CCIE - isdn with ospf deman and GRE

Author

isdn with ospf deman and GRE

jpe

2003-06-18, 5:19 am

Hi ,

Have a look at this trace from r4. (deb ip packet)..

Any idea how to stop this taking the isdn link up and down alll the time

I was thinking of using filters,but not sure how and where....

s=44.44.44.44 (Tunnel47), d=77.77.77.77 (Serial0/0), len 84, sending
r4#
2d04h: IP: s=10.10.46.6 (Tunnel46), d=224.0.0.10, len 60, rcvd 2
r4#
2d04h: IP: s=172.16.44.4 (local), d=224.0.0.10 (Ethernet0/0), len 60, sending broad/multicast
2d04h: %LINK-3-UPDOWN: Interface BRI1/0:1, changed state to up
r4#
2d04h: IP: s=10.10.46.4 (local), d=224.0.0.10 (Tunnel46), len 60, sending broad/multicast
2d04h: IP: s=44.44.44.44 (Tunnel46), d=66.66.66.66 (Serial0/1), len 84, sending
2d04h: IP: s=150.50.46.4 (local), d=224.0.0.10 (Serial0/1), len 60, sending broad/multicast
2d04h: IP: s=10.10.47.7 (Tunnel47), d=224.0.0.10, len 60, rcvd 2
2d04h: %LINEPROTO-5-UPDOWN: Line protocol on Interface BRI1/0:1, changed state to up
r4#
2d04h: IP: s=10.10.47.4 (local), d=224.0.0.10 (Tunnel47), len 60, sending broad/multicast
2d04h: IP: s=44.44.44.44 (Tunnel47), d=77.77.77.77 (Serial0/0), len 84, sending
2d04h: IP: s=150.50.24.2 (Serial0/0), d=224.0.0.5, len 84, rcvd 0
2d04h: IP: s=10.10.46.6 (Tunnel46), d=224.0.0.10, len 60, rcvd 2
r4#
2d04h: IP: s=150.50.24.4 (local), d=224.0.0.5 (Serial0/0), len 84, sending broad/multicast
2d04h: IP: s=172.16.44.4 (local), d=224.0.0.10 (Ethernet0/0), len 60, sending broad/multicast
r4#u alxl
undebug alxl

Jens

mosam

2003-06-18, 6:58 am

Well, I am not sure what u have there under bri interface. "debug ip packet" won't help. Try "debug isdn events".

But try " no peer neighbor-route" under ISDN interface configuration.

jpe

2003-06-18, 7:08 am

I have no peer neighbor-route under the bri interface on both sides..
I have a tunnel intrfase asign to

Here are output from "deb isdn events"

Hpoe you have some good tip...

2d06h:
2d06h: ISDN BR1/0: LIF_EVENT: ces/callid 1/0x8061 HOST_PROCEEDING
2d06h: CCBRI_Go Fr L3 pkt (Len=4) :
2d06h: 7 1 61 91
2d06h:
2d06h: ISDN BR1/0: LIF_EVENT: ces/callid 1/0x8061 HOST_CONNECT
2d06h: %LINK-3-UPDOWN: Interface BRI1/0:1, changed state to up
r4(config-if)#
2d06h: ISDN: get_isdn_service_state(): idb 0x6256BBE4 bchan 2 is_isdn 1 Not a Pri
2d06h: ISDN BR1/0: Event: Connected to 8358662 on B1 at 64 Kb/s
r4(config-if)#
2d06h: %LINEPROTO-5-UPDOWN: Line protocol on Interface BRI1/0:1, changed state to up
r4(config-if)#
2d06h: %ISDN-6-CONNECT: Interface BRI1/0:1 is now connected to 8358662 r5
r4(config-if)#
2d06h: ISDN BR1/0: Event: Hangup call to call id 0x8061 ces = 1
2d06h: ISDN BR1/0: process_disconnect(): call id 0x8061, call type is DATA, b_idb 0x6256BBE4, ces 1, cause Normal call clearing(0x10)
2d06h: %ISDN-6-DISCONNECT: Interface BRI1/0:1 disconnected from 8358662 r5, call lasted 8 seconds
2d06h: ISDN: get_isdn_service_state(): idb 0x6256BBE4 bchan 2 is_isdn 1 Not a Pri
2d06h: CCBRI_Go Fr Host InPkgInfo (Len=13) :
2d06h: 5 8 1 80 61 3 8 1 90 8 2 80 90
2d06h:
2d06h: CCBRI_Go Fr L3 pkt (Len=4) :
2d06h: 4D 1 61 97
2d06h:
2d06h: ISDN BR1/0: LIF_EVENT: ces/callid 1/0x8061 HOST_DISCONNECT_ACK
2d06h: ISDN: get_isdn_service_state(): idb 0x6256BBE4 bchan 2 is_isdn 1 Not a Pri
2d06h: ISDN BR1/0: HOST_DISCONNECT_ACK: call type is DATA
r4(config-if)#
2d06h: %LINK-3-UPDOWN: Interface BRI1/0:1, changed state to down
2d06h: %LINEPROTO-5-UPDOWN: Line protocol on Interface BRI1/0:1, changed state to down
r4(config-if)#

