[cisco-nas] virtual-Profile question
Matyas Szilard
szilard.matyas at enternet.hu
Wed Oct 15 09:56:26 EDT 2003
Hello Dennis!
Thanks very much for your reply. I tried it with resource pool customer
profile template and it works with async but don't work with ISDN. when I
dial in with
ISDN PPP don't start. I included my config and debugs. Please run through it
if you have time.
Thanks in advance!
Szicsu
My config:
C5350-test#sh run
Building configuration...
Current configuration : 3164 bytes
!
version 12.2
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname C5350-test
!
boot system flash flash:c5350-is-mz.122-15.T8.bin
no boot startup-test
logging queue-limit 100
logging buffered 16384 debugging
no logging console
enable secret 5 xxxxxxxxxxxxxxxxxxxxxxxxx
!
username red password xxxxxxxxxxxxxxxxxxxx
username tesztdial password 7 xxxxxxxxxxxxxxxxxxx
!
!
resource-pool enable
resource-pool call treatment resource busy
resource-pool call treatment profile busy
resource-pool call treatment discriminator busy
!
resource-pool group resource NEXTPORT
range port 1/0 1/59
pool-alloc round-robin
!
resource-pool group resource ISDN
range limit 3
!
resource-pool profile customer CUST1
limit base-size 30
limit overflow-size 0
resource ISDN digital
resource NEXTPORT speech
dnis group DNIS210
source template ISDN+MODEM
resource-pool aaa protocol local
clock timezone MET 1
clock summer-time MET recurring last Sun Mar 3:00 last Sun Oct 3:00
tdm clock priority 1 3/0
tdm clock priority 2 3/1
spe default-firmware spe-firmware-1
aaa new-model
!
!
aaa authentication login default local
aaa authentication ppp dialin local
aaa authorization network dialin local
aaa session-id common
ip subnet-zero
no ip cef
ip name-server 62.112.192.4
ip name-server 62.112.192.3
!
isdn switch-type primary-net5
!
template ISDN+MODEM
peer default ip address pool dialin
ppp authentication pap dialin
ppp authorization dialin
ppp multilink
dialer idle-timeout 0
keepalive 20
!
!
!
!
!
!
!
!
!
no voice hpi capture buffer
no voice hpi capture destination
!
!
!
mta receive maximum-recipients 0
!
!
!
controller E1 3/0
framing NO-CRC4
pri-group timeslots 1-31
!
controller E1 3/1
!
!
interface FastEthernet0/0
ip address xxxxxxxxxxxxxxxxxxxxxxx
duplex full
speed 100
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0
no ip address
shutdown
clockrate 2000000
!
interface Serial0/1
no ip address
shutdown
clockrate 2000000
!
interface Serial3/0:15
ip unnumbered FastEthernet0/0
dialer idle-timeout 0
autodetect encapsulation ppp
isdn switch-type primary-net5
isdn incoming-voice modem
keepalive 20
!
interface Group-Async0
ip unnumbered FastEthernet0/0
ip tcp header-compression
dialer in-band
dialer idle-timeout 0
async mode interactive
keepalive 20 3
group-range 1/00 1/59
hold-queue 75 in
!
ip local pool dialin 192.168.100.1 192.168.100.10
ip classless
ip route 0.0.0.0 0.0.0.0 [ip on the f0/0]
no ip http server
!
!
!
!
dialer dnis group DNIS210
number 210
!
!
radius-server authorization permit missing Service-Type
call rsvp-sync
!
voice-port 3/0:D
!
!
mgcp profile default
!
dial-peer cor custom
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
session-timeout 30
timeout login response 20
transport input telnet
line vty 5 16
session-timeout 30
timeout login response 20
transport input telnet
line 1/00 1/59
no flush-at-activation
no modem callout
modem Dialin
modem autoconfigure type nextport
transport input all
autoselect during-login
autoselect ppp
!
scheduler allocate 10000 400
end
My debugs:
sh deb
General OS:
AAA Authentication debugging is on
AAA Authorization debugging is on
Resource Pool:
resource-pool general debugging is on
PPP:
PPP authentication debugging is on
PPP protocol negotiation debugging is on
template:
Template debugging is on
Dialing in with ISDN:
*Oct 15 13:15:37.423: AAA/BIND(00000009): Bind i/f Serial3/0:4
*Oct 15 13:15:37.423: AAA/ACCT/DS0: channel=4, ds1=0, t3=0, slot=3,
ds0=50331652
*Oct 15 13:15:37.423: AAA/ACCT/DS0: channel=4, ds1=0, t3=0, slot=3,
ds0=50331652
*Oct 15 13:15:37.423: RM0/0 state:RM_IDLE event:DIALER_INCALL/0 DS0:0:3:0:4
*Oct 15 13:15:37.423: RM DNIS: 210 CLID: 4121228 Call-Type: digital
*Oct 15 13:15:37.423: RM1/0 state:RM_DNIS_AUTHOR event:RM_DNIS_RPM_REQUEST/0
DS0:0:3:0:4
*Oct 15 13:15:37.423: RM:RPM event incoming call
*Oct 15 13:15:37.423: AAA: parse name=DS0:0:3:0:4 idb type=-1 tty=-1
