Sunday, January 12, 2020

Configuring a Cisco 1100 LTE Advanced Router

I recently spent the holidays in the Philippines and did a lot of shopping (and eating) around Metro Manila. This was our quick visit to Meralco Liwanag Park before dinner at Robinson's Galleria Mall.


This was in Capitol Commons where we bought our gifts. There were nice lights (in a shape of a lamp post) in the park area.


We decided to go shopping in Divisoria so we had lunch at Sincerity restaurant in Lucky Chinatown Mall. Their fried chicken and fried kikiam were really good.



There's also a museum located inside the mall.



We went to Eastwood City Mall and tried out Mystery Manila. We chose the School of Sorcery (feels like Harry Potter) and got out the room in less than 50 minutes.
 

We had a Filipino buffet lunch at Guevarra's in San Juan City after the New Year. My Filipino food cravings were satisfied.


We booked and went to see Disney on Ice in Mall of Asia Arena after the New Year. The children (including myself) were ecstatic see the characters in Frozen.



Here are some caveats when cofiguring a Cisco 1100 LTE Advanced ISR series router.

Overview of Cisco 4G LTE Advanced

Cisco 4G LTE supports the following 4G/3G modes:
    4G LTE —4G LTE mobile specification provides multi-megabit bandwidth, more efficient radio network, latency reduction, and improved mobility. LTE solutions target new cellular networks. These networks initially support up to 300 Mb/s peak rates in the downlink and up to 50 Mb/s peak rates in the uplink. The throughput of these networks is higher than the existing 3G networks.
    • 3G Evolution High-Speed Packet Access (HSPA/HSPA+) —HSPA is a UMTS-based 3G network. It supports High-Speed Downlink Packet Access (HSDPA) and High-Speed Uplink Packet Access (HSUPA) data for improved download and upload speeds. Evolution High-Speed Packet Access (HSPA+) supports Multiple Input/Multiple Output (MIMO) antenna capability.

Prerequisites for Configuring Cisco 4G LTE Advanced
    • If the signal is not good at the router, use the Cisco offered antenna accessories and extension cables to place the antenna away from router in a better coverage area.
    • You must have 4G LTE network coverage where your router is physically placed.
    • You must subscribe to a service plan with a wireless service provider and obtain a Subscriber Identity Module (SIM) card. Only micro SIM is supported.
    • You must install the SIM card before configuring the 4G LTE or Cisco C1100 series router.
    • The standalone antenna that supports GPS capabilities must be installed for the GPS feature to work. See the Cisco 4G Indoor/Outdoor Active GPS Antenna (GPS-ACT-ANTM-SMA) document for installation information.

Restrictions for Configuring Cisco 4G LTE Advanced
    • Currently, cellular networks support only user initiated bearer establishment.
    • Due to the shared nature of wireless communications, the experienced throughput varies depending on the number of active users or congestion in a given network.
    • Cellular networks have higher latency compared to wired networks. Latency rates depend on the technology and carrier. Latency also depends on the signal conditions and can be higher because of network congestion.
    • CDMA-EVDO, CDMA-1xRTT, and GPRS technology modes are not supported.
    • Any restrictions that are part of the terms of service from your carrier.
    • SMS—Only one text message up to 160 characters to one recipient at a time is supported. Larger texts are automatically truncated to the proper size before being sent.
    • It is strongly recommended that you configure SNMP V3 with authentication/privacy.

The following features are not supported on Cisco 4G LTE Advanced C1100 Series ISR, when compared to Classic IOS:
    • TTY support or Line
    • Chat script/dialer string
    • External Dialer
    • DM log output to USB flash is not supported.


Below are the photos (front and back) of a C1111-8PLTELA router. It uses an off-white/metallic chassis which is similar to the new Cisco Firepower 2100 and WLC 3504.



It has a built-in 8-port switch (Layer 2 only), two Gig ports (Layer 3): G0/0/0 (has an option for fiber SFP) and G0/0/1 (copper-only) and two LTE antenna.


You can use a flat screw driver to open the SIM card slot cover.



Below are the initial bootup and running-config. The LTE Advanced router uses an IOS-XE software (Linux Kernel). The interfaces GigabitEthernet0/0/0 and Cellular0/2/0 are enabled by default. It also uses Cisco Smart Licensing (CSL).

Rom image verified correctly

System Bootstrap, Version 16.9(1r), RELEASE SOFTWARE
Copyright (c) 1994-2018  by cisco Systems, Inc.

Current image running: Boot ROM0

Last reset cause: PowerOn
C1111-8PLTELA platform with 4194304 Kbytes of main memory

........

no valid BOOT image found
Final autoboot attempt from default boot device...
Located throughput_monitor_params
#

Unsupported package header version (-1347440721)
Located c1100-universalk9_ias.16.10.01b.SPA.bin
################################################################

<OUTPUT TRUNCATED>

################################################################

Package header rev 3 structure detected
IsoSize = 484581376
Calculating SHA-1 hash...Validate package: SHA-1 hash:
    calculated 471FE7F1:7BD648C4:DD9EA59C:D7EA6B94:F6CF1438
    expected   471FE7F1:7BD648C4:DD9EA59C:D7EA6B94:F6CF1438

RSA Signed RELEASE Image Signature Verification Successful
Image validated

              Restricted Rights Legend

Use, duplication, or disclosure by the Government is
subject to restrictions as set forth in subparagraph
(c) of the Commercial Computer Software - Restricted
Rights clause at FAR sec. 52.227-19 and subparagraph
(c) (1) (ii) of the Rights in Technical Data and Computer
Software clause at DFARS sec. 252.227-7013.

           Cisco Systems, Inc.
           170 West Tasman Drive
           San Jose, California 95134-1706

Cisco IOS Software [Gibraltar], ISR Software (ARMV8EL_LINUX_IOSD-UNIVERSALK9_IAS-M), Version 16.10.1b, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2018 by Cisco Systems, Inc.
Compiled Wed 12-Dec-18 01:49 by mcpre

PLEASE READ THE FOLLOWING TERMS CAREFULLY. INSTALLING THE LICENSE OR
LICENSE KEY PROVIDED FOR ANY CISCO SOFTWARE PRODUCT, PRODUCT FEATURE,
AND/OR SUBSEQUENTLY PROVIDED SOFTWARE FEATURES (COLLECTIVELY, THE
"SOFTWARE"), AND/OR USING SUCH SOFTWARE CONSTITUTES YOUR FULL
ACCEPTANCE OF THE FOLLOWING TERMS. YOU MUST NOT PROCEED FURTHER IF YOU
ARE NOT WILLING TO BE BOUND BY ALL THE TERMS SET FORTH HEREIN.

Your use of the Software is subject to the Cisco End User License Agreement
(EULA) and any relevant supplemental terms (SEULA) found at
http://www.cisco.com/c/en/us/about/legal/cloud-and-software/software-terms.html.

You hereby acknowledge and agree that certain Software and/or features are
licensed for a particular term, that the license to such Software and/or
features is valid only for the applicable term and that such Software and/or
features may be shut down or otherwise terminated by Cisco after expiration
of the applicable license term (e.g., 90-day trial period). Cisco reserves
the right to terminate any such Software feature electronically or by any
other means available. While Cisco may provide alerts, it is your sole
responsibility to monitor your usage of any such term Software feature to
ensure that your systems and networks are prepared for a shutdown of the
Software feature.

