i can use this SIM card in another non-cisco router with no problem - only APN is needed with no user name and password

I do however see auth required below:

000698: *Dec 18 15:41:41.395 PCTime: %LINK-3-UPDOWN: Interface Cellular0, changed state to up
000699: *Dec 18 15:41:41.395 PCTime: %DIALER-6-BIND: Interface Ce0 bound to profile Di1
000700: *Dec 18 15:41:41.395 PCTime: Ce0 PPP: Using dialer call direction
000701: *Dec 18 15:41:41.395 PCTime: Ce0 PPP: Treating connection as a callout
000702: *Dec 18 15:41:41.395 PCTime: Ce0 PPP: Session handle[A9000065] Session id[34]
000703: *Dec 18 15:41:41.395 PCTime: Ce0 PPP: Authorization required
000704: *Dec 18 15:41:41.395 PCTime: Ce0 PPP: No remote authentication for call-out
000705: *Dec 18 15:41:41.399 PCTime: Ce0 PPP: No authorization without authentication
000706: *Dec 18 15:41:41.399 PCTime: Ce0 CHAP: I CHALLENGE id 1 len 35 from "UMTS_CHAP_SRVR"
000707: *Dec 18 15:41:41.399 PCTime: Ce0 CHAP: Unable to authenticate for peer
000708: *Dec 18 15:41:41.403 PCTime: TTY3: Async Int reset: Dropping DTR

Try configuring a dummy password.

Hi, 

Did this problem ever get resolved?

I am facing EXACTLY  the same problem.  ie.   Same Carrier,  same Router,  same Country. - Same problem. 

Hello,

which country, Belgium or the UK ? Which provider ? Post the config you currently have...

Hi, 

I am located in the UK.   I have had several goes at getting this working using configs I have found on the web, none have worked. Also Three do not need Chap authentication,  it uses the APN and connecting number to authenticate.  (Unfortunately)  I am starting out with routing/switching and am studying for ICND2. 

This Router came up at a good price as something that "Could" be useful for a radio project I am involved in allowing for a 3G connection to a remote site. However it is proving non-co-operative compaired to a retail 3g router that is simply plug in sim,  plug in PC and it works.  (only has USB so no good for connecting two devices to the net. 

On line Three list two APN names to use,  the former is the one widely advertised,  the latter took a bit of digging through a "Chinglish" manual that came with the USB router this is the one that is working with the USB router! 

APN:

three.co.uk

3internet

I created the following  Cellular profiles to try. 

Router#sh cellular 0 profile

Profile 1 = INACTIVE* **
--------
PDP Type = IPv4
Access Point Name (APN) = three.co.uk
Authentication = None
Username:
Password:

Profile 2 = INACTIVE
--------
PDP Type = IPv4
Access Point Name (APN) = 3internet
Authentication = None
Username:
Password:

I cannot get any of these profiles to go active,  but I am not sure if this is because I messed up in the configs. 

I downloaded the config off the router last night,  it too is in a sorry state as I have ripped a lot of it out but hopefully it is enough to allow someone to provide me with some guidance. 

For information.   Vlan200 is my access vlan.   I am aware I need to set up a static route and some NAT  but as I could not get Cellular 0 to connect I have not progressed this bit yet. 

-------------------

no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!
!
!
no aaa new-model
ethernet lmi ce
memory-size iomem 10
!
crypto pki trustpoint TP-self-signed-199739xxxx
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-19973xxxxx
revocation-check none
rsakeypair TP-self-signed-199739xxxx
!
!
crypto pki certificate chain TP-self-signed-1997390140
certificate self-signed 01
!

