Friday, March 31, 2006

WAN - ISDN bonding up to 8 PRIs in IPVPN network


ISDN-BONDING-UP-TO-7PRI#sh run
Building configuration...
!
version 12.2
!
hostname ISDN-BONDING-UP-TO-7PRI
!
ip subnet-zero
ip cef
!
isdn switch-type primary-net5
!
controller E1 1/0
channel-group 0 timeslots 1-30
description DQ4490002
!
controller E1 1/1
shutdown
!
controller E1 1/2
shutdown
!
controller E1 1/3
shutdown
!
controller E1 1/4
framing NO-CRC4
pri-group timeslots 1-30
description *** 1ST PRI ****
!
controller E1 1/5
framing NO-CRC4
pri-group timeslots 1-30
description *** 2ND PRI ****
!
controller E1 1/6
framing NO-CRC4
pri-group timeslots 1-30
description *** 3RD PRI ****
!
controller E1 1/7
framing NO-CRC4
pri-group timeslots 1-30
description *** 4TH PRI ****
!
controller E1 2/0
framing NO-CRC4
pri-group timeslots 1-30
description *** 5TH PRI ****
!
controller E1 2/1
pri-group timeslots 1-30
description *** 6TH PRI ****
!
controller E1 2/2
pri-group timeslots 1-30
description *** 7TH PRI ****
!
controller E1 2/3
pri-group timeslots 1-30
description *** 8TH PRI ****
!
controller E1 2/4
shutdown
!
controller E1 2/5
shutdown
!
controller E1 2/6
shutdown
!
controller E1 2/7
shutdown
!
interface GigabitEthernet0/1
ip address 200.10.10.2 255.255.255.0
no keepalive
speed 100
media-type rj45
!
interface Serial1/0:0
description ***LEASED LINE ***
backup delay 5 300
backup interface Dialer0

ip address 59.139.19.34 255.255.255.252
!
interface Serial1/4:15
no ip address
encapsulation ppp
dialer pool-member 1
isdn switch-type primary-net5
ppp multilink

!
interface Serial1/5:15
no ip address
encapsulation ppp
dialer pool-member 1
isdn switch-type primary-net5
ppp multilink
!
interface Serial1/6:15
no ip address
encapsulation ppp
dialer pool-member 1
isdn switch-type primary-net5
ppp multilink

!
interface Serial1/7:15
no ip address
encapsulation ppp
dialer pool-member 1
isdn switch-type primary-net5
ppp multilink

!
interface Serial2/0:15
no ip address
encapsulation ppp
dialer pool-member 1
isdn switch-type primary-net5
ppp multilink

!
interface Serial2/1:15
no ip address
encapsulation ppp
dialer pool-member 1
isdn switch-type primary-net5
ppp multilink
!
interface Serial2/2:15
no ip address
encapsulation ppp
dialer pool-member 1
isdn switch-type primary-net5
ppp multilink

!
interface Serial2/3:15
no ip address
encapsulation ppp
dialer pool-member 1
isdn switch-type primary-net5
ppp multilink

!
interface Dialer0
ip address negotiated
encapsulation ppp
dialer pool 1
dialer idle-timeout 600
dialer string
dialer load-threshold 1 outbound
dialer-group 1
ppp chap hostname abc@abc.com
ppp chap password abc
multilink min-links 240 (it can support up to 255 B-channels)
!
ip classless
ip route 0.0.0.0 0.0.0.0 59.139.19.33
ip route 0.0.0.0 0.0.0.0 Dialer0 230
!
dialer-list 1 protocol ip permit
!
end

Friday, March 24, 2006

MULTIHOMING ENVIRONMENT IN MPLS NETWORK


PE AAA

!
ip vrf V322:POCIP
rd 12345:1304
route-target export 12345:1295
route-target export 12345:102
route-target import 12345:1295
route-target import 12345:1296
!
interface Serial8/0/1.1/1/6/3:0
description ***LEASED LINE TO CE1***
ip vrf forwarding V322:POCIP
ip address 59.139.19.33 255.255.255.252
no fair-queue
service-policy input apply_no_qos
!
address-family ipv4 vrf V322:POCIP
redistribute connected
redistribute static
neighbor 59.139.19.34 remote-as 10
neighbor 59.139.19.34 activate
neighbor 59.139.19.34 as-override
neighbor 59.139.19.34 allowas-in 10
maximum-paths eibgp 4
default-information originate
no auto-summary
no synchronization
exit-address-family
!
ip access-list extended V322:POCIP_VPNSC_GREY_MGMT_ACL
permit ip 59.139.19.32 0.0.0.3 any
!
route-map grey_mgmt_vpn_TMIPVPN_V322:POCIP permit 10
match ip address V322:POCIP_VPNSC_GREY_MGMT_ACL
set extcommunity rt 12345:1001 additive
!

