Dlsw over ISDN, flapping

my topology like this
E0---R1----ISDN-----R2----E0
R1
E0, 10.1.1.1/24
BRI0 192.168.0.1/24
R2
E0 10.2.2.2/24
BRI0 192.168.0.2/24
use static route on R1 and R2
for dlsw configuration
R1
dlsw local peer-id 10.1.1.1
dlsw remote 0 tcp 10.2.2.2 keepalive 0 timeout 90 dynamic
dlsw bri 1
bridge 1 pro ieee
bridge-group 1(E0)
R2
dlsw remote 0 tcp 10.1.1.1 keepalive 0 timeout 90 dynamic
and the Dlsw peer status is CONNECT now. and ISDN is flapping.
Any advice?
Thanks

because the topology is so simply, I use static route, no dynamic routing, so no other traffice, only dlsw.
I guess,
for the ISDN, the default idle-timeout is 120s and the dlsw keepalive is 30s, and in 90s by default if no dlsw keepalive, the peer will disconnect.
so, after everything is done, dlsw peer status is "connect"(assume it takes 40s). 120s later, the ISDN is down, (40s+30s+some seconds) later, R1 send the dlsw keepalive to R2, and ISDN is up, in this 120s, isdn is up and dlsw is connected. after ISDN down again, dlsw bring it up again. again and again.
so if we set keepalive=0, it seems a good idea, because dlsw doesn't connect/disconnect by the keepalive. but in fact, it is still flapping.
I don't know how "dialer-watch" works, maybe I can get something from "dialer-watch". (no watch needed in this topology)
for the "show dialer", the dialer reason is
(source 10.1.1.1, dst 10.2.2.2), so that is dlsw
Thanks anyway

Similar Messages

  • 800-ADSL over ISDN ISDN-features

    Hello,
    has anyone experiences with the BRI at the 800 ADSL over ISDN Routers (like 836).
    I wonder what's the difference between the feature sets.
    OOB-Management and Dial-Backup over ISDN is described in the Datasheet as feature of the 'IP/FW/IPSec-3DES-PLUS-Dial-Backup' IOS only, but in my tests it seems that the BRI is a fully functionaly routed Interface in all feature sets.
    I think there is no more need to buy another ISDN-Router like 801 or 803 when I have full ISDN connectivity at the ADSLoISDN-Routers with standard feature set. And with the 'DMZ-Ethernet' feature I have even a secondary routed Ethernet-port and there is no more need to buy a 831.

    I the 836 Datasheet (http://www.cisco.com/en/US/partner/products/hw/routers/ps380/products_data_sheet09186a008014ee18.html) you can see that the default featureset already has firewall and VPN features ('IP/FW/IPSec 3DES default feature set') even if it is called CISCO836-K9-64 (Cisco 836 ADSL over ISDN Router-64MB) in the Cisco-pricelist.
    I hope that's the same with the 876 which is called CISCO876-K9 (ADSLoISDN Security Router) in the pricelist.

  • PPP Callback over ISDN failure - user not authorised

    Hi,I'm still a rookie with Cisco and in need of help: Have a MS XP PC dialing into 803 over ISDN, successfully connecting if 803 config'd for Callback optional (no callback secure) but failing for callback secure with log message "Callback not authorized for this user Support". and despite reading up on PPP callback configs from the RemoteAccess Selfstudy guide, IOS DialTechnologiesConfig, and various examples I am unable to find what I'm doing wrong in the configs. Attached is file with router SW version, debugs used for logging, the active config, and the log. I have edited router name, usernames, and telnr for security reasons.
    Regards
    Zet

    Hi,
    thanks for your advice. I've tried it with the same failure results as before.
    Also tried setting up 2 1720s with Image ver 2.3(9)Rel(fc2) according to cisco sample doc "Config PPP Callback over ISDN" (isdn-ppp-callback.pdf) even tried PAP instead of CHAP - same result: authenticates user ok but fails callback. If the client is router server reports "no callback config for user ..." and if client is PC " callback not authorized for this user ..."
    Have got the 1720 logs for server & client routers if you require.
    Where else would it look to, to identify the client as callback, the global username declaration makes sense, according to Command Guide it looks like "dialer callback-server username" references the interface command "dialer map ip .... We've now tried both, neither working. I am truly at a loss here, any ideas?
    Regards
    Zet

