Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

cisco 837 PPPoA in Malaysia

We have been using Malaysia Broadband (Streamyx Enterprise) with Non Cisco router, it's working fine.

Currently we need to use cisco 837 as vpn feature is needed.

However when we use cisco 837, we got problem on the connection. The ADSL is using PPPoA with fixed ip address.

The problem is it can't go to internet when we use fixed ip address, but not with dynamic ip address (ip negotiated)

Any advise or does anyone have a cisco 837 sample config for broadband streamyx, it will be greatly appriciated.

debug ppp negotiation :

**Mar 1 00:01:33.315: Vi2 LCP: O CONFREQ [REQsent] id 205 len 14

*Mar 1 00:01:33.315: Vi2 LCP: AuthProto PAP (0x0304C023)

*Mar 1 00:01:33.315: Vi2 LCP: MagicNumber 0x0E39F0E8 (0x05060E39F0E8)

*Mar 1 00:01:33.375: Vi2 LCP: I CONFREJ [REQsent] id 205 len 8

*Mar 1 00:01:33.375: Vi2 LCP: AuthProto PAP (0x0304C023)

*Mar 1 00:01:33.375: Vi2 LCP: O CONFREQ [REQsent] id 206 len 14

*Mar 1 00:01:33.375: Vi2 LCP: AuthProto PAP (0x0304C023)

*Mar 1 00:01:33.379: Vi2 LCP: MagicNumber 0x0E39F0E8 (0x05060E39F0E8)

*Mar 1 00:01:33.443: Vi2 LCP: I CONFREJ [REQsent] id 206 len 8

*Mar 1 00:01:33.443: Vi2 LCP: AuthProto PAP (0x0304C023)

*Mar 1 00:01:33.443: Vi2 LCP: O CONFREQ [REQsent] id 207 len 14

*Mar 1 00:01:33.443: Vi2 LCP: AuthProto PAP (0x0304C023)

*Mar 1 00:01:33.443: Vi2 LCP: MagicNumber 0x0E39F0E8 (0x05060E39F0E8)

*Mar 1 00:01:33.495: Vi2 LCP: I CONFREJ [REQsent] id 207 len 8

*Mar 1 00:01:33.495: Vi2 LCP: AuthProto PAP (0x0304C023)

*Mar 1 00:01:33.495: Vi2 LCP: O CONFREQ [REQsent] id 208 len 14

*Mar 1 00:01:33.495: Vi2 LCP: AuthProto PAP (0x0304C023)

*Mar 1 00:01:33.495: Vi2 LCP: MagicNumber 0x0E39F0E8 (0x05060E39F0E8)

*Mar 1 00:01:33.551: Vi2 LCP: I CONFREJ [REQsent] id 208 len 8

*Mar 1 00:01:33.551: Vi2 LCP: AuthProto PAP (0x0304C023)

*Mar 1 00:01:33.551: Vi2 LCP: O CONFREQ [REQsent] id 209 len 14

*Mar 1 00:01:33.551: Vi2 LCP: AuthProto PAP (0x0304C023)

*Mar 1 00:01:33.551: Vi2 LCP: MagicNumber 0x0E39F0E8 (0x05060E39F0E8)

*Mar 1 00:01:33.607: Vi2 LCP: I CONFREJ [REQsent] id 209 len 8

*Mar 1 00:01:33.607: Vi2 LCP: AuthProto PAP (0x0304C023)

*Mar 1 00:01:33.615: Vi2 LCP: O CONFREQ [REQsent] id 210 len 14

*Mar 1 00:01:33.615: Vi2 LCP: AuthProto PAP (0x0304C023)

*Mar 1 00:01:33.615: Vi2 LCP: MagicNumber 0x0E39F0E8 (0x05060E39F0E8)

*Mar 1 00:01:33.687: Vi2 LCP: I CONFREJ [REQsent] id 210 len 8

*Mar 1 00:01:33.687: Vi2 LCP: AuthProto PAP (0x0304C023)

*Mar 1 00:01:33.687: Vi2 LCP: O CONFREQ [REQsent] id 211 len 14

*Mar 1 00:01:33.687: Vi2 LCP: AuthProto PAP (0x0304C023)

*Mar 1 00:01:33.687: Vi2 LCP: MagicNumber 0x0E39F0E8 (0x05060E39F0E8)

*Mar 1 00:01:33.743: Vi2 LCP: I CONFREJ [REQsent] id 211 len 8

*Mar 1 00:01:33.743: Vi2 LCP: AuthProto PAP (0x0304C023)

*Mar 1 00:01:33.743: Vi2 LCP: O CONFREQ [REQsent] id 212 len 14

*Mar 1 00:01:33.743: Vi2 LCP: AuthProto PAP (0x0304C023)

*Mar 1 00:01:33.743: Vi2 LCP: MagicNumber 0x0E39F0E8 (0x05060E39F0E8)

*Mar 1 00:01:33.819: Vi2 LCP: I CONFREJ [REQsent] id 212 len 8

*Mar 1 00:01:33.819: Vi2 LCP: AuthProto PAP (0x0304C023)

*Mar 1 00:01:33.819: Vi2 LCP: O CONFREQ [REQsent] id 213 len 14

*Mar 1 00:01:33.819: Vi2 LCP: AuthProto PAP (0x0304C023)

