ip address
encapsulation ppp
isdn incoming-voice modem
dialer rotary-group 0
dialer-group 1
no fair-queue
no cdp enable
!
interface Serial1:23
no ip address
encapsulation ppp
isdn incoming-voice modem
dialer rotary-group 0
dialer-group 1
no fair-queue
no cdp enable
!
interface Group-Async1
ip unnumbered Ethernet0
encapsulation ppp
async mode interactive
peer default ip address pool dialin_pool
appletalk client-mode
ipx ppp-client
no cdp enable
ppp authentication chap pap dialin
group-range 1 48
!
interface Dialer0
ip unnumbered Ethernet0
no ip mroute-cache
encapsulation ppp
peer default ip address pool dialin_pool
ipx ppp-client
appletalk client-mode
dialer in-band
dialer-group 1
no fair-queue
no cdp enable
ppp authentication chap pap dialin
ppp multilink
!
ip local pool dialin_pool 10.1.2.1 10.1.2.62
ip default-gateway 10.1.1.1
ip classless
ip route 0.0.0.0 0.0.0.0 10.1.1.1
!
dialer-list 1 protocol ip permit
!
async-bootp dns-server 10.1.0.40 10.1.0.170
async-bootp nbns-server 10.0.235.228 10.0.235.229
!
xremote buffersize 72000
xremote tftp host 10.0.2.74
!
line con 0
login authentication console
line 1 48
autoselect ppp
autoselect during-login
autoselect arap
arap enable
arap authentication default
arap timelimit 240
arap warningtime 15
login authentication dialin
modem DialIn
terminal-type dialup
line aux 0
login authentication console
line vty 0 4
login authentication vty
transport input telnet rlogin
!
end
This chapter provides sample hardware and software configurations for specific dial scenarios used by
telcos, Internet service providers (ISPs), regional Bell operating companies (RBOCs), inter-exchange
carriers (IXCs), and other service providers. Each configuration in this chapter is designed to enable IP
network traffic with basic security authentication.
The following scenarios are described:
• Scenario 1—Small- to Medium-Scale POPs
• Scenario 2—Large-Scale POPs
• Scenario 3—PPP Calls over X.25 Networks
Note In all of these scenarios, you can replace the Cisco AS5200 access server with Cisco AS5300 or
Cisco AS5800 access server. This hardware exchange provides higher call density performance and
increases the number of PRI interfaces and modem ports on each chassis.
Note Be sure to include your own IP addresses, host names, and security passwords where appropriate. The
following sample configurations assume that the dial-in clients are individual PCs running PPP,
connecting to an IP network, and requiring only basic security authentication.
Network Topology
Figure 127 shows a small-scale dial-in scenario using modems.
Figure 127 Remote PC Using an Analog Modem to Dial In to a Cisco Access Server
Internet
PC running Windows 95
and accessing
Analog calls
the Internet
Standard telephone
Analog network (POTS) T1 PRI
modem
Cisco AS5200
used to provide
S6537
Internet access
by an ISP
linecode b8zs
pri-group timeslots 1-24
!
controller T1 1
framing esf
clock source line secondary
linecode b8zs
pri-group timeslots 1-24
!
interface Loopback0
ip address 10.1.2.254 255.255.255.0
!
interface Ethernet0
ip address 10.1.1.10 255.255.255.0
ip summary address eigrp 10 10.1.2.0 255.255.255.0
!
interface Serial0
no ip address
shutdown
!
interface Serial1
no ip address
shutdown
!
interface Serial0:23
no ip address
encapsulation ppp
isdn incoming-voice modem
!
interface Serial1:23
no ip address
isdn incoming-voice modem
!
interface Group-Async1
ip unnumbered Loopback0
encapsulation ppp
async mode interactive
peer default ip address pool dialin_pool
no cdp enable
ppp authentication chap pap dialin
group-range 1 48
!
router eigrp 10
network 10.0.0.0
passive-interface Dialer0
no auto-summary
!
ip local pool dialin_pool 10.1.2.1 10.1.2.50
ip default-gateway 10.1.1.1
ip classless
!
dialer-list 1 protocol ip permit
!
line con 0
login authentication console
line 1 48
autoselect ppp
autoselect during-login
login authentication dialin
modem DialIn
!
line aux 0
login authentication console
line vty 0 4
login authentication vty
transport input telnet rlogin
!
