[c-nsp] Cisco 7304/NSE-100 L2TP session problem

Jonas Frey jf at probe-networks.de
Fri Apr 24 19:02:43 EDT 2009


Hello,

i am using a 7304 w/NSE-100 for DSL aggregation. Am running 12.2.33SB5
now (also tried 12.2.31 and 12.2.28).
However i cant get things to work, L2TP tunnels are getting established
but as soon as sessions are coming in they are getting closed. My config
as follows:

virtual-profile if-needed
vpdn enable
vpdn multihop
vpdn logging
vpdn logging local
vpdn logging remote
vpdn logging user
vpdn logging tunnel-drop


vpdn-group 2
  accept-dialin
  protocol l2tp
  virtual-template 2
 session-limit 1000
 terminate-from hostname xxxxxxxxx
 source-ip x.x.x.x
 local name xxxx
 lcp renegotiation always
 l2tp tunnel password 7 xxx
 l2tp tunnel receive-window 100
 l2tp tunnel retransmit timeout min 2

interface Virtual-Template2
 mtu 1492
 ip unnumbered Loopback0
 no ip redirects
 no ip proxy-arp
 ip mtu 1492
 no logging event link-status
 peer default ip address pool test1
 keepalive 60
 ppp mtu adaptive
 ppp authentication pap ADSL
 ppp authorization ADSL
 ppp accounting ADSL
 no clns route-cache

As for errors i do get these:

00:18:35: %VPDN-4-MIDERROR: L2TP LNS xxxx unable to terminate user
shdsl-0/001; Result 1, Error 1, Dataplane down

note: 12.2.31 and 12.2.28 give a different message:

00:49:37: %VPDN-6-CLOSED: L2TP LNS xxxx closed  user
shdsl-0/001; Result 1, Error 0, nas-error/VPDN Carrier Loss

Also the system prints the following error from time to time:

00:18:39: %SW_MGR-3-CM_ERROR: Connection Manager Error - provision
segment failed [ADJ:L2TP:5041] - hardware platform error.
-Traceback= 40812F84 408134C8 41177478 4117754C 42123DC8 41174DD0
42A0FEF4 42A0FFB4 411757F8 41175988 41166FB8 42A0FEF4 42A0FFB4 41167BC0
411627C4 41166250

And debug vodn l2x-events gives:

