<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
<META content="MSHTML 6.00.6000.16809" name=GENERATOR></HEAD>
<BODY>
<DIV dir=ltr align=left><SPAN class=323595123-26032009><FONT face=Arial
color=#0000ff size=2>Hi Raghu,</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=323595123-26032009><FONT face=Arial
color=#0000ff size=2></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=323595123-26032009><FONT face=Arial
color=#0000ff size=2>Yes we are using lcp renegotiation in the VPDN config (see
below).</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=323595123-26032009><FONT face=Arial
color=#0000ff size=2></FONT></SPAN><SPAN class=323595123-26032009><FONT
face=Arial color=#0000ff size=2></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=323595123-26032009><FONT face=Arial
color=#0000ff
size=2>vpdn-group <Provider_Name><BR> accept-dialin<BR>
protocol l2tp<BR> virtual-template 2<BR> terminate-from
hostname <Provider_Name></FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=323595123-26032009><FONT face=Arial
color=#0000ff size=2> source-ip 203.17.x.x<BR> lcp renegotiation
on-mismatch<BR> l2tp tunnel
password <password></FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=323595123-26032009><FONT face=Arial
color=#0000ff size=2> l2tp tunnel receive-window 100<BR> l2tp tunnel
retransmit timeout min 2<BR></DIV></FONT></SPAN>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN class=323595123-26032009>This
is the same VPDN config we use for a few other Providers which we
aren't seeing the same problem with.</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=323595123-26032009></SPAN></FONT> </DIV>
<DIV align=left><FONT face=Arial size=2>
<DIV align=left><SPAN class=996353004-23032009><FONT
size=2>--</FONT></SPAN></DIV>
<DIV align=left><BR><FONT size=2>Regards,<BR> <BR>Andy
Saykao<BR>System<SPAN class=996353004-23032009>s</SPAN>
Administrator<BR>Netspace Online Systems<SPAN class=996353004-23032009> Pty
Ltd</SPAN><BR>Ph<SPAN class=996353004-23032009>one</SPAN> : 03 9811
0049<BR>Mob<SPAN class=996353004-23032009>ile</SPAN> : 0401 422
406<BR>Fax <SPAN class=996353004-23032009> </SPAN>: 03
9811 0044<BR>E<SPAN class=996353004-23032009>-M</SPAN>ail<SPAN
class=996353004-23032009> </SPAN>: </FONT><A
title=mailto:andy.saykao@staff.netspace.net.au
href="blocked::mailto:andy.saykao@staff.netspace.net.au"><FONT
size=2>andy.saykao@staff.netspace.net.au</FONT></A></DIV></FONT></DIV>
<DIV> </DIV><BR>
<DIV class=OutlookMessageHeader lang=en-us dir=ltr align=left>
<HR tabIndex=-1>
<FONT face=Tahoma size=2><B>From:</B> raghuram chary
[mailto:raghujindia@gmail.com] <BR><B>Sent:</B> Thursday, 26 March 2009 8:05
PM<BR><B>To:</B> Andy Saykao<BR><B>Cc:</B> cisco-bba@puck.nether.net;
Tony<BR><B>Subject:</B> Re: [cisco-bba] VPDN session stuck in wiccn state
?<BR></FONT><BR></DIV>
<DIV></DIV>Hi Andy,<BR>WICCN is a WAIT ICCN state ,its one of the
state in l2tp negotiations.<BR>Have you tried configuring lcp renegotiation
?<BR>Which router are you using?<BR>As you have shifted to more power LNS,I
believe there is a configuration problem.<BR><BR>Thanks<BR>Raghu<BR>SAVE
TREES..GO GREEN<BR><BR>
<DIV class=gmail_quote>On Thu, Mar 26, 2009 at 7:13 AM, Tony <SPAN
dir=ltr><<A
href="mailto:td_miles@yahoo.com">td_miles@yahoo.com</A>></SPAN> wrote:<BR>
<BLOCKQUOTE class=gmail_quote
style="PADDING-LEFT: 1ex; MARGIN: 0pt 0pt 0pt 0.8ex; BORDER-LEFT: rgb(204,204,204) 1px solid"><BR>No
problems, althought I don't think I actually helped any.<BR><BR>I'd appreciate