  • DLSw over WAN to Ethernet to Token Ring

    Currently, a 3745 in Portland is token ring attached and SNA traffic travels that ring to an IBM 2210 router.
    That IBM router connects to a second token ring, which a Cisco 2613 is also connected to. From there
    the traffic travels DLSw over the WAN (3 T1s, Multilink PPP bundle) to a 7507 in Cincinnati where a 3745
    is connected via serial.
    3745-TIC<->TR<->2210<->TR<->2613(DLSw)<->WAN<->(DLSw)7507<->LIC-3745
    The 7507 serial port is configured as follows:
    interface Serial4/3
    description 3745 LIC connection for Fred Meyer DLSW
    mtu 4400
    no ip address
    encapsulation sdlc
    no ip mroute-cache
    no keepalive
    serial restart-delay 0
    clockrate 125000
    sdlc vmac 4000.3745.0000
    sdlc N1 35200
    sdlc address 29 seconly
    sdlc partner 4000.0910.0008 29
    sdlc dlsw 29
    The 2613 has an ethernet. The folks in Portland want to move off of the TR and on to Ethernet.
    They will replace the IBM router with one that has both TR and ENET.
    If we move to the ethernet, the result will be:
    3745-TIC<->TR<->2210<->ENET<->2613(DLSw)<->WAN<->(DLSw)7507<->LIC-3745
    Should I change the MTU size on the serial port to 1500 (Ethernet)?
    Are there any changes that should occur on the 3745/Mainframe side?
    Do you see any other issues?

    You cannot increase the MTU for ethernet larger than 1500 bytes because 802.3 (the standard for ethernet) does not allow that.
    You may see issues. The problem is that both 3745 does not know the existance of the ethernet. If either 3745 sends a packet larger than 1500 bytes, the 2613 will drop the packet. (I am not an expert on 2210, I do not know if the 2210 is smart enough to segment the SNA packet into 2. I doubt it does, but please confirm it with IBM.) This causes the remote FEP detects a gap in SDLC, LLC2, or TH sequence number. No matter which layer detects the problem. The end result is still the same. The DLSw circuit will be disconnected.
    There are several suggestions to your problem:
    1. Make sure the both FEP will not send any PIU larger than 1500 bytes. This can be done either on the NCP gen or modtab. Checking the modtab is tough because your system programmers have to know all application running over the link. Then, they have to check the corresponding modtab entry for the applications.
    2. run DLSw between 7507 to IBM 2210
    3. directly connect the 2613 to the TIC (3745)

  • Voice over isdn over ip

    Hi,
    I have an issue with voice over isdn over ip Can anyone help me and explain me about the facts of the above issue and the working process and product details and implementation with a typical network diagram

    You need help on a specific issue, or you have no clue on the task you have been assigned to do and you are looking for someone to do it for you ???????????????????????????

  • Configure Frame-Relay over ISDN

    Hi can we configure frame-relay over ISDN can anyone provide me with the details

    Hi
    Check this link
    http://www.cisco.com/warp/public/125/19.pdf
    Hope this helps you,
    Thanks
    Raj

  • Switch 886 VA router modem to Annex B (German T-Com VDSL over ISDN)

    Hi,
    I'm using a 886 VA router to connect to T-COM Germany VDSL. Unfortunately, german T-COM are using VDSL over ISDN, so I have to switch the modem to ANNEX B. Initial setup of the modem is ANNEX A. I can hardly find any documentation for it. Did anybody do that before?
    Cheers,
    Werner

    You have the right model and should be able to use Annex B using IOS indicated in the following document:
    http://www.cisco.com/en/US/prod/collateral/routers/ps380/qa_c67-612339.html

  • BT Infinity over ISDN lines?

    Hi
    I'm considering BT Infinity, but have a query regarding it's positioning.
    The existing cable comes up from the ground by the front door, through the wall, then under the concrete hallway floor, and reappears on an internal wall - unfortunately in a wireless 'dead spot'.
    I would prefer to be able to connect my desktop PC via Ethernet upstairs where I work, which obviously means moving the master socket.
    However, at the point where the line enters (by the front door), there is a separate cable running around the outside of the house, which, many years ago, used to host an ISDN line. This is where I'd like the new master socket to be located.
    My first question - would the ISDN cable be capable of hosting Infinity, or is the ISDN a different type of cable?
    Secondly - if the cable is OK, would it be a trivial (free) job to switch the wiring over to the ex-ISDN cable, and use the old upstairs socket as the new master?
    Many thanks
    Mark