% Failed to initialize nvram
% Failed to initialize backup nvram
cisco C1111-8PLTELA (1RU) processor with 1407249K/6147K bytes of memory.
Processor board ID FGL23491234
1 Virtual Ethernet interface
10 Gigabit Ethernet interfaces
2 Cellular interfaces
32768K bytes of non-volatile configuration memory.
4194304K bytes of physical memory.
2863103K bytes of flash memory at bootflash:.
0K bytes of WebUI ODM Files at webui:.

%INIT: waited 0 seconds for NVRAM to be available

         --- System Configuration Dialog ---

Would you like to enter the initial configuration dialog? [yes/no]:

Press RETURN to get started!

*Jan 12 02:28:06.834: %SMART_LIC-6-EXPORT_CONTROLLED: Usage of export controlled features is not allowed
*Jan 12 02:28:06.835: %SMART_LIC-6-AGENT_ENABLED: Smart Agent for Licensing is enabled
*Jan 12 02:28:06.835: %SMART_LIC-6-EXPORT_CONTROLLED: Usage of export controlled features is not allowed
*Jan 12 02:28:07.338: %IOS_LICENSE_IMAGE_APPLICATION-3-FAILED: license request failed
*Jan 12 02:28:07.361: %IOS_LICENSE_IMAGE_APPLICATION-3-FAILED: license request failed
*Jan 12 02:28:07.383: %IOS_LICENSE_IMAGE_APPLICATION-3-FAILED: license request failed

<OUTPUT TRUNCATED>

*Jan 12 02:28:11.444: %ISR_THROUGHPUT-6-CRYPTO: Crypto level has been set to 50000 kbps
*Jan 12 02:28:11.895: %IOSXE_RP_NV-3-NV_ACCESS_FAIL: Initial read of NVRAM contents failed
*Jan 12 02:28:12.299: %IOSXE_RP_NV-3-BACKUP_NV_ACCESS_FAIL: Initial read of backup NVRAM contents failed
*Jan 12 02:28:12.498: %IOS_LICENSE_IMAGE_APPLICATION-3-FAILED: license request failedesg switch eventq crimson DB not initialized
*Jan 12 02:28:12.913: %SMART_LIC-6-AGENT_READY: Smart Agent for Licensing is initialized
*Jan 12 02:28:12.913: %SMART_LIC-6-AGENT_ENABLED: Smart Agent for Licensing is enabled
*Jan 12 02:28:12.913: %SMART_LIC-6-EXPORT_CONTROLLED: Usage of export controlled features is not allowed
*Jan 12 02:28:12.929: %IOS_LICENSE_IMAGE_APPLICATION-3-FAILED: license request failed
*Jan 12 02:28:17.279: %SPANTREE-5-EXTENDED_SYSID: Extended SysId enabled for type vlan
*Jan 12 02:28:17.781: %LINK-3-UPDOWN: Interface Lsmpi0, changed state to up
*Jan 12 02:28:17.783: %LINK-3-UPDOWN: Interface EOBC0, changed state to up
*Jan 12 02:28:13.173: %CMLIB-6-THROUGHPUT_VALUE: R0/0: cmand: Throughput license found, throughput set to 50000 kbps
*Jan 12 02:28:17.996: %SMART_LIC-6-HA_ROLE_CHANGED: Smart Agent HA role changed to Active.
*Jan 12 02:28:18.208: %LINK-3-UPDOWN: Interface LIIN0, changed state to up
*Jan 12 02:28:18.810: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan1, changed state to down
*Jan 12 02:28:18.810: %LINEPROTO-5-UPDOWN: Line protocol on Interface Lsmpi0, changed state to up
*Jan 12 02:28:18.811: %LINEPROTO-5-UPDOWN: Line protocol on Interface EOBC0, changed state to up
*Jan 12 02:28:19.220: %LINEPROTO-5-UPDOWN: Line protocol on Interface LIIN0, changed state to up
*Jan 12 02:28:19.247: %ONEP_BASE-6-SS_ENABLED: ONEP: Service set Base was enabled by Default
*Jan 12 02:28:21.109: %IOSXE_OIR-6-REMSPA: SPA removed from subslot 0/0, interfaces disabled
*Jan 12 02:28:21.109: %IOSXE_OIR-6-REMSPA: SPA removed from subslot 0/1, interfaces disabled
*Jan 12 02:28:21.109: %IOSXE_OIR-6-REMSPA: SPA removed from subslot 0/2, interfaces disabled
*Jan 12 02:28:21.140: %SPA_OIR-6-OFFLINECARD: SPA (C1111-2x1GE) offline in subslot 0/0
*Jan 12 02:28:21.151: %SPA_OIR-6-OFFLINECARD: SPA (C1111-ES-8) offline in subslot 0/1
*Jan 12 02:28:21.200: %CELLWAN-2-MODEM_DOWN: Modem in slot 0/2 is DOWN
*Jan 12 02:28:21.200: %CELLWAN-2-MODEM_DOWN: Modem in slot 0/2 is DOWN
*Jan 12 02:28:21.202: %SPA_OIR-6-OFFLINECARD: SPA (C1111-LTE) offline in subslot 0/2
*Jan 12 02:28:21.236: %IOSXE_OIR-6-INSCARD: Card (fp) inserted in slot F0
*Jan 12 02:28:21.236: %IOSXE_OIR-6-ONLINECARD: Card (fp) online in slot F0
*Jan 12 02:28:21.245: %IOSXE_OIR-6-INSCARD: Card (cc) inserted in slot 0
*Jan 12 02:28:21.245: %IOSXE_OIR-6-ONLINECARD: Card (cc) online in slot 0
*Jan 12 02:28:21.300: %IOSXE_OIR-6-INSSPA: SPA inserted in subslot 0/0
*Jan 12 02:28:21.304: %IOSXE_OIR-6-INSSPA: SPA inserted in subslot 0/1
*Jan 12 02:28:21.305: %IOSXE_OIR-6-INSSPA: SPA inserted in subslot 0/2
*Jan 12 02:28:26.429: %SPA_OIR-6-ONLINECARD: SPA (C1111-ES-8) online in subslot 0/1
*Jan 12 02:28:26.434: %LINK-3-UPDOWN: Interface Cellular0/2/0, changed state to down
*Jan 12 02:28:26.434: %LINK-3-UPDOWN: Interface Cellular0/2/1, changed state to down
*Jan 12 02:28:26.446: %SPA_OIR-6-ONLINECARD: SPA (C1111-LTE) online in subslot 0/2
*Jan 12 02:28:26.473: %SPA_OIR-6-ONLINECARD: SPA (C1111-2x1GE) online in subslot 0/0
*Jan 12 02:28:28.377: %LINK-3-UPDOWN: Interface GigabitEthernet0/1/0, changed state to down
*Jan 12 02:28:28.378: %IOSXE_RP_ALARM-6-INFO: ASSERT CRITICAL GigabitEthernet0/1/0 Physical Port Link Down
*Jan 12 02:28:28.389: %LINK-3-UPDOWN: Interface GigabitEthernet0/1/1, changed state to down
*Jan 12 02:28:28.389: %IOSXE_RP_ALARM-6-INFO: ASSERT CRITICAL GigabitEthernet0/1/1 Physical Port Link Down
*Jan 12 02:28:28.396: %LINK-3-UPDOWN: Interface GigabitEthernet0/1/2, changed state to down
*Jan 12 02:28:28.397: %IOSXE_RP_ALARM-6-INFO: ASSERT CRITICAL GigabitEthernet0/1/2 Physical Port Link Down
*Jan 12 02:28:28.410: %LINK-3-UPDOWN: Interface GigabitEthernet0/1/3, changed state to down
*Jan 12 02:28:28.411: %IOSXE_RP_ALARM-6-INFO: ASSERT CRITICAL GigabitEthernet0/1/3 Physical Port Link Down
*Jan 12 02:28:28.411: %LINK-3-UPDOWN: Interface GigabitEthernet0/1/4, changed state to down
*Jan 12 02:28:28.412: %IOSXE_RP_ALARM-6-INFO: ASSERT CRITICAL GigabitEthernet0/1/4 Physical Port Link Down
*Jan 12 02:28:28.412: %LINK-3-UPDOWN: Interface GigabitEthernet0/1/5, changed state to down
*Jan 12 02:28:28.413: %IOSXE_RP_ALARM-6-INFO: ASSERT CRITICAL GigabitEthernet0/1/5 Physical Port Link Down
*Jan 12 02:28:28.413: %LINK-3-UPDOWN: Interface GigabitEthernet0/1/6, changed state to down
*Jan 12 02:29:33.425: %CELLWAN-5-SIM_DETECT_COMPLETE: [Cellular0/2/0]: SIM presence detection has completed !!
*Jan 12 02:29:39.427: %CELLWAN-2-SIM_NOT_PRESENT: [Cellular0/2/0]: SIM is not present in Slot 0
CRYPTO_PKI: setting trustpoint policy TP-self-signed-1543891264 to use keypair TP-self-signed-1543891264% Generating 2048 bit RSA keys, keys will be non-exportable...
*Jan 12 02:29:49.794: %CRYPTO_ENGINE-5-KEY_ADDITION: A key named CISCO_IDEVID_SUDI has been generated or imported by pki-sudi
[OK] (elapsed time was 2 seconds)
*Jan 12 02:29:49.814: %PKI-2-NON_AUTHORITATIVE_CLOCK: PKI functions can not be initialized until an authoritative time source, like NTP, can be obtained.
*Jan 12 02:29:51.066: %CRYPTO_ENGINE-5-KEY_ADDITION: A key named TP-self-signed-1543891264 has been generated or imported by crypto-engine
*Jan 12 02:29:51.069: %SSH-5-ENABLED: SSH 1.99 has been enabled
*Jan 12 02:29:51.146: %PKI-4-NOCONFIGAUTOSAVE: Configuration was modified.  Issue "write memory" to save new IOS PKI configuration
*Jan 12 02:29:51.240: %CRYPTO_ENGINE-5-KEY_ADDITION: A key named TP-self-signed-1543891264.server has been generated or imported by crypto-engine
*Jan 12 02:30:00.270: %PKI-4-NOCONFIGAUTOSAVE: Configuration was modified.  Issue "write memory" to save new IOS PKI configuration
*Jan 12 02:30:00.276: %CALL_HOME-6-CALL_HOME_ENABLED: Call-home is enabled by Smart Agent for Licensing.
*Jan 12 02:30:00.276: %SMART_LIC-5-COMM_RESTORED: Communications with the Cisco Smart Software Manager or satellite restored
*Jan 12 02:30:38.915: %CELLWAN-2-MODEM_UP: Modem in slot 0/2 is now UP
*Jan 12 02:30:39.117: %CELLWAN-2-MODEM_RADIO: Cellular0/2/0 Modem radio has been turned on
*Jan 12 02:30:41.128: %LINK-3-UPDOWN: Interface Cellular0/2/0, changed state to up
*Jan 12 02:30:42.131: %LINEPROTO-5-UPDOWN: Line protocol on Interface Cellular0/2/0, changed state to up
*Jan 12 02:30:58.429: %CELLWAN-6-CELLULAR_BACKOFF_START: Cellular0/2/0: Cellular back-off has started on PDN 0
Router>enable
Router#show version
Cisco IOS XE Software, Version 16.10.01b
Cisco IOS Software [Gibraltar], ISR Software (ARMV8EL_LINUX_IOSD-UNIVERSALK9_IAS-M), Version 16.10.1b, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2018 by Cisco Systems, Inc.
Compiled Wed 12-Dec-18 01:49 by mcpre

