Any help regarding PPPoE with Cisco 1841 router

[alaeldien]

Hello everybody

could any one help me in this please.

iam having cisco 1841 router and i want to configure this router for internet connection.

below are the configuration please let me know what is wrong, thank you.

[alaeldien]

Hellow Sir

i did all that, but when debugging it shows me that STATE is CLOSED

could you possibly examine the config again and tell me what might be wrong.

with my best thanks.

Alaeldien

[Giuseppe Larosa]

Hello Ala,

your config looks like fine.

the command

dialer-list 1 protocol ip permit

is still present in your config ?

post the output of the same debug commands and follow the same procedure.

There are chances that PPP authentication still fails

And/OR check with provider your authentication parameters

Hope to help

Giuseppe

[alaeldien]

Hello Giusepee

iwant to thank you,because you are the only one who is dealing in my case.

so could possibly please examine the debug out put and tell me what it might be wrong

*Oct 18 12:56:56.726: Vi1 PPP: Outbound cdp packet dropped

*Oct 18 12:57:56.734: Vi1 PPP: Outbound cdp packet dropped

*Oct 18 12:58:56.742: Vi1 PPP: Outbound cdp packet dropped

*Oct 18 12:59:56.750: Vi1 PPP: Outbound cdp packet dropped

*Oct 18 13:00:56.758: Vi1 PPP: Outbound cdp packet dropped

*Oct 18 13:01:56.766: Vi1 PPP: Outbound cdp packet dropped

*Oct 18 13:02:56.774: Vi1 PPP: Outbound cdp packet dropped

*Oct 18 13:03:56.782: Vi1 PPP: Outbound cdp packet dropped

*Oct 18 13:04:56.790: Vi1 PPP: Outbound cdp packet dropped

*Oct 18 13:05:56.798: Vi1 PPP: Outbound cdp packet dropped

thank you

Alaeldien

[Giuseppe Larosa]

Hello Ala,

>> because you are the only one who is dealing in my case.

This just an accident: however when a thread has many posts this can happen.

this specific error is not a real issue it just says it is dropping CDP packets outbound.

CDP is a Cisco protocol useful in lan environment to detect the neighbor port id.

Here it is not a problem.

on intertace dialer1

int vi1

no cdp enable

there is no use for CDP on your WAN link.

Are you still in trouble ?

I've given a look to previous posts in your last config I didn't see the command to define interesting traffic

dialer-list 1 protocol ip permit

this is needed because using the dialer you are doing a logical DDR over the PPPoE otherwise the session will be closed after idle-time expiration.

I hope this is present otherwise it has to be added.

Now, if PPP authentication is OK as seen with debug ppp negotiation and debug ppp authentication the further steps are PPPoE specific:

sh pppoe session all

example:

r3725#sh pppoe session all

Total PPPoE sessions 2

session id: 82

local MAC address: 000f.349c.eae1, remote MAC address: 000f.f7eb.5bb0

virtual access interface: Vi3, outgoing interface: Fa1/0

10026 packets sent, 10038 received

426176 bytes sent, 420238 received

other useful debug for PPPoE is

debug pppoe events

And:

r3725#sh ip int dialer 1

Dialer1 is up, line protocol is up

Internet address is 101.101.101.2/32

Broadcast address is 255.255.255.255

>> Address determined by IPCP

This happens in a working PPPoE session.

link to doc

http://www.cisco.com/en/US/tech/tk175/tk15/technologies_configuration_example09186a0080093fbf.shtml#ethernetlayerclient

Hope to help

Giuseppe

[alaeldien]

Hello sir

i've issue the commands

debug ppp neg

and

debug ppp auth

after enabling the terminal monitor,

but i can't see the out put.

even i issue the command

*show vpdn session

and the output showing the State is NA

could you tell the possibility of NA status.

and let me tell you every thing seem to work fine

*dialer interface getting ip address through IPCP

but when iam pinging to suppost http://www.cisco.com

the out put come showing that unrecognized host or name or protocol is not running

....

