<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif; ">
<div>You might take a look at the PPP packet negotiation at the client; based on the cisco debug, it looks as if the peer is not receiving our CONFREJ or CONFREQ. </div>
<div><br>
</div>
<div>What was the minor config change?</div>
<div><br>
</div>
<div>mark</div>
<div><br>
</div>
<span id="OLK_SRC_BODY_SECTION">
<div style="font-family:Calibri; font-size:11pt; text-align:left; color:black; BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid; BORDER-RIGHT: medium none; PADDING-TOP: 3pt">
<span style="font-weight:bold">From: </span>Joseph Mays <<a href="mailto:mays@win.net">mays@win.net</a>><br>
<span style="font-weight:bold">Date: </span>Wednesday, December 12, 2012 11:11 PM<br>
<span style="font-weight:bold">To: </span>"<a href="mailto:cisco-nas@puck.nether.net">cisco-nas@puck.nether.net</a>" <<a href="mailto:cisco-nas@puck.nether.net">cisco-nas@puck.nether.net</a>><br>
<span style="font-weight:bold">Subject: </span>[cisco-nas] pptp connection to 2600 with Windows VPN failing.<br>
</div>
<div><br>
</div>
<div>
<meta name="GENERATOR" content="MSHTML 8.00.6001.19328">
<style></style>
<div>
<div><font size="2" face="Arial">Trying to make a vpdn setup work from a windows vpn client to a cisco 2600. I had this working for a while, but then after one minor config change by someone else it stopped working. That change shouldn't have broken anything,
but I backed it out nonetheless and the connection is still not working again.</font></div>
<div><font size="2" face="Arial"></font> </div>
<div><font size="2" face="Arial">I think it's breaking during the LCP negotiation, before authentication even occurs. Here's what I get from PPP debugging. Notice that it never gets to the authentication phase. I will attach relevant portions of the config
afterwards.</font></div>
<div><font size="2" face="Arial"></font> </div>
<div><font size="2" face="Courier New">genisis#show debug<br>
PPP:<br>
PPP detailed event debugging is on<br>
PPP authentication debugging is on<br>
PPP protocol errors debugging is on<br>
PPP protocol negotiation debugging is on</font></div>
<div><font face="Courier New"></font> </div>
<div><font size="2" face="Courier New"></font> </div>
<div><font face="Courier New"></font> </div>
<div><font size="2" face="Courier New">genisis#<br>
genisis#term mon<br>
genisis#<br>
*Mar 1 02:26:32.559: Se0/0 PPP: Outbound cdp packet dropped, CDPCP state is Listen<br>
*Mar 1 02:26:39.415: EVT: Dynamic Bind 0 0x82C3989C<br>
*Mar 1 02:26:39.415: ppp13 EVT: Cstate 4 0x00000000<br>
*Mar 1 02:26:39.415: ppp13 PPP: Using vpn set call direction<br>
*Mar 1 02:26:39.415: ppp13 PPP: Treating connection as a callin<br>