Cisco IOS-XE software, Copyright (c) 2005-2018 by cisco Systems, Inc.
All rights reserved.  Certain components of Cisco IOS-XE software are
licensed under the GNU General Public License ("GPL") Version 2.0.  The
software code licensed under GPL Version 2.0 is free software that comes
with ABSOLUTELY NO WARRANTY.  You can redistribute and/or modify such
GPL code under the terms of GPL Version 2.0.  For more details, see the
documentation or "License Notice" file accompanying the IOS-XE software,
or the applicable URL provided on the flyer accompanying the IOS-XE
software.

ROM: IOS-XE ROMMON

Router uptime is 5 minutes
Uptime for this control processor is 7 minutes
System returned to ROM by Reload Command
System image file is "bootflash:c1100-universalk9_ias.16.10.01b.SPA.bin"
Last reload reason: Reload Command

This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

Suite License Information for Module:'esg'

--------------------------------------------------------------------------------
Suite                 Suite Current         Type           Suite Next reboot    
--------------------------------------------------------------------------------
FoundationSuiteK9     None                  Smart License  None                 
securityk9
appxk9

Technology Package License Information:

-----------------------------------------------------------------
Technology    Technology-package           Technology-package
              Current       Type           Next reboot 
------------------------------------------------------------------
appxk9           None             Smart License    None
securityk9       None             Smart License    None
ipbase           ipbasek9         Smart License    ipbasek9

The current throughput level is unthrottled

Smart Licensing Status: UNREGISTERED/No Licenses in Use

cisco C1111-8PLTELA (1RU) processor with 1407249K/6147K bytes of memory.
Processor board ID FGL23491234
1 Virtual Ethernet interface
10 Gigabit Ethernet interfaces
2 Cellular interfaces
32768K bytes of non-volatile configuration memory.
4194304K bytes of physical memory.
2863103K bytes of flash memory at bootflash:.
0K bytes of WebUI ODM Files at webui:.