r4 config:

interface BRI1/0
ip address 145.45.45.5 255.255.255.224
encapsulation ppp
ip ospf authentication message-digest
ip ospf message-digest-key 1 md5 hello
ip ospf cost 9999
ip ospf demand-circuit
dialer idle-timeout 8
dialer wait-for-carrier-time 10
dialer map ip 145.45.45.5 broadcast 8358662
dialer-group 1
isdn switch-type basic-ni
isdn spid1 0835866101
isdn spid2 0835866301
no peer neighbor-route
no cdp enable
ppp callback request
ppp authentication chap
ppp chap hostname router4
crypto map supermap
--More--

r 5 config :

!
interface BRI0/0
ip address 145.45.45.5 255.255.255.240
encapsulation ppp
ip ospf authentication message-digest
ip ospf message-digest-key 1 md5 hello
ip ospf cost 9999
ip ospf demand-circuit
dialer callback-secure
dialer idle-timeout 9999
dialer enable-timeout 5
dialer map ip 145.45.45.4 name r5 class callback broadcast 8358661
dialer-group 1
isdn switch-type basic-ni
isdn spid1 0835866201
isdn spid2 0835866401
no peer neighbor-route
no cdp enable
ppp callback accept
ppp authentication chap
end

jpe

2003-06-18, 7:12 am

Here are also the routing table on r 4:

155.155.0.0/24 is subnetted, 1 subnets
B 155.155.155.0 [20/0] via 22.22.22.22, 00:11:31
33.0.0.0/32 is subnetted, 1 subnets
O IA 33.33.33.33 [110/113] via 150.50.24.2, 02:32:19, Serial0/0
55.0.0.0/24 is subnetted, 1 subnets
O E1 55.55.55.0 [110/142] via 150.50.24.2, 02:32:19, Serial0/0
66.0.0.0/24 is subnetted, 1 subnets
D 66.66.66.0 [90/1889792] via 150.50.46.6, 02:48:08, Serial0/1
172.16.0.0/24 is subnetted, 1 subnets
C 172.16.44.0 is directly connected, Ethernet0/0
22.0.0.0/32 is subnetted, 1 subnets
O 22.22.22.22 [110/49] via 150.50.24.2, 02:32:21, Serial0/0
145.45.0.0/27 is subnetted, 1 subnets
C 145.45.45.0 is directly connected, BRI1/0
144.144.0.0/24 is subnetted, 1 subnets
C 144.144.144.0 is directly connected, Loopback1
77.0.0.0/24 is subnetted, 1 subnets
O E1 77.77.77.0 [110/142] via 150.50.24.2, 02:32:21, Serial0/0
111.0.0.0/24 is subnetted, 1 subnets
B 111.111.111.0 [20/0] via 22.22.22.22, 00:11:32
D 192.168.66.0/24 [90/297270016] via 10.10.46.6, 00:29:42, Tunnel46
10.0.0.0/24 is subnetted, 4 subnets
C 10.10.46.0 is directly connected, Tunnel46
C 10.10.47.0 is directly connected, Tunnel47
D 10.10.67.0 [90/310044416] via 10.10.46.6, 00:29:42, Tunnel46
[90/310044416] via 10.10.47.7, 00:29:42, Tunnel47
D 10.10.77.0 [90/297270016] via 10.10.47.7, 00:29:42, Tunnel47
11.0.0.0/32 is subnetted, 1 subnets
O IA 11.11.11.11 [110/113] via 150.50.24.2, 02:32:22, Serial0/0
122.0.0.0/24 is subnetted, 1 subnets
B 122.122.122.0 [20/0] via 22.22.22.22, 04:36:42
44.0.0.0/24 is subnetted, 1 subnets
C 44.44.44.0 is directly connected, Loopback0
150.50.0.0/24 is subnetted, 7 subnets
C 150.50.46.0 is directly connected, Serial0/1
O E1 150.50.57.0 [110/142] via 150.50.24.2, 02:32:22, Serial0/0
O 150.50.12.0 [110/112] via 150.50.24.2, 02:32:24, Serial0/0
O IA 150.50.15.0 [110/122] via 150.50.24.2, 02:32:24, Serial0/0
O E1 150.50.22.0 [110/68] via 150.50.24.2, 02:32:24, Serial0/0
O IA 150.50.23.0 [110/112] via 150.50.24.2, 02:32:24, Serial0/0
C 150.50.24.0 is directly connected, Serial0/0