    Hi mark,
    AFAIK there's no difference between the wires that ISDN lines use and those that normal telephony/xDSL services use. The only thing with ISDN is that there is equipment installed on either end to ensure the signal remains digital (instead of digital/analogue/digital for xDSL). As long as this equipment has been removed (and there is no ISDN "Tag" on the line) you should be fine. If not, or if there is no active telephone service on the line (i.e. if you can't get a dial tone if you plug in a normal telephone) you'll need to address this first.
    For your second query, it completely depends on what way you have your internal wiring configured. Some engineers who install Infinity are happy to move around pre-existing internal wiring however they are not obliged to do so, so if your internal wiring setup is quite complex they may refuse. You may be better to have this addressed before getting Infinity installed to make 100% sure everything is to your liking.
    Hope this helps
    Dean
    BTCare Community Mod
    If you like a post, or want to say thanks for a helpful answer, please click on the Ratings star on the left-hand side of the post.
    If someone answers your question correctly please let other members know by clicking on ’Mark as Accepted Solution’.

  • Cisco 876 ADSL over ISDN Router

    I am facing some problem in using ISDN bri S/T interface for connectivity to HO PRI router.I am not using the ATM interface of this router.The isdn status always shows that the isdn layer 1 and 2 is deactivated. IF i connect the same bri cable to other isdn router it works fine.
    Is their any special configuration or command required in 876 router for the isdn dialing?
    I found on cisco that the 876 router ISDN bri S/T interface is for the out-of-band mangement and dial backup.
    Can i use this interface for the normal isdn dialing?
    need some clarification.
    regards,
    khalid siddiq

    Find the attach detail.
    SCIENTECH-AVEER#
    SCIENTECH-AVEER#sh runn
    SCIENTECH-AVEER#sh running-config
    Building configuration...
    Current configuration : 1505 bytes
    version 12.3
    no service pad
    service timestamps debug datetime msec
    service timestamps log datetime msec
    no service password-encryption
    hostname SCIENTECH-AVEER
    boot-start-marker
    boot-end-marker
    username INET-Rou-ESA password 0 cisco123
    no aaa new-model
    ip subnet-zero
    ip cef
    no ftp-server write-enable
    isdn switch-type basic-net3
    isdn tei-negotiation first-call
    interface BRI0
    description connected to HQ PRI
    no ip address
    encapsulation ppp
    dialer pool-member 1
    isdn switch-type basic-net3
    ppp authentication chap
    interface ATM0
    no ip address
    no atm ilmi-keepalive
    dsl operating-mode auto
    interface FastEthernet0
    no ip address
    interface FastEthernet1
    no ip address
    shutdown
    interface FastEthernet2
    no ip address
    shutdown
    interface FastEthernet3
    no ip address
    shutdown
    interface Vlan1
    ip address 192.168.201.25 255.255.255.0
    interface Dialer0
    ip address negotiated
    encapsulation ppp
    dialer pool 2
    dialer string 404444
    dialer-group 1
    router rip
    network 192.168.201.0
    network 192.168.251.0
    ip classless
    no ip http server
    no ip http secure-server
    dialer-list 1 protocol ip permit
    dialer-list 2 protocol ip permit
    control-plane
    line con 0
    password gbm4ibm
    login
    no modem enable
    transport preferred all
    transport output all
    line aux 0
    transport preferred all
    transport output all
    line vty 0 4
    password gbm4ibm
    login
    transport preferred all
    transport input all
    transport output all
    scheduler max-task-time 5000
    end
    SCIENTECH-AVEER# sh ver
    Cisco IOS Software, C870 Software (C870-ADVSECURITYK9-M), Version 12.3(8)YI2, RE
    LEASE SOFTWARE (fc1)
    Synched to technology version 12.3(10.3)T2
    Technical Support: http://www.cisco.com/techsupport
    Copyright (c) 1986-2005 by Cisco Systems, Inc.
    Compiled Tue 14-Jun-05 18:58 by ealyon
    ROM: System Bootstrap, Version 12.3(8r)YI2, RELEASE SOFTWARE
    ROM: Cisco IOS Software, C870 Software (C870-ADVSECURITYK9-M), Version 12.3(8)YI
    2, RELEASE SOFTWARE (fc1)
    SCIENTECH-AVEER uptime is 22 hours, 13 minutes
    System returned to ROM by reload
    System image file is "flash:c870-advsecurityk9-mz.123-8.YI2.bin"
    Last reload reason: Reload command
    This product contains cryptographic features and is subject to United
    States and local country laws governing import, export, transfer and
    use. Delivery of Cisco cryptographic products does not imply
    third-party authority to import, export, distribute or use encryption.
    Importers, exporters, distributors and users are responsible for
    compliance with U.S. and local country laws. By using this product you
    agree to comply with applicable laws and regulations. If you are unable
    to comply with U.S. and local laws, return this product immediately.
    A summary of U.S. laws governing Cisco cryptographic products may be found at:
    http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
    If you require further assistance please contact us by sending email to
    [email protected].
    Cisco 876 (MPC8272) processor (revision 0x100) with 118784K/12288K bytes of memo
    ry.
    Processor board ID FCZ100223M7
    MPC8272 CPU Rev: Part Number 0xC, Mask Number 0x10
    4 FastEthernet interfaces
    1 ISDN Basic Rate interface
    1 ATM interface
    128K bytes of non-volatile configuration memory.
    24576K bytes of processor board System flash (Intel Strataflash)
    Configuration register is 0x2102

