<html><body><div style="color:#000; background-color:#fff; font-family:times new roman, new york, times, serif;font-size:12pt">Hi Dominic,<br><br>You say that it works if you connect different CPE (eg. 1841) up, but not some others. Perhaps you should look at it from the other end and do a "debug ppp negotiation" (or similar) from a CPE that works and one that doesn't work. This might give you some more insight into what the problem is. Perhaps it is something that the CPE is trying to negotiate that is forcing the ASR's hand.<br><br>I saw this thread in a quick search:<br>https://supportforums.cisco.com/thread/2146819<br><br>where the problem was this attribute "Framed-Compression := Van-Jacobsen-TCP-IP", so it can really be any attribute that the ASR doesn't like, you just need to narrow down to what it is.<br><br><br>regards,<br>Tony.<br><br><br><div><span><br></span></div><div><br><blockquote style="border-left: 2px solid rgb(16, 16, 255);
margin-left: 5px; margin-top: 5px; padding-left: 5px;"> <div style="font-family: times new roman, new york, times, serif; font-size: 12pt;"> <div style="font-family: times new roman, new york, times, serif; font-size: 12pt;"> <div dir="ltr"> <font face="Arial" size="2"> <hr size="1"> <b><span style="font-weight:bold;">From:</span></b> Dominic <dominic@broadconnect.ca><br> <b><span style="font-weight: bold;">To:</span></b> cisco-bba@puck.nether.net <br> <b><span style="font-weight: bold;">Sent:</span></b> Thursday, 3 January 2013 10:21 AM<br> <b><span style="font-weight: bold;">Subject:</span></b> [cisco-bba] LNS Error on Cisco ASR 1004<br> </font> </div> <br><meta http-equiv="x-dns-prefetch-control" content="off"><div id="yiv435679737">
<title>LNS Error on Cisco ASR 1004</title>
<div>
<div dir="LTR"><span lang="en-us"></span><span lang="en-us"></span></div>
<div dir="LTR"><span lang="en-us"></span><span lang="en-us"><font face="Calibri">Happy New Year everyone!</font></span></div>
<div dir="LTR"><span lang="en-us"><font face="Calibri">We currently use Cisco 7206 LNS(es). Everything works great. But we are now looking to migrate LNS functions from the 7206 to an ASR 1004. Thought it would be a straightforward thing, but for some reason, the ASR keeps barking up this error: </font></span></div>
<div dir="LTR"><span lang="en-us"><b><i><font color="#FF0000" face="Calibri">"%FMANRP_ESS-4-FULLVAI: Session creation failed due to Full Virtual-Access Interfaces not being supported. Check that all applied Virtual-Template and RADIUS features support Virtual-Access sub-interfaces. swidb=</font></i></b></span></div>
<div dir="LTR"><span lang="en-us"><b><i><font color="#FF0000" face="Calibri">0x7FEDB5942B98, ifnum= 37</font></i></b></span><span lang="en-us"><font face="Calibri">"</font></span><span lang="en-us"><i></i></span></div>
<div dir="LTR"><span lang="en-us"></span></div>
<div dir="LTR"><span lang="en-us"><font face="Calibri">The funny thing is, if the CPE is a Cisco 1841, the pppoe negotiation is successfully negotiated, and everything works great. If some other CPE however, we end up with the above error. </font></span></div>
<div dir="LTR"><span lang="en-us"><font face="Calibri">Any idea what we are doing wrong? </font></span></div>
<div dir="LTR"><span lang="en-us"></span></div>
<div dir="LTR"><span lang="en-us"><font face="Calibri">1. </font></span><span lang="en-us"> <font face="Calibri">Here is the relevant cisco config on the ASR -</font></span></div>
<div dir="LTR"><span lang="en-us"></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#FF0000" face="Calibri">aaa new-model</font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#FF0000" face="Calibri">aaa group server radius adslRADIUS</font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#FF0000" face="Calibri"> server x.x.xx.60 auth-port 1812 acct-port 1813</font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#FF0000" face="Calibri"> server x.x.50.xx auth-port 1812 acct-port 1813</font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#FF0000" face="Calibri"> deadtime 15</font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#FF0000" face="Calibri">!</font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#FF0000" face="Calibri">aaa authentication login default local</font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#FF0000" face="Calibri">aaa authentication ppp hawVPDN group adslRADIUS</font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#FF0000" face="Calibri">aaa authorization network hawVPDN group adslRADIUS </font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#FF0000" face="Calibri">aaa authorization auth-proxy default group adslRADIUS </font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#FF0000" face="Calibri">aaa accounting delay-start</font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#FF0000" face="Calibri">aaa accounting update periodic 5</font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#FF0000" face="Calibri">!