end
Some service providers use a remote TACACS+ or RADIUS security server in this dial-in scenario. The
following example shows a TACACS+ entry that appears in the configuration file of a remote security
server:
user = PCuser1 {
login = cleartext "dialpass1"
chap = cleartext "dialpass1"
service = ppp protocol = ip {
addr-pool = dialin_pool
}
service = exec {
autocmd = "ppp negotiate"
}
}
user = PCuser2 {
login = cleartext "dialpass2"
chap = cleartext "dialpass2"
service = ppp protocol = ip {
addr-pool = dialin_pool
}
service = exec {
autocmd = "ppp negotiate"
}
}
user = PCuser3 {
login = cleartext "dialpass3"
chap = cleartext "dialpass3"
service = ppp protocol = ip {
addr-pool = dialin_pool
}
service = exec {
autocmd = "ppp negotiate"
}
}
Note The following configuration works only for analog modem calls. It includes no serial D-channel
configuration (Serial 0:23 and Serial 1:23).
version xx.x
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
no service udp-small-servers
no service tcp-small-servers
!
hostname NAS
!
aaa new-model
aaa authentication login console enable
aaa authentication login vty tacacs+
aaa authentication login dialin tacacs+
aaa authentication ppp default tacacs+
aaa authentication ppp dialin if-needed tacacs+
enable secret cisco
!
async-bootp dns-server 10.1.3.1 10.1.3.2
isdn switch-type primary-5ess
!
controller T1 0
framing esf
clock source line primary
linecode b8zs
cas-group 0 timeslots 1-24 type e&m-fgb
!
controller T1 1
framing esf
clock source line secondary
linecode b8zs
cas-group 0 timeslots 1-24 type e&m-fgb
!
interface Loopback0
ip address 10.1.2.254 255.255.255.0
!
interface Ethernet0
ip address 10.1.1.10 255.255.255.0
ip summary address eigrp 10 10.1.2.0 255.255.255.0
!
interface Serial0
no ip address
shutdown
!
interface Serial1
no ip address
shutdown
!
interface Group-Async1
ip unnumbered Loopback0
encapsulation ppp
async mode interactive
peer default ip address pool dialin_pool
no cdp enable
ppp authentication chap pap dialin
group-range 1 48
!
router eigrp 10
network 10.0.0.0
passive-interface Dialer0
no auto-summary
!
ip local pool dialin_pool 10.1.2.1 10.1.2.50
ip default-gateway 10.1.1.1
ip classless
!
dialer-list 1 protocol ip permit
!
line con 0
login authentication console
line 1 48
autoselect ppp
autoselect during-login
login authentication dialin
modem DialIn
line aux 0
login authentication console
line vty 0 4
login authentication vty
transport input telnet rlogin
!
end
Network Topology
Figure 128 shows a small-scale dial-in scenario using terminal adapters.
Figure 128 Remote PC Using a Terminal Adapter to Dial In to a Cisco Access Server
Internet
Internet access
by an ISP
To configure one Cisco access server to accept both incoming ISDN and analog calls from individual
terminal adapters and modems, see the section “Mixture of ISDN and Analog Modem Calls” later in this
chapter.
interface Serial1:23
no ip address
encapsulation ppp
dialer rotary-group 0
dialer-group 1
no fair-queue
no cdp enable
!
interface Dialer0
ip unnumbered Loopback0
no ip mroute-cache
encapsulation ppp
peer default ip address pool dialin_pool
dialer in-band
dialer-group 1
no fair-queue
no cdp enable
ppp authentication chap pap dialin
ppp multilink
!
router eigrp 10
network 10.0.0.0
passive-interface Dialer0
no auto-summary
!
ip local pool dialin_pool 10.1.2.1 10.1.2.50
ip default-gateway 10.1.1.1
ip classless
!
dialer-list 1 protocol ip permit
!
line con 0
login authentication console
line 1 48
autoselect ppp
autoselect during-login
login authentication dialin
modem DialIn
line aux 0
login authentication console
line vty 0 4
login authentication vty
transport input telnet rlogin
!
end
Figure 129 Remote PCs Making Digital Calls and Analog Calls to a Cisco Access Server
Home office PC
running Windows 95
and making digital
calls in to the Internet
Terminal
adapter
BRI
ISDN
T1 PRI
Internet
Analog
S6535
Modem ISP using a
Cisco AS5200
to provide
Internet access
Home office PC
running Windows 95
and making analog
modem calls in to
the Internet
Note This configuration assumes that only individual remote PCs are dialing in; no remote routers are dialing
in. For a remote router dial-in configuration, see the chapter “Enterprise Dial Scenarios and
Configurations” in this publication.
version xx.x
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
no service udp-small-servers
no service tcp-small-servers
!
hostname NAS
!
