Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
You may experience some slow load times, errors, and slight inconsistencies. We ask for your patience as we finalize the launch. Thank you.

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

ppp without authentication

In a test scenario, i'm trying to set up a dialin router, to accept calls from a POS creditcard terminal, that is unable to perform any kind of authentication, but requires PPP and need's to receive an IP address trhough DHCP.

This seems to work according to plan( and looking at debugs), the problem is that no communication is established between POS and host on LAN behind router, please see snip of debug below.

Is this at all possible to get working?

debug output:

*Mar 1 05:00:19.435: BR0:2 IPCP: Pool returned 192.168.101.14

*Mar 1 05:00:19.435: BR0:2 IPCP: O CONFREJ [ACKrcvd] id 1 len 10

*Mar 1 05:00:19.439: BR0:2 IPCP: PrimaryDNS 0.0.0.0 (0x810600000000)

*Mar 1 05:00:19.443: BR0:2 LCP: I PROTREJ [Open] id 3 len 10 protocol CDPCP (0x820701010004)

*Mar 1 05:00:19.447: BR0:2 CDPCP: State is Closed

*Mar 1 05:00:19.447: BR0:2 CDPCP: State is Listen

*Mar 1 05:00:19.451: BR0:2 IPCP: TIMEout: State ACKrcvd

*Mar 1 05:00:19.455: BR0:2 IPCP: O CONFREQ [ACKrcvd] id 2 len 10

*Mar 1 05:00:19.455: BR0:2 IPCP: Address 192.168.101.1 (0x0306C0A86501)

*Mar 1 05:00:20.167: BR0:2 IPCP: I CONFREQ [REQsent] id 2 len 10

*Mar 1 05:00:20.171: BR0:2 IPCP: Address 0.0.0.0 (0x030600000000)

*Mar 1 05:00:20.171: BR0:2 IPCP: O CONFNAK [REQsent] id 2 len 10

*Mar 1 05:00:20.171: BR0:2 IPCP: Address 192.168.101.14 (0x0306C0A8650E)

*Mar 1 05:00:20.667: BR0:2 IPCP: I CONFACK [REQsent] id 2 len 10

*Mar 1 05:00:20.667: BR0:2 IPCP: Address 192.168.101.1 (0x0306C0A86501)

*Mar 1 05:00:21.255: BR0:2 IPCP: I CONFREQ [ACKrcvd] id 3 len 10

*Mar 1 05:00:21.259: BR0:2 IPCP: Address 192.168.101.14 (0x0306C0A8650E)

*Mar 1 05:00:21.259: BR0:2 IPCP: O CONFACK [ACKrcvd] id 3 len 10

*Mar 1 05:00:21.263: BR0:2 IPCP: Address 192.168.101.14 (0x0306C0A8650E)

*Mar 1 05:00:21.263: BR0:2 IPCP: State is Open

*Mar 1 05:00:21.271: BR0 IPCP: Install route to 192.168.101.14

*Mar 1 05:00:21.271: BR0:2 IPCP: Add link info for cef entry 192.168.101.14

*Mar 1 05:00:21.523: IP: s=172.17.3.11 (Ethernet0), d=192.168.101.13 (Loopback0), g=192.168.101.13, len 48, forward

*Mar 1 05:00:21.527: TCP src=22000, dst=5431, seq=549280694, ack=2, win=16616 ACK SYN

*Mar 1 05:00:21.531: IP: s=172.17.3.11 (Loopback0), d=192.168.101.13 (Loopback0), g=192.168.101.13, len 48, forward

*Mar 1 05:00:21.531: TCP src=22000, dst=5431, seq=549280694, ack=2, win=16616 ACK SYN

*Mar 1 05:00:22.071: IP: s=192.168.101.14 (BRI0), d=172.17.3.11 (Ethernet0), g=172.17.3.11, len 48, forward

*Mar 1 05:00:22.075: TCP src=5432, dst=22000, seq=1, ack=0, win=1000 SYN

*Mar 1 05:00:22.079: IP: s=172.17.3.11 (Ethernet0), d=192.168.101.14 (BRI0), g=192.168.101.14, len 48, forward

*Mar 1 05:00:22.079: TCP src=22000, dst=5432, seq=551711954, ack=2, win=16616 ACK SYN

*Mar 1 05:00:22.083: IP: s=172.17.3.11 (Ethernet0), d=192.168.101.14 (BRI0), len 48, encapsulation failed

*Mar 1 05:00:22.083: TCP src=22000, dst=5432, seq=551711954, ack=2, win=16616 ACK SYN

*Mar 1 05:00:22.315: %ISDN-6-CONNECT: Interface BRI0:2 is now connected to unknown

*Mar 1 05:00:25.027: IP: s=172.17.3.11 (Ethernet0), d=192.168.101.14 (BRI0), g=192.168.101.14, len 48, forward

*Mar 1 05:00:25.031: TCP src=22000, dst=5432, seq=551711954, ack=2, win=16616 ACK SYN

*Mar 1 05:00:25.031: IP: s=172.17.3.11 (Ethernet0), d=192.168.101.14 (BRI0), len 48, encapsulation failed

*Mar 1 05:00:25.035: TCP src=22000, dst=5432, seq=551711954, ack=2, win=16616 ACK SYN

  • Other Network Infrastructure Subjects
2 REPLIES
Cisco Employee

Re: ppp without authentication

Debug shows that ip address 192.168.101.14 is assigned to dialin client. So from router, can you ping that ip address to begin with? You can try to turn of cef on router and see the results.

Also post the config from router here.

Hall of Fame Super Silver

Re: ppp without authentication

Your output indicates that IPCP negotiation was successful and an IP address was assigned, was accepted, and was installed in the routing table. Yet when the router attempts to send to that address there is "encapsulation failure" which indicates that there is some piece of information that the router needs to complete the packet that it does not have. It would be helpful to know what ppp parameters you configured, and how you configured the dialer interface and the bri interface.

277
Views
0
Helpful
2
Replies