Lab 3.7.

3 Configuring PPP Callback

Objective
In this lab, the student will configure a Cisco router for PPP callback over an asynchronous
connection.

Scenario
The International Travel Agency has been incurring excessive toll charges whenever remote sites
connect to the central site via a dialup connection. To reduce toll charges, ITA has secured lower call
rates. Configure PPP callback between remote sites and the central site so that whenever a remote
router calls the central router, the central router will hang up and call the remote site back to take
advantage of the lower call rates.

Step 1
Before beginning this lab, it is recommended that the routers be reloaded after erasing their startup
configuration. This will prevent problems that may be caused by residual configurations. Build and
configure the network according to the diagram, but do not configure the serial interfaces on either
router yet. Use the Adtran Atlas 550 or similar device to simulate the PSTN. If the Atlas 550 is used,
be sure the line cables from both modems are plugged into the octal FXS voice module ports of the
Atlas 550 as labeled in the diagram. Configure each router with their respective hostname and
FastEthernet IP addresses. Finally, configure each workstation with the correct IP address and
default gateway.

1-5

CCNP 2: Remote Access v 3.0 - Lab 3.7.3

Copyright 2003, Cisco Systems, Inc.

Step 2
Configure the serial interfaces on both routers for asynchronous connections. Be sure that the
correct IP addresses for each router have been set. The following are an example of the commands
for SanJose1:
SanJose1(config)#interface s0/1
SanJose1(config-if)#physical-layer async
SanJose1(config-if)#async mode dedicated
SanJose1(config-if)#ip address 192.168.8.1 255.255.255.0
Configure the following line parameters for both routers. The following are an example of the
commands for SanJose1:
SanJose1(config)#line 2
SanJose1(config-line)#login
SanJose1(config-line)#password cisco
SanJose1(config-line)#speed 115200
SanJose1(config-line)#flowcontrol hardware
SanJose1(config-line)#modem inout
SanJose1(config-line)#transport input all
SanJose1(config-line)#stopbits 1
Configure the virtual terminals on both routers with passwords.
Next, reverse Telnet to both modems, restore their factory default settings, and configure the
modems to answer on the second ring.

Step 3
Configure both routers to use their modems to initiate dialup connections. On both routers, enter the
appropriate dialer commands. The following are example commands for SanJose1:
SanJose1(config)#interface serial 0/1
SanJose1(config-if)#no cdp enable
SanJose1(config-if)#dialer in-band
SanJose1(config-if)#dialer idle-timeout 300
SanJose1(config-if)#dialer wait-for-carrier-time 60
SanJose1(config-if)#dialer hold-queue 50
SanJose1(config-if)#dialer-group 1
SanJose1(config)#chat-script hayes56k ABORT ERROR "" "AT Z" OK "ATDT
\T" TIMEOUT 30 CONNECT \c
SanJose1(config)#dialer-list 1 protocol ip permit
Once the commands have been entered on both routers, configure the dialer map on Capetown as
follows:
Capetown(config)#interface s0/1
Capetown(config-if)#dialer map ip 192.168.8.1 name SanJose1 modemscript hayes56k broadcast 5556001
This command maps the IP address of SanJose1 to its phone number. It also specifies that the chatscript should be used to initialize the modem. Because SanJose1 will be the callback server, its
dialer map configuration will require additional keywords. SanJose1s dialer map configuration will be
entered in the next step.

2-5

CCNP 2: Remote Access v 3.0 - Lab 3.7.3

Copyright 2003, Cisco Systems, Inc.

Step 4
Configure SanJose1s serial interface to act as a PPP callback server. First, use the following to
configure PPP for PAP authentication:
SanJose1(config)interface s0/1
SanJose1(config-if)#encapsulation ppp
SanJose1(config-if)#ppp authentication pap
SanJose1(config-if)#ppp pap sent-username SanJose1 password alpha
The ppp pap sent-username command configures SanJose1 to send the specified username
and password combination if prompted during the PPP authentication phase.
Next, enter the PPP commands required to configure SanJose1 as a PPP callback server as shown
in the following:
SanJose1(config-if)#ppp callback accept
SanJose1(config-if)#dialer callback-secure
SanJose1(config-if)#exit
SanJose1(config)#username Capetown password bravo
The ppp callback accept command configured SanJose1 to accept callback requests from
clients. The dialer callback-secure command affects those users that are not authorized to
receive a callback with the dialer callback-server command. If the username is not
authorized for callback, the call will be disconnected. Next, configure authorization for callback
service on SanJose1 as follows:
SanJose1(config)#map-class dialer dialback
SanJose1(config-map-class)#dialer callback-server username
SanJose1(config-map-class)#exit
SanJose1(config)#interface s0/1
SanJose1(config-if)#dialer map ip 192.168.8.3 name Capetown class
dialback modem-script hayes56k broadcast 5556002

