Re: dialer interesting traffic

From: Jim (nhatquang@thiennam.org)
Date: Wed Apr 06 2005 - 00:20:08 GMT-3


you can see how r4 knows r5 hostname ROUTER5 for its callback.
here I user protocol ip permit to simulate clns_is traffic.

HTH, Jim.

R4
username ROUTER5 password 0 CISCO
!
interface BRI0/0
 ip address 132.1.45.4 255.255.255.0
 encapsulation ppp
 dialer idle-timeout 0
 dialer map ip 132.1.45.5 name ROUTER5 class CALLBACK broadcast 2221
 isdn switch-type basic-net3
 ppp callback accept
 ppp authentication chap
 ppp chap hostname ROUTER4
!
map-class dialer CALLBACK
 dialer callback-server username

R5
username ROUTER4 password 0 CISCO
!
interface BRI0/0
 ip address 132.1.45.5 255.255.255.0
 encapsulation ppp
 dialer idle-timeout 20
 dialer map ip 132.1.45.4 name ROUTER4 broadcast 4441
 dialer-group 1
 isdn switch-type basic-net3
 ppp callback request
 ppp chap hostname ROUTER5
!
dialer-list 1 protocol ip permit
!

r5#ping 132.1.45.4

r4#
*Mar 1 20:13:00.951: %LINK-3-UPDOWN: Interface BRI0/0:1, changed state to up
*Mar 1 20:13:00.951: %ISDN-6-CONNECT: Interface BRI0/0:1 is now connected to
2221 N/A
*Mar 1 20:13:00.955: BR0/0:1 PPP: Using dialer call direction
*Mar 1 20:13:00.955: BR0/0:1 PPP: Treating connection as a callin
*Mar 1 20:13:02.947: BR0/0:1 PPP: Authorization required
*Mar 1 20:13:02.979: BR0/0:1 CHAP: O CHALLENGE id 7 len 28 from "ROUTER4"
*Mar 1 20:13:02.995: BR0/0:1 CHAP: I RESPONSE id 7 len 28 from "ROUTER5"
*Mar 1 20:13:02.999: BR0/0:1 PPP: Sent CHAP LOGIN Request
*Mar 1 20:13:02.999: BR0/0:1 PPP: Received LOGIN Response PASS
*Mar 1 20:13:03.003: BR0/0:1 PPP: Sent LCP AUTHOR Request
*Mar 1 20:13:03.003: BR0/0:1 PPP: Sent IPCP AUTHOR Request
*Mar 1 20:13:03.003: BR0/0:1 LCP: Received AAA AUTHOR Response PASS
*Mar 1 20:13:03.003: BR0/0:1 IPCP: Received AAA AUTHOR Response PASS
*Mar 1 20:13:03.007: BR0/0:1 CHAP: O SUCCESS id 7 len 4
*Mar 1 20:13:04.008: %LINEPROTO-5-UPDOWN: Line protocol on Interface
BRI0/0:1, changed state to up

  ----- Original Message -----
  From: Ian Henderson
  To: ccielab@groupstudy.com
  Sent: Wednesday, April 06, 2005 9:40 AM
  Subject: dialer interesting traffic

  Hi all,

  I'm working through IEWB lab 2, and have some questions on callback and
  PPP. They look like simple enough questions, but I can't find answers
  googling around.

  - The callback link comes up from R4 to R5 and the peers authenticate, but
    without a dialer-group configured on R4, all traffic is marked as
    uninteresting and discarded. Cisco's answer to this is add a
    dialer-group and remove the phone number from the dialer-map. This won't
    work with PPP callback though. How do I create a dialer-group that
    allows traffic to the other peer, but won't bring up the link?

  - If both peers were authenticating CHAP bidirectionally, both routers
    would see the peer hostname in 'show isdn active' or 'show users'. But
    when R5 isn't authenticating R4, it doesn't see the remote hostname.
    This means the router can't find the correct dialer-map. How do you
    specify which dialer-map to use when the discriminator ('name ROUTER4')
    isn't available?

  R4:
  interface BRI0/0
   ip address 132.1.45.4 255.255.255.248
   ip router isis
   encapsulation ppp
   dialer idle-timeout 0
   dialer map clns 49.0044.0001.0001.0005.00 name ROUTER5 class CALLBACK
broadcast 9325xxxx
   dialer map ip 132.1.45.5 name ROUTER5 class CALLBACK broadcast 9325xxxx
   isdn switch-type basic-net3
   isdn answer1 9325yyyy
   isdn answer2 9325yyyy
   ppp callback accept
   ppp authentication chap
   ppp chap hostname ROUTER4
   isis circuit-type level-2-only

  R5:
  interface BRI0/0
   ip address 132.1.45.5 255.255.255.248
   ip router isis
   encapsulation ppp
   dialer map clns 49.0044.0001.0001.0004.00 name ROUTER4 broadcast 9325yyyy
   dialer map ip 132.1.45.4 name ROUTER4 broadcast 9325yyyy
   dialer-group 1
   isdn switch-type basic-net3
   isdn answer1 9325xxxx
   isdn answer2 9325xxxx
   ppp callback request
   ppp chap hostname ROUTER5
   isis circuit-type level-2-only

  Thanks,

  - I.

  --
  Ian Henderson CCNA, CCNP
  Senior Network Engineer

  iiNet Limited
  Chime Communications Pty Ltd

  _______________________________________________________________________
  Subscription information may be found at:
  http://www.groupstudy.com/list/CCIELab.html



This archive was generated by hypermail 2.1.4 : Tue May 03 2005 - 07:54:53 GMT-3