*Oct 15 13:15:37.423: AAA/MEMORY: create_user (0x641DF48C) user='210'
ruser='NULL' ds0=0 port='DS0:0:3:0:4' rem_addr='4121228' authen_type=NONE
service=NONE priv=0 initial_task_id='0', vrf= (id=0)
*Oct 15 13:15:37.427: DS0:0:3:0:4 AAA/AUTHOR/RM call-accept(3817083048):
Port='DS0:0:3:0:4' list='default' service=RM
*Oct 15 13:15:37.427: AAA/AUTHOR/RM call-accept: DS0:0:3:0:4(3817083048)
user='210'
*Oct 15 13:15:37.427: DS0:0:3:0:4 AAA/AUTHOR/RM call-accept(3817083048):
send AV service=resource-management
*Oct 15 13:15:37.427: DS0:0:3:0:4 AAA/AUTHOR/RM call-accept(3817083048):
send AV protocol=call-accept
*Oct 15 13:15:37.427: DS0:0:3:0:4 AAA/AUTHOR/RM call-accept(3817083048):
send AV rm-protocol-version=1.0
*Oct 15 13:15:37.427: DS0:0:3:0:4 AAA/AUTHOR/RM call-accept(3817083048):
send AV rm-nas-state=1679692128
*Oct 15 13:15:37.427: DS0:0:3:0:4 AAA/AUTHOR/RM call-accept(3817083048):
send AV rm-call-type=digital
*Oct 15 13:15:37.427: DS0:0:3:0:4 AAA/AUTHOR/RM call-accept(3817083048):
send AV rm-request-type=dial-in
*Oct 15 13:15:37.427: DS0:0:3:0:4 AAA/AUTHOR/RM call-accept(3817083048):
send AV rm-link-type=isdn
*Oct 15 13:15:37.427: DS0:0:3:0:4 AAA/AUTHOR/RM call-accept(3817083048):
found list "default"
*Oct 15 13:15:37.427: DS0:0:3:0:4 AAA/AUTHOR/RM call-accept(3817083048):
Method=LOCAL
*Oct 15 13:15:37.427: DS0:0:3:0:4 AAA/AUTHOR/RM/local (3817083048): Received
DNIS=210
*Oct 15 13:15:37.427: DS0:0:3:0:4 AAA/AUTHOR/RM/local (3817083048): Received
CLID=4121228
*Oct 15 13:15:37.427: DS0:0:3:0:4 AAA/AUTHOR/RM/local (3817083048): Received
Port=DS0:0:3:0:4
*Oct 15 13:15:37.427: DS0:0:3:0:4 AAA/AUTHOR/RM/local (3817083048): Received
AV service=resource-management
*Oct 15 13:15:37.427: DS0:0:3:0:4 AAA/AUTHOR/RM/local (3817083048): Received
AV protocol=call-accept
*Oct 15 13:15:37.427: DS0:0:3:0:4 AAA/AUTHOR/RM/local (3817083048): Received
AV rm-protocol-version=1.0
*Oct 15 13:15:37.427: DS0:0:3:0:4 AAA/AUTHOR/RM/local (3817083048): Received
AV rm-nas-state=1679692128
*Oct 15 13:15:37.427: DS0:0:3:0:4 AAA/AUTHOR/RM/local (3817083048): Received
AV rm-call-type=digital
*Oct 15 13:15:37.427: DS0:0:3:0:4 AAA/AUTHOR/RM/local (3817083048): Received
AV rm-request-type=dial-in
*Oct 15 13:15:37.427: DS0:0:3:0:4 AAA/AUTHOR/RM/local (3817083048): Received
AV rm-link-type=isdn
*Oct 15 13:15:37.427: RPM profile CUST1 found
*Oct 15 13:15:37.427: AAA/AUTHOR (3817083048): Post authorization status =
PASS_REPL
*Oct 15 13:15:37.427: DS0:0:3:0:4 AAA/AUTHOR/RM/call-accept (3817083048):
Processing AV service=resource-management
*Oct 15 13:15:37.427: DS0:0:3:0:4 AAA/AUTHOR/RM/call-accept (3817083048):
Processing AV protocol=call-accept
*Oct 15 13:15:37.427: DS0:0:3:0:4 AAA/AUTHOR/RM/call-accept (3817083048):
Processing AV rm-protocol-version=1.0
*Oct 15 13:15:37.427: DS0:0:3:0:4 AAA/AUTHOR/RM/call-accept (3817083048):
Processing AV server-name*local
*Oct 15 13:15:37.427: DS0:0:3:0:4 AAA/AUTHOR/RM/call-accept (3817083048):
Processing AV rm-response-code=ack
*Oct 15 13:15:37.427: DS0:0:3:0:4 AAA/AUTHOR/RM/call-accept (3817083048):
Processing AV rm-call-handle=4
*Oct 15 13:15:37.427: DS0:0:3:0:4 AAA/AUTHOR/RM/call-accept (3817083048):
Processing AV rm-call-count=1
*Oct 15 13:15:37.427: DS0:0:3:0:4 AAA/AUTHOR/RM/call-accept (3817083048):
Processing AV rm-cp-name=CUST1
*Oct 15 13:15:37.427: DS0:0:3:0:4 AAA/AUTHOR/RM/call-accept (3817083048):
Processing AV rm-template-name=ISDN+MODEM
*Oct 15 13:15:37.427: DS0:0:3:0:4 AAA/AUTHOR/RM/call-accept (3817083048):
Processing AV rm-rg-name#0=ISDN
*Oct 15 13:15:37.427: DS0:0:3:0:4 AAA/AUTHOR/RM/call-accept (3817083048):
Processing AV rm-call-treatment=busy
*Oct 15 13:15:37.427: DS0:0:3:0:4 AAA/AUTHOR/RM/call-accept (3817083048):
Processing AV rm-call-type=digital
*Oct 15 13:15:37.427: DS0:0:3:0:4 AAA/AUTHOR/RM/call-accept (3817083048):
Processing AV rm-nas-state=1679692128
*Oct 15 13:15:37.427: RM2/0 state:RM_RPM_RES_AUTHOR
event:RM_RPM_RES_AUTHOR_SUCCESS/0 DS0:0:3:0:4
*Oct 15 13:15:37.427: Allocated resource from res_group ISDN
*Oct 15 13:15:37.431: RM:RPM profile "CUST1", allocated resource "ISDN"
successfully
*Oct 15 13:15:37.431: DS0:0:3:0:4 RM/AAA/ACCT: Ignore start record for
locally authorized call
*Oct 15 13:15:37.431: RM3/0 state:RM_RPM_RES_ALLOCATING
event:RM_RPM_RES_ALLOC_SUCCESS/0 DS0:0:0:0:4
*Oct 15 13:15:37.431: Se3/0:4: Binding template ISDN+MODEM
At this point wait for a while......