*Mar 1 02:26:39.415: ppp13 PPP: Phase is ESTABLISHING, Passive Open<br>
*Mar 1 02:26:39.415: ppp13 LCP: State is Listen<br>
*Mar 1 02:26:39.439: ppp13 EVT: Packet 0 0x8332C29C<br>
*Mar 1 02:26:39.439: ppp13 LCP: I CONFREQ [Listen] id 0 len 21<br>
*Mar 1 02:26:39.439: ppp13 LCP: MRU 1400 (0x01040578)<br>
*Mar 1 02:26:39.439: ppp13 LCP: MagicNumber 0x4FC8505D (0x05064FC8505D)<br>
*Mar 1 02:26:39.439: ppp13 LCP: PFC (0x0702)<br>
*Mar 1 02:26:39.439: ppp13 LCP: ACFC (0x0802)<br>
*Mar 1 02:26:39.439: ppp13 LCP: Callback 6 (0x0D0306)<br>
*Mar 1 02:26:39.439: ppp13 PPP: Authorization required<br>
*Mar 1 02:26:39.439: ppp13 LCP: O CONFREQ [Listen] id 1 len 15<br>
*Mar 1 02:26:39.443: ppp13 LCP: AuthProto MS-CHAP (0x0305C22380)<br>
*Mar 1 02:26:39.443: ppp13 LCP: MagicNumber 0x0F0968D2 (0x05060F0968D2)<br>
*Mar 1 02:26:39.443: ppp13 LCP: O CONFREJ [Listen] id 0 len 7<br>
*Mar 1 02:26:39.443: ppp13 LCP: Callback 6 (0x0D0306)<br>
*Mar 1 02:26:41.431: ppp13 EVT: Packet 0 0x830D1F30<br>
*Mar 1 02:26:41.431: ppp13 LCP: I CONFREQ [REQsent] id 1 len 21<br>
*Mar 1 02:26:41.431: ppp13 LCP: MRU 1400 (0x01040578)<br>
*Mar 1 02:26:41.431: ppp13 LCP: MagicNumber 0x4FC8505D (0x05064FC8505D)<br>
*Mar 1 02:26:41.431: ppp13 LCP: PFC (0x0702)<br>
*Mar 1 02:26:41.431: ppp13 LCP: ACFC (0x0802)<br>
*Mar 1 02:26:41.431: ppp13 LCP: Callback 6 (0x0D0306)<br>
*Mar 1 02:26:41.431: ppp13 LCP: O CONFREJ [REQsent] id 1 len 7<br>
*Mar 1 02:26:41.431: ppp13 LCP: Callback 6 (0x0D0306)<br>
*Mar 1 02:26:41.451: ppp13 LCP: TIMEout: State REQsent<br>
*Mar 1 02:26:41.451: ppp13 LCP: O CONFREQ [REQsent] id 2 len 15<br>
*Mar 1 02:26:41.451: ppp13 LCP: AuthProto MS-CHAP (0x0305C22380)<br>
*Mar 1 02:26:41.451: ppp13 LCP: MagicNumber 0x0F0968D2 (0x05060F0968D2)<br>
*Mar 1 02:26:43.467: ppp13 LCP: TIMEout: State REQsent<br>
*Mar 1 02:26:43.467: ppp13 LCP: O CONFREQ [REQsent] id 3 len 15<br>
*Mar 1 02:26:43.467: ppp13 LCP: AuthProto MS-CHAP (0x0305C22380)<br>
*Mar 1 02:26:43.467: ppp13 LCP: MagicNumber 0x0F0968D2 (0x05060F0968D2)<br>
*Mar 1 02:26:44.431: ppp13 EVT: Packet 0 0x830D2E1C<br>
*Mar 1 02:26:44.435: ppp13 LCP: I CONFREQ [REQsent] id 2 len 21<br>
*Mar 1 02:26:44.435: ppp13 LCP: MRU 1400 (0x01040578)<br>
*Mar 1 02:26:44.435: ppp13 LCP: MagicNumber 0x4FC8505D (0x05064FC8505D)<br>
*Mar 1 02:26:44.435: ppp13 LCP: PFC (0x0702)<br>
*Mar 1 02:26:44.435: ppp13 LCP: ACFC (0x0802)<br>
*Mar 1 02:26:44.435: ppp13 LCP: Callback 6 (0x0D0306)<br>
*Mar 1 02:26:44.435: ppp13 LCP: O CONFREJ [REQsent] id 2 len 7<br>
*Mar 1 02:26:44.435: ppp13 LCP: Callback 6 (0x0D0306)<br>
*Mar 1 02:26:45.483: ppp13 LCP: TIMEout: State REQsent<br>
*Mar 1 02:26:45.483: ppp13 LCP: O CONFREQ [REQsent] id 4 len 15<br>
