Almost-dynamic routing over ADSL interfaces

Recently I had to implement Internet access using ADSL as the primary link and ISDN as the backup link. Obviously the most versatile solution would use the techniques described in my IP Corner article Small Site Multi-homing, but the peculiarities of Cisco IOS implementation of the ADSL technology resulted in a much simpler solution.

IOS implementation of PPPoE links uses dialer interfaces. However, the “dialing” on these interfaces is activated as soon as the underlying PPPoE session is active (before the first interesting packet is routed to the interface). When the simulated dial-out occurs, the router starts PPP negotiations including the IPCP handshake, which usually results in an IP address assigned to the dialer interface. Net result: if the dialer interface has an IP address, the PPPoE session is obviously active (and vice versa).

As my ADSL link and the ISDN backup used the same service provider (and very probably the same Radius servers), it made no sense to define additional IP SLA measurements to figure out if the service provider's network is operational; the IP route to the primary dialer interface is installed as soon as the interface is ready to route IP packets. The relevant parts of the router's configuration are included below.

interface FastEthernet0
 description outside LAN
 no ip address
 ip virtual-reassembly
 duplex auto
 speed auto
 pppoe enable group global
 pppoe-client dial-pool-number 3
!
interface BRI0
 description ISDN line
 encapsulation ppp
 dialer pool-member 1
 isdn switch-type basic-net3
!
interface Dialer0
 description ADSL primary uplink
 ip address negotiated
 ip mtu 1492
 ip nat outside
 encapsulation ppp
 dialer pool 3
!
interface Dialer1
 description ISDN backup
 ip address negotiated
 ip nat outside
 dialer pool 1
!
track 100 interface Dialer0 ip routing
 delay down 10 up 10
!
ip route 0.0.0.0 0.0.0.0 Dialer0 10 track 100
ip route 0.0.0.0 0.0.0.0 Dialer1 250

11 comments:

stretch said...

Should the line
"track 100 interface Dialer3 ip routing"
point to Dialer0 instead? I'm still pretty rough with this stuff so ignore me if I've missed something obvious. Very neat though.

Ivan Pepelnjak said...

You're absolutely right. I've fixed the post and (like any good electronic engineer :) color-coded the interface names.

Christian said...

Hello Ivan, why is the tracking needed? Wouldn't it work without? Thanks regards, Christian

Ivan Pepelnjak said...

A "dialer" interface is always in an up/up state, even when it's not connected to a remote peer (otherwise the regular dialing functionality wouldn't work).

If the PPPoE session underlying the Dialer interface is not operational, the static route without the "track" option would still point to the interface and attract the traffic.

wolruf said...

You may also want to check this very recent document:
http://www.cisco.com/en/US/products/sw/secursw/ps1018/products_configuration_example09186a00809454c7.shtml

Anonymous said...

You do not need the route "ip route 0.0.0.0 0.0.0.0 Dialer0 10 track 100" and the tracking if you configure "ppp ipcp route default" on interface Dialer0.
Works the same way... :-)

Ivan Pepelnjak said...

@wolruf: Yeah, I know those documents ... they were a year or so behind me :).

Anonymous said...

hi ivan, with 2 adsl connection to the same connection, is it possible to do load balancing? thanks.

Anonymous said...

sorry, with 2 adsl connections to the same ISP, is it possible to do load balancing? thanks.

Response3 said...

Thanks for the great articles, Ivan. One quick question: how would you implement port forwarding from the Internet into the LAN using this scenario?

I've been using a setup similar to this for about a year now, and haven't found an answer to that. For now, each host has to have 2 private IP's, with each statically mapped to a single IP in both ISP 1 and ISP 2 subnet blocks. Then port forwarding works. Any ideas?

Ivan Pepelnjak said...

Just wait a few days, this topic is covered in my next IP Corner article.

Post a Comment

If you're using Internet Explorer, your first attempt to publish a comment will probably fail (a feature of Blogger). Don't worry, just press the Post Comment button again.

Ivan Pepelnjak, CCIE#1354, is the chief technology advisor for NIL Data Communications. He has been designing and implementing large-scale data communications networks as well as teaching and writing books about advanced technologies since 1990. See his full profile, contact him or visit his page on Facebook.