Isdn
Isdn
Isdn
11 – Aaron Balchunas 1
ISDN is a circuit-switched digital service that can transmits voice and data
over existing phone lines. It has faster call setup and bandwidth rates than
dial-up connections, and is often utilized as a backup line to a more
expensive dedicated leased line.
Like Frame-Relay, ISDN has layer-2 “switches” that control traffic inside
the ISDN cloud. There are multiple ISDN switch-types.
The cost of ISDN is based on the number of calls made, and the duration of
those calls. Thus, it is not advantageous to have the ISDN connection always
active, nor do you want ISDN calls made every few seconds.
There are two types of ISDN:
• Basic Rate Interface (BRI) - contains two “B” channels, and one
“D” channel. The two B channels carry 64K of bandwidth each, and
are dedicated for data or voice traffic. The single D channel carries
16K of bandwidth, and is dedicated for signaling and call-setup. The
total bandwidth for ISDN BRI is 144K (64K+64K+16K).
• Primary Rate Interface (PRI) - contains twenty-three “B” channels,
and one “D” channel. The twenty-three B channels carry 64K of
bandwidth each, and are dedicated for data or voice traffic. The single
D channel carries 64K of bandwidth, and is dedicated for signaling
and call-setup. The total bandwidth for ISDN PRI is 1.544Mbs
(23x64K+64K).
***
All original material copyright © 2007 by Aaron Balchunas (aaron@routeralley.com),
unless otherwise noted. All other material copyright © of their respective owners.
This material may be copied and used freely, but may not be altered or sold without the expressed written
consent of the owner of the above copyright. Updated material may be found at http://www.routeralley.com.
ISDN v1.11 – Aaron Balchunas 2
***
All original material copyright © 2007 by Aaron Balchunas (aaron@routeralley.com),
unless otherwise noted. All other material copyright © of their respective owners.
This material may be copied and used freely, but may not be altered or sold without the expressed written
consent of the owner of the above copyright. Updated material may be found at http://www.routeralley.com.
ISDN v1.11 – Aaron Balchunas 3
Cisco routers that support ISDN will have BRI interfaces, or utilize serial
interfaces for PRI connections. This guide will cover only the configuration
of ISDN BRI.
The first thing that must be configured for ISDN is the switch-type, which
can be configured either on the interface or in Global Configuration mode.
The ISDN provider will indicate which ISDN switch-type is used:
Router(config)# isdn switch-type basic-ni
***
All original material copyright © 2007 by Aaron Balchunas (aaron@routeralley.com),
unless otherwise noted. All other material copyright © of their respective owners.
This material may be copied and used freely, but may not be altered or sold without the expressed written
consent of the owner of the above copyright. Updated material may be found at http://www.routeralley.com.
ISDN v1.11 – Aaron Balchunas 5
Notice that the dialer-list points to extended access-list “150.” The first line
of the access-list specifies that any traffic originating from the 172.16.x.x
network is interesting. The second line of the access-list specifies that any
traffic destined to the HTTP port on host 172.17.1.10 is interesting. Any
traffic matching this criteria will be allowed to activate the ISDN link.
Always remember to apply the dialer-list with the dialer-group command.
***
All original material copyright © 2007 by Aaron Balchunas (aaron@routeralley.com),
unless otherwise noted. All other material copyright © of their respective owners.
This material may be copied and used freely, but may not be altered or sold without the expressed written
consent of the owner of the above copyright. Updated material may be found at http://www.routeralley.com.
ISDN v1.11 – Aaron Balchunas 6
ISDN Authentication
For additional dialing security, the dialer map command can be used, instead
of the dialer-string command:
Router(config)# int bri0/0
Router(config-if)# dialer map ip 172.16.1.2 name RouterB 5552222
When the router dials RouterB (SPID# 5552222), the remote router’s IP
address and hostname must match with the dialer map statements, otherwise
the call will not be successful.