!
!
!
ip cef
no ipv6 cef
!
!
multilink bundle-name authenticated
chat-script gsm "" "1" TIMEOUT 60
license udi pid CISCO881G-K9 sn FCZ1432xxxx
!
!
username xxxxxxxx priv 15 secret xxxx
!
!
!
!
!
controller Cellular 0
!
!
!
!
!
!
!
!
!
!
interface FastEthernet0
description *** LAN CONNECTION **
switchport access vlan 200
no ip address
duplex full
speed 100
!
interface FastEthernet1
no ip address
!
interface FastEthernet2
no ip address
!
interface FastEthernet3
no ip address
!
interface FastEthernet4
no ip address
shutdown
duplex auto
speed auto
!
interface Cellular0
ip address negotiated
ip nat outside
ip virtual-reassembly in
encapsulation ppp
dialer in-band
dialer idle-timeout 0
dialer string gsm
dialer-group 1
async mode interactive
auto discovery qos
!
interface Vlan1
no ip address
!
interface Vlan200
ip address dhcp
!
ip forward-protocol nd
ip http server
ip http access-class 23
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
!
!
ip route 0.0.0.0 0.0.0.0 Cellular0
!
!
!
control-plane
!
!
vstack
!
line con 0
no modem enable
line aux 0
line 3
exec-timeout 0 0
script dialer gsm
modem InOut
no exec
transport input all
rxspeed 7200000
txspeed 2000000
line vty 0 4
login
transport input none
!
!
end

----------------

Any help and guidance for this newbee would be most welcome

Mat

Hello,

try 'slip' encapsulation on your cellular interface. I have revised your config a bit and added two different chat scripts, enter either one of them and see if you get it to work:

no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!
no aaa new-model
ethernet lmi ce
memory-size iomem 10
!
crypto pki trustpoint TP-self-signed-199739xxxx
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-19973xxxxx
revocation-check none
rsakeypair TP-self-signed-199739xxxx
!
crypto pki certificate chain TP-self-signed-1997390140
certificate self-signed 01
!
ip cef
no ipv6 cef
!
multilink bundle-name authenticated
!
chat-script gsm "" "ATDT*99#" TIMEOUT 60 "CONNECT"
chat-script gsm "" "ATDT#777" TIMEOUT 60 "CONNECT"
!
license udi pid CISCO881G-K9 sn FCZ1432xxxx
!
username xxxxxxxx priv 15 secret xxxx
!
controller Cellular 0
!
interface FastEthernet0
description *** LAN CONNECTION **
switchport access vlan 200
no ip address
duplex full
speed 100
!
interface FastEthernet1
no ip address
!
interface FastEthernet2
no ip address
!
interface FastEthernet3
no ip address
!
interface FastEthernet4
no ip address
shutdown
duplex auto
speed auto
!
interface Cellular0
ip address negotiated
ip nat outside
ip virtual-reassembly in
encapsulation slip
dialer in-band
dialer idle-timeout 0
dialer string gsm
dialer-group 1
async mode interactive
auto discovery qos
!
interface Vlan1
no ip address
!
interface Vlan200
ip address dhcp
!
ip forward-protocol nd
ip http server
ip http access-class 23
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
!
ip route 0.0.0.0 0.0.0.0 Cellular0
!
dialer-list 1 protocol ip permit
!
control-plane
!
vstack
!
line con 0
no modem enable
line aux 0
line 3
exec-timeout 0 0
script dialer gsm
modem InOut
no exec
transport input all
rxspeed 7200000
txspeed 2000000
line vty 0 4
login
transport input none
!
end

Hi, 

Thanks for the help so far,  unfortunately  the router does not support SLIP only PPP.

the two versions of the chat-script seem to have no affect.

I see the Cellular port go up/up  and after 5 mins or so I see the modem go up/up  which looked promising, but I am not seen any DHCP actvity from the ISP.   

Oh, to add to this,  I know the SIM is good as in a Cell phone,  it does connect to 3g okay.

The "Three" network does not need any chap details,  just the APN. 

The other thing,  I am not seeing the profile 1 change to active.  should it  ? 

Mat

Hello Mat,

from your debug output, it looks like a username is expected. Configure:

username UMTS_CHAP_SRVR

on the router.

Hi,  No adding the username did not work :(

If I get time tonight (UK).   I will grab the config as it now stands. 

