[c-nsp] PPPOE Dropouts

Frank Bulk frnkblk at iname.com
Fri Sep 14 17:10:24 EDT 2007


Paul:

Same thing here: clean lines, just some customers.  

We're generally using Comtrend 5621 or 536+, but we have a lot of Draytek in
the field, too.

We using c7200-is-mz.122-26.bin, what's yours?

Since only one customer has called and complained, and that appeared to be
fixed by putting in a Westell (after much urging from the customer), I've
just put it aside, hoping that the next time we do a software upgrade it
fixes itself.  

To put the Westell 'fix' in context, here's some counts of their login (from
radius log).

      8 Apr  1
      9 Apr  2
     13 Apr  3
      9 Apr  4
      7 Apr  5
     12 Apr  6
     13 Apr  7
     12 Apr  8
     12 Apr  9
     16 Apr 10
     10 Apr 11
     13 Apr 12
      8 Apr 13
     11 Apr 14
     13 Apr 15
     12 Apr 16
     13 Apr 17
     11 Apr 18
      5 Apr 19
      1 Apr 24
      1 May 21
      1 May 22
      1 Jun 30
      3 Aug  5

My only guess is that the DSL modem (because normally we deploy PPPoA, only
configuring the DSL modem as a bridge and PPPoE on CPE when customer needs
it for their own equipment) is somehow breaking the session.

Frank

-----Original Message-----
From: cisco-nsp-bounces at puck.nether.net
[mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of Paul Stewart
Sent: Friday, September 14, 2007 9:55 AM
To: cisco-nsp at puck.nether.net
Subject: [c-nsp] PPPOE Dropouts

Hi folks...

This is a long shot but we have some clients who are connected via PPPOE on
ADSL2+ who are randomly dropping off once in a while.  On the same system,
we have a number of clients who are online for weeks with no issues.  Same
equipment, identical modems at CPE etc....  they are all Comtrend CT-5071
modems connected back to our Occam DSLAM....

The router config there (7206VXR) is identical to other locations (dozens of
other locations).... so I can't see where this could be a Cisco related
issue but reaching for ideas...  the general feedback is that most of them
stay online for 10-15 minutes and then their PPPOE session drops.  Their
line sync on the physical side looks VERY clean and no loss of line sync or
retrains...

Radius reports:

Wed Aug  1 10:03:22 2007
        Acct-Session-Id = "0/0/3/15_0000DE0E"
        Cisco-AVPair = "client-mac-address=000f.ea0d.8616"
        Framed-Protocol = PPP
        Framed-IP-Address = xxx.xxx.xxx.xxx
        User-Name = "xxxxxxxxx"
        Cisco-AVPair = "connect-progress=LAN Ses Up"
        Acct-Authentic = RADIUS
        Acct-Status-Type = Start
        NAS-Port-Type = 15
        NAS-Port-Id = 50331663
        Attr-87 = "0/0/3/15"
        Service-Type = Framed-User
        NAS-IP-Address = xxx.xxx.xxx.xxx
        Attr-55 = "F\260\221\252"
        NAS-Identifier = "xxxxxxxx.nexicom.net"
        Acct-Delay-Time = 0
        Client-IP-Address = xxx.xxx.xxx.xxx
        Realm = "nexicom.net"
        Timestamp = 1185977002
        Request-Authenticator = Verified

Wed Aug  1 10:16:42 2007
        Acct-Session-Id = "0/0/3/15_0000DE0E"
        Cisco-AVPair = "client-mac-address=000f.ea0d.8616"
        Framed-Protocol = PPP
        Framed-IP-Address = xxx.xxx.xxx.xxx
        User-Name = "xxxxxxxxx"
        Acct-Authentic = RADIUS
        Cisco-AVPair = "connect-progress=LAN Ses Up"
        Cisco-AVPair = "nas-tx-speed=1000000000"
        Cisco-AVPair = "nas-rx-speed=1000000000"
        Acct-Session-Time = 800
        Acct-Input-Octets = 236769
        Acct-Output-Octets = 1707019
        Acct-Input-Packets = 1342
        Acct-Output-Packets = 1699
        Acct-Terminate-Cause = Port-Error
        Cisco-AVPair = "disc-cause-ext=TCP Foreign Host Close"
        Acct-Status-Type = Stop
        NAS-Port-Type = 15
        NAS-Port-Id = 50331663
        Attr-87 = "0/0/3/15"
        Service-Type = Framed-User
        NAS-IP-Address = xxx.xxx.xxx.xxx
        Attr-55 = "F\260\224\312"
        NAS-Identifier = "xxxxxxxxxx.nexicom.net"
        Acct-Delay-Time = 0
        Client-IP-Address = xxx.xxx.xxx.xxx
        Realm = "nexicom.net"
        Timestamp = 1185977802
        Request-Authenticator = Verified


Cisco config looks like this:


aaa group server radius Nexicom
 server-private xxx.xxx.xxx.xxx auth-port 1812 acct-port 1813 key 7
XXXXXXXXXXXXX
 server-private xxx.xxx.xxx.xxx auth-port 1645 acct-port 0 key 7
XXXXXXXXXXXXXXXX
 ip radius source-interface Loopback0

virtual-profile if-needed
!
vpdn enable
vpdn multihop
vpdn authen-before-forward

bba-group pppoe global
 virtual-template 1

interface GigabitEthernet0/3.15
 description Occum ADSL
 encapsulation dot1Q 15
 ip nbar protocol-discovery
 pppoe enable group global
 pppoe max-sessions 1000

interface Virtual-Template1
 ip unnumbered Loopback0
 ip mtu 1492
 no logging event link-status
 no snmp trap link-status
 peer default ip address pool default
 ppp authentication pap Nexicom
 ppp authorization Nexicom
 ppp accounting Nexicom
 ppp ipcp dns 216.168.96.10 216.168.96.13
 no clns route-cache

radius-server attribute 44 include-in-access-req
radius-server attribute 32 include-in-access-req
radius-server attribute 32 include-in-accounting-req
radius-server attribute 55 include-in-acct-req
radius-server attribute nas-port format d
radius-server vsa send accounting
radius-server vsa send authentication



_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/



More information about the cisco-nsp mailing list