Configuration register is 0x2102

Router#
*Jan 12 02:33:38.602: %PNP-6-PNP_DISCOVERY_STOPPED: PnP Discovery stopped (Config Wizard)

Router#show ip interface brief
Interface              IP-Address      OK? Method Status                Protocol
GigabitEthernet0/0/0   unassigned      YES unset  down                  down   
GigabitEthernet0/0/1   unassigned      YES unset  administratively down down   
GigabitEthernet0/1/0   unassigned      YES unset  down                  down   
GigabitEthernet0/1/1   unassigned      YES unset  down                  down   
GigabitEthernet0/1/2   unassigned      YES unset  down                  down   
GigabitEthernet0/1/3   unassigned      YES unset  down                  down   
GigabitEthernet0/1/4   unassigned      YES unset  down                  down   
GigabitEthernet0/1/5   unassigned      YES unset  down                  down   
GigabitEthernet0/1/6   unassigned      YES unset  down                  down   
GigabitEthernet0/1/7   unassigned      YES unset  down                  down   
Cellular0/2/0          unassigned      YES TFTP   up                    up     
Cellular0/2/1          unassigned      YES unset  administratively down down   
Vlan1                  unassigned      YES unset  up                    down   

Router#show run
Building configuration...

Current configuration : 6325 bytes
!
! Last configuration change at 02:33:37 UTC Sun Jan 12 2020
!
version 16.10
service timestamps debug datetime msec
service timestamps log datetime msec
! Call-home is enabled by Smart-Licensing.
service call-home
platform qfp utilization monitor load 80
no platform punt-keepalive disable-kernel-core
!
hostname Router
!
boot-start-marker
boot-end-marker
!
!
!
no aaa new-model
call-home
 ! If contact email address in call-home is configured as sch-smart-licensing@cisco.com
 ! the email address configured in Cisco Smart License Portal will be used as contact email address to send SCH notifications.
 contact-email-addr sch-smart-licensing@cisco.com
 profile "CiscoTAC-1"
  active
  destination transport-method http
  no destination transport-method email
!
!
!
!
login on-success log
!
!
!
!
!
!
!
subscriber templating
multilink bundle-name authenticated
!
!
!
crypto pki trustpoint TP-self-signed-1543891264
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-1543891264
 revocation-check none
 rsakeypair TP-self-signed-1543891264
!
crypto pki trustpoint SLA-TrustPoint
 enrollment pkcs12
 revocation-check crl
!
!
crypto pki certificate chain TP-self-signed-1543891264
 certificate self-signed 01
  30820330 30820218 A0030201 02020101 300D0609 2A864886 F70D0101 05050030

<OUTPUT TRUNCATED>

  731BECC1 57896D74 7F235BB5 C94D3911 361B9FE2
      quit
crypto pki certificate chain SLA-TrustPoint
 certificate ca 01
  30820321 30820209 A0030201 02020101 300D0609 2A864886 F70D0101 0B050030

<OUTPUT TRUNCATED>

  D697DF7F 28 
quit
!
license udi pid C1111-8PLTELA sn FGL23491234
!
diagnostic bootup level minimal
!
spanning-tree extend system-id
!
!
!
redundancy
 mode none
!
controller Cellular 0/2/0
 lte modem link-recovery rssi onset-threshold -110
 lte modem link-recovery monitor-timer 20
 lte modem link-recovery wait-timer 10
 lte modem link-recovery debounce-count 6
 lte modem crash-action boot-and-hold
!
!
vlan internal allocation policy ascending
!
!
!
!
!
!
interface GigabitEthernet0/0/0
 no ip address
 negotiation auto
!
interface GigabitEthernet0/0/1
 no ip address
 shutdown
 negotiation auto
!
interface GigabitEthernet0/1/0
!
interface GigabitEthernet0/1/1
!
interface GigabitEthernet0/1/2
!
interface GigabitEthernet0/1/3
!
interface GigabitEthernet0/1/4
!
interface GigabitEthernet0/1/5
!
interface GigabitEthernet0/1/6
!
interface GigabitEthernet0/1/7
!
interface Cellular0/2/0
 ip address negotiated
 ipv6 enable
!
interface Cellular0/2/1
 no ip address
 shutdown
!
interface Vlan1
 no ip address
!
ip forward-protocol nd
ip http server
ip http authentication local
ip http secure-server
!
!
!
!
!
!
control-plane
!
!
line con 0
 exec-timeout 0 0
 transport input none
 stopbits 1
line vty 0 4
 login
!
!
!
!
!
!
end

Router#show license ?
  all          Show license all information
  reservation  Show license reservation information
  status       Show license status information
  summary      Show license summary
  tech         show license tech support information
  udi          Show license udi information
  usage        Show license usage information

Router#show license all
Smart Licensing Status
======================

Smart Licensing is ENABLED

Registration:
  Status: UNREGISTERED
  Export-Controlled Functionality: NOT ALLOWED

License Authorization:
  Status: No Licenses in Use

License Conversion:
  Automatic Conversion Enabled: False
  Status: Not started

Export Authorization Key:
  Features Authorized:
    <none>

Utility:
  Status: DISABLED

Data Privacy:
  Sending Hostname: yes
    Callhome hostname privacy: DISABLED
    Smart Licensing hostname privacy: DISABLED
  Version privacy: DISABLED

Transport:
  Type: Callhome

License Usage
==============

No licenses in use

Product Information
===================
UDI: PID:C1111-8PLTELA,SN:FGL23491234

Agent Version
=============
Smart Agent for Licensing: 4.5.10_rel/87
Component Versions: SA:(1_3_dev)1.0.15, SI:(dev22)1.2.1, CH:(rel5)1.0.3, PK:(dev18)1.0.3

Reservation Info
================
License reservation: DISABLED


You'll need a Nano-to-Micro SIM card adapter to insert the LTE SIM card. Just follow up the orientation of the SIM card or icon displayed. I used slot 0 (bottom slot) since the Cellular 0/2/0 interface is enabled/unshut by default. You can just push the SIM card again in order to eject or remove it.




Router#
*Jan 12 03:20:39.978: %CELLWAN-6-SIM_INSERTED: [Cellular0/2/0]: SIM in slot 0 has been
     inserted


Router#show cellular 0/2/0 ?
  all         Display all the information
  connection  Current active connection and statistics
  firmware    Display list of all available f/w
  fota        Cellular fota status
  gps         Cellular gps information
  hardware    Cellular modem hardware information
  logs        Modem logging information
  network     Cellular network information
  profile     Profile information in the modem
  qos         Current QoS configuration and statistics
  radio       Cellular modem radio information
  security    Modem security status
  sms         SMS information

Router#show cellular 0/2/0 security
Active SIM = 0
SIM switchover attempts = 0
Card Holder Verification (CHV1) = Disabled
SIM Status = Not inserted
SIM User Operation Required = None
Number of CHV1 Retries remaining = 0

Router#show cellular 0/2/0 network
Current System Time = Sun Jan 12 3:23:14 2020
Current Service Status = Normal
Current Service = Packet switched
Current Roaming Status = Home
Network Selection Mode = Automatic
Network = Singtel
Mobile Country Code (MCC) = 525
Mobile Network Code (MNC) = 1
Packet switch domain(PS) state = Attached
LTE Carrier Aggregation state = Deconfigured
Registration state(EMM) = Registered
EMM Sub State = Normal Service
Tracking Area Code (TAC) = 710
Cell ID = 197293313
Network MTU = Not Available