The current status as I am aware is the modem profile (1)  is not becoming active. 

although the console messages show the modem being in an up/up state,  it still does not list the profile 

as active.

although at this point its not important to note that it is not resolving an IP from the ISP which simply confirms its not connecting. 

The Modem "Card"  has a blue flashing 3g indicator on it,  and the RSSI indicator is flashing around 3 flashes a second.  I have an external (to the building) 3G 3db antenna, although If I can get hold of one I am looking to replace this to improve signal (its at aroun 81dbm at the moment).   This maybe the issue? although the home USB router seem to connect ok. (I am not sure the sensivity of the Modem so cannot really compare them). 

I will state again,  the ISP report that no username/login is needed as it authenticates against the phone number associated with the SIM Card.   The Sim is live and works in the USB modem.

Thanks to everyone who has spent time helping me,  it's a good way to learn! 

Config and logs will follow I hope very soon. 

Mat

Hello,

with the username added to your configuration, can you post the output of:

debug ppp authentication

debug ppp negotiation

For the sake of clarity, I have added the NAT configuration to your router as well (better give interface Vlan 200 an IP adddress, this has to match the access list 1). Try the dfferent chat scripts with the username configured.

no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!
no aaa new-model
ethernet lmi ce
memory-size iomem 10
!
crypto pki trustpoint TP-self-signed-199739xxxx
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-19973xxxxx
revocation-check none
rsakeypair TP-self-signed-199739xxxx
!
crypto pki certificate chain TP-self-signed-1997390140
certificate self-signed 01
!
ip cef
no ipv6 cef
!
multilink bundle-name authenticated
chat-script gsm "" "1" TIMEOUT 60
--> chat-script gsm "" "ATDT*99#" TIMEOUT 60 "CONNECT"
--> chat-script gsm "" "ATDT#777" TIMEOUT 60 "CONNECT"
license udi pid CISCO881G-K9 sn FCZ1432xxxx
!
username xxxxxxxx priv 15 secret xxxx
username UMTS_CHAP_SRVR
!
controller Cellular 0
!
interface FastEthernet0
description *** LAN CONNECTION **
switchport access vlan 200
no ip address
duplex full
speed 100
!
interface FastEthernet1
no ip address
!
interface FastEthernet2
no ip address
!
interface FastEthernet3
no ip address
!
interface FastEthernet4
no ip address
shutdown
duplex auto
speed auto
!
interface Cellular0
ip address negotiated
ip nat outside
ip virtual-reassembly in
encapsulation ppp
dialer in-band
dialer idle-timeout 0
dialer string gsm
dialer-group 1
async mode interactive
auto discovery qos
!
interface Vlan1
no ip address
!
interface Vlan200
ip address 192.168.200.1 255.255.255.0

ip nat inside
!
ip forward-protocol nd
ip http server
ip http access-class 23
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
!
ip route 0.0.0.0 0.0.0.0 Cellular0
!
ip nat inside source list 1 interface Cellular0 overload
!
access-list 1 permit 192.168.200.0

!

dialer-list 1 protocol ip permit

!
control-plane
!
vstack
!
line con 0
no modem enable
line aux 0
line 3
exec-timeout 0 0
script dialer gsm
modem InOut
no exec
transport input all
rxspeed 7200000
txspeed 2000000
line vty 0 4
login
transport input none
!
end

Sir.  My Hat off to you,

I deleted nvram:startup-config and reloaded the device.

I then applied your Config below at first it did not work/

Pinging my own external IP address nothing.

I then  changed the chat-script for

--> chat-script gsm "" "ATDT*99#" TIMEOUT 60 "CONNECT"

and repeated.

Up it came,  and I could see from the debug messages it connected and I was able to ping my ISP external address.

Let me say a BIG thank you for all the help via this Forum.   This has fixed my rubbish config ;-)

My next step is to copy both my original config  and this working config and work through it line by line and understand the differences and then understand the commands that are different.

Mat