<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
<META content="MSHTML 6.00.6000.16809" name=GENERATOR></HEAD>
<BODY>
<DIV><FONT face=Arial size=2><SPAN class=109013900-21052009>For those
interested, Cisco has been able to replicate and come up with a fix for this
issue.</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN
class=109013900-21052009></SPAN></FONT> </DIV>
<DIV>When you do a 'sh vpdn tunnel all'<SPAN
class=109013900-21052009> on the ASR</SPAN>,<SPAN class=109013900-21052009>
y</SPAN>ou see this in the tunnel output<SPAN
class=109013900-21052009>:</SPAN><BR><BR>'Control channel Congestion Control is enabled'<BR><BR>On the 7201/7301 platform<SPAN
class=109013900-21052009> (which doesn't have the problem)</SPAN><SPAN
class=109013900-21052009>, you
see:</SPAN><BR><BR>'Control channel Congestion Control is disabled'<BR><BR><SPAN
class=109013900-21052009>It's</SPAN> enabled by default on the ASR and <SPAN
class=109013900-21052009>Cisco </SPAN>believe this<SPAN
class=109013900-21052009> is</SPAN> causing the issue<SPAN
class=109013900-21052009>.</SPAN></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><SPAN class=109013900-21052009></SPAN><FONT face=Arial><FONT size=2>T<SPAN
class=109013900-21052009>o disable congestion
control:</SPAN></FONT></FONT></DIV>
<DIV><FONT face=Arial><FONT size=2><SPAN
class=109013900-21052009></SPAN></FONT></FONT> </DIV>
<DIV><FONT><FONT><SPAN
class=109013900-21052009>"no l2tp congestion-control"</SPAN></FONT></FONT></DIV>
<DIV><FONT face=Arial><FONT size=2><SPAN
class=109013900-21052009></SPAN></FONT></FONT> </DIV>
<DIV><FONT face=Arial size=2><SPAN class=109013900-21052009>Looks good so
far...</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV align=left><FONT face=Arial size=2>
<DIV align=left><SPAN class=996353004-23032009><FONT
size=2>--</FONT></SPAN></DIV>
<DIV align=left><BR><FONT size=2>Regards,<BR> <BR>Andy
Saykao<BR>System<SPAN class=996353004-23032009>s</SPAN>
Administrator<BR>Netspace Online Systems<SPAN class=996353004-23032009> Pty
Ltd</SPAN><BR>Ph<SPAN class=996353004-23032009>one</SPAN> : 03 9811
0049<BR>Mob<SPAN class=996353004-23032009>ile</SPAN> : 0401 422
406<BR>Fax <SPAN class=996353004-23032009> </SPAN>: 03
9811 0044<BR>E<SPAN class=996353004-23032009>-M</SPAN>ail<SPAN
class=996353004-23032009> </SPAN>: </FONT><A
title=mailto:andy.saykao@staff.netspace.net.au
href="mailto:andy.saykao@staff.netspace.net.au"><FONT
size=2>andy.saykao@staff.netspace.net.au</FONT></A></DIV></FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><SPAN class=109013900-21052009><FONT face=Arial
size=2>----</FONT></SPAN></DIV>
<DIV><SPAN class=109013900-21052009><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=109013900-21052009><FONT face=Verdana size=2> Hi Andy,
<BR>I think you need to configure lcp reneg always and clear the tunnel.
<BR>Even if this doesnt work, try setting ppp mrru in the template. <BR>And even
if this doesnt work raise case as suggested by Tony :) <BR><BR>Thanks <BR>Raghu
<BR>SAVE TREES..GO GREEN <BR><BR>On Fri, Mar 27, 2009 at 5:24 AM, Andy Saykao
< <BR>andy.saykao[at]staff.netspace.net.au> wrote: <BR><BR></FONT><FONT
face=Verdana color=#660066 size=2>> Hi Raghu, <BR>> <BR>> Yes we are
using lcp renegotiation in the VPDN config (see below). <BR>> <BR>>
vpdn-group <Provider_Name> <BR>> accept-dialin <BR>> protocol l2tp
<BR>> virtual-template 2 <BR>> terminate-from hostname
<Provider_Name> <BR>> source-ip 203.17.x.x <BR>> lcp renegotiation
on-mismatch <BR>> l2tp tunnel password <password> <BR>> l2tp tunnel
receive-window 100 <BR>> l2tp tunnel retransmit timeout min 2 <BR>> This
is the same VPDN config we use for a few other Providers which we <BR>>
aren't seeing the same problem with. <BR>> <BR>> -- <BR>> <BR>>
Regards, <BR>> <BR>> Andy Saykao <BR>> Systems Administrator <BR>>
Netspace Online Systems Pty Ltd <BR>> Phone : 03 9811 0049 <BR>> Mobile :
0401 422 406 <BR>> Fax : 03 9811 0044 <BR>> E-Mail :
andy.saykao[at]staff.netspace.net.au <BR>> <BR>> <BR>>
------------------------------ <BR>> *From:* raghuram chary
[mailto:raghujindia[at]gmail.com] <BR>> *Sent:* Thursday, 26 March 2009 8:05
PM <BR>> *To:* Andy Saykao <BR>> *Cc:* cisco-bba[at]puck.nether.net; Tony
<BR>> *Subject:* Re: [cisco-bba] VPDN session stuck in <B
style="COLOR: black; BACKGROUND-COLOR: rgb(255,255,128)">wiccn</B> state ?
