Re: ppp without authentication

Flemming Ortvald · ‎04-16-2004

In a test scenario, i'm trying to set up a dialin router, to accept calls from a POS creditcard terminal, that is unable to perform any kind of authentication, but requires PPP and need's to receive an IP address trhough DHCP.

This seems to work according to plan( and looking at debugs), the problem is that no communication is established between POS and host on LAN behind router, please see snip of debug below.

Is this at all possible to get working?

debug output:

*Mar 1 05:00:19.435: BR0:2 IPCP: Pool returned 192.168.101.14

*Mar 1 05:00:19.435: BR0:2 IPCP: O CONFREJ [ACKrcvd] id 1 len 10

*Mar 1 05:00:19.439: BR0:2 IPCP: PrimaryDNS 0.0.0.0 (0x810600000000)

*Mar 1 05:00:19.443: BR0:2 LCP: I PROTREJ [Open] id 3 len 10 protocol CDPCP (0x820701010004)

*Mar 1 05:00:19.447: BR0:2 CDPCP: State is Closed

*Mar 1 05:00:19.447: BR0:2 CDPCP: State is Listen

*Mar 1 05:00:19.451: BR0:2 IPCP: TIMEout: State ACKrcvd

*Mar 1 05:00:19.455: BR0:2 IPCP: O CONFREQ [ACKrcvd] id 2 len 10

*Mar 1 05:00:19.455: BR0:2 IPCP: Address 192.168.101.1 (0x0306C0A86501)

*Mar 1 05:00:20.167: BR0:2 IPCP: I CONFREQ [REQsent] id 2 len 10

*Mar 1 05:00:20.171: BR0:2 IPCP: Address 0.0.0.0 (0x030600000000)

*Mar 1 05:00:20.171: BR0:2 IPCP: O CONFNAK [REQsent] id 2 len 10

*Mar 1 05:00:20.171: BR0:2 IPCP: Address 192.168.101.14 (0x0306C0A8650E)

*Mar 1 05:00:20.667: BR0:2 IPCP: I CONFACK [REQsent] id 2 len 10

*Mar 1 05:00:20.667: BR0:2 IPCP: Address 192.168.101.1 (0x0306C0A86501)

*Mar 1 05:00:21.255: BR0:2 IPCP: I CONFREQ [ACKrcvd] id 3 len 10

*Mar 1 05:00:21.259: BR0:2 IPCP: Address 192.168.101.14 (0x0306C0A8650E)

*Mar 1 05:00:21.259: BR0:2 IPCP: O CONFACK [ACKrcvd] id 3 len 10

*Mar 1 05:00:21.263: BR0:2 IPCP: Address 192.168.101.14 (0x0306C0A8650E)

*Mar 1 05:00:21.263: BR0:2 IPCP: State is Open

*Mar 1 05:00:21.271: BR0 IPCP: Install route to 192.168.101.14

*Mar 1 05:00:21.271: BR0:2 IPCP: Add link info for cef entry 192.168.101.14

*Mar 1 05:00:21.523: IP: s=172.17.3.11 (Ethernet0), d=192.168.101.13 (Loopback0), g=192.168.101.13, len 48, forward

*Mar 1 05:00:21.527: TCP src=22000, dst=5431, seq=549280694, ack=2, win=16616 ACK SYN

*Mar 1 05:00:21.531: IP: s=172.17.3.11 (Loopback0), d=192.168.101.13 (Loopback0), g=192.168.101.13, len 48, forward

*Mar 1 05:00:21.531: TCP src=22000, dst=5431, seq=549280694, ack=2, win=16616 ACK SYN

*Mar 1 05:00:22.071: IP: s=192.168.101.14 (BRI0), d=172.17.3.11 (Ethernet0), g=172.17.3.11, len 48, forward

*Mar 1 05:00:22.075: TCP src=5432, dst=22000, seq=1, ack=0, win=1000 SYN

*Mar 1 05:00:22.079: IP: s=172.17.3.11 (Ethernet0), d=192.168.101.14 (BRI0), g=192.168.101.14, len 48, forward

*Mar 1 05:00:22.079: TCP src=22000, dst=5432, seq=551711954, ack=2, win=16616 ACK SYN

*Mar 1 05:00:22.083: IP: s=172.17.3.11 (Ethernet0), d=192.168.101.14 (BRI0), len 48, encapsulation failed

*Mar 1 05:00:22.083: TCP src=22000, dst=5432, seq=551711954, ack=2, win=16616 ACK SYN

*Mar 1 05:00:22.315: %ISDN-6-CONNECT: Interface BRI0:2 is now connected to unknown

*Mar 1 05:00:25.027: IP: s=172.17.3.11 (Ethernet0), d=192.168.101.14 (BRI0), g=192.168.101.14, len 48, forward

*Mar 1 05:00:25.031: TCP src=22000, dst=5432, seq=551711954, ack=2, win=16616 ACK SYN

*Mar 1 05:00:25.031: IP: s=172.17.3.11 (Ethernet0), d=192.168.101.14 (BRI0), len 48, encapsulation failed

*Mar 1 05:00:25.035: TCP src=22000, dst=5432, seq=551711954, ack=2, win=16616 ACK SYN

fortvald

tepatel · ‎04-19-2004

Debug shows that ip address 192.168.101.14 is assigned to dialin client. So from router, can you ping that ip address to begin with? You can try to turn of cef on router and see the results.

Also post the config from router here.

Richard Burts · ‎05-04-2004

Your output indicates that IPCP negotiation was successful and an IP address was assigned, was accepted, and was installed in the routing table. Yet when the router attempts to send to that address there is "encapsulation failure" which indicates that there is some piece of information that the router needs to complete the packet that it does not have. It would be helpful to know what ppp parameters you configured, and how you configured the dialer interface and the bri interface.

HTH

Rick