aaa new-model
aaa authentication login console enable
aaa authentication login vty tacacs+
aaa authentication login dialin tacacs+
aaa authentication ppp default tacacs+
aaa authentication ppp dialin if-needed tacacs+
enable secret cisco
!
async-bootp dns-server 10.1.3.1 10.1.3.2
isdn switch-type primary-5ess
!
controller T1 0
framing esf
clock source line primary
linecode b8zs
pri-group timeslots 1-24
!
controller T1 1
framing esf
clock source line secondary
linecode b8zs
pri-group timeslots 1-24
!
interface Loopback0
ip address 10.1.2.254 255.255.255.0
!
interface Ethernet0
ip address 10.1.1.10 255.255.255.0
ip summary address eigrp 10 10.1.2.0 255.255.255.0
!
interface Serial0
no ip address
shutdown
!
interface Serial1
no ip address
shutdown
!
interface Serial0:23
no ip address
encapsulation ppp
isdn incoming-voice modem
dialer rotary-group 0
dialer-group 1
no fair-queue
no cdp enable
!
interface Serial1:23
no ip address
encapsulation ppp
isdn incoming-voice modem
dialer rotary-group 0
dialer-group 1
no fair-queue
no cdp enable
!
interface Group-Async1
ip unnumbered Loopback0
encapsulation ppp
async mode interactive
peer default ip address pool dialin_pool
no cdp enable
ppp authentication chap pap dialin
group-range 1 48
!
interface Dialer0
ip unnumbered Loopback0
no ip mroute-cache
encapsulation ppp
peer default ip address pool dialin_pool
dialer in-band
dialer-group 1
no fair-queue
no cdp enable
ppp authentication chap pap dialin
ppp multilink
!
router eigrp 10
network 10.0.0.0
passive-interface Dialer0
no auto-summary
!
ip local pool dialin_pool 10.1.2.1 10.1.2.50
ip default-gateway 10.1.1.1
ip classless
!
dialer-list 1 protocol ip permit
!
line con 0
login authentication console
line 1 48
autoselect ppp
autoselect during-login
login authentication dialin
modem DialIn
line aux 0
login authentication console
line vty 0 4
login authentication vty
transport input telnet rlogin
end
Large-Scale POPs
This section describes how to set up a stack of access servers for a large-scale dial solution and includes
the following sections:
• Scaling Considerations
• How Stacking Works
• Stack Group of Access Servers Using MMP with an Offload Processor Examples
Scaling Considerations
Because of the significant increase in demand for Internet access, large POPs are required by many
Telcos and ISPs. Internet access configurations can be set up to enable users who dial in with individual
computers to make mixed ISDN multilink or modem connections using a stack of Cisco access servers
that run Multichassis Multilink PPP (MMP).
You must consider scalability and call density issues when designing a large-scale dial-in POP. Because
access servers have physical limitations, such as how many dial-in users can be supported on one device,
you should consider the conditions and recommendations described in Table 70.
Note Depending on the size of your POP requirement, you can replace the Cisco AS5200 access server with
a Cisco AS5300, Cisco AS5800, or Cisco AccessPath. This hardware exchange provides higher call
density performance and increases the number of ISDN PRI ports, channelized ports, and modem ports
on each chassis.
Dial-in session #1
PC running
Windows 95
Hunt
group
555-1001
3 1
4 3 2 1
4 2
Cisco 766 ISDN network Cisco AS5200
Internet access
S6752
Using Multichassis Multilink PPP
Note Effective with Cisco Release 12.4(11)T, the L2F protocol was removed in Cisco IOS Software.
The dial solution becomes more complex when the scenario is scaled to include multiple multilink calls
connecting across multiple chassis. Figure 131 shows a terminal adapter making a call in to the
Cisco AS5200, labeled #1. However, only one of the access server’s 48 B channels is available to accept
the call. The other channels are busy with calls. As a result, one of the terminal adapter’s two B channels
is redirected to device #2. At this point, a multilink multichassis session is shared between two
Cisco AS5200s that belong to the same stack group. Packet fragments A and C go to device #1. Packet
fragments B and D go to device #2.
Because device #1 is the first access server to receive a packet and establish a link, this access server
creates a virtual interface and becomes the bundle master. The bundle master takes ownership of the
MLP session with the remote device. The Multichassis Multilink PPP (MMP) protocol forwards the
second link from device #2 to the bundle master, which in turn bundles the two B channels together and
provides 128 kbps to the end user. Layer 2 Forwarding (L2F) is the mechanism that device #2 uses to
forward all packet fragments received from the terminal adapter to device #1. In this way, all packets and
calls virtually appear to terminate at device #1.
