Checking The Acl That Defines The Interesting Traffic - HP 7102dl - ProCurve Secure Router Configuration Manual

Configuring Backup WAN Connections
Viewing Backup Configurations and Troubleshooting Backup Connections
3-82
make a connection. (For more information about checking the BRI or modem
interfaces, see "Viewing Information about BRI and Modem Interfaces and
Troubleshooting Problems" on page 3-72.)
Use the show interfaces demand command to view the status of the demand
interface, which should be up (spoofing). If the demand interface is down,
ensure that you have assigned it a valid IP address. If you configured the
demand interface as an unnumbered interface, make sure that the interface
with the actual IP address is up.
If the demand interface went down because it could not establish a connection
during the recovery mode, its status will be down (recovery failed). If this
happens, the demand interface will remain down until you take corrective
actions. You should first identify and fix the problem causing the failure. You
can then change the status of the demand interface by disabling it and then
activating it.
To disable the demand interface, enter the following command from the
demand interface configuration mode context:
ProCurve(config-demand 1)# shutdown
You can then activate the interface by entering:
ProCurve(config-demand 1)# no shutdown

Checking the ACL That Defines the Interesting Traffic

If the demand interface is up, you should ensure that the interesting traffic
actually triggers the ISDN connection. If possible, disconnect the primary
WAN connection so that the floating static route that you created for demand
routing is listed in the routing table. View the routing table by entering the
following command from the enable mode context:
ProCurve# show ip route
Ensure that the demand interface is listed as a directly connected interface
and that the route you entered for the far-end network lists the demand
interface as the forwarding interface.
If the route is correct, you can send some traffic to the far-end network to
determine if the ACL is triggering ISDN traffic. Even a simple ping command
should start the demand routing process (as long as the ping matches the
ACL—for example, you may need to use the extended ping commands to set