PE BBB

!
ip vrf V368:POCIP
rd 12345:1349
export map grey_mgmt_vpn_TMIPVPN_V368:POCIP
route-target export 12345:1295
route-target export 12345:102
route-target import 12345:1000
route-target import 12345:1295
route-target import 12345:1296
!
!
interface Serial8/0/1.1/1/1/2:0
description ***LEASED LINE TO CE2***
ip vrf forwarding V368:POCIP
ip address 59.139.19.37 255.255.255.252
no fair-queue
service-policy input apply_no_qos
!
!
address-family ipv4 vrf V368:POCIP
redistribute connected
redistribute static
neighbor 59.139.19.38 remote-as 10
neighbor 59.139.19.38 activate
neighbor 59.139.19.38 as-override
neighbor 59.139.19.38 allowas-in 10
maximum-paths eibgp 4
no auto-summary
no synchronization
exit-address-family
!
ip access-list extended V368:POCIP_VPNSC_GREY_MGMT_ACL
permit ip 59.139.19.36 0.0.0.3 any
!
route-map grey_mgmt_vpn_TMIPVPN_V368:POCIP permit 10
match ip address V368:POCIP_VPNSC_GREY_MGMT_ACL
set extcommunity rt 12345:1001 additive
!




ROUTER CE1


CE1-AAA#sh run
!
version 12.2
!
ip subnet-zero
!
controller E1 6/0
channel-group 0 timeslots 1-30
!
interface FastEthernet0/0
ip address 200.10.10.1 255.255.255.0
duplex auto
speed 100
!
interface Serial6/0:0
description ***LEASED LINE TO PE AAA***
ip address 59.139.19.34 255.255.255.252
no fair-queue
!
router ospf 9191
log-adjacency-changes
redistribute connected subnets
redistribute static subnets
redistribute bgp 10 subnets
network 200.10.10.0 0.0.0.255 area 0
!
router bgp 10
no synchronization
bgp log-neighbor-changes
redistribute static metric 1
redistribute ospf 9191 metric 1 match internal external 1 external 2
neighbor 59.139.19.33 remote-as 12345
neighbor 59.139.19.33 allowas-in 10
neighbor 200.10.10.2 remote-as 10
default-information originate
no auto-summary
!
ip classless
!
!
end


ROUTER CE2


CE2-BBB#sh run
Building configuration...
!
version 12.2
!
ip subnet-zero
!
controller E1 1/0
channel-group 0 timeslots 1-31
!
interface GigabitEthernet0/1
ip address 200.10.10.2 255.255.255.0
duplex auto
speed 100
media-type rj45
no negotiation auto
!
interface Serial1/0:0
description ***LEASED LINE TO PE BBB***
ip address 59.139.19.38 255.255.255.252
no fair-queue
!
router ospf 9191
log-adjacency-changes
redistribute connected subnets
redistribute static subnets
redistribute bgp 10 subnets
network 200.10.10.0 0.0.0.255 area 0
!
router bgp 10
no synchronization
bgp log-neighbor-changes
redistribute static metric 1
redistribute ospf 9191 metric 1 match internal external 1 external 2
neighbor 59.139.19.37 remote-as 12345
neighbor 59.139.19.37 allowas-in 10
neighbor 200.10.10.5 remote-as 10
default-information originate
no auto-summary
!
ip classless
!
end