  • Install a Router with IP Masquerading over ISDN

    hi aLL
    I want to use my Solaris 8 mashine as a router, to connect all my other computer to the internet and share one isdn line. for that i have to install my isdn card. it�s a very popular AVM Fritz! Card PCI. but i could not find a driver for it. i went to sun HCL. i only found 2 compatible isdn card in the list, a Digi International Digi Datafire-Ua and Digi Datafire S/T[a]. I tryed to get more infomation of this two cards but i found nothing. only a card with another name : DataFire PRIme. This one has Solaris Drivers but is not in the HCL list of Solaris 8
    Does anyone knows about an isdn Card wich works unter Solaris, or know how to make a Router under Solaris ?
    I know there are ISDN Modem connected with a serial cable to com 1 or 2. may they work ?
    in half a year i want to use DSL. Does anyone has experience with DSL on Solaris ??? I know i need PPPoE.
    Thanx Siegfried

    The other threads seem to be showing ICMP deprioritzation, not packet loss
    pinging only one host makes it pretty tough to see if there is actual loss or just deprioritization which more common
    can you provide a traceroute that shows the packet loss as well to confirm?

  • VWIC-MFT-E1in 2811: Support for data calls over ISDN

    Hi,
    is it possible to use the MFT-E1 cards for ISDN data calls by help of Dialer Profiles in Cisco2811 ?
    thank you
    Mathias

    Hi. There is a new feature callled "Integrating Data and Voice Services for ISDN PRI Interfaces on Multiservice Access Routers" in IOS verze 12.4(4)XC. For more info see http://www.cisco.com/univercd/cc/td/doc/product/software/ios124/124newft/124limit/124x/124xc4/intserv.htm . One our customer tasted ISDN data calls and IT WORKS :o). Regards Miroslav
    Please rate if it will be helpfull.

  • Is it possible to use a Cisco 2800 IOS H323 voice gateway for video conferencing over ISDN?

    I have seen this page and was wondering if what it says actually is possible and works? I also have got a CUCM 8.6 that I would like to use for call routing via my old 2600XM gatekeeper.
    http://www.cisco.com/c/en/us/td/docs/ios/12_4t/12_4t11/h320gw.html#wp1047659

    I have seen this page and was wondering if what it says actually is possible and works? I also have got a CUCM 8.6 that I would like to use for call routing via my old 2600XM gatekeeper.
    http://www.cisco.com/c/en/us/td/docs/ios/12_4t/12_4t11/h320gw.html#wp1047659

  • Sharing an ISDN connection over LAN

    I'm thinking of updating my Main computer and need some advice/help.
    Currently I can only get ISDN where I live in Australia, which may be slow but it's also unlimited. I have a PC set up with the ISDN modem (USB connection) which it then shares to the Mac's on the Ethernet 10/100 LAN.
    I was considering moving My G4 PowerMac into that roll, but I have several concerns.
    First Running does Telstra (Australia) support Mac's running ISDN, their site is unclear. I will contact them to clear this up.
    Second how easy is it to share a connection with other Mac's and PC's, can this be done wirelessly also?
    But more important how long will the aging G4 last running 24/7, right now normally at night or when not in use (when I go out) I put it in to deep sleep but how long will the Mac last running all the time?
    The main reason I need to think about this is the only 2yo PC might have a fault and I don't want to be left Internetless if it fails and I need to think about how to spend the limited money I have. I would prefer getting a cheap PC to use as my Internet and file server leaving my Mac's to actually use everyday. I have not had any security issues with this set up as I have firewalls set up on the PC and Mac's and security software on the PC.
    Message was edited by: Craig Best