*Mar 1 02:26:45.483: ppp13 LCP: AuthProto MS-CHAP (0x0305C22380)<br>
*Mar 1 02:26:45.483: ppp13 LCP: MagicNumber 0x0F0968D2 (0x05060F0968D2)<br>
*Mar 1 02:26:47.499: ppp13 LCP: TIMEout: State REQsent<br>
*Mar 1 02:26:47.499: ppp13 LCP: O CONFREQ [REQsent] id 5 len 15<br>
*Mar 1 02:26:47.499: ppp13 LCP: AuthProto MS-CHAP (0x0305C22380)<br>
*Mar 1 02:26:47.499: ppp13 LCP: MagicNumber 0x0F0968D2 (0x05060F0968D2)<br>
*Mar 1 02:26:48.427: ppp13 EVT: Packet 0 0x830D3118<br>
*Mar 1 02:26:48.431: ppp13 LCP: I CONFREQ [REQsent] id 3 len 21<br>
*Mar 1 02:26:48.431: ppp13 LCP: MRU 1400 (0x01040578)<br>
*Mar 1 02:26:48.431: ppp13 LCP: MagicNumber 0x4FC8505D (0x05064FC8505D)<br>
*Mar 1 02:26:48.431: ppp13 LCP: PFC (0x0702)<br>
*Mar 1 02:26:48.431: ppp13 LCP: ACFC (0x0802)<br>
*Mar 1 02:26:48.431: ppp13 LCP: Callback 6 (0x0D0306)<br>
*Mar 1 02:26:48.431: ppp13 LCP: O CONFREJ [REQsent] id 3 len 7<br>
*Mar 1 02:26:48.431: ppp13 LCP: Callback 6 (0x0D0306)<br>
*Mar 1 02:26:49.515: ppp13 LCP: TIMEout: State REQsent<br>
*Mar 1 02:26:49.515: ppp13 LCP: O CONFREQ [REQsent] id 6 len 15<br>
*Mar 1 02:26:49.515: ppp13 LCP: AuthProto MS-CHAP (0x0305C22380)<br>
*Mar 1 02:26:49.515: ppp13 LCP: MagicNumber 0x0F0968D2 (0x05060F0968D2)<br>
*Mar 1 02:26:51.531: ppp13 LCP: TIMEout: State REQsent<br>
*Mar 1 02:26:51.531: ppp13 LCP: O CONFREQ [REQsent] id 7 len 15<br>
*Mar 1 02:26:51.531: ppp13 LCP: AuthProto MS-CHAP (0x0305C22380)<br>
*Mar 1 02:26:51.531: ppp13 LCP: MagicNumber 0x0F0968D2 (0x05060F0968D2)<br>
*Mar 1 02:26:52.431: ppp13 EVT: Packet 0 0x830CFB60<br>
*Mar 1 02:26:52.431: ppp13 LCP: I CONFREQ [REQsent] id 4 len 21<br>
*Mar 1 02:26:52.431: ppp13 LCP: MRU 1400 (0x01040578)<br>
*Mar 1 02:26:52.431: ppp13 LCP: MagicNumber 0x4FC8505D (0x05064FC8505D)<br>
*Mar 1 02:26:52.435: ppp13 LCP: PFC (0x0702)<br>
*Mar 1 02:26:52.435: ppp13 LCP: ACFC (0x0802)<br>
*Mar 1 02:26:52.435: ppp13 LCP: Callback 6 (0x0D0306)<br>
*Mar 1 02:26:52.435: ppp13 LCP: O CONFREJ [REQsent] id 4 len 7<br>
*Mar 1 02:26:52.435: ppp13 LCP: Callback 6 (0x0D0306)<br>
*Mar 1 02:26:53.547: ppp13 LCP: TIMEout: State REQsent<br>
*Mar 1 02:26:53.547: ppp13 LCP: O CONFREQ [REQsent] id 8 len 15<br>
*Mar 1 02:26:53.547: ppp13 LCP: AuthProto MS-CHAP (0x0305C22380)<br>
*Mar 1 02:26:53.547: ppp13 LCP: MagicNumber 0x0F0968D2 (0x05060F0968D2)<br>
*Mar 1 02:26:55.563: ppp13 LCP: TIMEout: State REQsent<br>
*Mar 1 02:26:55.563: ppp13 LCP: O CONFREQ [REQsent] id 9 len 15<br>
*Mar 1 02:26:55.563: ppp13 LCP: AuthProto MS-CHAP (0x0305C22380)<br>
*Mar 1 02:26:55.563: ppp13 LCP: MagicNumber 0x0F0968D2 (0x05060F0968D2)<br>
*Mar 1 02:26:56.431: ppp13 EVT: Packet 0 0x830D0D48<br>
*Mar 1 02:26:56.431: ppp13 LCP: I CONFREQ [REQsent] id 5 len 21<br>