*Oct 15 13:16:14.763: AAA/ACCT/DS0: channel=4, ds1=0, t3=0, slot=3,
ds0=50331652
*Oct 15 13:16:14.763: RM0/0 state:RM_RPM_RES_ALLOCATED event:DIALER_DISCON/0
DS0:0:0:0:4
*Oct 15 13:16:14.763: RM:RPM event call drop
*Oct 15 13:16:14.763: Deallocated resource from res_group ISDN
*Oct 15 13:16:14.763: Se3/0:4 AAA/ACCT/RM: doing resource-freed (local)
CUST1 (nothing to do)
*Oct 15 13:16:14.763: AAA/MEMORY: free_user (0x641DF48C) user='210'
ruser='NULL' port='DS0:0:3:0:4' rem_addr='4121228' authen_type=NONE
service=NONE priv=0 vrf= (id=0)
*Oct 15 13:16:14.763: RM1/0 state:RM_RPM_DISCONNECTING
event:RM_RPM_DISC_ACK/0 DS0:0:0:0:4
Dial in with modem:
C5350-test#
*Oct 15 13:33:02.343: AAA/BIND(0000000E): Bind i/f Serial3/0:9
*Oct 15 13:33:02.347: AAA/ACCT/DS0: channel=9, ds1=0, t3=0, slot=3,
ds0=50331657
*Oct 15 13:33:02.347: AAA/ACCT/DS0: channel=9, ds1=0, t3=0, slot=3,
ds0=50331657
*Oct 15 13:33:02.347: RM0/0 state:RM_IDLE event:DIALER_INCALL/0 DS0:0:3:0:9
*Oct 15 13:33:02.347: RM DNIS: 210 CLID: 8882083 Call-Type: speech
*Oct 15 13:33:02.347: RM1/0 state:RM_DNIS_AUTHOR event:RM_DNIS_RPM_REQUEST/0
DS0:0:3:0:9
*Oct 15 13:33:02.347: RM:RPM event incoming call
*Oct 15 13:33:02.347: AAA: parse name=DS0:0:3:0:9 idb type=-1 tty=-1
*Oct 15 13:33:02.347: AAA/MEMORY: create_user (0x641DF8C0) user='210'
ruser='NULL' ds0=0 port='DS0:0:3:0:9' rem_addr='8882083' authen_type=NONE
service=NONE priv=0 initial_task_id='0', vrf= (id=0)
*Oct 15 13:33:02.347: DS0:0:3:0:9 AAA/AUTHOR/RM call-accept(2691971174):
Port='DS0:0:3:0:9' list='default' service=RM
*Oct 15 13:33:02.347: AAA/AUTHOR/RM call-accept: DS0:0:3:0:9(2691971174)
user='210'
*Oct 15 13:33:02.347: DS0:0:3:0:9 AAA/AUTHOR/RM call-accept(2691971174):
send AV service=resource-management
*Oct 15 13:33:02.347: DS0:0:3:0:9 AAA/AUTHOR/RM call-accept(2691971174):
send AV protocol=call-accept
*Oct 15 13:33:02.347: DS0:0:3:0:9 AAA/AUTHOR/RM call-accept(2691971174):
send AV rm-protocol-version=1.0
*Oct 15 13:33:02.347: DS0:0:3:0:9 AAA/AUTHOR/RM call-accept(2691971174):
send AV rm-nas-state=1679604432
*Oct 15 13:33:02.347: DS0:0:3:0:9 AAA/AUTHOR/RM call-accept(2691971174):
send AV rm-call-type=speech
*Oct 15 13:33:02.347: DS0:0:3:0:9 AAA/AUTHOR/RM call-accept(2691971174):
send AV rm-request-type=dial-in
*Oct 15 13:33:02.347: DS0:0:3:0:9 AAA/AUTHOR/RM call-accept(2691971174):
send AV rm-link-type=isdn
*Oct 15 13:33:02.347: DS0:0:3:0:9 AAA/AUTHOR/RM call-accept(2691971174):
found list "default"
*Oct 15 13:33:02.347: DS0:0:3:0:9 AAA/AUTHOR/RM call-accept(2691971174):
Method=LOCAL
*Oct 15 13:33:02.347: DS0:0:3:0:9 AAA/AUTHOR/RM/local (2691971174): Received
DNIS=210
*Oct 15 13:33:02.347: DS0:0:3:0:9 AAA/AUTHOR/RM/local (2691971174): Received
CLID=8882083
*Oct 15 13:33:02.347: DS0:0:3:0:9 AAA/AUTHOR/RM/local (2691971174): Received
Port=DS0:0:3:0:9
*Oct 15 13:33:02.347: DS0:0:3:0:9 AAA/AUTHOR/RM/local (2691971174): Received
AV service=resource-management
*Oct 15 13:33:02.347: DS0:0:3:0:9 AAA/AUTHOR/RM/local (2691971174): Received
AV protocol=call-accept
*Oct 15 13:33:02.347: DS0:0:3:0:9 AAA/AUTHOR/RM/local (2691971174): Received
AV rm-protocol-version=1.0
*Oct 15 13:33:02.347: DS0:0:3:0:9 AAA/AUTHOR/RM/local (2691971174): Received
AV rm-nas-state=1679604432
*Oct 15 13:33:02.347: DS0:0:3:0:9 AAA/AUTHOR/RM/local (2691971174): Received
AV rm-call-type=speech
*Oct 15 13:33:02.347: DS0:0:3:0:9 AAA/AUTHOR/RM/local (2691971174): Received
AV rm-request-type=dial-in
