Cisco Router 860, 880 Series User Manual

							 
PART 2
Configuring the Router 
						

							CH A P T E R
 
5-1
Cisco 860 and Cisco 880 Series Integrated Services Routers Software Configuration Guide
OL-xxxxx-xx
5
Configuring Backup Data Lines and Remote 
Management
This chapter describes configuring backup data lines and remote management in the following sections:
 Configuring Backup Interfaces, page 5-2
 Configuring Dial Backup and Remote Management Through the Console or Auxiliary Port, 
page 5-2
 Configuring Data Line Backup and Remote Management Through the ISDN S/T Port, page 5-8.
 Configuring the Cellular Wireless Interface, page 5-15
 Configuring Cellular Wireless Interface Data Line Backup, page 5-31
The Cisco 880 Series Integrated Services Routers (ISRs) support remote management and backup data 
connectivity by means of ISDN or 3G (see 
Ta b l e 5-1). The backup data line connection enables the 
Cisco 880 series ISRs to prevent WAN downtime. At present the routers do not support voice backup.
You can configure remote management functions as follows:
 Through the auxiliary port on any Cisco 880 series ISRs
 Through the ISDN S/T port on the Cisco 880 series ISRs
NoteOn the Cisco 880 series ISRs the console port and the auxiliary port are on the same physical RJ-45 port. 
Therefore, the two ports cannot be activated simultaneously. You must use the command-line interface 
(CLI) must be used to enable the desired function.
Ta b l e 5-1Model Numbers and Data Line Backup Capabilities
Router Model NumberISDN3G
881G—Ye s
888G—Ye s
888Ye s— 
						

							 
5-2
Cisco 860 and Cisco 880 Series Integrated Services Routers Software Configuration Guide
OL-xxxxx-xx
Chapter 5      Configuring Backup Data Lines and Remote Management
  Configuring Backup Interfaces
Configuring Backup Interfaces
When the router receives an indication that the primary interface is down, the backup interface becomes 
enabled. After the primary connection has been restored for a specified period, the backup interface is 
disabled. 
Even if the backup interface comes out of standby mode, the router does not enable the backup interface 
unless the router receives the traffic specified for that backup interface.
To configure your router with a backup interface, perform these steps, beginning in global configuration 
mode:
Configuring Dial Backup and Remote Management Through the 
Console or Auxiliary Port
When customer premises equipment, such as a Cisco 880 series ISR is connected to an ISP, an IP address 
is dynamically assigned to the router, or the IP address may be assigned by the router peer through the 
centrally managed function. The dial backup feature can be added to provide a failover route in case the 
primary line fails. The Cisco 880 series ISRs can use the auxiliary port for dial backup and remote 
management.
CommandPurpose
Step 1interface type number
Example:
Router(config)# interface atm 0
Router(config-if)#
Enters interface configuration mode for the 
interface for which you want to configure backup.
This can be a serial interface, ISDN interface, or 
asynchronous interface. 
The example shows the configuration of a backup 
interface for an ATM WAN connection.
Step 2backup interface interface-type 
interface-number
Example:
Router(config-if)# backup interface bri 0
Router(config-if)#
Assigns an interface as the secondary, or backup 
interface.
This can be a serial interface or asynchronous 
interface. For example, a serial 1 interface could 
be configured to back up a serial 0 interface. 
The example shows a BRI interface configured as 
the backup interface for the ATM 0 interface.
Step 3exit
Example:
Router(config-if)# exit
Router(config)#
Exits the configuration interface mode. 
						

							 
5-3
Cisco 860 and Cisco 880 Series Integrated Services Routers Software Configuration Guide
OL-xxxxx-xx
Chapter 5      Configuring Backup Data Lines and Remote Management
  Configuring Dial Backup and Remote Management Through the Console or Auxiliary Port
Figure 5-1 shows the network configuration used for remote management access and for providing 
backup to the primary WAN line.
Figure 5-1 Dial Backup and Remote Management Through the Auxiliary Port
To configure dial backup and remote management for these routers, perform these steps, beginning in 
global configuration mode:
1 Cisco 880 series routerAMain WAN link; primary connection to Internet service provider
2ModemBDial backup; serves as a failover link for Cisco 880 routers when 
primary line goes down
3PCCRemote management; serves as dial-in access to allow changes or 
updates to Cisco IOS configurations
82269
A1
3
2
2
C
B
BC
2
AT M
PSTN
CommandPurpose
Step 1ip name-server server-address
Example:
Router(config)#ip name-server 192.168.28.12
Router(config)#
Enters your ISP DNS IP address.
Ti pYou may add multiple server addresses if 
available.
Step 2ip dhcp pool name
Example:
Router(config)#ip dhcp pool 1Router(config-dhcp)#
Creates a DHCP address pool on the router and 
enters DHCP pool configuration mode. The name 
argument can be a string or an integer.
 Configure the DHCP address pool. For 
sample commands that you can use in DHCP 
pool configuration mode, see the 
“Example” 
section on page 5-6. 
						

