[cisco-bba] PPPoE & L2TP

Sebastian Dehne sebastian at infopact.nl
Thu Nov 6 03:38:05 EST 2003


OK, here is the debug from the NAS again.

General OS:
  AAA Authentication debugging is on
  AAA Authorization debugging is on
PPP:
  PPP protocol negotiation debugging is on

VTEMPLATE:
  Virtual Template events debugging is on
Radius protocol debugging is on
Radius packet protocol (authentication) debugging is on


VPN:
  L2X protocol events debugging is on
  L2X protocol errors debugging is on

.Nov  6 09:36:45.834 CET: L2X: Unknown AVP found during length verification. AVP is 110, vendor code is 9, len is 6
.Nov  6 09:36:45.834 CET: L2X: Ignoring unknown Cisco AVP 110
.Nov  6 09:36:45.834 CET: L2TP: I SCCRQ from x134 tnl 57774
.Nov  6 09:36:45.834 CET:  Tnl 51200 L2TP: Got a challenge in SCCRQ, x134
.Nov  6 09:36:45.834 CET:  Tnl 51200 L2TP: New tunnel created for remote x134, address 212.29.160.134
.Nov  6 09:36:45.834 CET:  Tnl 51200 L2TP: O SCCRP  to x134 tnlid 57774
.Nov  6 09:36:45.834 CET:  Tnl 51200 L2TP: Control channel retransmit delay set to 1 seconds
.Nov  6 09:36:45.834 CET:  Tnl 51200 L2TP: Tunnel state change from idle to wait-ctl-reply
.Nov  6 09:36:45.858 CET:  Tnl 51200 L2TP: I SCCCN from x134 tnl 57774
.Nov  6 09:36:45.858 CET:  Tnl 51200 L2TP: Got a Challenge Response in SCCCN from x134
.Nov  6 09:36:45.858 CET:  Tnl 51200 L2TP: Tunnel Authentication success
.Nov  6 09:36:45.858 CET:  Tnl 51200 L2TP: Tunnel state change from wait-ctl-reply to established
.Nov  6 09:36:45.858 CET:  Tnl 51200 L2TP: SM State established
.Nov  6 09:36:45.862 CET:  Tnl 51200 L2TP: I ICRQ from x134 tnl 57774
.Nov  6 09:36:45.862 CET:  Tnl/Sn 51200/8 L2TP: Session FS enabled
.Nov  6 09:36:45.862 CET:  Tnl/Sn 51200/8 L2TP: Session state change from idle to wait-connect
.Nov  6 09:36:45.862 CET:  Tnl/Sn 51200/8 L2TP: New session created
.Nov  6 09:36:45.862 CET:  Tnl/Sn 51200/8 L2TP: O ICRP to x134 57774/3
.Nov  6 09:36:45.862 CET:  Tnl 51200 L2TP: Control channel retransmit delay set to 1 seconds
.Nov  6 09:36:45.886 CET:  Tnl/Sn 51200/8 L2TP: I ICCN from x134 tnl 57774, cl 3
.Nov  6 09:36:45.886 CET: pppoe at test.com Tnl/Sn 51200/8 L2TP: Session state change from wait-connect to wait-for-service-selection
.Nov  6 09:36:45.886 CET: AAA/BIND(0000000C): Bind i/f Virtual-Template10
.Nov  6 09:36:45.890 CET: ppp7 PPP: Phase is ESTABLISHING
.Nov  6 09:36:45.890 CET: ppp7 LCP: I FORCED rcvd CONFACK len 14
.Nov  6 09:36:45.890 CET: ppp7 LCP:    MRU 1492 (0x010405D4)
.Nov  6 09:36:45.890 CET: ppp7 LCP:    AuthProto PAP (0x0304C023)
.Nov  6 09:36:45.890 CET: ppp7 LCP:    MagicNumber 0x04BDF28B (0x050604BDF28B)
.Nov  6 09:36:45.890 CET: ppp7 LCP: I FORCED sent CONFACK len 10
.Nov  6 09:36:45.890 CET: ppp7 LCP:    MRU 1492 (0x010405D4)
.Nov  6 09:36:45.890 CET: ppp7 LCP:    MagicNumber 0x21D97898 (0x050621D97898)
.Nov  6 09:36:45.890 CET: ppp7 PPP LCP not accepting sent CONFACK
.Nov  6 09:36:45.890 CET: ppp7 LCP: State is Closed
.Nov  6 09:36:45.890 CET: ppp7 PPP: Sending Acct Event[Down] id[C]
.Nov  6 09:36:45.894 CET: ppp7 PPP: Phase is DOWN
.Nov  6 09:36:45.894 CET: pppoe at test.com Tnl/Sn 51200/8 L2TP: disconnect (AAA) IETF: 2/lost-carrier Ascend: 7/Lost Carrier
.Nov  6 09:36:45.894 CET: pppoe at test.com Tnl/Sn 51200/8 L2TP: O CDN to x134 57774/3
.Nov  6 09:36:45.894 CET:  Tnl 51200 L2TP: Control channel retransmit delay set to 1 seconds
.Nov  6 09:36:45.894 CET: pppoe at test.com Tnl/Sn 51200/8 L2TP: Destroying session
.Nov  6 09:36:45.894 CET: pppoe at test.com Tnl/Sn 51200/8 L2TP: Session state change from wait-for-service-selection to idle
.Nov  6 09:36:45.894 CET:  Tnl 51200 L2TP: Tunnel state change from established to no-sessions-left
.Nov  6 09:36:45.894 CET:  Tnl 51200 L2TP: No more sessions in tunnel, shutdown (likely) in 10 seconds
.Nov  6 09:36:55.894 CET:  Tnl 51200 L2TP: O StopCCN  to x134 tnlid 57774
.Nov  6 09:36:55.894 CET:  Tnl 51200 L2TP: Control channel retransmit delay set to 1 seconds
.Nov  6 09:36:55.894 CET:  Tnl 51200 L2TP: Tunnel state change from no-sessions-left to shutting-down
.Nov  6 09:36:55.922 CET:  Tnl 51200 L2TP: Shutdown tunnel
.Nov  6 09:36:55.922 CET:  Tnl 51200 L2TP: Tunnel state change from shutting-down to idle