Figure 131 A Stack Group of Access Servers Using MMP Without an Offload Processor
Hunt
group
555-1001
Dial-in session #2 #1 Remote security
server
C A D C B A
Terminal ISDN network
PC adapter
D
Analog network #2
Internet
Modem access
PC
S6751
Setting Up an Offload Server
Because MMP is a processor-intensive application, you might need to offload the processing or
segmentation and reassembly from the Cisco access servers to a router with a more powerful CPU, such
as the Cisco 4700-M or Cisco 7206. We recommend that you include an offload server for dial-in
solutions that support more than 50 percent ISDN calls or more than 10 multilink sessions per Cisco
access server. (See Figure 132.)
Figure 132 A Stack Group of Access Servers Using MMP with an Offload Processor
Dial-in session #1
PC running
Windows 95
Stack of three Cisco AS5200 access servers
used in one service provider network
Hunt
group
555-1001
Cisco 766 #1 Remote security
1 server
4 3 2 1
3
Dial-in session #2
2 #2 Using L2F, all packets
4 are encapsulated and
forwarded to the Cisco 7206
C A D C B A for reassembly of the multilink
Terminal
adapter ISDN network and single link process
PC
D #3
Analog network
B
HSSI Internet
access
S6486
PC
Note An offload server will always serve as the bundle master by bidding a higher value than the other devices.
Using L2F
Note Effective with Cisco Release 12.4(11)T, the L2F protocol was removed in Cisco IOS Software.
L2F is a critical component used in multichassis multilink sessions. If an access server is not in charge
of a multilink session, the access server encapsulates the fragmented PPP frames and forwards them to
the bundle master using L2F. The master device receives the calls, not through the dial port (such as a
dual T1/PRI card), but through the LAN or Ethernet port. L2F simply tunnels packet fragments to the
device that owns the multilink session for the call. If you include an offload server in your dial-in
scenario, it creates all the virtual interfaces, owns all the multilink sessions, and reassembles all the
fragmented packets received by L2F via the other stackgroup members. (Refer to Figure 132.)
Note Be sure to include your own IP addresses, host names, and security passwords where appropriate.
ip unnumbered Loopback0
no ip mroute-cache
encapsulation ppp
peer default ip address pool dialin_pool
dialer in-band
dialer-group 1
no fair-queue
no cdp enable
ppp authentication chap pap dialin
ppp multilink
!
router eigrp 10
network 10.0.0.0
passive-interface Dialer0
no auto-summary
!
ip local pool dialin_pool 10.1.2.1 10.1.2.50
ip default-gateway 10.1.1.1
ip classless
!
dialer-list 1 protocol ip permit
radius-server host 10.1.1.23 auth-port 1645 acct-port 1646
radius-server host 10.1.1.24 auth-port 1645 acct-port 1646
radius-server key cisco
!
line con 0
login authentication console
line 1 48
autoselect ppp
autoselect during-login
login authentication dialin
modem DialIn
line aux 0
login authentication console
line vty 0 4
login authentication vty
transport input telnet rlogin
!
end
group-range 1 48
!
interface Dialer0
ip unnumbered Loopback0
no ip mroute-cache
encapsulation ppp
peer default ip address pool dialin_pool
dialer in-band
dialer-group 1
no fair-queue
no cdp enable
ppp authentication chap pap dialin
ppp multilink
!
router eigrp 10
network 10.0..0.0
passive-interface Dialer0
no auto-summary
!
ip local pool dialin_pool 10.1.2.65 10.1.2.114
ip default-gateway 10.1.1.1
ip classless
!
dialer-list 1 protocol ip permit
radius-server host 10.1.1.23 auth-port 1645 acct-port 1646
radius-server host 10.1.1.24 auth-port 1645 acct-port 1646
radius-server key cisco
!
line con 0
login authentication console
line 1 48
autoselect ppp
autoselect during-login
login authentication dialin
modem DialIn
line aux 0
login authentication console
line vty 0 4
login authentication vty
transport input telnet rlogin
!
end
Note Any Cisco router that has a powerful CPU can be used as an offload server, such as a Cisco 4500-M,
4700-M, or 3640. However, the router must be configured to handle the necessary processing overhead
demanded by each stack member.
version xx.x
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
no service udp-small-servers
no service tcp-small-servers
!
hostname 7200
!
aaa new-model
aaa authentication login default local
aaa authentication login console enable
aaa authentication login vty local
aaa authentication login dialin radius
aaa authentication ppp default local
aaa authentication ppp dialin if-needed radius
aaa authorization exec local radius
aaa authorization network radius
aaa accounting network start-stop radius
aaa accounting exec start-stop radius
enable secret cisco
!
