|
|
Question : Problem: Dialer Interface on Cisco
|
|
I am using a ISDN Cisco router to dial to 2 different site using 2 different profile, which makes me to configured the router using 2 dialer interface. The problem is only one dialer interface works but not the other. The config is as below :
interface BRI0 no ip address encapsulation ppp dialer pool-member 1 isdn switch-type basic-net3 no cdp enable ! interface FastEthernet0 ip address 192.168.1.1 255.255.255.0 ip nat inside speed auto ! interface Dialer0 ip unnumbered FastEthernet0 encapsulation ppp dialer pool 1 dialer idle-timeout 300 dialer string 1111 dialer-group 1 no cdp enable ppp authentication chap ! interface Dialer1 ip address negotiated encapsulation ppp dialer pool 1 dialer idle-timeout 180 dialer string 2222 dialer-group 2 ppp chap refuse ppp pap sent-username 2222 password 0 2222
ip route 0.0.0.0 0.0.0.0 Dialer1 200 ip route 0.0.0.0 0.0.0.0 Dialer0 200 ! ip nat inside source list 103 interface Dialer1 overload access-list 101 permit ip any host 10.10.10.1 access-list 102 permit ip any host 20.20.20.2 access-list 103 permit ip any any dialer-list 1 protocol ip list 101 dialer-list 2 protocol ip list 102
anything wrong ??
|
Answer : Problem: Dialer Interface on Cisco
|
|
carollw:
OK - this one has been going for a while now with no new posts, so I'm going to be a little more positive. I am pretty certain of the very first post I made, so that is my official answer. Reject it if it doesn't work, but I really think it will.
As a collaborative tool EE is great - but I think we (the contributors) really need to know whether the suggested solutions work! And if you need to debug the problem further, we need to know where they don't work as well.
Original post was:
You have a couple of things to look into.
1 - your static routes. With 2 default routes to different dialler interfaces, Dialer1 in your case is always going to get hit first. I think (from your access lists) you would be better with the following routes:
ip route 10.0.0.0 255.0.0.0 Dialer0 200 ip route 20.0.0.0 255.0.0.0 Dialer1 200
This way the traffic will match a route through the appropriate dialler. Go more specific with the route masks if you can, as you should never have a route that can be matched for more traffic that should be routed that way. You want any "destination unreachables" to come back from your box before it brings up a dialler and costs you call charges.
2 - your NAT config. You have a NAT that is telling the router to hide the source of all traffic behind dialler1, but dialler1 is not configured with the "ip nat outside" command. Combined with the default routes you have, all your traffic is going to be NAT'ed through dialler1 in your current config.
Change the routes and it will probably start working. Put the "ip nat outside" in for completeness, and because I'm not sure where it might fall over without it...!
Hope this helps,
Matt.
|
|
|
|