Router#show cellular 0/2/0 radio
Radio power mode = online
LTE Rx Channel Number =  3250
LTE Tx Channel Number =  21250
LTE Band =  7
LTE Bandwidth = 20 MHz
Current RSSI = -64 dBm
Current RSRP = -101 dBm
Current RSRQ = -13 dB
Current SNR = 4.0  dB
Physical Cell Id = 393
Number of nearby cells = 4
Idx      PCI (Physical Cell Id)
--------------------------------
1              393
2              142
3              171
4              138
Radio Access Technology(RAT) Preference = AUTO
Radio Access Technology(RAT) Selected = LTE

Router#show cellular 0/2/0 profile

Profile 1 = INACTIVE* **
--------
PDP Type = IPv4v6
Access Point Name (APN) =
Authentication = None

  * - Default profile
 ** - LTE attach profile

Router#show interface cellular 0/2/0
Cellular0/2/0 is up, line protocol is up
  Hardware is LTE Adv CAT6 - Multimode LTE/DC-HSPA+/HSPA+/HSPA/UMTS/EDGE/GPRS
  Internet address will be negotiated using IPCP
  MTU 1500 bytes, BW 50000 Kbit/sec, DLY 20000 usec,
     reliability 255/255, txload 1/255, rxload 1/255
  Encapsulation HDLC, loopback not set
  Keepalive not supported
  Last input never, output 00:37:08, output hang never
  Last clearing of "show interface" counters never
  Input queue: 0/375/0/0 (size/max/drops/flushes); Total output drops: 0
  Queueing strategy: fifo
  Output queue: 0/40 (size/max)
  5 minute input rate 0 bits/sec, 0 packets/sec
  5 minute output rate 0 bits/sec, 0 packets/sec
     0 packets input, 0 bytes, 0 no buffer
     Received 0 broadcasts (0 IP multicasts)
     0 runts, 0 giants, 0 throttles
     0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
     107 packets output, 7764 bytes, 0 underruns
     0 output errors, 0 collisions, 0 interface resets
     0 unknown protocol drops
     0 output buffer failures, 0 output buffers swapped out
     0 carrier transitions


I used the same configuration for the Cisco 899 LTE router in my previous post except the encapsulation slip under the Cellular interface is not supported in the new C1100 LTE Advanced ISR. I also used no authentication (none) for the SingTel APN profile.

Router#cellular ?
  <0-0>  Cellular interface number

Router#cellular 0/2/0 ?
  copy  Copy Command
  lte   LTE Technology Commands

Router#cellular 0/2/0 lte ?
  firmware-activate  firmware activate
  fota               AVMS Firmware upgrade over the air
  plmn               PLMN Commands
  prl-region         View/set PRL region
  profile            LTE Profile management commands
  sim                SIM card commands
  sms                SMS Commands
  technology         LTE Technology Preferences

Router#cellular 0/2/0 lte profile ?
  create  Create/Edit a Profile
  delete  Delete a profile

Router#cellular 0/2/0 lte profile create ?
  <1-16>  Profile Number

Router#cellular 0/2/0 lte profile create 1 ?
  WORD  Access Point Name
  <cr>  <cr>

Router#cellular 0/2/0 lte profile create 1 e-ideas ?
  chap      CHAP authentication only
  none      No authentication
  pap       PAP authentication only
  pap_chap  PAP or CHAP authentication
  <cr>      <cr>

Router#cellular 0/2/0 lte profile create 1 e-ideas none ?
  ipv4    IPv4 type Bearer
  ipv4v6  IPV4V6 type Bearer
  ipv6    IPV6 type Bearer
  <cr>    <cr>

Router#cellular 0/2/0 lte profile create 1 e-ideas none ipv4
Warning: You are attempting to modify the attach profile.
Connection will be reset

PDP Type = IPv4v6
Access Point Name (APN) =
Authentication = NONE
Profile 1 already exists with above parameters. Do you want to overwrite? [confirm]

Profile 1 will be overwritten with the following values:

PDP type = IPv4
APN = e-ideas
Authentication = NONE

Are you sure? [confirm]
Profile 1 written to modem
*Jan 12 03:38:07.825: %CELLWAN-2-MODEM_RADIO: Cellular0/2/0 Modem radio has been turned off
*Jan 12 03:38:08.025: %CELLWAN-2-MODEM_RADIO: Cellular0/2/0 Modem radio has been turned on

Router#configure terminal
Enter configuration commands, one per line.  End with CNTL/Z.
Router(config)#interface Cellular0/2/0
Router(config-if)# ip address negotiated ip address ?
  A.B.C.D     IP address
  negotiated  IP Address negotiated over PPP
  pool        IP Address autoconfigured from a local DHCP pool
  slarp       Set IP address through SLARP

Router(config-if)#ip address negotiated
Router(config-if)#encapsulation slip
                                 ^
% Invalid input detected at '^' marker.

Router(config-if)#encapsulation ?
  arpa         Standard Ethernet version 2.0
  atm-dxi      ATM-DXI encapsulation
  frame-relay  Frame Relay networks
  hdlc         Serial HDLC synchronous
  lapb         LAPB (X.25 Level 2)
  ppp          Point-to-Point protocol
  smds         Switched Megabit Data Service (SMDS)
  x25          X.25

Router(config-if)#ip nat ?
  allow-static-host  Allow static-ip clients
  enable             Enable interface for address translation
  inside             Inside interface for address translation
  outside            Outside interface for address translation

Router(config-if)#ip nat outside
Router(config-if)#dialer ?
  callback-secure         Enable callback security
  disable-multiencaps     Disable Multi-Encaps for ISDN
  down-with-vInterface    Bring down Dialer when Virtual interface is down
  dtr                     Set DTR dialing for interface
  enable-timeout          Set length of time an interface stays down before it
                          is available for dialing
  fast-idle               Set idle time before disconnecting line with an
                          unusually high level of contention
  hold-queue              Configure output hold queue
  idle-timeout            Specify idle timeout before disconnecting line
  in-band                 Set v.25bis dialing for interface
  leased                  Leased/Non-Dial link
  map                     Define multiple dial-on-demand numbers
  mult-map-same-name      Multiple maps same remote name
  order                   Specify order of choosing dialstrings
  pool-member             Specify dialer pool membership
  pppoe-client-vlan-cos   set dot1p cos value in pppoe control packets
  priority                Specify priority for use in dialer group
  redial                  Configure redial for this interface
  rotary-group            Add to a dialer rotary group
  snapshot                Enable snapshot address for dialer profile
  vpdn                    Enable vpdn dial
  wait-for-carrier-time   How long the router will wait for carrier
  wait-for-line-protocol  Time the router will wait for the line protocol to
                          come up
  watch-disable           Time to wait before bringing down watched route link
  watch-group             Assign interface to dialer-watch-list

Router(config-if)#dialer in-band
Router(config-if)#dialer idle-timeout ?
  <0-2147483>  Idle timeout before disconnecting a call

Router(config-if)#dialer idle-timeout 0
Router(config-if)#dialer-group ?
  <1-128>  Dialer list number

Router(config-if)#dialer-group 1
Router(config-if)#exit
Router(config)#
Router(config-if)#interface GigabitEthernet0/0/0
Router(config-if)# ip address 192.168.1.1 255.255.255.0
Router(config-if)# ip nat inside
Router(config-if)#exit
Router(config)#ip route 0.0.0.0 0.0.0.0 Cellular0/2/0
Router(config)#access-list 1 permit 192.168.1.0 0.0.0.255
Router(config)#ip nat inside source list 1 interface Cellular0/2/0 overload
Router(config)#dialer-list 1 ?
  protocol  Permit or Deny based on protocols

Router(config)#dialer-list 1 protocol ?
  bridge   Bridging
  clns     OSI Connectionless Network Service
  clns_es  CLNS End System
  clns_is  CLNS Intermediate System
  ip       IP
  ipv6     IPv6
  llc2     LLC2
  xns      XNS

Router(config)#dialer-list 1 protocol ip ?
  deny    Deny specified protocol
  list    Add access list to dialer list
  permit  Permit specified protocol

Router(config)#dialer-list 1 protocol ip permit
Router(config)#end
Router#
*Jan 12 03:26:48.922: %SYS-5-CONFIG_I: Configured from console by console

Router#show run
Building configuration...


