Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Problem with DDR ISDN

Hi, I have a problem with a router 3600 that calls another on DDR.

This is the configuration of the Cisco 3600

username catastro password 0 tycsa

ip subnet-zero

isdn switch-type basic-net3

isdn tei-negotiation first-call

!

interface BRI1/0

description conexion con el Catastro

ip address 192.169.0.2 255.255.255.0

no ip directed-broadcast

encapsulation ppp

dialer idle-timeout 300

dialer map ip 192.169.0.1 name catastro 842367064

dialer-group 2

isdn switch-type basic-net3

no fair-queue

ppp authentication chap

!

ip classless

ip route 10.33.24.10 255.255.255.255 192.169.0.1

!

dialer-list 2 protocol ip permit

I don't have access to the other router but I have talked with his administrator and he told me that

he have put this:

username ayunta password 0 tycsa

I have made several debug in my router but I don't see where is the problem.

Can anybody help me?

debug ppp authentication

ayunta#debug ppp authentication

PPP authentication debugging is on

ayunta#ping 192.169.0.1

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 192.169.0.1, timeout is 2 seconds:

5d07h: %ISDN-6-LAYER2DOWN: Layer 2 for Interface BR1/0, TEI 64 changed to down

5d07h: %ISDN-6-LAYER2UP: Layer 2 for Interface BR1/0, TEI 64 changed to up.

5d07h: %LINK-3-UPDOWN: Interface BRI1/0:1, changed state to up

5d07h: BR1/0:1 PPP: Treating connection as a callout

5d07h: BR1/0:1 PPP: Phase is AUTHENTICATING, by both

5d07h: BR1/0:1 CHAP: O CHALLENGE id 82 len 27 from "ayunta"

5d07h: BR1/0:1 CHAP: I CHALLENGE id 93 len 36 from "catastro"

5d07h: BR1/0:1 CHAP: O RESPONSE id 93 len 27 from "ayunta"

5d07h: BR1/0:1 CHAP: I SUCCESS id 93 len 4.

5d07h: %LINK-3-UPDOWN: Interface BRI1/0:1, changed state to down.

5d07h: %LINK-3-UPDOWN: Interface BRI1/0:1, changed state to up

5d07h: BR1/0:1 PPP: Treating connection as a callout

5d07h: BR1/0:1 PPP: Phase is AUTHENTICATING, by both

5d07h: BR1/0:1 CHAP: O CHALLENGE id 83 len 27 from "ayunta"

5d07h: BR1/0:1 CHAP: I CHALLENGE id 94 len 36 from "catastro"

5d07h: BR1/0:1 CHAP: O RESPONSE id 94 len 27 from "ayunta"

5d07h: BR1/0:1 CHAP: I SUCCESS id 94 len 4.

5d07h: %LINK-3-UPDOWN: Interface BRI1/0:1, changed state to down.

Success rate is 0 percent (0/5)

ayunta#

5d07h: %LINK-3-UPDOWN: Interface BRI1/0:1, changed state to up

5d07h: BR1/0:1 PPP: Treating connection as a callout

5d07h: BR1/0:1 PPP: Phase is AUTHENTICATING, by both

5d07h: BR1/0:1 CHAP: O CHALLENGE id 84 len 27 from "ayunta"

5d07h: BR1/0:1 CHAP: I CHALLENGE id 95 len 36 from "catastro"

5d07h: BR1/0:1 CHAP: O RESPONSE id 95 len 27 from "ayunta"

5d07h: BR1/0:1 CHAP: I SUCCESS id 95 len 4

5d07h: %LINK-3-UPDOWN: Interface BRI1/0:1, changed state to down

ayunta#

ayunta#undebug all

All possible debugging has been turned off

ayunta#

5d07h: %ISDN-6-LAYER2DOWN: Layer 2 for Interface BR1/0, TEI 64 changed to down

Is there any problem with the authentication?

Thanks in advance

2 REPLIES
Bronze

Re: Problem with DDR ISDN

Hi,

I see that you are sending a CHAP Challenge, but catastro is not sending a response. I suggest you remove the "ppp authentication chap" command and try pinging catastro again. If it works, you have found the problem. Find out why the other router is not sending the CHAP response. Ask if catastro has the command "ppp chap refuse callin" in its interface.

Good Luck,

Mark

Cisco Employee

Re: Problem with DDR ISDN

Configure following command under interface bri1/0 on "ayunta" for one way chap

ppp authentication chap callin

so that "ayunta" will not send challenge, Only "catastro" who receives the call will challenge to authenticate "ayunta". With that you should see IPCP negotiation works ok.

111
Views
0
Helpful
2
Replies
CreatePlease login to create content