*Oct 15 13:33:02.347: DS0:0:3:0:9 AAA/AUTHOR/RM/local (2691971174): Received
AV rm-link-type=isdn
*Oct 15 13:33:02.347: RPM profile CUST1 found
*Oct 15 13:33:02.347: AAA/AUTHOR (2691971174): Post authorization status =
PASS_REPL
*Oct 15 13:33:02.351: DS0:0:3:0:9 AAA/AUTHOR/RM/call-accept (2691971174):
Processing AV service=resource-management
*Oct 15 13:33:02.351: DS0:0:3:0:9 AAA/AUTHOR/RM/call-accept (2691971174):
Processing AV protocol=call-accept
*Oct 15 13:33:02.351: DS0:0:3:0:9 AAA/AUTHOR/RM/call-accept (2691971174):
Processing AV rm-protocol-version=1.0
*Oct 15 13:33:02.351: DS0:0:3:0:9 AAA/AUTHOR/RM/call-accept (2691971174):
Processing AV server-name*local
*Oct 15 13:33:02.351: DS0:0:3:0:9 AAA/AUTHOR/RM/call-accept (2691971174):
Processing AV rm-response-code=ack
*Oct 15 13:33:02.351: DS0:0:3:0:9 AAA/AUTHOR/RM/call-accept (2691971174):
Processing AV rm-call-handle=9
*Oct 15 13:33:02.351: DS0:0:3:0:9 AAA/AUTHOR/RM/call-accept (2691971174):
Processing AV rm-call-count=1
*Oct 15 13:33:02.351: DS0:0:3:0:9 AAA/AUTHOR/RM/call-accept (2691971174):
Processing AV rm-cp-name=CUST1
*Oct 15 13:33:02.351: DS0:0:3:0:9 AAA/AUTHOR/RM/call-accept (2691971174):
Processing AV rm-template-name=ISDN+MODEM
*Oct 15 13:33:02.351: DS0:0:3:0:9 AAA/AUTHOR/RM/call-accept (2691971174):
Processing AV rm-rg-name#0=NEXTPORT
*Oct 15 13:33:02.351: DS0:0:3:0:9 AAA/AUTHOR/RM/call-accept (2691971174):
Processing AV rm-call-treatment=busy
*Oct 15 13:33:02.351: DS0:0:3:0:9 AAA/AUTHOR/RM/call-accept (2691971174):
Processing AV rm-call-type=speech
*Oct 15 13:33:02.351: DS0:0:3:0:9 AAA/AUTHOR/RM/call-accept (2691971174):
Processing AV rm-nas-state=1679604432
*Oct 15 13:33:02.351: RM2/0 state:RM_RPM_RES_AUTHOR
event:RM_RPM_RES_AUTHOR_SUCCESS/0 DS0:0:3:0:9
*Oct 15 13:33:02.351: Allocated resource from res_group NEXTPORT
*Oct 15 13:33:02.351: RM:RPM profile "CUST1", allocated resource "NEXTPORT"
successfully
*Oct 15 13:33:02.351: DS0:0:3:0:9 RM/AAA/ACCT: Ignore start record for
locally authorized call
*Oct 15 13:33:02.351: RM3/0 state:RM_RPM_RES_ALLOCATING
event:RM_RPM_RES_ALLOC_SUCCESS/0 DS0:0:1:2:9
*Oct 15 13:33:02.351: RM:RPM:Alloc Success:218:2004:6339CAB0
*Oct 15 13:33:02.351: As1/02: Binding template ISDN+MODEM
*Oct 15 13:33:27.619: AAA/AUTHEN/LOGIN (0000000E): Pick method list
'default'
*Oct 15 13:33:27.623: RM/AAA: modem connect speeds for tty 218 is tx: 38667,
rx: 28800
*Oct 15 13:33:28.211: As1/02 PPP: Phase is DOWN, Setup
*Oct 15 13:33:28.215: As1/02 PPP: Using dialer call direction
*Oct 15 13:33:28.215: As1/02 PPP: Treating connection as a callin
*Oct 15 13:33:28.215: As1/02 PPP: Phase is ESTABLISHING, Passive Open
*Oct 15 13:33:28.215: As1/02 LCP: State is Listen
*Oct 15 13:33:30.207: As1/02 LCP: TIMEout: State Listen
*Oct 15 13:33:30.207: As1/02 PPP: Authorization required
*Oct 15 13:33:30.207: As1/02 AAA/AUTHOR/LCP: Authorization succeeds
trivially
*Oct 15 13:33:30.207: As1/02 LCP: O CONFREQ [Listen] id 1 len 41
*Oct 15 13:33:30.207: As1/02 LCP: ACCM 0x000A0000 (0x0206000A0000)
*Oct 15 13:33:30.207: As1/02 LCP: AuthProto PAP (0x0304C023)
*Oct 15 13:33:30.207: As1/02 LCP: MagicNumber 0x0471CC7D (0x05060471CC7D)
*Oct 15 13:33:30.207: As1/02 LCP: PFC (0x0702)
*Oct 15 13:33:30.207: As1/02 LCP: ACFC (0x0802)
*Oct 15 13:33:30.207: As1/02 LCP: MRRU 1524 (0x110405F4)
*Oct 15 13:33:30.207: As1/02 LCP: EndpointDisc 1 C5350-test
(0x130D0143353335302D74657374)
*Oct 15 13:33:30.207: As1/02 LCP: I CONFREQ [REQsent] id 1 len 23