*Mar 1 02:26:56.431: ppp13 LCP: MRU 1400 (0x01040578)<br>
*Mar 1 02:26:56.431: ppp13 LCP: MagicNumber 0x4FC8505D (0x05064FC8505D)<br>
*Mar 1 02:26:56.431: ppp13 LCP: PFC (0x0702)<br>
*Mar 1 02:26:56.431: ppp13 LCP: ACFC (0x0802)<br>
*Mar 1 02:26:56.431: ppp13 LCP: Callback 6 (0x0D0306)<br>
*Mar 1 02:26:56.431: ppp13 LCP: O CONFREJ [REQsent] id 5 len 7<br>
*Mar 1 02:26:56.431: ppp13 LCP: Callback 6 (0x0D0306)<br>
*Mar 1 02:26:57.579: ppp13 LCP: TIMEout: State REQsent<br>
*Mar 1 02:26:57.579: ppp13 LCP: O CONFREQ [REQsent] id 10 len 15<br>
*Mar 1 02:26:57.579: ppp13 LCP: AuthProto MS-CHAP (0x0305C22380)<br>
*Mar 1 02:26:57.579: ppp13 LCP: MagicNumber 0x0F0968D2 (0x05060F0968D2)<br>
*Mar 1 02:26:59.595: ppp13 LCP: TIMEout: State REQsent<br>
*Mar 1 02:26:59.595: ppp13 LCP: O TERMREQ [REQsent] id 10 len 4<br>
*Mar 1 02:26:59.595: ppp13 PPP: Phase is TERMINATING<br>
*Mar 1 02:26:59.595: ppp13 LCP: State is Listen<br>
*Mar 1 02:26:59.595: ppp13 EVT: Hard Disc 0 0x00000000<br>
*Mar 1 02:26:59.595: ppp13 PPP: Sending Acct Event[Down] id[11]<br>
*Mar 1 02:26:59.595: ppp13 LCP: State is Closed<br>
*Mar 1 02:26:59.595: ppp13 PPP: Phase is DOWN<br>
*Mar 1 02:26:59.599: ppp13 EVT: Free PPP 0 0x00000000<br>
</font></div>
<div><font size="2" face="Courier New"></font> </div>
<div><font size="2" face="Courier New"><font face="Arial">==========</font></font></div>
<div><font size="2" face="Courier New"><font face="Arial"></font></font> </div>
<div><font size="2" face="Courier New">genisis#show run<br>
Building configuration...</font></div>
<div><font face="Courier New"></font> </div>
<div><font size="2" face="Courier New">Current configuration : 2791 bytes<br>
!<br>
version 12.3<br>
service timestamps debug datetime msec<br>
service timestamps log datetime msec<br>
service password-encryption<br>
!<br>
hostname genisis<br>
!<br>
boot-start-marker<br>
boot-end-marker<br>
!<br>
logging buffered 4096 informational<br>
enable secret 5 xxxxxxxxxxxxxxxxxxxxxx.<br>
enable password 7 xxxxxxxxxxxxxxxxxxxxxxxxxxx</font></div>
<div><font size="2" face="Courier New">!<br>
username johndoe password 7 xxxxxxxxxxxxxxxxxxxxxxxxxxxx</font></div>
<div><font size="2" face="Courier New">username angela password 7 xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx</font></div>
<div><font size="2" face="Courier New">username admin privilege 15 password 7 xxxxxxxxxxxxxxxxxxxxxxxxxx</font></div>
<div><font size="2" face="Courier New">no network-clock-participate slot 1<br>
no network-clock-participate wic 0<br>
aaa new-model<br>
!<br>
!<br>
aaa authentication ppp default local<br>
aaa authorization network default if-authenticated<br>
aaa session-id common<br>
ip subnet-zero<br>
no ip cef<br>
!<br>
!<br>
ip ftp username launchpad<br>
ip ftp password 7 045907071C3543480F<br>
no ip domain lookup<br>
no ip dhcp conflict logging<br>
ip dhcp excluded-address 10.10.2.150 10.10.2.255<br>
ip dhcp excluded-address 10.10.2.0 10.10.2.50<br>
!<br>
ip dhcp pool genesis-pc-dhcp-pool<br>
network 10.10.2.0 255.255.255.0<br>
dns-server 216.24.27.3<br>
default-router 10.10.2.1<br>
!<br>
no ip bootp server<br>
ip audit po max-events 100<br>
vpdn enable<br>
!<br>
vpdn-group 1<br>
! Default PPTP VPDN group<br>
accept-dialin<br>
protocol pptp<br>
virtual-template 1<br>
local name gen-vpn<br>
!<br>
no ftp-server write-enable<br>
!<br>
!<br>
!<br>
voice call carrier capacity active<br>
!<br>
voice class codec 1<br>
codec preference 1 g711ulaw<br>
codec preference 2 g729r8<br>
!<br>
!<br>
!<br>
!<br>
!<br>
!<br>
!<br>
!<br>
!<br>
!<br>
!<br>
class-map match-all dscp-ef<br>
match ip dscp ef<br>
!<br>
!<br>
policy-map queue-on-dscp<br>
description Prioritizes voice traffic first, signalling next.<br>
class dscp-ef<br>
priority percent 75<br>
class class-default<br>
fair-queue<br>
random-detect dscp-based<br>
!<br>
!<br>
!<br>
!<br>
!<br>
!<br>
interface FastEthernet0/0<br>
ip address 24.235.18.81 255.255.255.240 secondary<br>
ip address 10.10.2.1 255.255.255.0 secondary<br>
ip address 24.235.1.17 255.255.255.248<br>
no ip redirects<br>
ip nat inside<br>
service-policy output queue-on-dscp<br>
logging event subif-link-status<br>
duplex auto<br>
speed auto<br>
!<br>
interface Serial0/0<br>
description T1 to WinNET (UNE-DS1-003-004, HCFD.687777..NB)<br>
ip address 24.235.2.42 255.255.255.252<br>
no ip redirects<br>
ip nat outside<br>
service-policy output queue-on-dscp<br>
encapsulation ppp<br>
logging event subif-link-status<br>
auto qos voip trust<br>
service-module t1 timeslots 1-24<br>
!<br>
interface Virtual-Template1<br>
ip unnumbered FastEthernet0/0<br>
ip mroute-cache<br>
peer default ip address pool VPN-IN<br>
ppp encrypt mppe 40 required<br>
ppp authentication ms-chap<br>
!<br>
ip local pool VPN-IN 10.10.2.160 10.10.2.164<br>
ip nat inside source list 50 interface Serial0/0 overload<br>
no ip http server<br>
no ip http secure-server<br>
ip classless<br>
ip route 0.0.0.0 0.0.0.0 Serial0/0<br>
!<br>
!<br>
access-list 50 permit 10.10.2.0 0.0.0.255<br>
!<br>
rmon event 33333 log trap AutoQoS description "AutoQoS SNMP traps for Voice Drops" owner AutoQo<br>
!<br>
!<br>
!<br>
!<br>
!<br>
!<br>
!<br>
line con 0<br>
line aux 0<br>
line vty 0 4<br>
password 7 1415425B18072B2634<br>
!<br>
!<br>
end</font></div>
<div><font face="Courier New"></font> </div>
<div><font size="2"><font face="Courier New">genisis#<br>
</font></font></div>
<font size="2"></font></div>
</div>
</span>
</body>
</html>