If PPP is used for the ISDN encapsulation, additional authentication can be
configured. Two forms of authentication exist for PPP:
• PAP (Password Authentication Protocol)
• CHAP (Challenge Handshake Authentication Protocol).
PAP sends username and password information in clear-text. CHAP hashes
the information using MD5, and thus is the far more secure authentication
method.
To configure PAP:
RouterA(config)# username RouterB password PASSWORD
RouterA(config)# int bri0/0
RouterA(config-if)# encapsulation ppp
RouterA(config-if)# ppp authentication pap
RouterA(config-if)# ppp pap sent-username RouterA password PASSWORD
The username command specifies the remote routers hostname. The ppp
papsent-username allows us to specify the hostname the remote router
should authenticate to. This is a required command with PAP.
To configure CHAP:
RouterA(config)# username RouterB password PASSWORD
RouterA(config)# int bri0/0
RouterA(config-if)# encapsulation ppp
RouterA(config-if)# ppp authentication chap
RouterA(config-if)# ppp chap hostname RouterA
***
All original material copyright © 2007 by Aaron Balchunas (aaron@routeralley.com),
unless otherwise noted. All other material copyright © of their respective owners.
This material may be copied and used freely, but may not be altered or sold without the expressed written
consent of the owner of the above copyright. Updated material may be found at http://www.routeralley.com.
ISDN v1.11 – Aaron Balchunas 7
The dialer load-threshold command tells the router when to bring up the
second “B” channel. This “load threshold” is a percentage based out of 255.
The above example tells the router to bring up the second B channel when
the first B channel is at 50% utilization.
The either argument specifies that the traffic can be either inbound or
outbound. Otherwise, inbound or outbound can be specified.
The dialer idle-timeout command tells the router how long to wait (in
seconds) after the last interesting traffic has been sent before disconnecting
the ISDN link.
The ppp multilink command binds both B channels into one logical channel.
This command can be coupled with the dialer load-threshold command, and
the logical channel will only become active when the threshold is reached.
To always force both channels to be active when using ppp multilink:
Router(config)# int bri0/0
Router(config-if)# ppp multilink
Router(config-if)# ppp multilink links minimum 2
Stac (or Stacker) compression usually yields the best ratio, though it places a
greater tax on the router’s CPU.
***
All original material copyright © 2007 by Aaron Balchunas (aaron@routeralley.com),
unless otherwise noted. All other material copyright © of their respective owners.
This material may be copied and used freely, but may not be altered or sold without the expressed written
consent of the owner of the above copyright. Updated material may be found at http://www.routeralley.com.
ISDN v1.11 – Aaron Balchunas 8
PPP Callback
PPP Callback is a security feature for ISDN, preventing unauthorized routers
or devices from initiating the ISDN connection.
Callback is implemented as a client/server model. The client requests a
callback, and the server will only accept this request if the client’s
authentication information is correct.
To configure the Callback server:
RouterA(config)# int bri0/0
RouterA(config-if)# ppp callback accept
RouterA(config-if)# dialer map ip 10.1.1.1 name RouterB class MYCLASS 2221112
RouterA(config)# map-class dialer MYCLASS
RouterA(config-map-class)# dialer callback-server username
***
All original material copyright © 2007 by Aaron Balchunas (aaron@routeralley.com),
unless otherwise noted. All other material copyright © of their respective owners.
This material may be copied and used freely, but may not be altered or sold without the expressed written
consent of the owner of the above copyright. Updated material may be found at http://www.routeralley.com.
ISDN v1.11 – Aaron Balchunas 9
The bri0/0 interface is a backup to the serial0/0 interface. Once the serial0/0
interface enters a down state, the bri0/0 interface will activate after a delay
of 100 seconds. Once the serial0/0 interface comes back up, the bri0/0
interface will enter a standby state after 300 seconds.
Manually shutting down the serial0/0 interface will not bring the bri0/0
interface out of standby mode. The serial0/0 interface must be in a down
state, not an administratively shutdown state.
Also, the bri0/0 interface will never make a connection while in standby.