mosam

2003-06-18, 7:57 am

Well, you are running EIGRP over the tunnel gre . I think this is the traffic thats causing it.. (you can check that using "show dialer")

Well first increase the timeout a little bit as the first step.. 8s is real low..

2nd, try creating a list for your interesting traffic denying "gre".. If it doesn't work, include EIGRP.

I am still confused though on when exactly you want the isdn circuit to kick-in. If its in case the OSPF route is no more valid.. I don't think it will work this way at all.. if you take a look again to R4 routing table. the metric there is 90 for the traffic known through the tunnel.. so, it is not the OSPF thats affecting the circuit, its EIGRP since it has more preference.

Try this out..

If you still don't want to take EIGRP and GRE out of the interesting traffic, there are few workarounds, but ugly ones unfortunately..

jpe

2003-06-18, 8:03 am

jpe

2003-06-18, 8:33 am

Thanks man ,

It seams to work fine, Have a few question thou.
I made this.

access-list 199 deny eigrp any any
access-list 199 permit ip any any

dialer-list 1 protocol ip list 101

and i did set the timeout to 120 on both sides.

I would have touhgt that I would brake the tunnel by denying eigrp as interesting trafik, but that was not the case. But I still se the other side of the tunnel with AD of 90, so are GRE hiding eigrp, so it can work over the tunnel??

Have a look :

155.155.0.0/24 is subnetted, 1 subnets
B 155.155.155.0 [20/0] via 22.22.22.22, 00:22:50
33.0.0.0/32 is subnetted, 1 subnets
O IA 33.33.33.33 [110/113] via 150.50.24.2, 03:47:00, Serial0/0
55.0.0.0/24 is subnetted, 1 subnets
O E1 55.55.55.0 [110/142] via 150.50.24.2, 03:47:00, Serial0/0
66.0.0.0/24 is subnetted, 1 subnets
D 66.66.66.0 [90/1889792] via 150.50.46.6, 04:02:48, Serial0/1
172.16.0.0/24 is subnetted, 1 subnets
C 172.16.44.0 is directly connected, Ethernet0/0
22.0.0.0/32 is subnetted, 1 subnets
O 22.22.22.22 [110/49] via 150.50.24.2, 03:47:01, Serial0/0
145.45.0.0/16 is variably subnetted, 2 subnets, 2 masks
O E1 145.45.45.0/28 [110/142] via 150.50.24.2, 00:06:52, Serial0/0
C 145.45.45.0/27 is directly connected, BRI1/0
144.144.0.0/24 is subnetted, 1 subnets
C 144.144.144.0 is directly connected, Loopback1
77.0.0.0/24 is subnetted, 1 subnets
O E1 77.77.77.0 [110/142] via 150.50.24.2, 03:47:01, Serial0/0
111.0.0.0/24 is subnetted, 1 subnets
B 111.111.111.0 [20/0] via 22.22.22.22, 00:22:51
D 192.168.66.0/24 [90/297270016] via 10.10.46.6, 01:44:23, Tunnel46
10.0.0.0/24 is subnetted, 4 subnets
C 10.10.46.0 is directly connected, Tunnel46
C 10.10.47.0 is directly connected, Tunnel47
D 10.10.67.0 [90/310044416] via 10.10.46.6, 01:44:23, Tunnel46
[90/310044416] via 10.10.47.7, 01:44:23, Tunnel47
D 10.10.77.0 [90/297270016] via 10.10.47.7, 01:44:23, Tunnel47
11.0.0.0/32 is subnetted, 1 subnets
O IA 11.11.11.11 [110/113] via 150.50.24.2, 03:47:02, Serial0/0
122.0.0.0/24 is subnetted, 1 subnets
B 122.122.122.0 [20/0] via 22.22.22.22, 00:22:52
44.0.0.0/24 is subnetted, 1 subnets
C 44.44.44.0 is directly connected, Loopback0
150.50.0.0/24 is subnetted, 7 subnets
C 150.50.46.0 is directly connected, Serial0/1
O E1 150.50.57.0 [110/142] via 150.50.24.2, 03:47:15, Serial0/0
O 150.50.12.0 [110/112] via 150.50.24.2, 03:47:15, Serial0/0
O IA 150.50.15.0 [110/122] via 150.50.24.2, 03:47:15, Serial0/0
O E1 150.50.22.0 [110/68] via 150.50.24.2, 03:47:15, Serial0/0
O IA 150.50.23.0 [110/112] via 150.50.24.2, 03:47:15, Serial0/0
C 150.50.24.0 is directly connected, Serial0/0
r4#