00:21:21: L2TP _____:032E1:0000C9C5: Open sock
x.x.x.x:1701->y.y.y.y:1701
00:21:21: L2TP _____:032E1:0000C9C5: FSM-Sn ev Sock-Ready
00:21:21: L2TP _____:032E1:0000C9C5: FSM-Sn    in Wt-Rx-ICCN
00:21:21: L2TP _____:032E1:0000C9C5: FSM-Sn do Ignore-Sock-Up
00:21:21: L2TP _____:032E1:0000C9C5:  
00:21:21: L2TP _____:032E1:0000C9C5: FSM-Sn ev DP-Setup
00:21:21: L2TP _____:032E1:0000C9C5: FSM-Sn    in Wt-Rx-ICCN
00:21:21: L2TP _____:032E1:0000C9C5: FSM-Sn do Ignore-DP-Setup
00:21:21: L2TP tnl   162F2:0000ABED: Congestion Control event received
is positive acknowledgement
00:21:21: L2TP tnl   162F2:0000ABED: Congestion Window size, Cwnd 2
00:21:21: L2TP tnl   162F2:0000ABED: Slow Start threshold, Ssthresh 8
00:21:21: L2TP tnl   162F2:0000ABED: Remote Window size, 8
00:21:21: L2TP tnl   162F2:0000ABED: Congestion Ctrl Mode is Slow Start
00:21:21: L2TP tnl   162F2:0000ABED: FSM-CC ev Rx-SCCCN
00:21:21: L2TP tnl   162F2:0000ABED: FSM-CC    Wt-SCCCN->Proc-SCCCN
00:21:21: L2TP tnl   162F2:0000ABED: FSM-CC do Rx-SCCCN
00:21:21: L2TP tnl   162F2:0000ABED: Got a response in SCCCN from xxxx
00:21:21: L2TP tnl   162F2:0000ABED: Tunnel Authentication success
00:21:21: L2TP tnl   162F2:0000ABED: Control connection authentication
skipped/passed.
00:21:21: L2TP tnl   162F2:0000ABED: FSM-CC ev SCCCN-OK
00:21:21: L2TP tnl   162F2:0000ABED: FSM-CC    Proc-SCCCN->established
00:21:21: L2TP tnl   162F2:0000ABED: FSM-CC do Established
00:21:21: L2TP tnl   162F2:0000ABED: Control channel up
00:21:21: L2TP tnl   162F2:0000ABED:   x.x.x.x<->y.y.y.y
00:21:21: L2TP tnl   162F2:0000ABED: Control connection authentication
skipped/passed.
00:21:21: L2X  _____:_____:________: Create logical session
00:21:21: L2TP _____:_____:________: Create session
00:21:21: L2TP _____:_____:________:   Using ICRQ FSM
00:21:21: L2TP _____:_____:________: FSM-Sn ev created
00:21:21: L2TP _____:_____:________: FSM-Sn    Init->Idle
00:21:21: L2TP _____:_____:________: FSM-Sn do none
00:21:21: L2TP _____:_____:________:     remote ip set to y.y.y.y
00:21:21: L2TP _____:_____:________:     local ip set to x.x.x.x
00:21:21: L2TP tnl   162F2:0000ABED: FSM-CC ev Session-Conn
00:21:21: L2TP tnl   162F2:0000ABED: FSM-CC    in established
00:21:21: L2TP tnl   162F2:0000ABED: FSM-CC do Session-Conn-Est
00:21:21: L2TP tnl   162F2:0000ABED:   Session count now 1
00:21:21: L2TP _____:162F2:00004873: FSM-Sn ev CC-Up
00:21:21: L2TP _____:162F2:00004873: FSM-Sn    in Idle
00:21:21: L2TP _____:162F2:00004873: FSM-Sn do CC-Up-Ignore0-1
00:21:21: L2TP _____:162F2:00004873: Session attached
00:21:21: L2TP _____:162F2:00004873: no cookies enabled
00:21:21: L2TP _____:162F2:00004873: FSM-Sn ev Rx-ICRQ
00:21:21: L2TP _____:162F2:00004873: FSM-Sn    Idle->Proc-ICRQ
00:21:21: L2TP _____:162F2:00004873: FSM-Sn do Rx-ICRQ
00:21:21: L2TP _____:162F2:00004873:   Chose application VPDN
00:21:21: L2TP _____:162F2:00004873:   App type set to VPDN
00:21:21: L2TP tnl   162F2:0000ABED:   VPDN Session count now 1
00:21:21: L2TP _____:162F2:00004873: VPDN: process AVPs
00:21:21: L2TP _____:162F2:00004873: Local AC is now UP
00:21:21: L2TP _____:162F2:00004873: Remote AC is now UP
00:21:21: L2TP _____:162F2:00004873:  
00:21:21: L2TP tnl   032E1:00006170: Control connection authentication
skipped/passed.
00:21:21: L2TP tnl   032E1:00006170: Congestion Control event received
is positive acknowledgement
00:21:21: L2TP tnl   032E1:00006170: Congestion Window size, Cwnd 7
00:21:21: L2TP tnl   032E1:00006170: Slow Start threshold, Ssthresh 64
00:21:21: L2TP tnl   032E1:00006170: Remote Window size, 64
00:21:21: L2TP _____:032E1:0000C9C5: FSM-Sn ev Rx-ICCN
00:21:21: L2TP _____:032E1:0000C9C5: FSM-Sn    Wt-Rx-ICCN->Proc-ICCN
00:21:21: L2TP _____:032E1:0000C9C5: FSM-Sn do Rx-ICCN
00:21:21: L2TP _____:032E1:0000C9C5:   MTU is 65535
00:21:21: L2TP _____:032E1:0000C9C5: Session data plane UP
00:21:21: L2TP _____:032E1:0000C9C5: VPDN: process AVPs
00:21:21: L2TP _____:032E1:0000C9C5:  
00:21:21: L2TP _____:032E1:0000C9C5: FSM-Sn ev ICCN-OK