*Oct 15 13:33:30.207: As1/02 LCP: ACCM 0x00000000 (0x020600000000)
*Oct 15 13:33:30.207: As1/02 LCP: MagicNumber 0x550861EC (0x0506550861EC)
*Oct 15 13:33:30.207: As1/02 LCP: PFC (0x0702)
*Oct 15 13:33:30.207: As1/02 LCP: ACFC (0x0802)
*Oct 15 13:33:30.207: As1/02 LCP: Callback 6 (0x0D0306)
*Oct 15 13:33:30.207: As1/02 LCP: O CONFREJ [REQsent] id 1 len 7
*Oct 15 13:33:30.207: As1/02 LCP: Callback 6 (0x0D0306)
*Oct 15 13:33:30.315: As1/02 LCP: I CONFREJ [REQsent] id 1 len 21
*Oct 15 13:33:30.315: As1/02 LCP: MRRU 1524 (0x110405F4)
*Oct 15 13:33:30.315: As1/02 LCP: EndpointDisc 1 C5350-test
(0x130D0143353335302D74657374)
*Oct 15 13:33:30.315: As1/02 LCP: O CONFREQ [REQsent] id 2 len 24
*Oct 15 13:33:30.315: As1/02 LCP: ACCM 0x000A0000 (0x0206000A0000)
*Oct 15 13:33:30.315: As1/02 LCP: AuthProto PAP (0x0304C023)
*Oct 15 13:33:30.315: As1/02 LCP: MagicNumber 0x0471CC7D (0x05060471CC7D)
*Oct 15 13:33:30.319: As1/02 LCP: PFC (0x0702)
*Oct 15 13:33:30.319: As1/02 LCP: ACFC (0x0802)
*Oct 15 13:33:30.415: As1/02 LCP: I CONFACK [REQsent] id 2 len 24
*Oct 15 13:33:30.415: As1/02 LCP: ACCM 0x000A0000 (0x0206000A0000)
*Oct 15 13:33:30.415: As1/02 LCP: AuthProto PAP (0x0304C023)
*Oct 15 13:33:30.415: As1/02 LCP: MagicNumber 0x0471CC7D (0x05060471CC7D)
*Oct 15 13:33:30.415: As1/02 LCP: PFC (0x0702)
*Oct 15 13:33:30.415: As1/02 LCP: ACFC (0x0802)
*Oct 15 13:33:32.319: As1/02 LCP: TIMEout: State ACKrcvd
*Oct 15 13:33:32.319: As1/02 LCP: O CONFREQ [ACKrcvd] id 3 len 24
*Oct 15 13:33:32.319: As1/02 LCP: ACCM 0x000A0000 (0x0206000A0000)
*Oct 15 13:33:32.319: As1/02 LCP: AuthProto PAP (0x0304C023)
*Oct 15 13:33:32.319: As1/02 LCP: MagicNumber 0x0471CC7D (0x05060471CC7D)
*Oct 15 13:33:32.319: As1/02 LCP: PFC (0x0702)
*Oct 15 13:33:32.319: As1/02 LCP: ACFC (0x0802)
*Oct 15 13:33:32.407: As1/02 LCP: I CONFACK [REQsent] id 3 len 24
*Oct 15 13:33:32.407: As1/02 LCP: ACCM 0x000A0000 (0x0206000A0000)
*Oct 15 13:33:32.407: As1/02 LCP: AuthProto PAP (0x0304C023)
*Oct 15 13:33:32.407: As1/02 LCP: MagicNumber 0x0471CC7D (0x05060471CC7D)
*Oct 15 13:33:32.407: As1/02 LCP: PFC (0x0702)
*Oct 15 13:33:32.407: As1/02 LCP: ACFC (0x0802)
*Oct 15 13:33:34.335: As1/02 LCP: TIMEout: State ACKrcvd
*Oct 15 13:33:34.335: As1/02 LCP: O CONFREQ [ACKrcvd] id 4 len 24
*Oct 15 13:33:34.335: As1/02 LCP: ACCM 0x000A0000 (0x0206000A0000)
*Oct 15 13:33:34.335: As1/02 LCP: AuthProto PAP (0x0304C023)
*Oct 15 13:33:34.335: As1/02 LCP: MagicNumber 0x0471CC7D (0x05060471CC7D)
*Oct 15 13:33:34.335: As1/02 LCP: PFC (0x0702)
*Oct 15 13:33:34.335: As1/02 LCP: ACFC (0x0802)
*Oct 15 13:33:36.351: As1/02 LCP: TIMEout: State REQsent
*Oct 15 13:33:36.351: As1/02 LCP: O CONFREQ [REQsent] id 5 len 24
*Oct 15 13:33:36.351: As1/02 LCP: ACCM 0x000A0000 (0x0206000A0000)
*Oct 15 13:33:36.351: As1/02 LCP: AuthProto PAP (0x0304C023)
*Oct 15 13:33:36.351: As1/02 LCP: MagicNumber 0x0471CC7D (0x05060471CC7D)
*Oct 15 13:33:36.351: As1/02 LCP: PFC (0x0702)
*Oct 15 13:33:36.351: As1/02 LCP: ACFC (0x0802)
*Oct 15 13:33:36.959: As1/02 LCP: I CONFREQ [REQsent] id 2 len 23
*Oct 15 13:33:36.959: As1/02 LCP: ACCM 0x00000000 (0x020600000000)
*Oct 15 13:33:36.959: As1/02 LCP: MagicNumber 0x550861EC (0x0506550861EC)
*Oct 15 13:33:36.959: As1/02 LCP: PFC (0x0702)
*Oct 15 13:33:36.959: As1/02 LCP: ACFC (0x0802)
*Oct 15 13:33:36.959: As1/02 LCP: Callback 6 (0x0D0306)
*Oct 15 13:33:36.959: As1/02 LCP: O CONFREJ [REQsent] id 2 len 7