Once taken out of standby, it will not connect until interesting traffic is sent
across the link.
If the 10.1.0.0/16 network is removed from the routing table, the router will
connect the ISDN link after 10 seconds. Dialer watch will continue checking
the routing table at intervals equal to the dialer idle-timeout. Once the route
is back in the table, the router will disconnect the link after 30 seconds.
***
All original material copyright © 2007 by Aaron Balchunas (aaron@routeralley.com),
unless otherwise noted. All other material copyright © of their respective owners.
This material may be copied and used freely, but may not be altered or sold without the expressed written
consent of the owner of the above copyright. Updated material may be found at http://www.routeralley.com.
ISDN v1.11 – Aaron Balchunas 10
This prevents OSPF from sending out periodic Hellos across the ISDN link,
while still maintaining neighbor relationships. This also eliminates the
periodic OSPF link-state table refresh (default every 30 minutes).
The ospf demand-circuit only needs to be configured on one side of the link.
After applying this command, only changes to the OSPF topology database
will trigger the link.
Snapshot routing is used with Distance Vector routing protocols. Snapshot
routing essentially “freezes” the routing table, preventing updates.
Periodically, the routing table is “unfrozen” to allow updates to occur, and
then frozen again.
When using snapshot routing, one router takes on the role of a “client,” the
other takes on the role of a “server.” The client will initiate a connection
with the server after a specific period of time, to allow routing updates to
occur:
RouterA(config)# int bri0/0
RouterA(config-if)# snapshot server 3 dialer
RouterA(config-if)# dialer map snapshot 1 name RouterB 5552222
RouterB(config)# int bri0/0
RouterB(config-if)# snapshot client 3 300 dialer
RouterB(config-if)# dialer map snapshot 1 name RouterA 5551111
RouterB will dial RouterA after 300 minutes have passed. There will be a 3
minute period for both routers to exchange updates before the link is brought
back down.
***
All original material copyright © 2007 by Aaron Balchunas (aaron@routeralley.com),
unless otherwise noted. All other material copyright © of their respective owners.
This material may be copied and used freely, but may not be altered or sold without the expressed written
consent of the owner of the above copyright. Updated material may be found at http://www.routeralley.com.
ISDN v1.11 – Aaron Balchunas 11
Notice that that the interface dialer number matched the rotary-group
number.
There is one key difference between dialer pools and rotary groups. Dialer
pools support map-classes, which can apply specific parameters to each
destination called. Rotary groups do not support map-classes.
***
All original material copyright © 2007 by Aaron Balchunas (aaron@routeralley.com),
unless otherwise noted. All other material copyright © of their respective owners.
This material may be copied and used freely, but may not be altered or sold without the expressed written
consent of the owner of the above copyright. Updated material may be found at http://www.routeralley.com.
ISDN v1.11 – Aaron Balchunas 12
Testing ISDN
To initiate a test call on an ISDN BRI interface:
Router# isdn test call interface bri0/0 5552222
Troubleshooting ISDN
The show isdn active command displays whether a call is connected, and the
number dialed.
The show isdn status command will display information on the status
between the router and ISDN switch, including whether the SPIDs are
configured correctly. This is the most useful command for troubleshooting
Layer 1, 2, or 3 ISDN connectivity problems.
The show dialer interface bri command will also display if a call is
connected, and will display previous dialing attempts and whether they were
successful or not.
The debug isdn q921 command troubleshoots communication between the
router and ISDN switch.
The debug isdn q931 command troubleshoots ISDN call setup.
The debug dialer events and debug dialer packets commands are used to
troubleshoot dial setup, and whether the proper interesting traffic is
activating the ISDN link.
The isdn disconnect interface bri command allows a currently active call to
be disconnected.
***
All original material copyright © 2007 by Aaron Balchunas (aaron@routeralley.com),
unless otherwise noted. All other material copyright © of their respective owners.
This material may be copied and used freely, but may not be altered or sold without the expressed written
consent of the owner of the above copyright. Updated material may be found at http://www.routeralley.com.