    While there are Mac boxes listed at the Telstra Bigpond site, I'd tend to look for an IDSN-capable firewall with Ethernet capabilities.
    There appear to be several of these devices around that claim Telstra Bigpond compatibility. Cisco, NetGear, Traverse Technologies, Draytek and other vendors all appear to be in this market.
    You'll probably want a network box with an ISDN port (or ADSL over ISDN, depending on what Telstra offers in your area), a firewall, and with some number of Ethernet ports (an Ethernet switch) and/or wireless networking. I'm not familiar with Telstra Bigpond ISDN in any detail, though I'd expect one of these devices to connect into the provided ISDN modem.
    Cisco 801 and 803 routers come up in discussions fairly regularly, though Cisco routers aren't the easiest devices for new-to-Cisco folks to configure and manage. And these are comparatively expensive, even if you find them used.
    You might also check with some Australian local vendors; there were substantial electronics stores in Sydney and Melbourne. They're likely rather more familiar with the local router/firewall options.

  • Cisco 2811 routers to route video over ip for polycom equipment.

    Hi forum,
    We are currently using polycom equipments over ISDN links for video conferencing, however, we intend to switch to our EIGRP E1 lines for that. all our sites are currently using 2811 routers to route both data and voip traffic. How do I provision the network so that I can use my E1 lines for video over ip, How should I design it?
    Besides, How do i provide video over ip service to my mobile users who vpn into my network.
    Thanks and best regards,
    paul

    first, on provisioning your network for video over ip, make sure you can implement the QoS required to provide a clear, unchoppy video stream.
    your design could look something like the following:
    polycom >> network >> router >> E1 >> router >> network >> user
    (very basic description, you may require more detail depeding on your needs)
    also, for video over ip to your vpn users, you might be able to use something like cisco IPTV or the likes. (depending on the type of video you want to provide your users)
    please see the following link for video over ip for polycom:
    http://www.cisco.com/en/US/tech/tk1077/technologies_configuration_example09186a0080111c1b.shtml#configqos
    please see the following link for more QoS for video conferencing info:
    http://www.cisco.com/en/US/tech/tk543/tk757/technologies_tech_note09186a0080094968.shtml
    please see the following link for info on video over ipsec vpn:
    http://www.cisco.com/en/US/netsol/ns340/ns394/ns171/ns241/netbr09186a0080125154.html

  • Is it possible DLSW with remote ack for LLC2.?

    Hello.:
    In the following env I have an SNI connection:
    3745-Tokenring/2612-FrameRelay-2612/Tokenring-OSA.
    the 2612 is DLSW.
    I have noticed, sometimes,when there is a HW problem in the right side, the 2612left, maintains the LLC2 session with R/Rs and not disconecting the session blocking the Virtual Route in the NCP of 3745.
    Is there an eassy way of doing remote ACK for Token ring LLC2 using DLSW over Frame Relay.?
    Is the source-bridge passthrough xxx command supported by DLSW.?
    Thanks a lot.
    Casimiro

    Hi,
    if you need the RR's ect to flow across dlsw than you can use dlsw fst. With fst dlsw does not do local-ack anymore. that means that all frames including RR's are transported to the other side. The llc2 connection is then truley end to end betweeen the 3745 and the tokenring OSA.
    However you must be aware of a couple of limitations.
    Depending on your mtu on the tokenring i assume 4k. You must either configure the lf parameter on the dlsw remote peer statment to a value below the mtu of your WAN or you must make sure that the WAN can carry a maximum tokering frame + 12 bytes dlsw fst header + ip header. You might have to increase the mtu on your frame relay interfaces.
    With fst there is no tcp session anymore doing the segmentation of large frames, every packet is encapsulated individualy and send right away.
    Besides that you have only limited visibility to the sessions since the router is not participating in any llc2 connections, the router simply forwards packets.
    thanks...
    Matthias

Maybe you are looking for