*Oct 15 13:33:36.959: As1/02 LCP: Callback 6 (0x0D0306)
*Oct 15 13:33:36.971: As1/02 LCP: I CONFACK [REQsent] id 4 len 24
*Oct 15 13:33:36.971: As1/02 LCP: ACCM 0x000A0000 (0x0206000A0000)
*Oct 15 13:33:36.971: As1/02 LCP: AuthProto PAP (0x0304C023)
*Oct 15 13:33:36.971: As1/02 LCP: MagicNumber 0x0471CC7D (0x05060471CC7D)
*Oct 15 13:33:36.971: As1/02 LCP: PFC (0x0702)
*Oct 15 13:33:36.971: As1/02 LCP: ACFC (0x0802)
*Oct 15 13:33:36.971: As1/02 LCP: ID 4 didn't match 5, discarding packet
*Oct 15 13:33:36.979: As1/02 LCP: I CONFACK [REQsent] id 5 len 24
*Oct 15 13:33:36.979: As1/02 LCP: ACCM 0x000A0000 (0x0206000A0000)
*Oct 15 13:33:36.979: As1/02 LCP: AuthProto PAP (0x0304C023)
*Oct 15 13:33:36.979: As1/02 LCP: MagicNumber 0x0471CC7D (0x05060471CC7D)
*Oct 15 13:33:36.979: As1/02 LCP: PFC (0x0702)
*Oct 15 13:33:36.979: As1/02 LCP: ACFC (0x0802)
*Oct 15 13:33:37.047: As1/02 LCP: I CONFREQ [ACKrcvd] id 3 len 20
*Oct 15 13:33:37.047: As1/02 LCP: ACCM 0x00000000 (0x020600000000)
*Oct 15 13:33:37.047: As1/02 LCP: MagicNumber 0x550861EC (0x0506550861EC)
*Oct 15 13:33:37.047: As1/02 LCP: PFC (0x0702)
*Oct 15 13:33:37.047: As1/02 LCP: ACFC (0x0802)
*Oct 15 13:33:37.047: As1/02 LCP: O CONFACK [ACKrcvd] id 3 len 20
*Oct 15 13:33:37.047: As1/02 LCP: ACCM 0x00000000 (0x020600000000)
*Oct 15 13:33:37.047: As1/02 LCP: MagicNumber 0x550861EC (0x0506550861EC)
*Oct 15 13:33:37.047: As1/02 LCP: PFC (0x0702)
*Oct 15 13:33:37.047: As1/02 LCP: ACFC (0x0802)
*Oct 15 13:33:37.051: As1/02 LCP: State is Open
*Oct 15 13:33:37.051: As1/02 PPP: Phase is AUTHENTICATING, by this end
*Oct 15 13:33:37.159: As1/02 LCP: I IDENTIFY [Open] id 4 len 18 magic
0x550861EC MSRASV5.10
*Oct 15 13:33:37.159: As1/02 LCP: I IDENTIFY [Open] id 5 len 22 magic
0x550861EC MSRAS-0-SZICSU
*Oct 15 13:33:37.159: As1/02 PAP: I AUTH-REQ id 8 len 23 from "tesztdial"
*Oct 15 13:33:37.159: As1/02 PAP: Authenticating peer tesztdial
*Oct 15 13:33:37.159: As1/02 PPP: Phase is FORWARDING, Attempting Forward
*Oct 15 13:33:37.159: As1/02 PPP: Phase is AUTHENTICATING, Unauthenticated
User
*Oct 15 13:33:37.159: AAA/AUTHEN/PPP (0000000E): Pick method list 'dialin'
*Oct 15 13:33:37.159: As1/02 PPP: Sent PAP LOGIN Request
*Oct 15 13:33:37.159: As1/02 PPP: Received LOGIN Response PASS
*Oct 15 13:33:37.159: As1/02 PPP: Phase is FORWARDING, Attempting Forward
*Oct 15 13:33:37.159: As1/02 PPP: Phase is AUTHENTICATING, Authenticated
User
*Oct 15 13:33:37.159: AAA/AUTHOR (0xE): Pick method list 'dialin'
*Oct 15 13:33:37.159: As1/02 PPP: Sent LCP AUTHOR Request
*Oct 15 13:33:37.159: As1/02 LCP: Received AAA AUTHOR Response PASS
*Oct 15 13:33:37.163: As1/02 PPP/AAA: Check Attr: Framed-Protocol
*Oct 15 13:33:37.163: As1/02 PPP/AAA: Check Attr: username
*Oct 15 13:33:37.163: As1/02 AAA/AUTHOR/FSM: We can start LCP
*Oct 15 13:33:37.163: As1/02 AAA/AUTHOR/LCP: Process Author
*Oct 15 13:33:37.163: As1/02 PAP: O AUTH-ACK id 8 len 5
*Oct 15 13:33:37.163: As1/02 PPP: Phase is UP
*Oct 15 13:33:37.163: As1/02 AAA/AUTHOR/IPCP: FSM authorization not needed
*Oct 15 13:33:37.163: As1/02 AAA/AUTHOR/FSM: We can start IPCP
*Oct 15 13:33:37.163: As1/02 IPCP: O CONFREQ [Closed] id 1 len 16
*Oct 15 13:33:37.163: As1/02 IPCP: CompressType VJ 15 slots
(0x0206002D0F00)
*Oct 15 13:33:37.163: As1/02 IPCP: Address [ip on the f0/0]
(0x03063E70C0A4)
*Oct 15 13:33:37.163: As1/02 PPP: Process pending packets
*Oct 15 13:33:38.135: As1/02 IPCP: I CONFREQ [REQsent] id 6 len 40