Current configuration : 6624 bytes
!
! Last configuration change at 03:26:48 UTC Sun Jan 12 2020
!
version 16.10
service timestamps debug datetime msec
service timestamps log datetime msec
! Call-home is enabled by Smart-Licensing.
service call-home
platform qfp utilization monitor load 80
no platform punt-keepalive disable-kernel-core
!
hostname Router
!
boot-start-marker
boot-end-marker
!
!
!
no aaa new-model
call-home
 ! If contact email address in call-home is configured as sch-smart-licensing@cisco.com
 ! the email address configured in Cisco Smart License Portal will be used as contact email address to send SCH notifications.
 contact-email-addr sch-smart-licensing@cisco.com
 profile "CiscoTAC-1"
  active
  destination transport-method http
  no destination transport-method email
!
!
!
!
login on-success log
!
!
!
!
!
!
!
subscriber templating
multilink bundle-name authenticated
!
!
!
crypto pki trustpoint TP-self-signed-1543891264
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-1543891264
 revocation-check none
 rsakeypair TP-self-signed-1543891264
!
crypto pki trustpoint SLA-TrustPoint
 enrollment pkcs12
 revocation-check crl
!
!
crypto pki certificate chain TP-self-signed-1543891264
 certificate self-signed 01
  30820330 30820218 A0030201 02020101 300D0609 2A864886 F70D0101 05050030

 <OUTPUT TRUNCATED>

  731BECC1 57896D74 7F235BB5 C94D3911 361B9FE2
      quit
crypto pki certificate chain SLA-TrustPoint
 certificate ca 01
  30820321 30820209 A0030201 02020101 300D0609 2A864886 F70D0101 0B050030

 <OUTPUT TRUNCATED>

  D697DF7F 28
      quit
!
license udi pid C1111-8PLTELA sn FGL23491234
!
diagnostic bootup level minimal
!
spanning-tree extend system-id
!
!
!
redundancy
 mode none
!
controller Cellular 0/2/0
 lte modem link-recovery rssi onset-threshold -110
 lte modem link-recovery monitor-timer 20
 lte modem link-recovery wait-timer 10
 lte modem link-recovery debounce-count 6
 lte modem crash-action boot-and-hold
!
!
vlan internal allocation policy ascending
!
!
!
!
!
!
interface GigabitEthernet0/0/0
 ip address 192.168.1.1 255.255.255.0
 ip nat inside
 negotiation auto
!
interface GigabitEthernet0/0/1
 no ip address
 shutdown
 negotiation auto
!
interface GigabitEthernet0/1/0
!
interface GigabitEthernet0/1/1
!
interface GigabitEthernet0/1/2
!
interface GigabitEthernet0/1/3
!
interface GigabitEthernet0/1/4
!
interface GigabitEthernet0/1/5
!
interface GigabitEthernet0/1/6
!
interface GigabitEthernet0/1/7
!
interface Cellular0/2/0
 ip address negotiated
 ip nat outside
 dialer in-band
 dialer idle-timeout 0
 dialer-group 1
 ipv6 enable
 pulse-time 1
!
interface Cellular0/2/1
 no ip address
 shutdown
!
interface Vlan1
 no ip address
!
ip forward-protocol nd
ip http server
ip http authentication local
ip http secure-server
ip nat inside source list 1 interface Cellular0/2/0 overload
ip route 0.0.0.0 0.0.0.0 Cellular0/2/0
!
!
access-list 1 permit 192.168.1.0 0.0.0.255
dialer-list 1 protocol ip permit
!
!
!
!
control-plane
!
!
line con 0
 exec-timeout 0 0
 transport input none
 stopbits 1
line vty 0 4
 login
!
!
!
!
!
!
end
  
Router#debug chat
Chat scripts activity debugging is on
Router#debug modem
Modem control/process activation debugging is on
Router#debug dialer
Dial on demand events debugging is on
Router#debug cellular 0/2/0 messages callcontrol
CALLCONTROL debugging is on

Router#ping 8.8.8.8                                    
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 8.8.8.8, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 28/34/48 ms
Router#
*Jan 12 03:38:08.032: TTY866: EXEC creation
*Jan 12 03:38:09.300: Ce0/2/0 DDR: place call
*Jan 12 03:38:09.300: Ce0/2/0 DDR: Dialing cause ip (s=0.0.0.0, d=255.255.255.255)
*Jan 12 03:38:09.300: Ce0/2/0 DDR: Attempting to dial lte
*Jan 12 03:38:09.300: back off timer is not running for PDN 0
*Jan 12 03:38:09.300: api_manage_packet_session: Cellular0/2/0 profile 255 activate 1
*Jan 12 03:38:09.302: TTY866: Error setting method list for stop
*Jan 12 03:38:09.302: TTY866: Line reset by "Virtual Exec"
*Jan 12 03:38:09.302: TTY866: Modem: (unknown)->READY
*Jan 12 03:38:09.302: TTY866: no timer type 0 to destroy
*Jan 12 03:38:09.302: TTY866: no timer type 1 to destroy
*Jan 12 03:38:09.302: TTY866: no timer type 3 to destroy
*Jan 12 03:38:09.302: TTY866: no timer type 4 to destroy
*Jan 12 03:38:09.302: TTY866: no timer type 10 to destroy
*Jan 12 03:38:09.302: TTY866: no timer type 2 to destroy
*Jan 12 03:38:10.282: Cellular0/2/0: pdn:0 status:3
*Jan 12 03:38:12.280: cellwan_api_pkt_session_notify: instance id:0 profile:0 status:1
*Jan 12 03:38:12.280: cellwan_api_pkt_session_notify: Cellular0/2/0 instance_id 0 profile_id 0
*Jan 12 03:38:12.280: cellwan_api_pkt_session_notify: active_status[1],ipfamily[4]
*Jan 12 03:38:12.280: cellwan_api_pkt_session_notify: active_status[1],ipfamily[4]ipv4status[1],ipv6status[0]
*Jan 12 03:38:12.280: handle_call_history: new and old status the same 1
*Jan 12 03:38:12.280: cellular_update_profile_id_for_latest_call_setup: Cellular0/2/0 profile_id 1, active_status 1, pdn 0
*Jan 12 03:38:12.280: cellular_update_profile_id_for_latest_call_setup: pending_idb: Cellular0/2/0
*Jan 12 03:38:12.280: subuint 0 profile_id 1
*Jan 12 03:38:12.281: cellwan_api_pkt_session_notify: session status 1
*Jan 12 03:38:12.396:  cellwan_api_handle_profile_ip_addr_get_resp pdn 0 valid 1 ipv4 length 4 ipv6 prefix length 0, session active 1, profile:0
*Jan 12 03:38:12.396:     IPV4 Address =
*Jan 12 03:38:12.396: cellwan_api_handle_profile_ip_addr_get_resp: Lineaction Cellular0/2/0
*Jan 12 03:38:12.396: cellular_dip_ip_address_negotiated: Found profile ID 1 for Cellular0/2/0
*Jan 12 03:38:12.396: Cellular0/2/0 DirectIP: Install negotiated IP interface address 10.236.100.163
*Jan 12 03:38:12.401: cellular_line_protocol_up: Cellular0/2/0
*Jan 12 03:38:12.402: Reset back off for PDN 0
*Jan 12 03:38:12.402: %CELLWAN-6-CELLULAR_BACKOFF_STOP: Cellular0/2/0: Cellular back-off has stopped on PDN 0
*Jan 12 03:38:12.402: Ce0/2/0 DDR: dialer protocol up
*Jan 12 03:38:12.432: Cellular0/2/0 DirectIP: Primary DNS address 165.21.83.88 added
*Jan 12 03:38:12.432: Cellular0/2/0 DirectIP: Secondary DNS 165.21.100.88 added
*Jan 12 03:38:12.419: %FMFP-3-OBJ_DWNLD_TO_DP_FAILED: R0/0: fman_fp_image: PORTLIST: (tcp/10.236.100.163 port 5062 - 6085) download to DP failed
*Jan 12 03:38:22.626: Ce0/2/0 DDR: re-enable timeout