00:21:21: L2TP _____:032E1:0000C9C5: FSM-Sn    Proc-ICCN->established
00:21:21: L2TP _____:032E1:0000C9C5: FSM-Sn do Established
00:21:21: L2TP _____:032E1:0000C9C5: Session up
00:21:21: L2TP _____:032E1:0000C9C5:   x.x.x.x<->y.y.y.y
00:21:21: L2X:Session DB (Tnl/Sn: 24944/51653): Stored the switching
session in the session DB
00:21:21: L2TP:(Tnl24944:Sn51653)L2X s/w switching session provisioned
00:21:21: L2TP _____:032E1:0000C9C5: Received a SSM L2TP segment down
event
00:21:21: L2TP _____:032E1:0000C9C5:  
00:21:21: L2TUN APP: uid:119handle/5217Destroying app session
00:21:21: L2TUN APP: uid:119handle/5217Stopping service selection
00:21:21: L2TP _____:162F2:00004873:   App type set to VPDN
00:21:21: L2TP _____:162F2:00004873:   Conditional debugging is enabled
00:21:21: L2TP _____:162F2:00004873:   UDP checksum ignore is enabled
00:21:21: L2TP _____:162F2:00004873:   Framing set to sync
00:21:21: L2TP _____:162F2:00004873:   Bearer set to none
00:21:21: L2TP _____:162F2:00004873: FSM-Sn ev ICRQ-OK
00:21:21: L2TP _____:162F2:00004873: FSM-Sn    Proc-ICRQ->Wt-Tx-ICRP
00:21:21: L2TP _____:162F2:00004873: FSM-Sn do Tx-ICRP-Local-Check
00:21:21: L2TP _____:162F2:00004873: FSM-Sn ev Local-Cont
00:21:21: L2TP _____:162F2:00004873: FSM-Sn    Wt-Tx-ICRP->Wt-Rx-ICCN
00:21:21: L2TP _____:162F2:00004873: FSM-Sn do Tx-ICRP
00:21:21: L2TP _____:162F2:00004873: Open sock
x.x.x.x:1701->y.y.y.y:1701
00:21:21: L2TP _____:162F2:00004873: FSM-Sn ev Sock-Ready
00:21:21: L2TP _____:162F2:00004873: FSM-Sn    in Wt-Rx-ICCN
00:21:21: L2TP _____:162F2:00004873: FSM-Sn do Ignore-Sock-Up
00:21:21: L2TP _____:162F2:00004873:  
00:21:21: L2TP _____:162F2:00004873: FSM-Sn ev DP-Setup
00:21:21: L2TP _____:162F2:00004873: FSM-Sn    in Wt-Rx-ICCN
00:21:21: L2TP _____:162F2:00004873: FSM-Sn do Ignore-DP-Setup
00:21:21: L2TP _____:032E1:0000C9C5:  
00:21:21: L2TP _____:032E1:0000C9C5:   App type set to VPDN
00:21:21: L2TP _____:032E1:0000C9C5:   Framing set to sync
00:21:21: L2TP _____:032E1:0000C9C5:   Bearer set to none
00:21:21: L2TP _____:032E1:0000C9C5:  
00:21:21: L2TP _____:032E1:0000C9C5: Shutting down session
00:21:21: L2TP _____:032E1:0000C9C5:   Result Code
00:21:21: L2TP _____:032E1:0000C9C5:     Loss of carrier (1)
00:21:21: L2TP _____:032E1:0000C9C5:   Error Code
00:21:21: L2TP _____:032E1:0000C9C5:     No error (0)
00:21:21: L2TP _____:032E1:0000C9C5:   Vendor Error
00:21:21: L2TP _____:032E1:0000C9C5:     None (0)
00:21:21: L2TP _____:032E1:0000C9C5:   Optional Message
00:21:21: L2TP _____:032E1:0000C9C5:     "Dataplane down"
00:21:21: L2TP _____:032E1:0000C9C5:  
00:21:21: L2TP _____:032E1:0000C9C5: FSM-Sn ev App-Disc
00:21:21: L2TP _____:032E1:0000C9C5: FSM-Sn    in established
00:21:21: L2TP _____:032E1:0000C9C5: FSM-Sn do App-Disc-Active
00:21:21: L2TP _____:032E1:0000C9C5: Session down
00:21:21: L2TP _____:032E1:0000C9C5:   x.x.x.x<->y.y.y.y
00:21:21: L2TP _____:032E1:0000C9C5: Destroying session
00:21:21: L2TP _____:032E1:0000C9C5: Request teardown data plane
00:21:21: L2TP tnl   032E1:00006170: FSM-CC ev Session-Disc
00:21:21: L2TP tnl   032E1:00006170: FSM-CC    in established
00:21:21: L2TP tnl   032E1:00006170: FSM-CC do Session-Disc-Est
00:21:21: L2TP tnl   032E1:00006170:   Session count now 0
00:21:21: L2TP tnl   032E1:00006170:   VPDN Session count now 0
00:21:21: L2TP tnl   032E1:00006170: FSM-CC ev No-Users
00:21:21: L2TP tnl   032E1:00006170: FSM-CC    established->Est-No-User
00:21:21: L2TP tnl   032E1:00006170: FSM-CC do No-Users
00:21:21: L2TP tnl   032E1:00006170: No more cc users, shutdown (likely)
in 15 secs
00:21:21: L2TP _____:_____:________: Session detached
00:21:21: L2X  _____:_____:________: Destroying logical session
00:21:21: L2TP:(Tnl24944:Sn51653)L2X s/w switching session unprovisioned
00:21:21: L2X:Session DB (Tnl/Sn: 24944/51653): Removed the switching
session from the session DB 

Does anyone have any idea howto solve this? Unfortunatly i do not have
access to the LAC as to where these tunnels are coming from.

Regards,
Jonas






More information about the cisco-nsp mailing list