BGP over ISDN

[mainstreetexpress]

I am having a bit of trouble keeping an ISDN link up after it has been established. I need to run BGP across the ISDN and everything comes up fine, but 120 seconds into the call it drops then immediately redials again as.

IP is used to trigger the dial up and even when there is traffic running across it (FTP etc) it still drops out after 120 secs
The BGP session sends keepalives at 90 seconds apart (default)
I have tried changing the idle timeout etc but that makes no difference

Any ideas?

username test password 7 xxxxxxxxxxxxxxx

ip subnet-zero
!
!
no ip domain lookup
!
ip cef
!
isdn switch-type basic-net3
!
!
!
interface BRI0
ip address 192.168.111.2 255.255.255.252
encapsulation ppp
no ip route-cache
no ip mroute-cache
dialer map ip 192.168.111.1 name test broadcast 0049xxxxxxxxxxx
dialer hold-queue 75
dialer load-threshold 128 either
dialer-group 5
isdn switch-type basic-net3
no fair-queue
no cdp enable
ppp authentication chap
ppp multilink
ppp multilink links maximum 2
ppp multilink links minimum 1
ppp timeout multilink link add 1
ppp timeout multilink link remove 60
!

!
interface FastEthernet0
ip address 192.0.0.249 255.255.255.0
speed auto
no standby redirect
standby 1 ip 192.0.0.254
standby 1 preempt
!
router eigrp 100
redistribute connected
network 192.0.0.0
auto-summary
!
router bgp 65002
no synchronization
bgp log-neighbor-changes
bgp dampening
redistribute static
neighbor 192.168.111.1 remote-as 65001
no auto-summary
!
ip classless
no ip http server
!
!
!
access-list 101 deny ip any 0.0.0.0 0.0.0.255
access-list 101 deny ip any 224.0.0.0 0.255.255.255
access-list 101 deny ip any 127.0.0.0 0.255.255.255
access-list 101 deny ip 224.0.0.0 0.255.255.255 any
access-list 101 deny ip 127.0.0.0 0.255.255.255 any
access-list 101 deny tcp any any eq 137
access-list 101 deny tcp any any eq 138
access-list 101 deny tcp any any eq 139
access-list 101 deny udp any any eq netbios-ns
access-list 101 deny udp any any eq netbios-dgm
access-list 101 deny udp any any eq netbios-ss
access-list 101 deny udp any any eq rip
access-list 101 deny udp any any eq snmp
access-list 101 deny udp any any eq snmptrap
access-list 101 deny ospf any any
access-list 101 deny eigrp any any
access-list 101 permit ip any any
dialer-list 5 protocol ip list 101

 

[baddos]

You probably need to modify your access list to include TCP port 179.


Although... Why are you running BGP over ISDN. Seems strange, since there is no way you'll be able to take a full view down that little pipe.

 

[ADB100]

The ACL is OK (you have an implicit permit at the end). The problem is probably the other end of the link - how does the ACL look on the other router?

I agree though, why are you trying to run BGP over an ISDN link?

Andy

 

[mainstreetexpress]

Hi
I'll look into that. There are no access lists on the other end at the moment. The reason I'm using BGP is because the customer is running an MPLS-VPN network using BGP between the CE and the PE, (the only dynamic routing protocol allowed) between different AS's.

As a backup solution, they want to be able to dial up to their remote sites directly. THe BGP routing table only contains about 15 routes so BGP is used between them at a lower local preference