06-07-2006 12:10 PM - edited 03-03-2019 12:56 PM
I have a verified connection on ADSL & my laptop connects fine using the supplied PPPoE credentials. The router does not connect using the WIC-1ENET or on board FastE. I'm continuously getting "Authentication Failed" even though we know the ID is correct. I've tried PAP, Chap, MS-Chap & MS-Chap V2. Debug PPP authentication shows the following message.
Jun 6 04:44:12: Vi3 PAP: Using hostname from interface PAP
Jun 6 04:44:12: Vi3 PAP: Using password from interface PAP
Jun 6 04:44:12: Vi3 PAP: O AUTH-REQ id 1 len 39 from "xxxxx"
RTR#
Jun 6 04:44:14: Vi3 PAP: I AUTH-ACK id 1 len 5
Jun 6 04:44:14: Vi3 PAP: I AUTH-REQ id 1 len 34 from "rback14.chcgil"
Jun 6 04:44:14: Vi3 PAP: Authenticating peer rback14.chcgil
Jun 6 04:44:14: Vi3 PPP: Sent PAP LOGIN Request
Jun 6 04:44:14: Vi3 PPP: Received LOGIN Response FAIL
Jun 6 04:44:14: Vi3 PAP: O AUTH-NAK id 1 len 26 msg is "Authentication failed"
RTR#
Jun 6 04:44:18: %DIALER-6-UNBIND: Interface Vi3 unbound from profile Di1
RTR#
Jun 6 04:44:18: %LINK-3-UPDOWN: Interface Virtual-Access3, changed state to down
Router config is as follows:
interface Ethernet0
no ip address
half-duplex
pppoe enable
pppoe-client dial-pool-number 1
no cdp enable
!
interface Dialer1
ip address negotiated
ip mtu 1492
encapsulation ppp
dialer pool 1
dialer-group 1
no cdp enable
ppp authentication pap
ppp pap sent-username xxxx password 7 xxxx
Solved! Go to Solution.
06-15-2006 09:33 AM
It looks like the PPP negotiation is failing with an outbound "Authentication failed".
Try removing 'ppp authentication pap' from your Dialer1 interface. This command tells the router to expect the aggregator to authenticate to it. The 'ppp pap sent-username' is sufficient for remote authentication.
You can also use pap and chap at the same time. The router will accept "ppp pap sent-username' in conjunction with "ppp chap hostname" and "ppp chap password"
06-13-2006 10:19 AM
MTU should be Manually configured,no autonegotiation feature Current Cisco IOS Software supports the WIC-1ENET only in Slot 0 of a Cisco 1700
Refer the Following link for more information
06-14-2006 10:58 AM
Thank you for the reply. I did move the WIC-1ENET to slot 0 & the config still shows it in slot 1. ?? I'll try to force the WIC to half-duplex & 10mbs as well. Any other ideas? This is a simple DSL failover & it has proven very, very finicky & difficult to setup. Thanks again!
06-15-2006 09:33 AM
It looks like the PPP negotiation is failing with an outbound "Authentication failed".
Try removing 'ppp authentication pap' from your Dialer1 interface. This command tells the router to expect the aggregator to authenticate to it. The 'ppp pap sent-username' is sufficient for remote authentication.
You can also use pap and chap at the same time. The router will accept "ppp pap sent-username' in conjunction with "ppp chap hostname" and "ppp chap password"
06-15-2006 10:47 AM
Awesome advice! I removed the line ppp authentication pap & the DSL connected immediately! Strange, but it works! Thanks for the help.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide