<p>Hi,</p><p>We
have 2 devices 7401 (LNS1) and 7401 (LNS2) and want to offload PPP between both LNSs using L2TP. <br></p><p>When calls are received, <br></p><p>-
best case scenario: we want to offload the PPP between the two LNSs
(load Balance), which means both devices are acting as an LNS and
offload server. We have 2 active
vpdn tunnels, account1 and account2 both being handled by LNS1. We want
LNS1 to offload the account2 PPP using LT2P to LNS2.</p><p>- at least scenario: We will designate LNS2 with seed-bid offload. When calls are received by LNS1, LNS2 should win the bid.<br>
</p><p style="min-height:8pt;padding:0px"> We see the SGBP process
is working. The problem is the L2TP tunnel between LNS1 and LNS2 is not
being built and as such LNS1 stays the call master.</p><p style="min-height:8pt;padding:0px">
Has anyone got a working example?</p><p style="min-height:8pt;padding:0px"><br></p><p style="min-height:8pt;padding:0px">Below is our config:<br></p><p style="min-height:8pt;padding:0px"> </p>
<p>#sh vpdn</p><p>%No active L2F tunnels</p><p style="min-height:8pt;padding:0px"> </p><p>L2TP Tunnel and Session Information Total tunnels 2 sessions 2</p><p style="min-height:8pt;padding:0px"> </p>
<p>LocID RemID Remote Name State Remote Address Port Sessions L2TP Class/ <br> VPDN Group <br>38462 61897 bipac est aaa.aaa.aaa.aaa 1701 1 1 </p>
<p style="min-height:8pt;padding:0px"> </p><p>LocID RemID TunID Username, Intf/ State Last Chg Uniq ID <br> Vcid, Circuit <br>
13 1 38462 account1, Vi2.2 est 23:21:05 10 </p><p style="min-height:8pt;padding:0px"> </p><p>LocID RemID Remote Name State Remote Address Port Sessions L2TP Class/ <br> VPDN Group <br>
16641 13836 bipac est bbb.bbb.bbb.bbb 1701 1 1 </p><p style="min-height:8pt;padding:0px"> </p><p>LocID RemID TunID Username, Intf/ State Last Chg Uniq ID <br>
Vcid, Circuit <br>14 1 16641 account2, Vi2.3 est 15:21:49 11</p><p style="min-height:8pt;padding:0px"> </p><p><br>SGBP
isn't succeeding in load balancing L2TP yet but I have some more
debugging logs (below). I believe the most interesting lines are as
follows:</p><p style="min-height:8pt;padding:0px"> </p><p>========================================================================<br>Feb 6 16:13:53.319: uid:9 Tnl/Sn 60283/12 L2TP: Result code(2): 2: Call disconnected, refer to error msg<br>
Feb 6 16:13:53.319: Error code(4): Insufficient resources<br>Feb 6 16:13:53.319: Optional msg: No virtual-template specified<br>========================================================================</p><p style="min-height:8pt;padding:0px">
</p><p>If I've interpreted that correctly it means we don't have the LNS<->LNS offload set up correctly for <a href="mailto:account2@isp.net" rel="nofollow" target="_blank">account2@isp.net</a>. Agreed?</p>
<p style="min-height:8pt;padding:0px"> </p><p style="min-height:8pt;padding:0px"> </p><p style="min-height:8pt;padding:0px"> </p><p>Logging output:</p><p><br>Feb 6 16:13:53.111: %SGBP-7-SENT: MQ Open to 196.1.56.36 for query 9:0, bundle <a href="mailto:account1@isp.net" rel="nofollow" target="_blank">account1@isp.net</a>, bid 4999, prot l2tp, len 90<br>
Feb 6 16:13:53.211: %SGBP-7-MQ: Bid (0x11) for query 9:8, bundle <a href="mailto:account1@isp.net" rel="nofollow" target="_blank">account1@isp.net</a>, bid 5000, len 91<br>Feb 6 16:13:53.211: %SGBP-7-RCVD: MQ Bid from 196.1.56.36 for query 9:0, bundle <a href="mailto:account1@isp.net" rel="nofollow" target="_blank">account1@isp.net</a>, bid 5000, prot l2tp<br>
Feb 6 16:13:53.311: SGBP: Sending protocol 0x2 in MQ Accept<br>Feb 6 16:13:53.311: %SGBP-7-SENT: MQ Accept to 196.1.56.36 for query 9:0, bundle <a href="mailto:account1@isp.net" rel="nofollow" target="_blank">account1@isp.net</a>, bid 4999, prot l2tp, len 90<br>
Feb 6 16:13:53.311: %SGBP-7-DONE: Query #9 for bundle <a href="mailto:account1@isp.net" rel="nofollow" target="_blank">account1@isp.net</a>, count 1, master is 196.1.56.36<br>Feb 6 16:13:53.311: %SGBP-7-MQB: Bundle: <a href="mailto:account1@isp.net" rel="nofollow" target="_blank">account1@isp.net</a> State: Done OurBid: 4999<br>
Feb 6 16:13:53.311: Tnl/Sn 60283/12 L2TP: Session state change from idle to wait-for-tunnel<br>Feb 6 16:13:53.311: uid:9 Tnl/Sn 60283/12 L2TP: Create session<br>Feb 6 16:13:53.311: Tnl 60283 L2TP: SM State idle<br>Feb 6 16:13:53.311: Tnl 60283 L2TP: O SCCRQ <br>
Feb 6 16:13:53.311: Tnl 60283 L2TP: Control channel retransmit delay set to 1 seconds<br>Feb 6 16:13:53.311: Tnl 60283 L2TP: Tunnel state change from idle to wait-ctl-reply<br>Feb 6 16:13:53.311: Tnl 60283 L2TP: SM State wait-ctl-reply<br>
Feb 6 16:13:53.315: Tnl 60283 L2TP: I SCCRP from TEST<br>Feb 6 16:13:53.315: Tnl 60283 L2TP: Got a challenge from remote peer, TEST<br>Feb 6 16:13:53.315: Tnl 60283 L2TP: Got a response from remote peer, TEST<br>Feb 6 16:13:53.315: Tnl 60283 L2TP: Tunnel Authentication success<br>
Feb 6 16:13:53.315: Tnl 60283 L2TP: Tunnel state change from wait-ctl-reply to established<br>Feb 6 16:13:53.315: Tnl 60283 L2TP: O SCCCN to TEST tnlid 21254<br>Feb 6 16:13:53.315: Tnl 60283 L2TP: Control channel retransmit delay set to 1 seconds<br>
Feb 6 16:13:53.315: Tnl 60283 L2TP: SM State established<br>Feb 6 16:13:53.315: uid:9 Tnl/Sn 60283/12 L2TP: O ICRQ to TEST 21254/0<br>Feb 6 16:13:53.315: uid:9 Tnl/Sn 60283/12 L2TP: Session state change from wait-for-tunnel to wait-reply<br>
Feb 6 16:13:53.315: uid:9 Tnl/Sn 60283/12 L2TP: Session state change from wait-reply to established<br>Feb 6 16:13:53.315: uid:9 Tnl/Sn 60283/12 L2TP: VPDN session up<br>Feb 6 16:13:53.315: uid:9 Tnl/Sn 60283/12 L2TP: O ICCN to TEST 21254/3<br>
Feb 6 16:13:53.315: Tnl 60283 L2TP: Control channel retransmit delay set to 1 seconds<br>Feb 6 16:13:53.319: uid:9 Tnl/Sn 16568/11 L2TP: Session state change from wait-for-service-selection-iccn to established<br>Feb 6 16:13:53.319: uid:9 Tnl/Sn 16568/11 L2TP: VPDN session up<br>
Feb 6 16:13:53.319: uid:9 Tnl/Sn 60283/12 L2TP: Result code(2): 2: Call disconnected, refer to error msg<br>Feb 6 16:13:53.319: Error code(4): Insufficient resources<br>Feb 6 16:13:53.319: Optional msg: No virtual-template specified<br>
Feb 6 16:13:53.319: uid:9 Tnl/Sn 60283/12 L2TP: I CDN from TEST tnl 21254, cl 3<br>Feb 6 16:13:53.319: uid:9 Tnl/Sn 60283/12 L2TP: disconnect (L2X) IETF: 9/nas-error Ascend: 62/VPDN No Resources<br>Feb 6 16:13:53.319: uid:9 Tnl/Sn 60283/12 L2TP: Destroying session<br>
Feb 6 16:13:53.319: uid:9 Tnl/Sn 60283/12 L2TP: Session state change from established to idle<br>Feb 6 16:13:53.319: Tnl 60283 L2TP: Tunnel state change from established to no-sessions-left<br>Feb 6 16:13:53.319: Tnl 60283 L2TP: No more sessions in tunnel, shutdown (likely) in 15 seconds<br>