mosam

2003-06-18, 9:09 am

no.. you are not hiding anything.. the situation is still as it is from the routing point.

EIGRP updates are still traveling over the tunnel, but since you marked it uninteresting traffic, it won't trigger ISDN no more.

Since I am not familiar with your setup, now the question is, what if the main physical link goes down? Will the ISDN circuit kick-in? Try it out!

jpe

2003-06-18, 9:23 am

Hi again ,

When primary went down
The isdn link came up and ospf is sending hello over the isdn link, but none routes are put in the routing table.. why is that

Here are some trace of deb ospf events :

BRI1/0 is up, line protocol is up (spoofing)
Internet Address 145.45.45.5/27, Area 1
Process ID 100, Router ID 44.44.44.44, Network Type POINT_TO_POINT, Cost: 9999
Configured as demand circuit.
Run as demand circuit.
DoNotAge LSA allowed.
Transmit Delay is 1 sec, State DOWN,
Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5
Hello due in 00:00:10 (using PollInterval of 40)
r4#
2d08h: OSPF: Rcv hello from 22.22.22.22 area 1 from Serial0/0 150.50.24.2
2d08h: OSPF: End of hello processing
2d08h: OSPF: Send with youngest Key 1
r4#
2d08h: OSPF: Rcv hello from 55.55.55.55 area 1 from BRI1/0 145.45.45.5
r4#
2d08h: OSPF: Send with youngest Key 1
r4#
2d08h: OSPF: Rcv hello from 22.22.22.22 area 1 from Serial0/0 150.50.24.2
2d08h: OSPF: End of hello processing
2d08h: OSPF: Send with youngest Key 1
r4#sh ip route
Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area
* - candidate default, U - per-user static route, o - ODR
P - periodic downloaded static route