</font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#FF0000" face="Calibri">sgbp group bondadsl</font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#FF0000" face="Calibri">sgbp member lns2-dsl x.x.xx.243</font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#FF0000" face="Calibri">sgbp member lns1-dsl x.x.xx.242</font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#FF0000" face="Calibri">sgbp member Aggr.RT2 x.x.xx.232</font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#FF0000" face="Calibri">!</font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#FF0000" face="Calibri">virtual-profile virtual-template 1</font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#FF0000" face="Calibri">!</font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#FF0000" face="Calibri">multilink virtual-template 1</font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#FF0000" face="Calibri">multilink bundle-name authenticated</font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#FF0000" face="Calibri">vpdn enable</font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#FF0000" face="Calibri">vpdn multihop</font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#FF0000" face="Calibri">vpdn logging</font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#FF0000" face="Calibri">vpdn logging user</font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#FF0000" face="Calibri">vpdn logging tunnel-drop</font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#FF0000" face="Calibri">vpdn history failure table-size 50</font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#FF0000" face="Calibri">!</font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#FF0000" face="Calibri">vpdn-group adsl-ADSL</font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#FF0000" face="Calibri"> ! Default L2TP VPDN group</font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#FF0000" face="Calibri"> accept-dialin</font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#FF0000" face="Calibri"> protocol l2tp</font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#FF0000" face="Calibri"> virtual-template 1</font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#FF0000" face="Calibri"> lcp renegotiation always</font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#FF0000" face="Calibri"> l2tp tunnel password 7 xxxxxxxxxxxx</font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#FF0000" face="Calibri"> ip pmtu</font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#FF0000" face="Calibri"> ip mtu adjust</font></i></span></div>
<br>
<div dir="LTR"><span lang="en-us"><i><font color="#FF0000" face="Calibri">!</font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#FF0000" face="Calibri">interface Virtual-Template1</font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#FF0000" face="Calibri"> description adsl-ADSL-STATIC</font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#FF0000" face="Calibri"> mtu 1492</font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#FF0000" face="Calibri"> ip unnumbered GigabitEthernet0/2/0.34</font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#FF0000" face="Calibri"> no ip redirects</font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#FF0000" face="Calibri"> no ip proxy-arp</font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#FF0000" face="Calibri"> ip verify unicast reverse-path</font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#FF0000" face="Calibri"> ip tcp adjust-mss 1420</font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#FF0000" face="Calibri"> no logging event link-status</font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#FF0000" face="Calibri"> no peer default ip address</font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#FF0000" face="Calibri"> ppp mtu adaptive</font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#FF0000" face="Calibri"> ppp authentication pap hawVPDN</font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#FF0000" face="Calibri"> ppp authorization hawVPDN</font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#FF0000" face="Calibri"> ppp accounting hawVPDN</font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#FF0000" face="Calibri"> ppp chap refuse</font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#FF0000" face="Calibri"> ppp ipcp dns xx.xx.xx.234 xx.xx.xx.235</font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#FF0000" face="Calibri"> ppp multilink</font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#FF0000" face="Calibri">!</font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#FF0000" face="Calibri">radius-server host x.x.xx.60 auth-port 1812 acct-port 1813 key 7 xxxxxxxxxxx</font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#FF0000" face="Calibri">radius-server host x.x.xx.61 auth-port 1812 acct-port 1813 key 7 xxxxxxxxxxx</font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#FF0000" face="Calibri">radius-server retransmit 1</font></i></span></div>