if you could let us (list) know what the solution is when you get it
sorted.<BR><BR><BR>Thanks,<BR>
<DIV class=im>Tony.<BR><BR><BR>--- On Thu, 26/3/09, Andy Saykao <<A
href="mailto:andy.saykao@staff.netspace.net.au">andy.saykao@staff.netspace.net.au</A>>
wrote:<BR><BR>> From: Andy Saykao <<A
href="mailto:andy.saykao@staff.netspace.net.au">andy.saykao@staff.netspace.net.au</A>><BR>>
Subject: RE: [cisco-bba] VPDN session stuck in wiccn state ?<BR>> To:
"Tony" <<A href="mailto:td_miles@yahoo.com">td_miles@yahoo.com</A>>, <A
href="mailto:cisco-bba@puck.nether.net">cisco-bba@puck.nether.net</A><BR></DIV>>
Date: Thursday, 26 March, 2009, 12:24 PM<BR>
<DIV>
<DIV></DIV>
<DIV class=h5>> Much appreciate your help Tony.<BR>><BR>> Not sure if
it's from all their LAC's or a subset, but will<BR>> keep this in<BR>>
mind.<BR>><BR>> Thanks.<BR>><BR>><BR>> --<BR>><BR>>
Regards,<BR>><BR>> Andy Saykao<BR>> Systems Administrator<BR>>
Netspace Online Systems Pty Ltd<BR>> Phone : 03 9811 0049<BR>> Mobile :
0401 422 406<BR>> Fax : 03 9811 0044<BR>> E-Mail : <A
href="mailto:andy.saykao@staff.netspace.net.au">andy.saykao@staff.netspace.net.au</A><BR>><BR>>
-----Original Message-----<BR>> From: Tony [mailto:<A
href="mailto:td_miles@yahoo.com">td_miles@yahoo.com</A>]<BR>><BR>> Sent:
Thursday, 26 March 2009 12:18 PM<BR>> To: <A
href="mailto:cisco-bba@puck.nether.net">cisco-bba@puck.nether.net</A>;<BR>>
Andy Saykao<BR>> Subject: RE: [cisco-bba] VPDN session stuck in wiccn
state<BR>> ?<BR>><BR>><BR>> Hi Andy,<BR>><BR>> I've pretty
much out of ideas now then, sorry :(<BR>><BR>> If you've opened a case
with TAC, you may just have to wait<BR>> for them to<BR>> sort it out
with you. I would press them to find out what<BR>> that state of<BR>>
"wiccn" means.. If it's not a valid state, then it's coming<BR>> from
within<BR>> the IOS code somewhere and they should be able to trace
it<BR>> and find<BR>> where. Keep requesting escalations on your case
until it<BR>> gets to someone<BR>> who knows/cares.<BR>><BR>> You
could try downgrading to a different IOS, unless you<BR>> definitely
need<BR>> something in the special release you are using to make it<BR>>
work.<BR>><BR>> If it's only tunnels from one provider, is it from all
of<BR>> their LAC, or<BR>> a subset of their LAC
?<BR>><BR>><BR>> regards,<BR>>
Tony.<BR>><BR>><BR>><BR>> --- On Thu, 26/3/09, Andy Saykao <<A
href="mailto:andy.saykao@staff.netspace.net.au">andy.saykao@staff.netspace.net.au</A>><BR>>
wrote:<BR>><BR>> > From: Andy Saykao <<A
href="mailto:andy.saykao@staff.netspace.net.au">andy.saykao@staff.netspace.net.au</A>><BR>>
> Subject: RE: [cisco-bba] VPDN session stuck in<BR>> wiccn state
?<BR>> > To: "Tony" <<A
href="mailto:td_miles@yahoo.com">td_miles@yahoo.com</A>>,<BR>> <A
href="mailto:cisco-bba@puck.nether.net">cisco-bba@puck.nether.net</A><BR>>
> Date: Thursday, 26 March, 2009, 11:56 AM<BR>> ><BR>> > Hi
Tony,<BR>> ><BR>> > Thank you for your reply.<BR>> ><BR>>
> > One thing I can see from your output is that all<BR>> of<BR>>
> the sessions with<BR>> > this state are on the same tunnel (TunID:
21116). Do<BR>> you have any<BR>> > other sessions that are working
on this same tunnel ?<BR>> ><BR>> > Yes there are valid sessions
on the tunnel.<BR>> ><BR>> > > Is it happening across all of
your LNS, or just<BR>> one ?<BR>> > When you<BR>> > upgraded
did you change IOS ? What IOS version are you<BR>> running ? Have<BR>>
> you tried a different IOS ? Does a reboot fix the<BR>> problem