<BR>> <BR>> Hi Andy, <BR>> <B
style="COLOR: black; BACKGROUND-COLOR: rgb(255,255,128)">WICCN</B> is a WAIT
ICCN state ,its one of the state in l2tp negotiations. <BR>> Have you tried
configuring lcp renegotiation ? <BR>> Which router are you using? <BR>> As
you have shifted to more power LNS,I believe there is a configuration <BR>>
problem. <BR>> <BR>> Thanks <BR>> Raghu <BR>> SAVE TREES..GO GREEN
<BR>> <BR>> On Thu, Mar 26, 2009 at 7:13 AM, Tony
<td_miles[at]yahoo.com> wrote: <BR>> <BR></FONT><FONT face=Verdana
color=#007777 size=2>>> <BR>>> No problems, althought I don't think
I actually helped any. <BR>>> <BR>>> I'd appreciate if you could let
us (list) know what the solution is when <BR>>> you get it sorted.
<BR>>> <BR>>> <BR>>> Thanks, <BR>>> Tony. <BR>>>
<BR>>> <BR>>> --- On Thu, 26/3/09, Andy Saykao
<andy.saykao[at]staff.netspace.net.au> <BR>>> wrote: <BR>>>
<BR></FONT><FONT face=Verdana color=#990000 size=2>>> > From: Andy
Saykao <andy.saykao[at]staff.netspace.net.au> <BR>>> > Subject:
RE: [cisco-bba] VPDN session stuck in <B
style="COLOR: black; BACKGROUND-COLOR: rgb(255,255,128)">wiccn</B> state ?
<BR>>> > To: "Tony" <td_miles[at]yahoo.com>,
cisco-bba[at]puck.nether.net <BR>>> > Date: Thursday, 26 March, 2009,
12:24 PM <BR></FONT><FONT color=#007777></FONT><FONT face=Verdana color=#990000
size=2>>> > Much appreciate your help Tony. <BR></FONT><FONT
color=#007777></FONT><FONT face=Verdana color=#990000 size=2>>> >
<BR>>> > Not sure if it's from all their LAC's or a subset, but will
<BR>>> > keep this in <BR>>> > mind. <BR>>> >
<BR>>> > Thanks. <BR>>> > <BR>>> > <BR>>> >
-- <BR>>> > <BR>>> > Regards, <BR>>> > <BR>>>
> Andy Saykao <BR>>> > Systems Administrator <BR>>> >
Netspace Online Systems Pty Ltd <BR>>> > Phone : 03 9811 0049
<BR>>> > Mobile : 0401 422 406 <BR>>> > Fax : 03 9811 0044
<BR>>> > E-Mail : andy.saykao[at]staff.netspace.net.au <BR>>>
> <BR>>> > -----Original Message----- <BR>>> > From: Tony
[mailto:td_miles[at]yahoo.com] <BR>>> > <BR>>> > Sent:
Thursday, 26 March 2009 12:18 PM <BR>>> > To:
cisco-bba[at]puck.nether.net; <BR>>> > Andy Saykao <BR>>> >
Subject: RE: [cisco-bba] VPDN session stuck in <B
style="COLOR: black; BACKGROUND-COLOR: rgb(255,255,128)">wiccn</B> state
<BR>>> > ? <BR>>> > <BR>>> > <BR>>> > Hi
Andy, <BR>>> > <BR>>> > I've pretty much out of ideas now
then, sorry :( <BR>>> > <BR>>> > If you've opened a case with
TAC, you may just have to wait <BR>>> > for them to <BR>>> >
sort it out with you. I would press them to find out what <BR>>> > that
state of <BR>>> > "<B
style="COLOR: black; BACKGROUND-COLOR: rgb(255,255,128)">wiccn</B>" means.. If
it's not a valid state, then it's coming <BR>>> > from within
<BR>>> > the IOS code somewhere and they should be able to trace it
<BR>>> > and find <BR>>> > where. Keep requesting escalations
on your case until it <BR>>> > gets to someone <BR>>> > who
knows/cares. <BR>>> > <BR>>> > You could try downgrading to a
different IOS, unless you <BR>>> > definitely need <BR>>> >
something in the special release you are using to make it <BR>>> >
work. <BR>>> > <BR>>> > If it's only tunnels from one
provider, is it from all of <BR>>> > their LAC, or <BR>>> > a
subset of their LAC ? <BR>>> > <BR>>> > <BR>>> >
regards, <BR>>> > Tony. <BR>>> > <BR>>> >
<BR>>> > <BR>>> > --- On Thu, 26/3/09, Andy Saykao
<andy.saykao[at]staff.netspace.net.au> <BR>>> > wrote:
<BR>>> > <BR></FONT><FONT face=Verdana color=#000000 size=2>>>
> > From: Andy Saykao <andy.saykao[at]staff.netspace.net.au>
<BR>>> > > Subject: RE: [cisco-bba] VPDN session stuck in
<BR></FONT><FONT face=Verdana color=#990000 size=2>>> > <B
style="COLOR: black; BACKGROUND-COLOR: rgb(255,255,128)">wiccn</B> state ?