Step 5
Configure Capetown for PPP with PAP authentication and callback request as follows, using the ppp
callback request command:
Capetown(config)#interface s0/1
Capetown(config-if)#encapsulation ppp
Capetown(config-if)#ppp authentication pap
Capetown(config-if)#ppp pap sent-username Capetown password bravo
Capetown(config-if)#ppp callback request
Capetown(config-if)#exit
Capetown(config)#username SanJose1 password alpha

3-5

CCNP 2: Remote Access v 3.0 - Lab 3.7.3

Copyright 2003, Cisco Systems, Inc.

Step 6
Set up static routes on both routers. For SanJose1, configure a static route to the Capetown LAN as
follows:
SanJose1(config)#ip route 192.168.216.0 255.255.255.0 192.168.8.3
On Capetown, configure a default route to the central router as follows:
Capetown(config)#ip route 0.0.0.0 0.0.0.0 192.168.8.1

Step 7
At this point, reboot all of the lab equipment in order to prevent potential problems with residual
configurations. Save the SanJose1 and Capetown configurations to NVRAM and reload the routers,
power cycle the modems and Adtran Atlas 550.
After all the lab equipment have rebooted, enable debug on SanJose1s console as follows:
SanJose1#debug dialer
The debug dialer command will output dialup related information to the console. Now bring up
the asynchronous connection by pinging from Host B to Host A (192.168.0.2).
1. Which of the routing table entries on Capetown will be used to route the ping packet from Host B
to 192.168.0.2?

__________________________________________________________________________
__________________________________________________________________________
2. What is the next-hop IP address mapped to that route?

__________________________________________________________________________
__________________________________________________________________________
3. What is the phone number mapped to that address in the Capetown router configuration?

__________________________________________________________________________
__________________________________________________________________________
Capetown should call SanJose1, SanJose1 should disconnect the call, and then SanJose1 should
call back Capetown. Troubleshoot, as necessary. The debug dialer output should reflect this
process, as shown in the following example:
SanJose1#
01:07:06: %LINK-3-UPDOWN: Interface Serial0/1, changed state to up
Dialer statechange to up Serial0/1
01:07:06: Serial0/1 DDR: Dialer received incoming call from <unknown>
01:07:08: Serial0/1 DDR: PPP callback Callback server starting to Capetown
5556002
01:07:08: Serial0/1 DDR: disconnecting call
01:07:10: %LINK-5-CHANGED: Interface Serial0/1, changed state to reset
01:07:15: %LINK-3-UPDOWN: Interface Serial0/1, changed state to down
01:07:30: Serial0/1 DDR: re-enable timeout
01:07:30: DDR: callback triggered by dialer_timers
01:07:30: Serial0/1 DDR: beginning callback to Capetown 5556002
4-5

CCNP 2: Remote Access v 3.0 - Lab 3.7.3

Copyright 2003, Cisco Systems, Inc.

01:07:30:
01:07:30:
01:07:30:
01:07:30:
01:07:30:
01:07:30:
01:07:30:
01:07:58:
01:08:00:

Serial0/1 DDR: Attempting to dial 5556002

CHAT2: Attempting async line dialer script
CHAT2: Dialing using Modem script: hayes56k & System script: none
DDR: Freeing callback to Capetown 5556002
CHAT2: process started
CHAT2: Asserting DTR
CHAT2: Chat script hayes56k started
CHAT2: Chat script hayes56k finished, status = Success
%LINK-3-UPDOWN: Interface Serial0/1, changed state to up

Dialer statechange to up Serial0/1Dialer call has been placed Serial0/1

4. According to the debug output, what happens on SanJose1 immediately after it attempts to dial
555-6002?

__________________________________________________________________________
__________________________________________________________________________
Finally, test the connection by attempting to Telnet from Host B to 192.168.0.1. Once the dialup
connection is established from SanJose1 to Capetown, the Telnet should be successful.
Troubleshoot, as necessary.

5-5

CCNP 2: Remote Access v 3.0 - Lab 3.7.3

Copyright 2003, Cisco Systems, Inc.