Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

callback fails - pap: ignoring additional request

Hi !

I am using Cisco Secure ACS with an (One-Time-Password)-Server for Authentication on incoming calls.

The call is accepted and successfully authenticated - and disconnected because of the callback request. Upon connecting the callback I get the following failure:

- PAP: Ignoring Additional Request - Received LOGIN Response from AAA = FAIL

The callin attempt is authenticated and authorized successfully - merely the callback fails.

thx

hans

*Mar 1 01:06:23: Se1/0:12 LCP: State is Open

*Mar 1 01:06:23: Se1/0:12 PPP: Phase is AUTHENTICATING, by this end

*Mar 1 01:06:23: Se1/0:12 LCP: I IDENTIFY [Open] id 2 len 18 magic 0x26A7368C MSRASV5.00

*Mar 1 01:06:23: Se1/0:12 LCP: I IDENTIFY [Open] id 3 len 23 magic 0x26A7368C MSRAS-1-H3A0322

*Mar 1 01:06:23: Se1/0:12 PAP: I AUTH-REQ id 21 len 32 from "schimeha*2518417548"

*Mar 1 01:06:23: Se1/0:12 PAP: Authenticating peer schimeha*2518417548

*Mar 1 01:06:23: Se1/0:12 PPP: Sent PAP LOGIN Request to AAA

*Mar 1 01:06:25: Se1/0:12 PAP: I AUTH-REQ id 22 len 32 from "schimeha*2518417548"

*Mar 1 01:06:25: Se1/0:12 PAP: Ignoring Additional Request

*Mar 1 01:06:27: Se1/0:12 PAP: I AUTH-REQ id 23 len 32 from "schimeha*2518417548"

*Mar 1 01:06:27: Se1/0:12 PAP: Ignoring Additional Request

*Mar 1 01:06:27: Se1/0:12 PPP: Received LOGIN Response from AAA = FAIL

*Mar 1 01:06:27: Se1/0:12 PAP: O AUTH-NAK id 23 len 27 msg is "Authentication failure"

*Mar 1 01:06:27: Se1/0:12 PPP: Phase is TERMINATING

*Mar 1 01:06:27: Se1/0:12 LCP: O TERMREQ [Open] id 2 len 4

*Mar 1 01:06:27: Se1/0:12 LCP: I TERMACK [TERMsent] id 2 len 4

*Mar 1 01:06:27: Se1/0:12 LCP: State is Closed

*Mar 1 01:06:27: Se1/0:12 PPP: Phase is DOWN

*Mar 1 01:06:27: Se1/0:12 PPP: Phase is ESTABLISHING, Passive Open

*Mar 1 01:06:27: Se1/0:12 LCP: State is Listen

*Mar 1 01:06:27: %ISDN-6-CONNECT: Interface Serial1/0:12 is now connected to 8227 469d81cbab1747229a162c60bc0ca2ec00000000

*Mar 1 01:06:27: %ISDN-6-DISCONNECT: Interface Serial1/0:12 disconnected from 8227 469d81cbab1747229a162c60bc0ca2ec00000000, call lasted 4 seconds

*Mar 1 01:06:27: ISDN Se1/0:15 Q931: TX -> DISCONNECT pd = 8 callref = 0x800D

Cause i = 0x8090 - Normal call clearing

*Mar 1 01:06:28: ISDN Se1/0:15 Q931: RX <- RELEASE pd = 8 callref = 0x000D

Cause i = 0x8090 - Normal call clearing

*Mar 1 01:06:28: %LINK-3-UPDOWN: Interface Serial1/0:12, changed state to down

*Mar 1 01:06:28: ISDN Se1/0:15 Q931: TX -> RELEASE_COMP pd = 8 callref = 0x800D

*Mar 1 01:06:28: Se1/0:12 LCP: State is Closed

*Mar 1 01:06:28: Se1/0:12 PPP: Phase is DOWN

RAS#

1 REPLY
Cisco Employee

Re: callback fails - pap: ignoring additional request

Following URLs might help;

http://www.cisco.com/warp/public/471/ppp-callback-aaa.html

http://www.cisco.com/warp/public/480/pppcallback_tac.html

http://www.cisco.com/warp/public/480/pppcallback_rad.html

also make sure you have ;

ppp authentication chap callin (on the callback server)

Note that there are several bugs with callback and AAA. Do a bug scratch. try upgrading/downgrading the IOS, see if it helps.

Also do a 'debug callback' , you will get more info

R/Yusuf

273
Views
0
Helpful
1
Replies
CreatePlease to create content