<BR></FONT><FONT face=Verdana color=#000000 size=2>>> > > To: "Tony"
<td_miles[at]yahoo.com>, <BR></FONT><FONT face=Verdana color=#990000
size=2>>> > cisco-bba[at]puck.nether.net <BR></FONT><FONT face=Verdana
color=#000000 size=2>>> > > Date: Thursday, 26 March, 2009, 11:56 AM
<BR>>> > > <BR>>> > > Hi Tony, <BR>>> > >
<BR>>> > > Thank you for your reply. <BR>>> > >
<BR></FONT><FONT face=Verdana color=#660066 size=2>>> > > > One
thing I can see from your output is that all <BR></FONT><FONT
color=#000000></FONT><FONT face=Verdana color=#990000 size=2>>> > of
<BR></FONT><FONT face=Verdana color=#000000 size=2>>> > > the
sessions with <BR>>> > > this state are on the same tunnel (TunID:
21116). Do <BR></FONT><FONT face=Verdana color=#990000 size=2>>> > you
have any <BR></FONT><FONT face=Verdana color=#000000 size=2>>> > >
other sessions that are working on this same tunnel ? <BR>>> > >
<BR>>> > > Yes there are valid sessions on the tunnel. <BR>>>
> > <BR></FONT><FONT face=Verdana color=#660066 size=2>>> > >
> Is it happening across all of your LNS, or just <BR></FONT><FONT
color=#000000></FONT><FONT face=Verdana color=#990000 size=2>>> > one ?
<BR></FONT><FONT face=Verdana color=#000000 size=2>>> > > When you
<BR>>> > > upgraded did you change IOS ? What IOS version are you
<BR></FONT><FONT face=Verdana color=#990000 size=2>>> > running ? Have
<BR></FONT><FONT face=Verdana color=#000000 size=2>>> > > you tried
a different IOS ? Does a reboot fix the <BR></FONT><FONT face=Verdana
color=#990000 size=2>>> > problem ? <BR></FONT><FONT face=Verdana
color=#000000 size=2>>> > > <BR>>> > > It's happening
across all of our LNS's. We've been <BR></FONT><FONT face=Verdana color=#990000
size=2>>> > working extensively <BR>>> > <BR></FONT><FONT
face=Verdana color=#000000 size=2>>> > > with Cisco to get these
LNS's up and running and using <BR></FONT><FONT face=Verdana color=#990000
size=2>>> > a special <BR></FONT><FONT face=Verdana color=#000000
size=2>>> > > engineering release from the 12.2(33) train. No, we
<BR></FONT><FONT face=Verdana color=#990000 size=2>>> > have not tried
a <BR></FONT><FONT face=Verdana color=#000000 size=2>>> > >
different IOS given that we've been working with Cisco <BR></FONT><FONT
face=Verdana color=#990000 size=2>>> > on getting this <BR>>>
> <BR></FONT><FONT face=Verdana color=#000000 size=2>>> > > far
already. <BR>>> > > <BR>>> > > A reboot fixes the
problem temporarily but when we <BR></FONT><FONT face=Verdana color=#990000
size=2>>> > arrive the next <BR></FONT><FONT face=Verdana color=#000000
size=2>>> > > day, there's a whole bunch of sessions waiting for us
<BR></FONT><FONT face=Verdana color=#990000 size=2>>> > stuck in this
<BR></FONT><FONT face=Verdana color=#000000 size=2>>> > > "<B
style="COLOR: black; BACKGROUND-COLOR: rgb(255,255,128)">wiccn</B>" <BR>>>
> > state. <BR>>> > > <BR></FONT><FONT face=Verdana
color=#660066 size=2>>> > > > Did the LAC provider ("T" or "O" ?)