Thanks for looking at it!

greetings,
Sebastian

Dennis Peng (dpeng at cisco.com) wrote:
> Could you turn on "debug vtemplate event" and "Debug ppp negot"?
> 
> Dennis
> 
> Sebastian Dehne [sebastian at infopact.nl] wrote:
> > Hi list,
> > 
> > I'm trying to forward a ppp (pppoe) sessions wihout succes. I have tried
> > all kinds of example-configuration, but without success.
> > 
> > PPPoE-client --pppoe--> LNS --l2tp--> NAS
> > 
> > I see the l2tp-tunnel being created, but no ppp-session in it.
> > 
> > Outout fom the NAS:
> > 
> > v5#show debugging
> > General OS:
> >   AAA Authentication debugging is on
> >   AAA Authorization debugging is on
> > 
> > Radius protocol debugging is on
> > Radius packet protocol (authentication) debugging is on
> > 
> > 
> > VPN:
> >   L2X protocol events debugging is on
> >   L2X protocol errors debugging is on
> > 
> > Nov  4 13:46:27.448 CET:  Tnl 6986 L2TP: I ICRQ from x134 tnl 36621
> > Nov  4 13:46:27.448 CET:  Tnl 6986 L2TP: Tunnel state change from no-sessions-left to established
> > Nov  4 13:46:27.448 CET:  Tnl/Sn 6986/6 L2TP: Session FS enabled
> > Nov  4 13:46:27.452 CET:  Tnl/Sn 6986/6 L2TP: Session state change from idle to wait-connect
> > Nov  4 13:46:27.452 CET:  Tnl/Sn 6986/6 L2TP: New session created
> > Nov  4 13:46:27.452 CET:  Tnl/Sn 6986/6 L2TP: O ICRP to x134 36621/8
> > Nov  4 13:46:27.452 CET:  Tnl 6986 L2TP: Control channel retransmit delay set to 1 seconds
> > Nov  4 13:46:27.476 CET:  Tnl/Sn 6986/6 L2TP: I ICCN from x134 tnl 36621, cl 8
> > Nov  4 13:46:27.476 CET: pppoe at test.com Tnl/Sn 6986/6 L2TP: Session state change from wait-connect to wait-for-service-selection
> > Nov  4 13:46:27.476 CET: AAA/BIND(00000007): Bind i/f Virtual-Template10 
> > Nov  4 13:46:27.480 CET: pppoe at test.com Tnl/Sn 6986/6 L2TP: disconnect (AAA) IETF: 2/lost-carrier Ascend: 7/Lost Carrier
> > Nov  4 13:46:27.480 CET: pppoe at test.com Tnl/Sn 6986/6 L2TP: O CDN to x134 36621/8
> > Nov  4 13:46:27.480 CET:  Tnl 6986 L2TP: Control channel retransmit delay set to 1 seconds
> > Nov  4 13:46:27.480 CET: pppoe at test.com Tnl/Sn 6986/6 L2TP: Destroying session
> > Nov  4 13:46:27.480 CET: pppoe at test.com Tnl/Sn 6986/6 L2TP: Session state change from wait-for-service-selection to idle
> > Nov  4 13:46:27.480 CET:  Tnl 6986 L2TP: Tunnel state change from established to no-sessions-left
> > Nov  4 13:46:27.484 CET:  Tnl 6986 L2TP: No more sessions in tunnel, shutdown (likely) in 10 seconds
> > 
> > Seen the fact that radius-debugging is switched; My conclusion is that
> > the proess doesnt reach AAA.
> > 
> > The NAS uses 12.2(15)T8 and the LNS 12.3(4)T.
> > 
> > can anyone help?
> > 
> > greetings,
> > Sebastian
> > 
> > _______________________________________________
> > cisco-bba mailing list
> > cisco-bba at puck.nether.net
> > https://puck.nether.net/mailman/listinfo/cisco-bba
> 



More information about the cisco-bba mailing list