<br>
<div dir="LTR"><span lang="en-us"><i><font color="#FF0000" face="Calibri">------------------------</font></i></span></div>
<div dir="LTR"><span lang="en-us"><font face="Calibri">2. Here are the attributes from the radius server:</font></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#7030A0" face="Calibri">----------------------</font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#7030A0" face="Calibri">mysql> select * from radgroupreply where GroupName = 'telco1-pppoe-static' ;</font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#7030A0" face="Calibri">+-----+--------------------+------------------------+----+--------------------------------</font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#7030A0" face="Calibri">---------------------------+</font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#7030A0" face="Calibri">| id | GroupName | Attribute | op | Value </font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#7030A0" face="Calibri"> |</font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#7030A0" face="Calibri">+-----+--------------------+------------------------+----+--------------------------------</font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#7030A0" face="Calibri">| 60 | telco1-pppoe-static | Service-Type | := | Framed-User |</font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#7030A0" face="Calibri">| 61 | telco1-pppoe-static | Framed-Protocol | := | PPP </font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#7030A0" face="Calibri">| 62 | telco1-pppoe-static | Framed-IP-Netmask | := | 255.255.255.255 </font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#7030A0" face="Calibri">| 65 | telco1-pppoe-static | Tunnel-Server-Endpoint | += | :3:xx.xx.xx.171 </font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#7030A0" face="Calibri">| 66 | telco1-pppoe-static | Tunnel-Server-Endpoint | += | :2:xx.xx.xx.172 </font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#7030A0" face="Calibri">| 67 | telco1-pppoe-static | Tunnel-Password | += | :1:xxx.XXTxxx </font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#7030A0" face="Calibri">| 68 | telco1-pppoe-static | Tunnel-Password | += | :2:xxx.XXTxxx </font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#7030A0" face="Calibri">| 69 | telco1-pppoe-static | Tunnel-Preference | += | :1:10 </font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#7030A0" face="Calibri">| 70 | telco1-pppoe-static | Tunnel-Preference | += | :2:10 </font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#7030A0" face="Calibri"> | 71 | telco1-pppoe-static | Tunnel-Medium-Type | += | :1:IP </font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#7030A0" face="Calibri"> | 72 | telco1-pppoe-static | Tunnel-Type | += | :1:L2TP </font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#7030A0" face="Calibri">| 73 | telco1-pppoe-static | Tunnel-Medium-Type | += | :2:IP </font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#7030A0" face="Calibri">| 74 | telco1-pppoe-static | Tunnel-Type | += | :2:L2TP </font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#7030A0" face="Calibri">| 123 | telco1-pppoe-static | Cisco-Avpair | += | interface-config=ppp ipcp dns xx.xx.xx.234 xx.xx.xx.235 |</font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#7030A0" face="Calibri">| 127 | telco1-pppoe-static | Tunnel-Server-Endpoint | += | :1:xx.xx.xx.170 </font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#7030A0" face="Calibri">| 128 | telco1-pppoe-static | Tunnel-Preference | += | :3:10 </font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#7030A0" face="Calibri">| 129 | telco1-pppoe-static | Tunnel-Type | += | :3:L2TP </font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#7030A0" face="Calibri">| 130 | telco1-pppoe-static | Tunnel-Medium-Type | += | :3:IP </font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#7030A0" face="Calibri">| 131 | telco1-pppoe-static | Tunnel-Password | += | :3:xxx.XXTxxx </font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#7030A0" face="Calibri">---------------------------+</font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#7030A0" face="Calibri">19 rows in set (0.00 sec)</font></i></span></div>
<div dir="LTR"><span lang="en-us"><i><font color="#7030A0" face="Calibri">mysql></font></i></span></div>
<div dir="LTR"><span lang="en-us"></span></div>
<div dir="LTR"><span lang="en-us"><i></i></span></div>
</div>
</div><meta http-equiv="x-dns-prefetch-control" content="on"><br>_______________________________________________<br>cisco-bba mailing list<br><a ymailto="mailto:cisco-bba@puck.nether.net" href="mailto:cisco-bba@puck.nether.net">cisco-bba@puck.nether.net</a><br><a href="https://puck.nether.net/mailman/listinfo/cisco-bba" target="_blank">https://puck.nether.net/mailman/listinfo/cisco-bba</a><br><br> </div> </div> </blockquote></div> </div></body></html>