?<BR>> ><BR>> > It's happening across all of our LNS's. We've
been<BR>> working extensively<BR>><BR>> > with Cisco to get these
LNS's up and running and using<BR>> a special<BR>> > engineering
release from the 12.2(33) train. No, we<BR>> have not tried a<BR>> >
different IOS given that we've been working with Cisco<BR>> on getting
this<BR>><BR>> > far already.<BR>> ><BR>> > A reboot
fixes the problem temporarily but when we<BR>> arrive the next<BR>> >
day, there's a whole bunch of sessions waiting for us<BR>> stuck in
this<BR>> > "wiccn"<BR>> > state.<BR>> ><BR>> > >
Did the LAC provider ("T" or "O" ?) have to<BR>> change<BR>> >
anything on their<BR>> > > end as part of the changes ? They will
always say<BR>> that<BR>> > everything is<BR>> > > ok,
doesn't mean it is :)<BR>> ><BR>> > We terminate a few tunnels
from a variety of Service<BR>> Providers on<BR>> > these LNS's and
are currently only having issues with<BR>> one provider<BR>> > where
we encounter this problem.<BR>> ><BR>> > Cheers.<BR>>
><BR>> > Andy<BR>>
><BR>><BR>><BR>><BR>><BR>><BR>>
______________________________________________________________________<BR>>
This email has been scanned by the MessageLabs Email<BR>> Security
System.<BR>> For more information please visit <A
href="http://www.messagelabs.com/email"
target=_blank>http://www.messagelabs.com/email</A><BR>>
______________________________________________________________________<BR>><BR>>
This email and any files transmitted with it are<BR>> confidential and
intended<BR>> solely for the use of the individual or entity to
whom<BR>> they are addressed.<BR>> Please notify the sender immediately
by email if you have<BR>> received this<BR>> email by mistake and delete
this email from your system.<BR>> Please note that<BR>> any views
or opinions presented in this email are solely<BR>> those of the<BR>>
author and do not necessarily represent those of the<BR>>
organisation.<BR>> Finally, the recipient should check this email and
any<BR>> attachments for<BR>> the presence of viruses. The organisation
accepts no<BR>> liability for any<BR>> damage caused by any virus
transmitted by this
email.<BR>><BR>><BR><BR><BR><BR>_______________________________________________<BR>cisco-bba
mailing list<BR><A
href="mailto:cisco-bba@puck.nether.net">cisco-bba@puck.nether.net</A><BR><A
href="https://puck.nether.net/mailman/listinfo/cisco-bba"
target=_blank>https://puck.nether.net/mailman/listinfo/cisco-bba</A><BR></DIV></DIV></BLOCKQUOTE></DIV><BR><BR
clear=all><BR>--
<BR>Thanks<BR>Raghu<BR><BR>______________________________________________________________________<BR>This
email has been scanned by the MessageLabs Email Security System.<BR>For more
information please visit http://www.messagelabs.com/email
<BR>______________________________________________________________________<BR></BODY><!--[object_id=#staff.netspace.net.au#]--><P align=left><FONT face=Arial size=1>This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. Please notify the sender immediately by email if you have received this email by mistake and delete this email from your system. Please note that any views or opinions presented in this email are solely those of the author and do not necessarily represent those of the organisation. Finally, the recipient should check this email and any attachments for the presence of viruses. The organisation accepts no liability for any damage caused by any virus transmitted by this email.</FONT></P></HTML>