Router#show cellular 0/2/0 profile

Profile 1 = ACTIVE* **
--------
PDP Type = IPv4
PDP address = 10.236.100.163
Access Point Name (APN) = e-ideas
Authentication = None
    Primary DNS address = 165.21.83.88
    Secondary DNS address = 165.21.100.88

  * - Default profile
 ** - LTE attach profile


Configured default profile for active SIM 0 is profile 1.

Router#show interface cellular 0/2/0
Cellular0/2/0 is up, line protocol is up
  Hardware is LTE Adv CAT6 - Multimode LTE/DC-HSPA+/HSPA+/HSPA/UMTS/EDGE/GPRS
  Internet address is 10.236.100.163/32
  MTU 1500 bytes, BW 50000 Kbit/sec, DLY 20000 usec,
     reliability 255/255, txload 1/255, rxload 1/255
  Encapsulation HDLC, loopback not set
  Keepalive not supported
  DTR is pulsed for 1 seconds on reset
  Last input 00:01:00, output 00:01:00, output hang never
  Last clearing of "show interface" counters never
  Input queue: 0/375/0/0 (size/max/drops/flushes); Total output drops: 0
  Queueing strategy: fifo
  Output queue: 0/40 (size/max)
  5 minute input rate 110000 bits/sec, 1 packets/sec
  5 minute output rate 2000 bits/sec, 1 packets/sec
     6112 packets input, 6910782 bytes, 0 no buffer
     Received 0 broadcasts (0 IP multicasts)
     0 runts, 0 giants, 0 throttles
     0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
     3970 packets output, 693078 bytes, 0 underruns
     0 output errors, 0 collisions, 0 interface resets
     0 unknown protocol drops
     0 output buffer failures, 0 output buffers swapped out

Router#ping 8.8.8.8 source 192.168.1.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 8.8.8.8, timeout is 2 seconds:
Packet sent with a source address of 192.168.1.1
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 28/48/112 ms

Router#show ip interface b rief
Interface              IP-Address      OK? Method Status                Protocol
GigabitEthernet0/0/0   192.168.1.1     YES manual up                    up     
GigabitEthernet0/0/1   unassigned      YES unset  administratively down down   
GigabitEthernet0/1/0   unassigned      YES unset  down                  down   
GigabitEthernet0/1/1   unassigned      YES unset  down                  down   
GigabitEthernet0/1/2   unassigned      YES unset  down                  down   
GigabitEthernet0/1/3   unassigned      YES unset  down                  down   
GigabitEthernet0/1/4   unassigned      YES unset  down                  down   
GigabitEthernet0/1/5   unassigned      YES unset  down                  down   
GigabitEthernet0/1/6   unassigned      YES unset  down                  down   
GigabitEthernet0/1/7   unassigned      YES unset  down                  down   
Cellular0/2/0          10.236.100.163  YES IPCP   up                    up     
Cellular0/2/1          unassigned      YES unset  administratively down down   
Vlan1                  unassigned      YES unset  up                    down 


You can also use the built-in 8-port switch (Layer 2 only) for connnecting multiple LAN clients. I just moved the Layer 3 IP address from G0/0/0 to SVI 1.

Router#configure terminal
Enter configuration commands, one per line.  End with CNTL/Z.
Router(config)#interface GigabitEthernet0/0/0
Router(config-if)#no ip address
Router(config-if)#no ip nat inside
Router(config-if)#exit
Router(config)#interface vlan1
Router(config-if)# ip address 192.168.1.1 255.255.255.0
Router(config-if)# ip nat inside
Router(config-if)#end
Router#
*Jan 12 03:46:45.939: %SYS-5-CONFIG_I: Configured from console by console
Router#
*Jan 12 03:47:10.164: %LINK-3-UPDOWN: Interface GigabitEthernet0/0/0, changed state to down
*Jan 12 03:47:11.167: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/0/0, changed state to down
*Jan 12 03:47:32.967: %LINK-3-UPDOWN: Interface GigabitEthernet0/1/0, changed state to up
*Jan 12 03:47:33.965: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/1/0, changed state to up
*Jan 12 03:47:33.970: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan1, changed state to up

Router#show ip interface brief
Interface              IP-Address      OK? Method Status                Protocol
GigabitEthernet0/0/0   unassigned      YES manual down                  down   
GigabitEthernet0/0/1   unassigned      YES unset  administratively down down   
GigabitEthernet0/1/0   unassigned      YES unset  up                    up       // LAPTOP CONNECTED
GigabitEthernet0/1/1   unassigned      YES unset  down                  down   
GigabitEthernet0/1/2   unassigned      YES unset  down                  down   
GigabitEthernet0/1/3   unassigned      YES unset  down                  down   
GigabitEthernet0/1/4   unassigned      YES unset  down                  down   
GigabitEthernet0/1/5   unassigned      YES unset  down                  down   
GigabitEthernet0/1/6   unassigned      YES unset  down                  down   
GigabitEthernet0/1/7   unassigned      YES unset  down                  down   
Cellular0/2/0          10.236.100.163  YES IPCP   up                    up     
Cellular0/2/1          unassigned      YES unset  administratively down down   
Vlan1                  192.168.1.1     YES manual up                    up     


The inherent latency on LTE to the Internet (Google DNS 8.8.8.8) is a bit higher compared to a wired or wireless connection. The network throughput (download/upload speed) is reasonable enough to be used in a SOHO/remote site (or in a retail store) with a good LTE coverage.