Feb 6 16:13:53.319: uid:9 Tnl/Sn 16568/11 L2TP: disconnect (AAA) IETF: 9/nas-error Ascend: 62/VPDN No Resources<br>Feb 6 16:13:53.319: uid:9 Tnl/Sn 16568/11 L2TP: O CDN to bipac 58877/1<br>Feb 6 16:13:53.319: Tnl 16568 L2TP: Control channel retransmit delay set to 1 seconds<br>
Feb 6 16:13:53.319: uid:9 Tnl/Sn 16568/11 L2TP: Destroying session<br>Feb 6 16:13:53.319: uid:9 Tnl/Sn 16568/11 L2TP: Session state change from established to idle<br>Feb 6 16:13:53.319: uid:9 Tnl/Sn 16568/11 L2TP: Accounting stop sent<br>
Feb 6 16:13:53.319: Tnl 16568 L2TP: Tunnel state change from established to no-sessions-left<br>Feb 6 16:13:53.319: Tnl 16568 L2TP: No more sessions in tunnel, shutdown (likely) in 10 seconds<br>Feb 6 16:13:54.319: Tnl 16568 L2TP: Control channel retransmit delay set to 1 seconds<br>
Feb 6 16:14:03.319: Tnl 60283 L2TP: I StopCCN from TEST tnl 21254<br>Feb 6 16:14:03.319: Tnl 60283 L2TP: Tunnel state change from no-sessions-left to shutting-down<br>Feb 6 16:14:03.319: Tnl 60283 L2TP: Shutdown tunnel<br>
Feb 6 16:14:03.319: Tnl 60283 L2TP: Tunnel state change from shutting-down to idle<br>Feb 6 16:14:03.323: Tnl 16568 L2TP: O StopCCN to bipac tnlid 58877<br>Feb 6 16:14:03.323: Tnl 16568 L2TP: Control channel retransmit delay set to 1 seconds<br>
Feb 6 16:14:03.323: Tnl 16568 L2TP: Tunnel state change from no-sessions-left to shutting-down<br>Feb 6 16:14:04.323: Tnl 16568 L2TP: Control channel retransmit delay set to 1 seconds<br>Feb 6 16:14:08.323: Tnl 16568 L2TP: Shutdown tunnel<br>
Feb 6 16:14:08.323: Tnl 16568 L2TP: Tunnel state change from shutting-down to idle</p><p>=======================================</p><p style="min-height:8pt;padding:0px"> </p><p>sh debugging <br>MLPVT group:<br>
SGBP dial-bids debugging is on<br> SGBP messages debugging is on<br> SGBP mastership queries debugging is on<br> SGBP events debugging is on<br> SGBP fsm events debugging is on<br>VPN:<br> L2X protocol events debugging is on<br>
L2X protocol errors debugging is on<br> VPDN events debugging is on<br> VPDN errors debugging is on</p><p style="min-height:8pt;padding:0px"> </p><p style="min-height:8pt;padding:0px"> </p><p>====================</p>
<p style="min-height:8pt;padding:0px"> </p><p>Current Running config</p><p style="min-height:8pt;padding:0px"> </p><p><br>Version 12.4(21a), RELEASE SOFTWARE (fc1)</p><p style="min-height:8pt;padding:0px">
</p><p>sgbp group TEST</p><p>sgbp protocol l2tp</p><p>sgbp seed-bid 5000</p><p>sgbp member 10.10.10.2</p><p>sgbp ppp-forward</p><p>sgbp source-ip 10.10.10.1</p><p>vpdn enable</p><p>vpdn multihop</p><p style="min-height:8pt;padding:0px">
</p><p>!</p><p><br>vpdn-group 1</p><p>! Default L2TP VPDN group</p><p> accept-dialin</p><p> protocol l2tp</p><p> virtual-template 1</p><p> no l2tp tunnel authentication</p><p>!<br>l2tp-class TestL2TP</p><p><br>username TEST password 7 094F471A1A0A57</p>
<p style="min-height:8pt;padding:0px"> </p><p><br>interface GigabitEthernet0/0</p><p> no ip address</p><p> duplex auto</p><p> speed auto</p><p> media-type rj45</p><p> channel-group 1</p><p>!<br>interface GigabitEthernet0/1</p>
<p> no ip address</p><p> duplex auto</p><p> speed auto</p><p> media-type rj45</p><p> channel-group 1</p><p>!</p><p>interface Virtual-Template1</p><p> ip unnumbered GigabitEthernet0/0</p><p> peer default ip address pool default</p>
<p> ppp authentication chap pap ms-chap ms-chap-v2 vpdn</p><br clear="all">Rgds<br clear="all"><br>-- <br><span></span><br>David Mommsen<br><br><span></span><br><br><br><br>