kouji... Thanks for your reply.. but unfortunately Yes, I have tried with
and without encryption...
I have changed to pap authentication as well.. still no difference..
Re: turning on extra logging... IT IS !!! :)
router#term mon
router#debug vpdn event
VPDN events debugging is on
router#debug vpdn error
VPDN errors debugging is on
router#debug vpdn packet
VPDN packet debugging is on
router#debug ppp auth
PPP authentication debugging is on
router#debug ppp neg
PPP protocol negotiation debugging is on
router#debug vtemplate
Virtual Template debugging is on
router#debug vpdn l2x-events
L2X protocol events debugging is on
router#debug vpdn l2x-errors
L2X protocol errors debugging is on
router#debug vpdn l2x-packets
L2X control packets debugging is on
and these are the still the ONLY error messages coming up at all ?!?!?
*May 1 11:56:55.062 AEST: %LINK-3-UPDOWN: Interface Virtual-Access1,
changed state to up
*May 1 11:56:56.062 AEST: %LINEPROTO-5-UPDOWN: Line protocol on Interface
Virtual-Access1, changed state to up
*May 1 11:57:32.118 AEST: %LINK-3-UPDOWN: Interface Virtual-Access1,
changed state to down
*May 1 11:57:33.350 AEST: %LINEPROTO-5-UPDOWN: Line protocol on Interface
Virtual-Access1, changed state to down
I have a strange feeling that it has to have something to do with IOS ver /
Flash or mem requirements in the 2514 ??
Steve
-----Original Message-----
From: kouji.baba@equant.com [mailto:kouji.baba@equant.com]
Sent: Wednesday, May 01, 2002 12:00 PM
To: Steve Monkhouse
Cc: cisco-nsp@puck.nether.net
Subject: Re: Problem with 2500 series PPTP vpdn configuration ?
Steve,
have you tried without 'ppp encrypt' or with 'ppp authentication pap' on
int virtual-template1 ?
i think pptp session is OK.
and debug information will be helpful.
debug vpdn event
debug ppp negotication|error|authentication
regards,
-----
kouji baba
|--------+---------------------------------->
| | "Steve Monkhouse" |
| | <steve.monkhouse@etherte|
| | ch.com.au> |
| | |
| | 2002/04/30 18:19 |
| | |
|--------+---------------------------------->
>---------------------------------------------------------------------------
--------------------------------|
|
|
| To: <cisco-nsp@puck.nether.net>
|
| cc:
|
| Subject: Problem with 2500 series PPTP vpdn configuration ?
|
>---------------------------------------------------------------------------
--------------------------------|
Problem with 2500 series PPTP vpdn configuration ?
Hello all..
A quickie if I may..?
Bit of background... trying to setup a PPTP/L2TP VPN from connected
workstations to 2514 router..
debug of connection shows :
*May 2 04:15:37.928 AEST: %LINK-3-UPDOWN: Interface Virtual-Access1,
changed state to up
*May 2 04:15:38.928 AEST: %LINEPROTO-5-UPDOWN: Line protocol on Interface
Virtual-Access1, changed state to up
*May 2 04:16:15.044 AEST: %LINK-3-UPDOWN: Interface Virtual-Access1,
changed state to down
*May 2 04:16:16.052 AEST: %LINEPROTO-5-UPDOWN: Line protocol on Interface
Virtual-Access1, changed state to down
and terminal wont log in.. (terminal is always checking username and
password ... which is correct)..
(Background on my IOS)...
--------------------------------
Cisco Internetwork Operating System Software
IOS (tm) 2500 Software (C2500-JK8OS-L), Version 12.2(1d), RELEASE SOFTWARE
(fc1)
Copyright (c) 1986-2002 by cisco Systems, Inc.
Compiled Sun 03-Feb-02 22:01 by srani
Image text-base: 0x0307EEE0, data-base: 0x00001000
ROM: System Bootstrap, Version 11.0(10c)XB1, PLATFORM SPECIFIC RELEASE
SOFTWARE (fc1)
BOOTFLASH: 3000 Bootstrap Software (IGS-BOOT-R), Version 11.0(10c)XB1,
PLATFORM SPECIFIC RELEASE SOFTWARE (fc1)
router uptime is 8 weeks, 5 days, 20 hours, 50 minutes
System returned to ROM by reload
System image file is "flash:c2500-jk8os-l.122-1d.bin"
cisco 2500 (68030) processor (revision D) with 16384K/2048K bytes of
memory.
Processor board ID 02942259, with hardware revision 00000000
Bridging software.
X.25 software, Version 3.0.0.
SuperLAT software (copyright 1990 by Meridian Technology Corp).
TN3270 Emulation software.
2 Ethernet/IEEE 802.3 interface(s)
2 Serial network interface(s)
32K bytes of non-volatile configuration memory.
16384K bytes of processor board System flash (Read ONLY)
Configuration register is 0x2102
------------------------------------------------
current IOS config.. (with non-relevant parts removed)..
router#sh run
Building configuration...
Current configuration : 2726 bytes
!
version 12.2
no service single-slot-reload-enable
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
!
hostname router
!
logging buffered 16384 debugging
logging rate-limit console 10 except errors
enable secret xxxxx
enable password xxxx
!
username testuser password testpass
clock timezone AEST 10
ip subnet-zero
no ip finger
ip name-server xxx.xxx.xxx.xxx
ip name-server xxx.xxx.xxx.xxx
!
ip multicast-routing
ip address-pool local
no ip dhcp-client network-discovery
ipx routing xxx
async-bootp dns-server xxx.xxx.xxx.xxx
vpdn enable
no vpdn logging
!
vpdn-group 1
! Default PPTP VPDN group
accept-dialin
protocol pptp
virtual-template 1
!
!
!
!
!
interface Loopback0
no ip address
!
interface Ethernet0
ip address xxx.xxx.xxx.xxx 255.255.255.252
no ip proxy-arp
ip nat outside
ip pim sparse-mode
no ip route-cache
no ip mroute-cache
ipx network BBBBAD encapsulation SAP
!
interface Ethernet1
ip address 10.0.0.20 255.255.255.0
ip nat inside
no ip route-cache
no ip mroute-cache
ipx network 3A759D encapsulation SAP
!
interface Virtual-Template1
description Dial-in Interface for PPTP Clients
mtu 1400
ip unnumbered Ethernet1
peer default ip address pool default
ppp encrypt mppe 40 required
ppp authentication chap ms-chap
ppp timeout retry 20
ppp timeout authentication 20
multilink max-links 1
!
router ospf 1
log-adjacency-changes
network 10.0.0.0 0.0.0.255 area 1
network xxx.xxx.xxx.xxx 0.0.0.255 area 0
network xxx.xxx.xxx.xxx 0.0.0.255 area 0
!
router rip
network 10.0.0.0
network xxx.xxx.xxx.xxx
network xxx.xxx.xxx.xxx
!
ip local pool default 10.0.0.210 10.0.0.240
ip kerberos source-interface any
ip nat inside source list nat-list interface Ethernet0 overload
ip nat inside source static tcp 10.0.0.56 515 xxx.xxx.xxx.xxx 515
extendable
ip classless
ip route 0.0.0.0 0.0.0.0 xxx.xxx.xxx.xxx
no ip http server
!
!
ip access-list standard nat-list
remark Allow all Internal IP's to be NATable
permit 10.0.0.0 0.0.0.255
logging trap debugging
logging facility local0
Has anyone got any ideas why this wont work ????
Thanks in Advance!
Steve
This archive was generated by hypermail 2b29 : Sun Aug 04 2002 - 04:13:43 EDT