Router#ping 8.8.8.8 source 192.168.1.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 8.8.8.8, timeout is 2 seconds:
Packet sent with a source address of 192.168.1.1
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 16/23/32 ms



Saturday, January 4, 2020

Troubleshooting NTP on a Cisco Router

Here's a nice link for troubleshooting NTP on a Cisco router. The NTP in one of my Cisco router was a little off by 45 mins (from UTC).

Router#show ntp status
Clock is unsynchronized, stratum 16, no reference clock
nominal freq is 250.0000 Hz, actual freq is 249.9981 Hz, precision is 2**22
ntp uptime is 2200 (1/100 of seconds), resolution is 4016
reference time is 00000000.00000000 (00:00:00.000 UTC Mon Jan 1 1900)
clock offset is 0.0000 msec, root delay is 0.00 msec
root dispersion is 0.32 msec, peer dispersion is 0.00 msec
loopfilter state is 'FSET' (Drift set from file), drift is 0.000007357 s/s
system poll interval is 8, never updated.
Router#show clock
*04:09:11.515 UTC Thu Jun 13 2019   // THE ASTERISK (*) MEANS THAT NTP IS NOT SYNCHRONIZED

Router#ping 63.12.7.2   // NTP SERVER IS REACHABLE
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 63.12.7.2, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 128/129/132 ms

Router(config)#ntp update-calendar   // TRIED TO FORCE NTP SYNC BUT STILL THE SAME

Router#show run | inc ntp
ntp update-calendar
ntp server 63.12.7.2

Router#show ntp association

  address         ref clock       st   when   poll reach  delay  offset   disp
 ~63.12.7.2    45.56.118.161    3      0   1024     0  0.000   0.000 15937.
 * sys.peer, # selected, + candidate, - outlyer, x falseticker, ~ configured
Router#show ntp association detail
63.12.7.2 configured, ipv4, insane, invalid, stratum 3
ref ID 45.56.118.161  , time E0708AF0.DC3BA22C (20:26:24.860 UTC Sun Apr 28 2019)
our mode client, peer mode server, our poll intvl 1024, peer poll intvl 1024
root delay 38.33 msec, root disp 59277.26, reach 0, sync dist 75245.30
delay 0.00 msec, offset 0.0000 msec, dispersion 15937.50, jitter 0.00 msec
precision 2**22, version 4
assoc id 48064, assoc name 63.12.7.2
assoc in packets 142, assoc out packets 143, assoc error packets 142
org time 00000000.00000000 (00:00:00.000 UTC Mon Jan 1 1900)
rec time E0ACBE34.D093C10E (12:21:08.814 UTC Thu Jun 13 2019)
xmt time E0ACBE34.D093C10E (12:21:08.814 UTC Thu Jun 13 2019)
filtdelay =     0.00    0.00    0.00    0.00    0.00    0.00    0.00    0.00
filtoffset =    0.00    0.00    0.00    0.00    0.00    0.00    0.00    0.00
filterror =  16000.0 16000.0 16000.0 16000.0 16000.0 16000.0 16000.0 16000.0
minpoll = 6, maxpoll = 10

Router#show ntp status
Clock is unsynchronized, stratum 16, no reference clock
nominal freq is 250.0000 Hz, actual freq is 249.9981 Hz, precision is 2**20
ntp uptime is 1653900 (1/100 of seconds), resolution is 4016
reference time is 00000000.00000000 (00:00:00.000 UTC Mon Jan 1 1900)
clock offset is 0.0000 msec, root delay is 0.00 msec
root dispersion is 248.09 msec, peer dispersion is 0.00 msec
loopfilter state is 'FSET' (Drift set from file), drift is 0.000007357 s/s
system poll interval is 8, never updated.

Router#show clock
*11:49:46.483 UTC Thu Jun 13 2019

Router#show clock
*14:32:00.790 UTC Thu Jun 13 2019   // NTP IS A "SLOW" PROTOCOL; NTP DIDN'T SYNC AFTER A FEW HOURS

Router#show ntp association

  address         ref clock       st   when   poll reach  delay  offset   disp
 ~63.12.7.2    45.56.118.161    3   1055   1024     0  0.000   0.000 15937.
 * sys.peer, # selected, + candidate, - outlyer, x falseticker, ~ configured
Router#show ntp status
Clock is unsynchronized, stratum 16, no reference clock
nominal freq is 250.0000 Hz, actual freq is 249.9981 Hz, precision is 2**20
ntp uptime is 2638200 (1/100 of seconds), resolution is 4016
reference time is 00000000.00000000 (00:00:00.000 UTC Mon Jan 1 1900)
clock offset is 0.0000 msec, root delay is 0.00 msec
root dispersion is 395.74 msec, peer dispersion is 0.00 msec
loopfilter state is 'FSET' (Drift set from file), drift is 0.000007357 s/s
system poll interval is 8, never updated.


You can force NTP by configuring a secondary NTP server (and remove it afterwards). You can check for a public NTP server on this link.

Router#configure terminal
Enter configuration commands, one per line.  End with CNTL/Z.
Router(config)#ntp server 23.252.63.82
Router(config)#do ping 23.252.63.82
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 23.252.63.82, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 172/175/176 ms

Router#show ntp status
Clock is synchronized, stratum 2, reference is 23.252.63.82   // NTP CLOCK IS NOW SYNCHRONIZED
nominal freq is 250.0000 Hz, actual freq is 249.9981 Hz, precision is 2**20
ntp uptime is 2662900 (1/100 of seconds), resolution is 4016
reference time is E0ACE880.1B448452 (15:21:36.106 UTC Thu Jun 13 2019)
clock offset is 12.5992 msec, root delay is 175.69 msec
root dispersion is 3951.30 msec, peer dispersion is 187.58 msec
loopfilter state is 'CTRL' (Normal Controlled Loop), drift is 0.000007359 s/s
system poll interval is 64, last update was 17 sec ago.

Router#show ntp association

  address         ref clock       st   when   poll reach  delay  offset   disp
*~23.252.63.82    .SOCK.           1     21     64     1 175.69  12.599 187.58
 ~63.12.7.2    45.56.118.161    3     21    128     0  0.000   0.000 15937.
 * sys.peer, # selected, + candidate, - outlyer, x falseticker, ~ configured

Router#show clock
15:22:11.539 UTC Thu Jun 13 2019    // NTP CLOCK SHOWED THE CORRECT DATE/TIME

Router(config)#no ntp server 23.252.63.82    // I REMOVED THE NEWLY ADDED NTP SERVER AND ntp update-calendar COMMAND
Router(config)#no ntp update-calendar
Router(config)#end
Router#show run | inc ntp
ntp server 63.12.7.2

Router#show clock
.15:23:37.297 UTC Thu Jun 13 2019   // CLOCK STILL SHOWED THE CORRECT DATE/TIME; THE DOT (.) MEANS NTP IS SYNCHRONIZED