*Oct 15 13:33:38.135: As1/02 IPCP: CompressType VJ 15 slots
CompressSlotID (0x0206002D0F01)
*Oct 15 13:33:38.135: As1/02 IPCP: Address 0.0.0.0 (0x030600000000)
*Oct 15 13:33:38.135: As1/02 IPCP: PrimaryDNS 0.0.0.0 (0x810600000000)
*Oct 15 13:33:38.135: As1/02 IPCP: PrimaryWINS 0.0.0.0 (0x820600000000)
*Oct 15 13:33:38.135: As1/02 IPCP: SecondaryDNS 0.0.0.0 (0x830600000000)
*Oct 15 13:33:38.135: As1/02 IPCP: SecondaryWINS 0.0.0.0 (0x840600000000)
*Oct 15 13:33:38.135: As1/02 AAA/AUTHOR/IPCP: Start. Her address 0.0.0.0,
we want 0.0.0.0
*Oct 15 13:33:38.135: As1/02 AAA/AUTHOR/IPCP: Authorization succeeded
*Oct 15 13:33:38.135: As1/02 AAA/AUTHOR/IPCP: Done. Her address 0.0.0.0, we
want 0.0.0.0
*Oct 15 13:33:38.135: As1/02 IPCP: Pool returned 192.168.100.1
*Oct 15 13:33:38.135: As1/02 AAA/AUTHOR/IPCP: no author-info for primary dns
*Oct 15 13:33:38.135: As1/02 AAA/AUTHOR/IPCP: no author-info for primary
wins
*Oct 15 13:33:38.135: As1/02 AAA/AUTHOR/IPCP: no author-info for seconday
dns
*Oct 15 13:33:38.135: As1/02 AAA/AUTHOR/IPCP: no author-info for seconday
wins
*Oct 15 13:33:38.135: As1/02 IPCP: O CONFREJ [REQsent] id 6 len 16
*Oct 15 13:33:38.135: As1/02 IPCP: PrimaryWINS 0.0.0.0 (0x820600000000)
*Oct 15 13:33:38.135: As1/02 IPCP: SecondaryWINS 0.0.0.0 (0x840600000000)
*Oct 15 13:33:38.135: As1/02 IPCP: I CONFACK [REQsent] id 1 len 16
*Oct 15 13:33:38.135: As1/02 IPCP: CompressType VJ 15 slots
(0x0206002D0F00)
*Oct 15 13:33:38.135: As1/02 IPCP: Address [ip on the f0/0]
(0x03063E70C0A4)
*Oct 15 13:33:38.223: As1/02 IPCP: I CONFREQ [ACKrcvd] id 7 len 28
*Oct 15 13:33:38.223: As1/02 IPCP: CompressType VJ 15 slots
CompressSlotID (0x0206002D0F01)
*Oct 15 13:33:38.223: As1/02 IPCP: Address 0.0.0.0 (0x030600000000)
*Oct 15 13:33:38.223: As1/02 IPCP: PrimaryDNS 0.0.0.0 (0x810600000000)
*Oct 15 13:33:38.223: As1/02 IPCP: SecondaryDNS 0.0.0.0 (0x830600000000)
*Oct 15 13:33:38.223: As1/02 AAA/AUTHOR/IPCP: no author-info for primary dns
*Oct 15 13:33:38.223: As1/02 AAA/AUTHOR/IPCP: no author-info for seconday
dns
*Oct 15 13:33:38.223: As1/02 IPCP: O CONFNAK [ACKrcvd] id 7 len 22
*Oct 15 13:33:38.223: As1/02 IPCP: Address 192.168.100.1 (0x0306C0A86401)
*Oct 15 13:33:38.223: As1/02 IPCP: PrimaryDNS 62.112.192.4
(0x81063E70C004)
*Oct 15 13:33:38.223: As1/02 IPCP: SecondaryDNS 62.112.192.3
(0x83063E70C003)
*Oct 15 13:33:38.391: As1/02 IPCP: I CONFREQ [ACKrcvd] id 8 len 28
*Oct 15 13:33:38.391: As1/02 IPCP: CompressType VJ 15 slots
CompressSlotID (0x0206002D0F01)
*Oct 15 13:33:38.391: As1/02 IPCP: Address 192.168.100.1 (0x0306C0A86401)
*Oct 15 13:33:38.391: As1/02 IPCP: PrimaryDNS 62.112.192.4
(0x81063E70C004)
*Oct 15 13:33:38.391: As1/02 IPCP: SecondaryDNS 62.112.192.3
(0x83063E70C003)
*Oct 15 13:33:38.391: As1/02 AAA/AUTHOR/IPCP: no author-info for primary dns
*Oct 15 13:33:38.391: As1/02 AAA/AUTHOR/IPCP: no author-info for seconday
dns
*Oct 15 13:33:38.391: As1/02 IPCP: O CONFACK [ACKrcvd] id 8 len 28
*Oct 15 13:33:38.391: As1/02 IPCP: CompressType VJ 15 slots
CompressSlotID (0x0206002D0F01)
*Oct 15 13:33:38.391: As1/02 IPCP: Address 192.168.100.1 (0x0306C0A86401)
*Oct 15 13:33:38.391: As1/02 IPCP: PrimaryDNS 62.112.192.4
(0x81063E70C004)
*Oct 15 13:33:38.391: As1/02 IPCP: SecondaryDNS 62.112.192.3
(0x83063E70C003)
*Oct 15 13:33:38.391: As1/02 IPCP: State is Open
*Oct 15 13:33:38.391: As1/02 IPCP: Install route to 192.168.100.1
Dialing in Succesfull
Disconnecting...............................