Gateway of last resort is not set

66.0.0.0/24 is subnetted, 1 subnets
D 66.66.66.0 [90/1889792] via 150.50.46.6, 04:54:11, Serial0/1
172.16.0.0/24 is subnetted, 1 subnets
C 172.16.44.0 is directly connected, Ethernet0/0
22.0.0.0/32 is subnetted, 1 subnets
O 22.22.22.22 [110/49] via 150.50.24.2, 00:04:18, Serial0/0
145.45.0.0/27 is subnetted, 1 subnets
C 145.45.45.0 is directly connected, BRI1/0
144.144.0.0/24 is subnetted, 1 subnets
C 144.144.144.0 is directly connected, Loopback1
D 192.168.66.0/24 [90/297270016] via 10.10.46.6, 02:35:46, Tunnel46
10.0.0.0/24 is subnetted, 1 subnets
C 10.10.46.0 is directly connected, Tunnel46
--More--
2d08h: OSPF: Rcv hello from 22.22.22.22 area 1 from Serial0/0 150.50.24.2
2d08h: OSPF: End of hello processing
2d08h: OSPF: Send with youngest Key 1
122.0.0.0/24 is subnetted, 1 subnets
B 122.122.122.0 [20/0] via 22.22.22.22, 01:14:18
44.0.0.0/24 is subnetted, 1 subnets
C 44.44.44.0 is directly connected, Loopback0
150.50.0.0/24 is subnetted, 3 subnets
C 150.50.46.0 is directly connected, Serial0/1
O E1 150.50.22.0 [110/68] via 150.50.24.2, 00:04:23, Serial0/0
C 150.50.24.0 is directly connected, Serial0/0
r4#
2d08h: OSPF: Rcv hello from 22.22.22.22 area 1 from Serial0/0 150.50.24.2
2d08h: OSPF: End of hello processing
2d08h: OSPF: Send with youngest Key 1
r4#
2d08h: OSPF: Rcv hello from 22.22.22.22 area 1 from Serial0/0 150.50.24.2
2d08h: OSPF: End of hello processing
2d08h: OSPF: Send with youngest Key 1
r4#
2d08h: OSPF: Rcv hello from 55.55.55.55 area 1 from BRI1/0 145.45.45.5
r4#
2d08h: OSPF: Send with youngest Key 1
r4#
2d08h: OSPF: Rcv hello from 22.22.22.22 area 1 from Serial0/0 150.50.24.2
2d08h: OSPF: End of hello processing
2d08h: OSPF: Send with youngest Key 1
r4#
2d08h: OSPF: Rcv hello from 22.22.22.22 area 1 from Serial0/0 150.50.24.2
2d08h: OSPF: End of hello processing
2d08h: OSPF: Send with youngest Key 1
r4#sh run int bri1/0
Building configuration...

Current configuration : 506 bytes
!
interface BRI1/0
ip address 145.45.45.5 255.255.255.224
encapsulation ppp
ip ospf authentication message-digest
ip ospf message-digest-key 1 md5 hello
ip ospf cost 9999
ip ospf demand-circuit
dialer wait-for-carrier-time 10
dialer map ip 145.45.45.5 broadcast 8358662
dialer-group 1
isdn switch-type basic-ni
isdn spid1 0835866101
isdn spid2 0835866301
no peer neighbor-route
no cdp enable
ppp callback request
ppp authentication chap
ppp chap hostname router4
crypto map supermap
end

r4#
2d08h: OSPF: Rcv hello from 22.22.22.22 area 1 from Serial0/0 150.50.24.2
2d08h: OSPF: End of hello processing
2d08h: OSPF: Send with youngest Key 1
r4#
TS_34>5
[Resuming connection 5 to r5 ... ]

(255.255.255
r5>
r5>en
r5#sh run int bri0/0
Building configuration...

Current configuration : 496 bytes
!
interface BRI0/0
ip address 145.45.45.5 255.255.255.240
encapsulation ppp
ip ospf authentication message-digest
ip ospf message-digest-key 1 md5 hello
ip ospf cost 9999
ip ospf demand-circuit
dialer callback-secure
dialer enable-timeout 5
dialer map ip 145.45.45.4 name r5 class callback broadcast 8358661
dialer-group 1
isdn switch-type basic-ni
isdn spid1 0835866201
isdn spid2 0835866401
no peer neighbor-route
no cdp enable
ppp callback accept
ppp authentication chap
end

r5#sh isdn ac
--------------------------------------------------------------------------------
ISDN ACTIVE CALLS
--------------------------------------------------------------------------------
Call Calling Called Remote Seconds Seconds Seconds Charges
Type Number Number Name Used Left Idle Units/Currency
--------------------------------------------------------------------------------
Out 8358661 router4 3578 101 18 0
--------------------------------------------------------------------------------

r5#
TS_34>4

mosam

2003-06-18, 2:50 pm

Not really sure why,

Is ISDN circuit in the same OSPF area as the serial link in both routers? Just look into the OSPF configs again and make sure you don't have any router separated from the backbone area once the main link goes down. And check if you need any virtual-link to be configured anywhere.

I assume of course that you are already running OSPF over both bri interfaces.

Check "show ip ospf inter" to make sure both interfaces are part of OSPF. Also make sure neighbours are still there in OSPF "show ip ospf nei"

yataozhu

2003-06-24, 5:25 pm

If you are still interested in this subject and have the setup, can you please paste your configs here?

Also it is much easier to determine what brought up the isdn by using "debug dialer packet" instead of debug ip packet.

I am playing with ISDN/DDR stuff right now, so we might be able to exchange some ideas.

Yatao

Sponsored Links