							 
5-4
Cisco 860 and Cisco 880 Series Integrated Services Routers Software Configuration Guide
OL-xxxxx-xx
Chapter 5      Configuring Backup Data Lines and Remote Management
  Configuring Dial Backup and Remote Management Through the Console or Auxiliary Port
Step 3exit
Example:
Router(config-dhcp)#exitRouter(config)#
Exits config-dhcp mode and enters global 
configuration mode.
Step 4chat-script script-name expect-send
Example:
Router(config)# chat-script Dialout ABORT 
ERROR ABORT BUSY ““ “AT” OK “ATDT 5555102 
T” TIMEOUT 45 CONNECT \c
Router(config)#
Configures a chat script used in dial-on-demand 
routing (DDR) to give commands for dialing a 
modem and for logging in to remote systems. The 
defined script is used to place a call over a modem 
connected to the PSTN.
Step 5interface type number
Example:
Router(config)# interface Async 1Router(config-if)#
Creates and enters configuration mode for the 
asynchronous interface.
Configure the asynchronous interface. For sample 
commands that you can use in asynchronous 
interface configuration mode, see the 
“Example” 
section on page 5-6.
Step 6exit
Example:
Router(config-if)# exit
Router(config)#
Enters global configuration mode.
Step 7interface type number
Example:
Router(config)# interface Dialer 3Router(config-if)#
Creates and enters configuration mode for the 
dilaer interface.
Step 8dialer watch-group group-number
Example:
Router(config-if)# dialer watch-group 1
Router(config-if)#
Specifies the group number for the watch list.
Step 9exit
Example:
Router(config-if)# exit
Router(config)#
Exits the interface configuration mode.
Command Purpose 
						

							 
5-5
Cisco 860 and Cisco 880 Series Integrated Services Routers Software Configuration Guide
OL-xxxxx-xx
Chapter 5      Configuring Backup Data Lines and Remote Management
  Configuring Dial Backup and Remote Management Through the Console or Auxiliary Port
Step 10ip nat inside source {list access-list-number} 
{interface type number | pool name} [overload]
Example:
Router(config)# ip nat inside source list 
101 interface Dialer 3 overload
Enables dynamic translation of addresses on the 
inside interface.
Step 11ip route prefix mask {ip-address | interface-type 
interface-number [ip-address]}
Example:
Router(config)# ip route 0.0.0.0 0.0.0.0 
22.0.0.2
Router(config)#
Sets the IP route to point to the dialer interface as 
a default gateway.
Step 12access-list access-list-number {deny | permit} 
source [source-wildcard]
Example:
Router(config)# access-list 1 permit 
192.168.0.0 0.0.255.255 any
Defines an extended access list that indicates 
which addresses need translation.
Step 13dialerwatch-list group-number {ip ip-address 
address-mask | delay route-check initial 
seconds}
Example:
Router(config)# dialer watch-list 1 ip 
22.0.0.2 255.255.255.255
Router(config)#
Evaluates the status of the primary link, based on 
the existence of routes to the peer. The address 
22.0.0.2 is the peer IP address of the ISP.
Step 14line [aux | console | tty | vty] line-number 
[ending-line-number]
Example:
Router(config)# line console 0Router(config-line)#
Enters configuration mode for the line interface.
Step 15modem enable
Example:
Router(config-line)# modem enable
Router(config-line)#
Switches the port from console to auxiliary port 
function.
Step 16exit
Example:
Router(config-line)# exit
Router(config)#
Exits the configure interface mode.
Command Purpose 
						

							 
5-6
Cisco 860 and Cisco 880 Series Integrated Services Routers Software Configuration Guide
OL-xxxxx-xx
Chapter 5      Configuring Backup Data Lines and Remote Management
  Configuring Dial Backup and Remote Management Through the Console or Auxiliary Port
Example
The following configuration example specifies an IP address for the ATM interface through PPP and 
IPCP address negotiation and dial backup over the console port.
!
ip name-server 192.168.28.12ip dhcp excluded-address 192.168.1.1
!
ip dhcp pool 1 import all
 network 192.168.1.0 255.255.255.0
 default-router 192.168.1.1!
! Need to use your own correct ISP phone number.
modemcap entry MY-USER_MODEM:MSC=&F1S0=1chat-script Dialout ABORT ERROR ABORT BUSY ““ “AT” OK “ATDT 5555102\T”
TIMEOUT 45 CONNECT \c
!!
!
!interface vlan 1
 ip address 192.168.1.1 255.255.255.0
 ip nat inside ip tcp adjust-mss 1452
 hold-queue 100 out
!! Dial backup and remote management physical interface.
interface Async1
 no ip address encapsulation ppp
 dialer in-band
 dialer pool-member 3 async default routing
 async dynamic routing
 async mode dedicated ppp authentication pap callin
!
Step 17line [aux | console | tty | vty] line-number 
[ending-line-number]
Example:
Router(config)# line aux 0Router(config)#
Enters configuration mode for the auxiliary 
interface.
Step 18flowcontrol {none | software [lock] [in | out] | 
hardware [in | out]} 
Example:
Router(config)# flowcontrol hardware
Router(config)#
Enables hardware signal flow control.
Command Purpose 
						