Wednesday, March 08, 2006

WAN - ISDN bonding in Frame Relay network


Router HQ
!
version 12.0
no service password-encryption
!
hostname HQ
!
enable secret aaa
enable password aaa
!
username BRANCH password abc
ip subnet-zero
isdn switch-type primary-net5
!
controller E1 4/0/0
description ###ISDN PRI line###
pri-group timeslots 1-31
!
interface Loopback0
description ###ISDN BACKUP IP ADDRESS###
ip address 202.168.9.1 255.255.255.255
!
interface FastEthernet1/1/0
description ###CORPORATE LAN - HQ###
ip address 10.10.10.1 255.255.255.0
!
interface Serial0/0
description ###FRAME RELAY###
encapsulation frame-relay
frame-relay lmi-type cisco
!
interface Serial0/0.1 point-to-point
description ###WAN CONNECTION TO BRANCH###
ip address 202.168.10.1 255.255.255.252
frame-relay interface-dlci 100
!
interface Serial4/0/0:15
ip unnumbered Loopback0
encapsulation ppp
dialer idle-timeout 2147483
dialer map ip 202.168.9.2 name BRANCH broadcast
dialer load-threshold 1 outbound ( extra command for ISDN bonding )
dialer-group 1
isdn switch-type primary-net5
ppp authentication chap
ppp multilink ( extra command for ISDN bonding )
!
router eigrp 1
network 10.0.0.0
network 202.168.9.0
no auto-summary
!
no ip classless
ip route 11.11.11.0 255.255.255.0 202.168.10.2
ip route 11.11.11.0 255.255.255.0 202.168.9.2 200
ip route 202.168.9.2 255.255.255.255 Serial4/0/0:15
!
dialer-list 1 protocol ip permit
!
end


Router BRANCH
!
version 11.2
!
hostname BRANCH
!
enable secret aaa
enable password cisco
!
username HQ password abc
ip subnet-zero
isdn switch-type basic-net3
!
interface Loopback0
ip address 202.168.9.2 255.255.255.255
!
interface Ethernet0/0
ip address 11.11.11.1 255.255.255.0
!
interface Serial0/0
encapsulation frame-relay
frame-relay lmi-type cisco
!
interface Serial0/0.1 point-to-point
description ###WAN CONNECTION TO HQ###
backup delay 6 300
backup interface Dialer0
ip address 202.168.10.2 255.255.255.252
frame-relay interface-dlci 100
!
interface BRI1/0
encapsulation ppp
dialer pool-member 1
ppp authentication chap
ppp multilink ( extra command for ISDN bonding )
!
interface BRI1/1
encapsulation ppp
dialer pool-member 1
ppp authentication chap
ppp multilink ( extra command for ISDN bonding )
!
interface Dialer0
description ###ISDN BACKUP TO HQ###
ip unnumbered Loopback0
encapsulation ppp
dialer remote-name HQ
dialer idle-timeout 2147483
dialer string 78823730
dialer load-threshold 1 ( extra command for ISDN bonding )
dialer pool 1
dialer-group 1
ppp multilink ( extra command for ISDN bonding )
!
router eigrp 1
network 11.0.0.0
network 202.168.9.0
network 202.168.10.0
!
ip classless
ip route 10.10.10.0 255.255.255.0 202.168.10.1
ip route 10.10.10.0 255.255.255.0 202.168.9.1 200
ip route 202.168.9.1 255.255.255.255 Dialer0
dialer-list 1 protocol ip permit
!
end

Tuesday, March 07, 2006

WAN - ISDN bonding between CE and ISDN PE in IPVPN network


ISDN PE Configuration
!
isdn switch-type primary-net5
!
interface Loopback51
ip vrf forwarding V222:TEST
ip address 202.178.10.1 255.255.255.255
!
interface Virtual-Template2
no peer default ip address
ppp authentication chap callin
ppp multilink
!
address-family ipv4 vrf V222:TEST
redistribute connected
redistribute static
no auto-summary
no synchronization
exit-address-family
!


CE Configuration


!
ip subnet-zero
!
isdn switch-type primary-net5
!
controller E1 6/5
description ***1st PRI line***
pri-group timeslots 1-30
!
controller E1 6/6
description ***2nd PRI line***
pri-group timeslots 1-30
!
controller E1 6/7
description ***3rd PRI line***
pri-group timeslots 1-30
!
interface Serial6/5:15
encapsulation ppp
dialer pool-member 1
isdn switch-type primary-net5
ppp multilink
!
interface Serial6/6:15
encapsulation ppp
dialer pool-member 1
isdn switch-type primary-net5
ppp multilink
!
interface Serial6/7:15
encapsulation ppp
dialer pool-member 1
isdn switch-type primary-net5
ppp multilink
!
interface Dialer2
ip address negotiated
encapsulation ppp
dialer pool 1
dialer idle-timeout 600
dialer string 22460200 (ISDN number at ISDN PE)
dialer load-threshold 1 outbound
dialer-group 1
ppp chap hostname jasrine@aaa.com
ppp chap password abc
ppp multilink links minimum 90 mandatory
!
ip classless
ip route 0.0.0.0 0.0.0.0 Dialer2 230
!
dialer-list 1 protocol ip permit
!
End