have to <BR></FONT><FONT color=#000000></FONT><FONT face=Verdana color=#990000
size=2>>> > change <BR></FONT><FONT face=Verdana color=#000000
size=2>>> > > anything on their <BR></FONT><FONT face=Verdana
color=#660066 size=2>>> > > > end as part of the changes ? They
will always say <BR></FONT><FONT color=#000000></FONT><FONT face=Verdana
color=#990000 size=2>>> > that <BR></FONT><FONT face=Verdana
color=#000000 size=2>>> > > everything is <BR></FONT><FONT
face=Verdana color=#660066 size=2>>> > > > ok, doesn't mean it is
:) <BR></FONT><FONT face=Verdana color=#000000 size=2>>> > >
<BR>>> > > We terminate a few tunnels from a variety of Service
<BR></FONT><FONT face=Verdana color=#990000 size=2>>> > Providers on
<BR></FONT><FONT face=Verdana color=#000000 size=2>>> > > these
LNS's and are currently only having issues with <BR></FONT><FONT face=Verdana
color=#990000 size=2>>> > one provider <BR></FONT><FONT face=Verdana
color=#000000 size=2>>> > > where we encounter this problem.
<BR>>> > > <BR>>> > > Cheers. <BR>>> > >
<BR>>> > > Andy <BR>>> > > <BR></FONT><FONT
color=#990000><FONT face=Verdana size=2>>> > <BR>>> >
<BR>>> > <BR>>> > <BR>>> > <BR>>> >
______________________________________________________________________
<BR>>> > This email has been scanned by the MessageLabs Email
<BR>>> > Security System. <BR>>> > For more information please
visit </FONT><A href="http://www.messagelabs.com/email" target=_blank
rel=nofollow><FONT face=Verdana
size=2>http://www.messagelabs.com/email</FONT></A><FONT face=Verdana size=2>
<BR>>> >
______________________________________________________________________
<BR>>> > <BR>>> > This email and any files transmitted with it
are <BR>>> > confidential and intended <BR>>> > solely for the
use of the individual or entity to whom <BR>>> > they are addressed.
<BR>>> > Please notify the sender immediately by email if you have
<BR>>> > received this <BR>>> > email by mistake and delete
this email from your system. <BR>>> > Please note that <BR>>>
> any views or opinions presented in this email are solely <BR>>> >
those of the <BR>>> > author and do not necessarily represent those of
the <BR>>> > organisation. <BR>>> > Finally, the recipient
should check this email and any <BR>>> > attachments for <BR>>>
> the presence of viruses. The organisation accepts no <BR>>> >
liability for any <BR>>> > damage caused by any virus transmitted by
this email. <BR>>> > <BR>>> > <BR></FONT></FONT><FONT
color=#007777><FONT face=Verdana size=2>>> <BR>>> <BR>>>
<BR>>> _______________________________________________ <BR>>>
cisco-bba mailing list <BR>>> cisco-bba[at]puck.nether.net <BR>>>
</FONT><A href="https://puck.nether.net/mailman/listinfo/cisco-bba"
target=_blank rel=nofollow><FONT face=Verdana
size=2>https://puck.nether.net/mailman/listinfo/cisco-bba</FONT></A><FONT
face=Verdana size=2> <BR>>> <BR></FONT></FONT><FONT color=#660066><FONT
face=Verdana size=2>> <BR>> <BR>> <BR>> -- <BR>> Thanks <BR>>
Raghu <BR>> <BR>>
______________________________________________________________________ <BR>>
This email has been scanned by the MessageLabs Email Security System. <BR>>
For more information please visit </FONT><A
href="http://www.messagelabs.com/email" target=_blank rel=nofollow><FONT
face=Verdana size=2>http://www.messagelabs.com/email</FONT></A><FONT
face=Verdana size=2> <BR>>
______________________________________________________________________ <BR>>
<BR>> This email and any files transmitted with it are confidential and
intended <BR>> solely for the use of the individual or entity to whom they
are addressed. <BR>> Please notify the sender immediately by email if you
have received this <BR>> email by mistake and delete this email from your
system. Please note that <BR>> any views or opinions presented in this email
are solely those of the author <BR>> and do not necessarily represent those
of the organisation. Finally, the <BR>> recipient should check this email and
any attachments for the presence of <BR>> viruses. The organisation accepts
no liability for any damage caused by any <BR>> virus transmitted by this
email. <BR>> </FONT><BR></FONT></SPAN></DIV></BODY><!--[object_id=#staff.netspace.net.au#]--><P align=left><FONT face=Arial size=1>This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. Please notify the sender immediately by email if you have received this email by mistake and delete this email from your system. Please note that any views or opinions presented in this email are solely those of the author and do not necessarily represent those of the organisation. Finally, the recipient should check this email and any attachments for the presence of viruses. The organisation accepts no liability for any damage caused by any virus transmitted by this email.</FONT></P></HTML>