could you advice please by examining the attached configuration file and see what should be removed and what to add

lot of thanks

Alaeldien

*******************************************

the most important thing is that the ISP *

providing us with the value of * * PVC(VPI/VCI) that is 0/50, *

where it should be *

included globally or in a diler since *

the *dialer can not accept such type *

of command unless we add mmi. *

*******************************************

[Giuseppe Larosa]

Hello Ala,

PPPoE session is fine:

Encapsulation PPP, LCP Open

Open: IPCP

PPPoE vaccess, cloned from Dialer1

>> but when iam pinging to suppost http://www.cisco.com

the out put come showing that unrecognized host or name or protocol is not running

this is a DNS problem you need to configure on PCs a DNS server that is in your provider network.

give a look at:

http://www.tech-faq.com/public-dns-servers.shtml

Ask your provider what DNS server to use.

For configuring the DNS server on the router

http://www.cisco.com/en/US/tech/tk648/tk362/technologies_tech_note09186a00800c525f.shtml

3) providing us with the value of * * PVC(VPI/VCI) that is 0/50, *

This is the ATM PVC to be used if your WAN interface was directly the ADSL link: in your case this info is already configured on the ADSL modem so don't worry about this it is right that is not used in your router in this scenario.

I would remove the mmi config I don't think relates to your scenario.

Hope to help

Giuseppe

[alaeldien]

Hellow

i've configured the router with DNS of the ISP, the problem is still exist, and i can not see the out put of the debug while its on.

my scenario is like this:

the pppoe session has been established

but it seem to be problem with NAT

the LAN interface nated as inside

the WAN interface nated out side

the dialer interface also out side

so how it could be wrong. please advice.

thanks

Alaeldien

[alaeldien]

hellow sir

idid some change and here is the issue

***************************************

falcon-wimax#ping 64.233.183.104

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 64.233.183.104, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 264/271/280 ms

falcon-wimax#ping http://www.google.com

Translating "www.google.com"...domain server (194.170.1.7)

% Unrecognized host or address, or protocol not running.

it's a DNS issue can you deal with it

thanks

Alaeldien

[Giuseppe Larosa · Accepted solution]

Hello Ala,

the router can solve

www.google.com

try

ping www.google.com

the URL http://www.google.com is for use on a browser on a PC not sure a router can solve it.

you need the presence of the command

ip domain-lookup

ip name-server 194.170.1.7

I cannot test this in production routers

Hope to help

Giuseppe

[Giuseppe Larosa]

Hello Ala,

I tested in a branch router with IPSec and without NAT I have the same problems you have showed me even using www.google.com

I would suggest you to use a PC connected on the internal LAN and to try to surf with it

Hope to help

Giuseppe

[alaeldien]

hello sir

we are done. it's all about wrong parameters from ISP.so good job has been done by you thanks alot

[Giuseppe Larosa]

Hello Ala,

I'm happy that now everything works well with this PPPoE session.

Best Regards

Giuseppe

p.s. : you can address me as Giuseppe that is my name it is a normal practice here in the forums.

I've realized only now that you kept to use sir: very polite of you.

[Giuseppe Larosa]

Hello Ala,

about NAT I think it should be configured only on LAN interface and dialer not the WAN interface because it has no L3 config.

Hope to help

Giuseppe

[alaeldien]

hello sir

i reomoved the NAT declaration in WAN interface, but it's still, i can ping from the router to any ip address, not by host name, none of my PCs in LAN can ping either by name or host name.

??????

please take last look into the config file.

ya one more thing i can not see the out put of debug even after enabling the terminal monitor

advice please

Alaeldien

[alaeldien]

Hellow sir

finally ican said that we almost did it

the router is working fine i can ping by both host name or ip address, but still ihave problem ???

i can not ping any ip address or host name from any pc in the LAN

and i think some how it's related to the ACL

so i used class c ip address

192.168.1.1 255.255.255.0

and i implement ACL as follows

access-list 100 permit ip 192.168.1.0 0.255.255.255 any

is it ok? if yes what might be wrong/

thank you.

Alaeldien