[c-nsp] Multilink PPP problem between 12.2 - 12.3
Brian Lehigh
brianl at sti.net
Wed Aug 24 14:46:51 EDT 2005
Thanks for all the responses. Andrew Yourtchenko figured it out. If I
would have actually read the debug output I would have caught this sooner.
:)
We are terminating PPPoE sessions into this router (we don't do this on any
of the others that I've configured MLPPP on) and have the following line in
my AAA config:
"aaa authentication ppp default local group radius"
So, even though I wasn't telling the Multilink interface to use
authentication I had already told the router to authenticate PPP.
Thanks for the help, all!
Brian Lehigh
Network Operations Center
Sierra Tel Internet
http://www.sti.net
-----Original Message-----
From: noc ops [mailto:aptgetd at gmail.com]
Sent: Wednesday, August 24, 2005 10:14 AM
To: Brian Lehigh
Cc: cisco-nsp at puck.nether.net
Subject: Re: [c-nsp] Multilink PPP problem between 12.2 - 12.3
Hi Brian,
I think you're missing "ppp authentication chap" on your serial ifs.
regards,
/virendra
Brian Lehigh wrote:
> I have setup multilink bundles in the past with very little effort but
this
> is driving me crazy. Basically, I build the multilink interface and
assign
> it an address, set encapsulation to PPP on each of the serial interfaces
and
> add them to the multilink group and they just come up.
> I am trying to do this same process on a 7206 NPE-150 running 12.2(17a)
but
> the serial interfaces stay in up/down. I did a debug ppp negotiation and
> debug ppp authentication and received the following:
>
> ----------------------------
> Aug 23 14:43:11: Se2/0 PPP: Phase is DOWN [0 sess, 1 load]
> Aug 23 14:43:11: Se2/0 PPP: Phase is ESTABLISHING, Passive Open [0 sess, 1
> load]
> Aug 23 14:43:11: Se2/0 LCP: State is Listen
> Aug 23 14:43:13: Se2/0 LCP: TIMEout: State Listen
> Aug 23 14:43:13: Se2/0 LCP: O CONFREQ [Listen] id 33 len 36
> Aug 23 14:43:13: Se2/0 LCP: MagicNumber 0x9A917F10 (0x05069A917F10)
> Aug 23 14:43:13: Se2/0 LCP: MRRU 1524 (0x110405F4)
> Aug 23 14:43:13: Se2/0 LCP: EndpointDisc 1 rt-core-00.mariposa
> Aug 23 14:43:13: Se2/0 LCP: (0x13160172742D636F72652D30302E6D61)
> Aug 23 14:43:13: Se2/0 LCP: (0x7269706F7361)
> Aug 23 14:43:13: Se2/0 LCP: I CONFREQ [REQsent] id 30 len 20
> Aug 23 14:43:13: Se2/0 LCP: MagicNumber 0xB65F7D44 (0x0506B65F7D44)
> Aug 23 14:43:13: Se2/0 LCP: MRRU 1524 (0x110405F4)
> Aug 23 14:43:13: Se2/0 LCP: EndpointDisc 1 JCF (0x1306014A4346)
> Aug 23 14:43:13: Se2/0 LCP: O CONFACK [REQsent] id 30 len 20
> Aug 23 14:43:13: Se2/0 LCP: MagicNumber 0xB65F7D44 (0x0506B65F7D44)
> Aug 23 14:43:13: Se2/0 LCP: MRRU 1524 (0x110405F4)
> Aug 23 14:43:13: Se2/0 LCP: EndpointDisc 1 JCF (0x1306014A4346)
> Aug 23 14:43:13: Se2/0 LCP: I CONFACK [ACKsent] id 33 len 36
> Aug 23 14:43:13: Se2/0 LCP: MagicNumber 0x9A917F10 (0x05069A917F10)
> Aug 23 14:43:13: Se2/0 LCP: MRRU 1524 (0x110405F4)
> Aug 23 14:43:13: Se2/0 LCP: EndpointDisc 1 rt-core-00.mariposa
> Aug 23 14:43:13: Se2/0 LCP: (0x13160172742D636F72652D30302E6D61)
> Aug 23 14:43:13: Se2/0 LCP: (0x7269706F7361)
> Aug 23 14:43:13: Se2/0 LCP: State is Open
> Aug 23 14:43:13: Se2/0 AAA/AUTHOR/LCP: Denied
> Aug 23 14:43:13: Se2/0 PPP: Phase is TERMINATING [0 sess, 1 load]
> Aug 23 14:43:13: Se2/0 LCP: O TERMREQ [Open] id 34 len 4
> Aug 23 14:43:13: Se2/0 LCP: I TERMACK [TERMsent] id 34 len 4
> Aug 23 14:43:13: Se2/0 LCP: State is Closed
> ----------------------------
>
> It looks like the link is trying to perform authentication but I didn't
> configure it to use PAP or CHAP, etc.
> Below is a snippet of the config. What am I doing wrong here? Does 12.2
> require authentication? I haven't had to use this on my routers running
> 12.3 code.
>
> interface Multilink2
> description Multilink to customer
> ip address xxx.xxx.106.33 255.255.255.252
> no ip route-cache
> no ip mroute-cache
> no cdp enable
> ppp multilink
> multilink-group 2
> !
> interface Serial2/0
> no ip address
> encapsulation ppp
> load-interval 30
> down-when-looped
> no fair-queue
> no cdp enable
> ppp multilink
> ppp multilink group 2
> !
> interface Serial2/1
> no ip address
> encapsulation ppp
> load-interval 30
> down-when-looped
> no fair-queue
> no cdp enable
> ppp multilink
> ppp multilink group 2
> !
>
>
>
> Brian Lehigh
> Network Operations Center
> Sierra Tel Internet
> http://www.sti.net
More information about the cisco-nsp
mailing list