username MYSTACK password STACK-SECRET
username admin password cisco
multilink virtual-template 1
sgbp group MYSTACK
sgbp member AS5200-1 10.1.1.11
sgbp member AS5200-2 10.1.1.12
sgbp member AS5200-3 10.1.1.13
sgbp seed-bid offload
async-bootp dns-server 10.1.3.1 10.1.3.2
!
interface Loopback0
ip address 10.1.2.254 255.255.255.192
!
interface Ethernet2/0
ip address 10.1.1.14 255.255.255.0
ip summary address eigrp 10 10.1.2.192 255.255.255.192
!
interface Ethernet2/1
no ip address
shutdown
!
interface Ethernet2/2
no ip address
shutdown
!
interface Ethernet2/3
no ip address
shutdown
!
interface Virtual-Template1
ip unnumbered Loopback0
no ip mroute-cache
peer default ip address pool dialin_pool
ppp authentication chap pap dialin
ppp multilink
!
router eigrp 10
network 10.0.0.0
passive-interface Virtual-Template1
no auto-summary
!
ip local pool dialin_pool 10.1.2.193 10.1.2.242
ip default-gateway 10.1.1.1
ip classless
!
radius-server host 10.1.1.23 auth-port 1645 acct-port 1646
radius-server host 10.1.1.24 auth-port 1645 acct-port 1646
radius-server key cisco
!
line con 0
login authentication console
line aux 0
login authentication console
line vty 0 4
login authentication vty
!
end
Note You must have the async dynamic address command enabled on the network access server if you use
Framed-IP-Address to statically assign IP addresses.
If you want to prevent a second password prompt from being brought up, you must have the following
two commands enabled on the router or access server:
• rlogin trusted-remoteuser-source local
• rlogin trusted-localuser-source radius
Note This dial-in scenario can also be used as an enterprise solution. In this case, an enterprise consults with
a third-party service provider that allows enterprises to leverage existing X.25 enterprise equipment to
provide connections back into enterprise environments.
Overview
Many cities throughout the world have large installed bases of PCs that interface with older modems,
PADs, and X.25 networks. These remote PCs or terminals dial in to PADs and make X.25 PAD calls or
terminal connections to mainframe computers or other devices, which run the X.25 protocol.
Unfortunately, the user interface is only a regular text-based screen in character mode (as opposed to
packet mode). Therefore, many ISPs and telcos that have large investments in X.25 networks are
upgrading their outdated equipment and creating separate networks for PPP connections. Because this
upgrade process takes substantial time and money to complete, using a Cisco router to allow PPP
connections over an X.25 network is a good interim solution for a dead-end dial case.
Figure 133 Remote PC Browsing the Internet Through an X.25 PAD Call and a Cisco 4500 Router
PC running
Windows 95
and browsing
the Internet
Modem
Berlins PAD
Modem Modem
X.25
S6551
X.25 X.25 installed at
service provider
central site
Modems Modems
For more information about configuring protocol translation, see the chapter “Configuring Protocol
Translation and Virtual Asynchronous Devices” in the Cisco IOS Terminal Services Configuration
Guide.
Note Be sure to include your own IP addresses, host names, and security passwords where appropriate in the
following examples.
line con 0
login authentication console
line aux 0
login authentication console
line vty 0 150
login authentication vty
transport input telnet rlogin
!
end
This appendix provides tables that contain modem initialization strings and sample modem initialization
scripts. Table 71 lists required settings, and error compression (EC) and compression settings for
specific modem types. Use this information to create your modem scripts. Table 72 lists information for
setting AUX ports. SeeTable 73 for a legend of symbols used in these two tables. Sample scripts follow
the tables.
For information about configuring lines to support modems, see the chapters in the part “Modem and
Dial Shelf Configuration and Management” in this publication.
Symbol Meaning
*NA* This option is not available on the noted modem.
--> The command noted on the right will handle that function.
<-- The command noted on the left will handle that function.
AUX port These parameters are only required for pre-9.21 AUX ports or any other port without
modem control set.
CALPAK MXE-9600
Init=AT&F&C1&D3S7=60S0=1&W
Speed=9600
Init=AT&F&C1&D3\J0\N3\Q2\V1%C1S7=60S0=1&W
Speed=9600
Identity ID9632E
Init=AT&F&C1&D3S7=60S0=1&W
Speed=9600
Init=AT&F&C1&D3&K3&Q5\N3%C3S7=60S36=7S46=138S48=7S95=47S0=1&W
Speed=38400