Re: 877 won't complete PPPoA logon

olighec · ‎12-18-2007

Hi all,

I have recently switched out my Cisco 678 here for a Cisco 877 and am trying to get it working on my ADSL link. I have configured the 877 with the PPPoA username and password and static IP, but the PPP light never comes on. (CD light is solid on and DSL line is trained)

The tech at the ISP told me that my router is constantly logging on (successfully, he states) but I never get a PPP light and the link never comes up.

The modem is running Advanced IP Services IOS 12.4(15)T1 and DSL FW 3.0.14.

Here is the sanitized config:

Current configuration : 3982 bytes

!

version 12.4

no service pad

service timestamps debug datetime msec

service timestamps log datetime msec

no service password-encryption

!

hostname cnc.chris.877

!

boot-start-marker

boot-end-marker

!

logging buffered 51200 warnings

!

no aaa new-model

!

ip cef

!

no ip dhcp use vrf connected

ip dhcp excluded-address 10.10.10.1

!

ip dhcp pool sdm-pool

import all

network 10.10.10.0 255.255.255.248

default-router 10.10.10.1

lease 0 2

!

multilink bundle-name authenticated

!

archive

log config

hidekeys

!

interface ATM0

no ip address

no atm ilmi-keepalive

dsl operating-mode ansi-dmt

!

interface ATM0.1 point-to-point

no snmp trap link-status

pvc 0/32

encapsulation aal5mux ppp dialer

dialer pool-member 1

!

interface FastEthernet0

!

interface FastEthernet1

!

interface FastEthernet2

!

interface FastEthernet3

!

interface Dot11Radio0

no ip address

shutdown

speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0

54.0

station-role root

!

interface Vlan1

description $ETH-SW-LAUNCH$$INTF-INFO-HWIC 4ESW$

ip address 10.10.10.1 255.255.255.248

ip nat inside

ip virtual-reassembly

ip tcp adjust-mss 1452

!

interface Dialer0

ip address 206.63.229.xxx 255.255.255.0

ip nat outside

ip virtual-reassembly

encapsulation ppp

dialer pool 1

dialer-group 1

no cdp enable

ppp authentication chap pap callin

ppp chap hostname xxxxxxxx

ppp chap password 0 xxxxxxxx

ppp pap sent-username xxxxxxxx password 0 xxxxxxxx

!

ip route 0.0.0.0 0.0.0.0 206.63.229.xxx

!

ip http server

ip http access-class 23

ip http authentication local

ip http secure-server

ip http timeout-policy idle 60 life 86400 requests 10000

ip nat inside source list 1 interface Dialer0 overload

!

access-list 1 remark INSIDE_IF=Vlan1

access-list 1 remark SDM_ACL Category=2

access-list 1 permit 10.10.10.0 0.0.0.7

dialer-list 1 protocol ip permit

no cdp run

!

control-plane

!

line con 0

login local

no modem enable

line aux 0

line vty 0 4

privilege level 15

login local

transport input telnet ssh

!

scheduler max-task-time 5000

!

webvpn cef

end

Does anyone know what could be causing this?

olighec · ‎12-18-2007

I did some more research and debugging and it looks like my authentication is failing, but I am assured by the ISP that I am using the correct username and password. In fact, when I plug the 678 in using that User/pass combo, I get a good negotiation and the circuit comes all the way up.

Here is the debug output:

*Dec 19 04:43:57.475: Vi2 PPP: Phase is ESTABLISHING, Passive Open

*Dec 19 04:43:57.475: Vi2 LCP: State is Listen

*Dec 19 04:43:58.299: Vi2 LCP: I CONFREQ [Listen] id 2 len 14

*Dec 19 04:43:58.299: Vi2 LCP: AuthProto PAP (0x0304C023)

*Dec 19 04:43:58.299: Vi2 LCP: MagicNumber 0x2D5A5EC9 (0x05062D5A5EC9)

*Dec 19 04:43:58.299: Vi2 PPP: No remote authentication for call-out

*Dec 19 04:43:58.299: Vi2 LCP: O CONFREQ [Listen] id 204 len 10

*Dec 19 04:43:58.299: Vi2 LCP: MagicNumber 0x1E65F76B (0x05061E65F76B)

*Dec 19 04:43:58.303: Vi2 LCP: O CONFACK [Listen] id 2 len 14

*Dec 19 04:43:58.303: Vi2 LCP: AuthProto PAP (0x0304C023)

*Dec 19 04:43:58.303: Vi2 LCP: MagicNumber 0x2D5A5EC9 (0x05062D5A5EC9)

*Dec 19 04:43:58.343: Vi2 LCP: I CONFACK [ACKsent] id 204 len 10

*Dec 19 04:43:58.343: Vi2 LCP: MagicNumber 0x1E65F76B (0x05061E65F76B)

*Dec 19 04:43:58.343: Vi2 LCP: State is Open

*Dec 19 04:43:58.343: Vi2 PPP: Phase is AUTHENTICATING, by the peer

*Dec 19 04:43:58.343: Vi2 PAP: Using hostname from interface PAP

*Dec 19 04:43:58.343: Vi2 PAP: Using password from interface PAP

*Dec 19 04:43:58.343: Vi2 PAP: O AUTH-REQ id 93 len 21 from "xxxxxxxx"

*Dec 19 04:43:58.395: Vi2 PAP: I AUTH-NAK id 93 len 15 msg is "Username: "

*Dec 19 04:43:58.395: Vi2 LCP: I TERMREQ [Open] id 3 len 4

*Dec 19 04:43:58.395: Vi2 LCP: O TERMACK [Open] id 3 len 4

*Dec 19 04:43:58.395: Vi2 PPP: Sending Acct Event[Down] id[A62]

*Dec 19 04:43:58.395: Vi2 PPP: Phase is TERMINATING

*Dec 19 04:43:59.415: Vi2 LCP: I CONFREQ [TERMsent] id 1 len 14

*Dec 19 04:43:59.415: Vi2 LCP: AuthProto PAP (0x0304C023)

*Dec 19 04:43:59.419: Vi2 LCP: MagicNumber 0x2D5A6AEB (0x05062D5A6AEB)

*Dec 19 04:43:59.419: Vi2 LCP: Dropping packet, state is TERMsent

*Dec 19 04:44:00.387: Vi2 LCP: Timeout: State TERMsent

*Dec 19 04:44:00.387: Vi2 LCP: State is Closed

*Dec 19 04:44:00.387: Vi2 PPP: Phase is DOWN

It appears that when I send my username, the device on the other side prompts me "Username: ", suggesting that I have given an incorrect logon name.

Has anyone seen this before? I am trying to get details about the device on the other side of the link, but it's difficult to get ISP techs to tell me exactly what hardware they have.

Any help anyone can offer would be great.

I've already tried switching between dsl operating-mode auto and ansi-dmt with no change. I also have removed the CHAP authentication from the Dialer0 interface since I verified that the ISP was using PAP.

Thanks,

Chris

jamesgonzo · ‎12-20-2007

Looks ok to me, the only difference I have is:

dsl operating-mode auto

cdp enable

pvc 0/38

Here:

!

interface ATM0

no ip address

no ip unreachables

no ip mroute-cache

atm vc-per-vp 64

no atm ilmi-keepalive

dsl operating-mode auto

cdp enable

pvc 0/38

encapsulation aal5mux ppp dialer

dialer pool-member 1

!