*Mar 1 00:01:33.819: Vi2 LCP: MagicNumber 0x0E39F0E8 (0x05060E39F0E8)

*Mar 1 00:01:33.875: Vi2 LCP: I CONFREJ [REQsent] id 213 len 8

*Mar 1 00:01:33.875: Vi2 LCP: AuthProto PAP (0x0304C023)

*Mar 1 00:01:33.875: Vi2 LCP: Failed to negotiate with peer

*Mar 1 00:01:33.875: Vi2 PPP: Sending Acct Event[Down] id[15]

*Mar 1 00:01:33.879: Vi2 LCP: State is Closed

*Mar 1 00:01:33.879: Vi2 PPP: Phase is DOWN

*Mar 1 00:01:33.879: Vi2 PPP: Phase is ESTABLISHING, Passive Open

*Mar 1 00:01:33.879: Vi2 LCP: State is Listen

9 REPLIES
VIP Purple

Re: cisco 837 PPPoA in Malaysia

Hello,

do you get the fixed IP address from your provider ? Many providers do not allow fixed IP addresses without charging you extra. Can you check with your provider ?

Regards,

Georg

New Member

Re: cisco 837 PPPoA in Malaysia

Hi, Thanks for the reply.

The fixed ip address is assigned from ISP.We have been using this fixed ip address with other broadband router.

Only when we change to cisco, it has problem.

but everything is fine if we use (ip address negotiated) dynamic ip address.

below is the ATM config:

interface ATM0

no ip address

no ip mroute-cache

atm vc-per-vp 64

no atm ilmi-keepalive

pvc 0/35

encapsulation aal5mux ppp dialer

dialer pool-member 1

!

dsl operating-mode auto

interface Dialer1

ip address x.x.x.x 255.255.255.252 --> if change to ip address negotiated is working

ip nat outside

encapsulation ppp

dialer pool 1

dialer-group 1

no cdp enable

ppp authentication chap pap callin

ppp chap hostname xxxx

ppp chap password 7 xxxx

ppp pap sent-username xxxx password 7 0 xxxx

ppp ipcp dns request

ppp ipcp wins request

hold-queue 224 in

New Member

Re: cisco 837 PPPoA in Malaysia

Hi,

The dialer interface needs to be left as negotiated.

When you dial in, that interface will acquire a /32 IP address from the provider. (You can do a show ip int brief to find out)

You will need to configure that static IP (but with a /30 mask) on the Ethernet/FastE interface.

(Yeah I know..you will have 2 interfaces with the same IP. You should only configure this interface when dialer1 is down)

The following IP should be the one that the provider supplies to you as the public IP.

You can then use it for whatever device/server.

Hope this helps.

New Member

Re: cisco 837 PPPoA in Malaysia

Hi,

Thanks for your reply.

The issue is, the static ip address we need to get from ISP is for WAN ip address, not for LAN.

The router need that pre-designed static WAN ip address as we need to use it for VPN purpose.

The package from ISP is just 1 static ip address for WAN interface.

If i use "ip address negotiated", the router will get dynamic ip address from ISP instead of static ip address that already pre-designed to us.

Any more advise,

thanks for your help.

New Member

Re: cisco 837 PPPoA in Malaysia

Hi,

From what I know, even if you use "ip add negotiated", the WAN IP will remain the same. At least that's the implementation for the 5 IP address package.

But even if the negotiated IP address on the dialer interface changes all the time, the public IP which the provider gives you is still the same. Therefore you should have no problems running VPN on your router because the provider would have installed a static route to that IP on their access equipment.

Perhaps there's something else we're missing out on?

Maybe there is NAT in place?

New Member

Re: cisco 837 PPPoA in Malaysia

Hi csgan,

Our Malaysia office (Multinail) will be implementing a VPN connection using Streamyx Corporate package comes with 5 fixed IP ADSL service to connect back to the head office in Australia.

The corporate standard for remote sites is to use a CISCO 837 ADSL router and a CISCO PIX 501.

We will be replacing your D-Link modem with the CISCO 837 router. Due to different ways of implementing a ADSL connection to a ISP I would you to send me a sample configuration script for the CISCO 837/827 routers. I need this script to show interface variables till PVC number etc.

New Member

Re: cisco 837 PPPoA in Malaysia

Hi csgan or kevjcs,

If one of you has the script, please forward to me too. Thanks for the help in advance.

New Member

Re: cisco 837 PPPoA in Malaysia

hi

your ATM interface config should look something like this:

!

interface ATM0

no ip address

ip nat outside

no ip mroute-cache

atm vc-per-vp 64

no atm ilmi-keepalive

pvc 0/35

encapsulation aal5mux ppp dialer

dialer pool-member 1

!

dsl operating-mode auto

dsl power-cutback 0

!

Dialer interface config would be like any other negotiated dialer except ppp authentication is pap NOT chap.

Hope this helps.

Regards

New Member

Re: cisco 837 PPPoA in Malaysia

hi ymulia,

I guess is the username causing the problem. I've the same problem also until the ISP called up and ask us to change the username from xxx@streamyx to xxx@tmnet. Then, it works.

Maybe you can try this.

Hope this helps.

385
Views
5
Helpful
9
Replies