							 
5-7
Cisco 860 and Cisco 880 Series Integrated Services Routers Software Configuration Guide
OL-xxxxx-xx
Chapter 5      Configuring Backup Data Lines and Remote Management
  Configuring Dial Backup and Remote Management Through the Console or Auxiliary Port
interface ATM0 mtu 1492
 no ip address
 no atm ilmi-keepalive pvc 0/35
 pppoe-client dial-pool-number 1
!dsl operating-mode auto
!
! Primary WAN link.interface Dialer1
 ip address negotiated
 ip nat outside encapsulation ppp
 dialer pool 1
 ppp authentication pap callin ppp pap sent-username account password 7 pass
 ppp ipcp dns request
 ppp ipcp wins request ppp ipcp mask request
!
! Dialer backup logical interface.interface Dialer3
 ip address negotiated
 ip nat outside
 encapsulation ppp no ip route-cache
 no ip mroute-cache
 dialer pool 3 dialer idle-timeout 60
 dialer string 5555102 modem-script Dialout
 dialer watch-group 1!
! Remote management PC IP address.
peer default ip address 192.168.2.2no cdp enable
!
! Need to use your own ISP account and password.ppp pap sent-username account password 7 pass
ppp ipcp dns request
ppp ipcp wins requestppp ipcp mask request
!
! IP NAT over Dialer interface using route-map.ip nat inside source route-map main interface Dialer1 overload
ip nat inside source route-map secondary interface Dialer3 overload
ip classless!
! When primary link is up again, distance 50 will override 80 if dial backup 
! has not timed out. Use multiple routes because peer IP addresses are alternated ! among them when the CPE is connected.
ip route 0.0.0.0 0.0.0.0 64.161.31.254 50
ip route 0.0.0.0 0.0.0.0 66.125.91.254 50ip route 0.0.0.0 0.0.0.0 64.174.91.254 50
ip route 0.0.0.0 0.0.0.0 63.203.35.136 80
ip route 0.0.0.0 0.0.0.0 63.203.35.137 80ip route 0.0.0.0 0.0.0.0 63.203.35.138 80
ip route 0.0.0.0 0.0.0.0 63.203.35.139 80
ip route 0.0.0.0 0.0.0.0 63.203.35.140 80ip route 0.0.0.0 0.0.0.0 63.203.35.141 80
ip route 0.0.0.0 0.0.0.0 Dialer1 150
no ip http serverip pim bidir-enable
! 
						

							 
5-8
Cisco 860 and Cisco 880 Series Integrated Services Routers Software Configuration Guide
OL-xxxxx-xx
Chapter 5      Configuring Backup Data Lines and Remote Management
  Configuring Data Line Backup and Remote Management Through the ISDN S/T Port
! PC IP address behind CPE.access-list 101 permit ip 192.168.0.0 0.0.255.255 any
access-list 103 permit ip 192.168.0.0 0.0.255.255 any
!! Watch multiple IP addresses because peers are alternated 
! among them when the CPE is connected.
dialer watch-list 1 ip 64.161.31.254 255.255.255.255dialer watch-list 1 ip 64.174.91.254 255.255.255.255
dialer watch-list 1 ip 64.125.91.254 255.255.255.255
!! Dial backup will kick in if primary link is not available 
! 5 minutes after CPE starts up.
dialer watch-list 1 delay route-check initial 300dialer-list 1 protocol ip permit
!
! Direct traffic to an interface only if the dialer is assigned an IP address.route-map main permit 10
 match ip address 101
 match interface Dialer1!
route-map secondary permit 10
 match ip address 103 match interface Dialer3
!
! Change console to aux function.
line con 0 exec-timedout 0 0
 modem enable
 stopbits 1line aux 0
 exec-timeout 0 0
 ! To enable and communicate with the external modem properly. script dialer Dialout
 modem InOut
 modem autoconfigure discovery transport input all 
 stopbits 1
 speed 115200 flowcontrol hardware
line vty 0 4
 exec-timeout 0 0 password cisco
 login
!scheduler max-task-time 5000
end
Configuring Data Line Backup and Remote Management 
Through the ISDN S/T Port
Cisco 880 series routers can use the ISDN S/T port for remote management. Figure 5-2 and Figure 5-3 
show two typical network configurations that provide remote management access and backup for the 
primary WAN line. In 
Figure 5-2, the dial backup link goes through a customer premises equipment