WAN - MLPPP between CE and PE in IPVPN network


PE configuration

!
interface Multilink1
description ***leased-line1 & leased-line2 & leased-line3***
ip vrf forwarding V222:TEST
ip address 202.168.10.1 255.255.255.252
ppp multilink
ppp multilink links minimum 3
ppp multilink load-threshold 1 outbound
ppp multilink group 1
!
!
interface Serial8/0/0.1/1/3/1:0
description ***leased-line 1***
encapsulation ppp
ppp multilink
ppp multilink group 1
!
interface Serial8/0/1.1/1/7/1:0
description ***leased-line 2***
encapsulation ppp
ppp multilink
ppp multilink group 1
!
interface Serial8/0/1.1/1/6/3:0
description ***leased-line 3***
encapsulation ppp
ppp multilink
ppp multilink group 1
!
address-family ipv4 vrf V222:TEST
redistribute connected
redistribute static
no auto-summary
no synchronization
exit-address-family
!

CE Configuration

!
!
controller E1 6/0
channel-group 0 timeslots 1-30
description ##leased-line1##
!
controller E1 6/1
channel-group 0 timeslots 1-30
description ##leased-line2##
!
controller E1 6/2
channel-group 0 timeslots 1-30
description ##leased-line3##
!
interface Multilink1
ip address 202.178.10.2 255.255.255.252
ppp multilink
ppp multilink links minimum 3 mandatory
multilink load-threshold 1 outbound
multilink-group 1
!
interface Serial6/0:0
description ***Leased-line1***
encapsulation ppp
ppp multilink
multilink-group 1
!
interface Serial6/1:0
description ***Leased-line2***
encapsulation ppp
ppp multilink
multilink-group 1
!
interface Serial6/2:0
description ***Leased-line3***
encapsulation ppp
ppp multilink
multilink-group 1
!
ip classless
!
end

WAN - CE connection to IPVPN via ISDN

!
ip subnet-zero
isdn switch-type basic-net3 ( for BRI use basic-net3; for PRI use primary-net5 )
!
hostname jasrine
!
enable secret abc
!
interface FastEthernet0/1
description ### Connection to customer LAN ###
ip address 10.10.10.1 255.255.255.0
!
interface Serial1/0
description ### Connection to IPVPN PE ###
ip address 202.168.10.1 255.255.255.252
backup interface Dialer2
backup delay 5 300 ( ISDN will kick up 5 seconds after detect
! ( primary link failure, and ISDN will wait for
! ( 300 seconds to be in standby
! ( mode once primary link is ok
!

interface BRI0
no ip address
encapsulation ppp
dialer pool-member 1
isdn switch-type basic-net3
!
interface Dialer2
ip address negotiated
encapsulation ppp
ppp multilink minimum
dialer pool 1
dialer idle-timeout 600 (ISDN idle time out for 600 seconds
dialer string <1st> (Primary ISDN PE number
dialer string <2nd> (Backup ISDN PE number
dialer-group 1
ppp chap hostname jasrine@bbb.com
ppp chap password abc
!
dialer-list 1 protocol ip permit ( Any IP packets will kick the ISDN
! ( up, once the primary line down
!
ip classless
ip route 0.0.0.0 0.0.0.0 202.168.10.2
ip route 0.0.0.0 0.0.0.0 dialer 2 200
!
End

WAN - CE to IPVPN network

!
ip subnet-zero
!
hostname jasrine
!
enable secret abc
!
interface FastEthernet0/1
description ### Connection to customer LAN ###
ip address 10.10.10.1 255.255.255.0
!
interface Serial1/0
description ### Connection to IPVPN PE ###
ip address 202.168.10.1 255.255.255.252
encapsulation ppp (or encapsulation hdlc)
!
!
ip classless
ip route 0.0.0.0 0.0.0.0 202.178.10.2
!
End


WAN - Frame Relay connection

...
interface Serial0/0
encapsulation frame-relay
frame-relay lmi-type ansi
!
interface Serial0/0.1 point-to-point
description ***Connection to Frame Relay switch***
ip address 58.139.10.38 255.255.255.252
frame-relay interface-dlci 100 !
...

Friday, March 03, 2006

WAN - Leased line connection

...
interface Serial1/0
description ***Leased line from point A to point B***
ip address 58.139.10.38 255.255.255.252
encapsulation hdlc (or encapsulation ppp)
...