*Oct 15 13:33:38.391: As1/02 IPCP: Add link info for cef entry 192.168.100.1
*Oct 15 13:34:08.591: As1/02 LCP: I TERMREQ [Open] id 9 len 16
(0x550861EC003CCD7400000000)
*Oct 15 13:34:08.591: As1/02 LCP: O TERMACK [Open] id 9 len 4
*Oct 15 13:34:08.591: As1/02 PPP: Sending Acct Event[Down] id[E]
*Oct 15 13:34:08.591: As1/02 IPCP: Remove link info for cef entry
192.168.100.1
*Oct 15 13:34:08.591: As1/02 IPCP: State is Closed
*Oct 15 13:34:08.591: As1/02 PPP: Phase is TERMINATING
*Oct 15 13:34:08.591: As1/02 IPCP: Remove route to 192.168.100.1
*Oct 15 13:34:09.359: AAA/ACCT/DS0: channel=9, ds1=0, t3=0, slot=3,
ds0=50331657
*Oct 15 13:34:09.359: RM0/0 state:RM_RPM_RES_ALLOCATED event:DIALER_DISCON/0
DS0:0:1:2:9
*Oct 15 13:34:09.359: RM:RPM event call drop
*Oct 15 13:34:09.359: rpa_dealloc_res:Deallocate resource from
res_group=NEXTPORT
*Oct 15 13:34:09.359: As1/02 AAA/ACCT/RM: doing resource-freed (local) CUST1
(nothing to do)
*Oct 15 13:34:09.359: AAA/MEMORY: free_user (0x641DF8C0) user='210'
ruser='NULL' port='DS0:0:3:0:9' rem_addr='8882083' authen_type=NONE
service=NONE priv=0 vrf= (id=0)
*Oct 15 13:34:09.359: RM1/0 state:RM_RPM_DISCONNECTING
event:RM_RPM_DISC_ACK/0 DS0:0:1:2:9
*Oct 15 13:34:10.367: rpa_dealloc_res:Deallocate resource from
res_group=NEXTPORT
*Oct 15 13:34:10.591: As1/02 LCP: TIMEout: State TERMsent
*Oct 15 13:34:10.591: As1/02 LCP: State is Closed
*Oct 15 13:34:10.591: As1/02 PPP: Phase is DOWN
*Oct 15 13:34:10.591: As1/02 PPP: Phase is ESTABLISHING, Passive Open
*Oct 15 13:34:10.591: As1/02 LCP: State is Listen
*Oct 15 13:34:10.595: As1/02 LCP: State is Closed
*Oct 15 13:34:10.595: As1/02 PPP: Phase is DOWN
----- Original Message -----
From: "Dennis Peng" <dpeng at cisco.com>
To: "Matyas Szilard" <szilard.matyas at enternet.hu>
Cc: <cisco-nas at puck.nether.net>
Sent: Wednesday, October 15, 2003 1:23 AM
Subject: Re: [cisco-nas] virtual-Profile question
> Virtual-profile virtual-access interfaces are created *after*
> authentication. That means all LCP related (for example MRU) and
> authentication parameters, must be configured on the physical
> interface (async/group-async/ISDN). If you were to use RPM customer
> profile templates:
>
>
http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122cgcr/fdial_c/fnsprt11/dafrpm.htm
>
> the template is applied as soon as we bind to the profile (when we
> answer the call), so this would line up more with what you may be
> expecting. You may not need the flexibility/complexity of RPM though,
> so you may want want to stick with manual configuration. One thing you
> could do is put all your ISDN interfaces in one dialer rotary-group,
> then you should just need to change the authentication method list on
> the dialer interface and the group-async interface.
>
> As for why PPP works on async but not ISDN when "encap ppp" is not
> configured, you are right, this is due to the "autoselect" feature on
> async interfaces and "async mode interactive" (which basically allows
> the customer to choose what type of encapsulation they want to
> use). On ISDN interfaces, I think you could do something similar by
> configuring "autodetect encapsulation ppp".
>
> Dennis
>
> Matyas Szilard [szilard.matyas at enternet.hu] wrote:
> > Hello,
> >
> > My problem is that I would like to do that all ppp configuration
parameters
> > for a dialin user like pap or chap authentication,auth lists etc can be
get
> > from a virtual-template for all dialin user. And on Physical interfaces
like
> > group-async and serial could be only media specific parameters. This
> > configuration would be ideal for configuring because we use same auth
list
> > for all kind of dialin user (modem/ISDN) and if an auth list changes I
don't
> > have to change it on every serial and group async interfaces etc. I
thought
> > It can be done easily with virtual profile. But life was not so easy. Or
I
> > misunderstanded the Virtual Profile feature.I configured "
virtual-profile
> > virtual-template 1" and "interface virtual-template 1 " with "encap
ppp",
> > "ppp authentication pap listname", etc.....On the physical interfaces I
> > configured only the media specific components neither "encap ppp", nor
"ppp
> > authentication pap listname", etc.....
> > And also the physical interfaces is neither configured for dialer
profile
> > and nor for legacy ddr.
> > I thought it should be working. I thought that for all of the users
dial-in
> > (no matters async or sync) an interface will be cloned from the virtual
> > template and ppp starts and the auth list on the virt. template is used
for
> > authentication. But it didn't work. The NAS did wholly other thing. If
I
> > dial in the AS with modem the PPP starts on the async, but there is no
> > "encap ppp" on group async interface.
> > I think because of the autoselect ppp on the line. And then searches the
> > authentication list on group async only (there was no auth list on it)
and
> > don't be engaged in using the auth list on virt-template. But, the
cloning
> > is succesful, ios makes virt. acces interface and I dial in without
> > authentication with any kind of user/pass. If I dial with ISDN there is
even
> > no ppp on the physical serial interfaces and the PPP didn't start.
> > If someone know the solution please help.
> >
> > Thanks everyone response!
> >
> >
> >
> > szicsu
> >
> > _______________________________________________
> > cisco-nas mailing list
> > cisco-nas at puck.nether.net
> > https://puck.nether.net/mailman/listinfo/cisco-nas
>
More information about the cisco-nas
mailing list