[j-nsp] Question on ERX PPPoE Config
Blake Silvester
blake.silvester at crystalecho.com
Mon Sep 15 04:27:09 EDT 2008
Hi Rocco,
The current pppoe profile doesn’t provide for any IP layer information for
your local end of the connection. You will need to define a loopback address
within the virtual router and assign it an IP address within the /24 you are
using, then add an entry to the pppoe profile "ip unnumbered loopback 0" so
that you provide the client with your end of the IP connection, ie: a
default gateway. Currently the client receives an IP address, but no
next-hop to use, throws its toys and begins the NCP process again.
Cheers,
Blake Silvester.
-----Original Message-----
From: juniper-nsp-bounces at puck.nether.net
[mailto:juniper-nsp-bounces at puck.nether.net] On Behalf Of Dr Rocco DiSanto
Sent: Saturday, September 13, 2008 11:35 AM
To: juniper-nsp at puck.nether.net
Subject: [j-nsp] Question on ERX PPPoE Config
Hi All,
We are in the process of setting up an ERX as a PPPoE server using a Gigabit
Ethernet port.
I followed a section titled "Configuring Dynamic PPPoE over Static PPPoE
with Ethernet Interface Columns" in the config guide:
http://www.juniper.net/techpubs/software/erx/junose61/swconfig-link/html/dyn
amic-interfaces-config7.html.
Using a WINDOWS PPPoE Client:
My configuration (as pasted below) allows a Windows XP PC (connnected to the
same ethernet network as Gigabit 8/0) to dial, get authenticated and receive
an IP and DNS address (confirmed by a network sniffer running on the PC and
syslog messages from the ERX) but the dial process "hangs" on the
"Registering your computer on the network" screen. If I wait long enough, I
will get the "Error 734: The PPP Link Control Protocol was terminated".
The corresponding Syslog messages for the session:
<191> 09/12/2008 23:48:00 [ppp] pppPacket (interface GigabitEthernet8/0.34):
time: 0.21, tx ipNcp confNak, id = 6, length = 22, ipAddress = 172.18.4.109,
primaryDns = 1.1.1.24, secondaryDns = 1.1.1.25
<191> 09/12/2008 23:48:00 [ppp] pppPacket (interface GigabitEthernet8/0.34):
time: 0.22, rx ipNcp confReq, id = 7, length = 22, ipAddress = 172.18.4.109,
primaryDns = 1.1.1.24, secondaryDns = 1.1.1.25
<191> 09/12/2008 23:48:00 [ppp] pppPacket (interface GigabitEthernet8/0.34):
time: 0.22, tx ipNcp confAck, id = 7, length = 22, ipAddress = 172.18.4.109,
primaryDns = 1.1.1.24, secondaryDns = 1.1.1.25
<191> 09/12/2008 23:48:29 [ppp] pppPacket (interface GigabitEthernet8/0.34):
time: 30.09, tx lcp echoReq, id = 169, length = 8, magic = 0x480538f6
<191> 09/12/2008 23:48:29 [ppp] pppPacket (interface GigabitEthernet8/0.34):
time: 30.10, rx lcp echoResp, id = 169, length = 8, magic = 0x607824d9
<191> 09/12/2008 23:49:28 [ppp] pppPacket (interface GigabitEthernet8/0.34):
time: 90.29, tx lcp echoReq, id = 170, length = 8, magic = 0x480538f6
<191> 09/12/2008 23:49:30 [ppp] pppPacket (interface GigabitEthernet8/0.34):
time: 90.30, rx lcp echoResp, id = 170, length = 8, magic = 0x607824d9
<190> 09/12/2008 23:49:58 [icc] ppp (): Action indication on slot 8
<191> 09/12/2008 23:49:58 [ppp] ppp (interface ): Authenticate terminate -
sessionId = 2097203
<189> 09/12/2008 23:49:58 [pppoe] pppoe (): Link for PppoeSub 0x12002755,
adminStatus=adminStatusUp, operStatus=operStatusDown, reason= PPP Indication
<189> 09/12/2008 23:50:24 [pppoe] pppoe (): Link for PppoeSub 0x12002756,
adminStatus=adminStatusUp, operStatus=operStatusUp, reason= None
<190> 09/12/2008 23:50:25 [icc] ppp (): Action indication on slot 8
Using a LINKSYS PPPoE Client:
If I use a Linksys router, I get an error message saying "Cannot get an IP
address from PPPoE server".
Syslog messages:
<191> 09/12/2008 23:57:29 [ppp] pppPacket (interface GigabitEthernet8/0.38):
time: 17.46, tx ipNcp confAck, id = 64, length = 22, ipAddress =
172.18.4.103, primaryDns = 1.1.1.24, secondaryDns = 1.1.1.25
<191> 09/12/2008 23:57:29 [ppp] pppPacket (interface GigabitEthernet8/0.38):
time: 18.50, rx ipNcp confReq, id = 65, length = 22, ipAddress = 0.0.0.0,
primaryDns = 1.1.1.24, secondaryDns = 1.1.1.25
<191> 09/12/2008 23:57:29 [ppp] pppPacket (interface GigabitEthernet8/0.38):
time: 18.50, tx ipNcp confNak, id = 65, length = 10, ipAddress =
172.18.4.103
<191> 09/12/2008 23:57:29 [ppp] pppPacket (interface GigabitEthernet8/0.38):
time: 18.50, rx ipNcp confReq, id = 66, length = 22, ipAddress =
172.18.4.103, primaryDns = 1.1.1.24, secondaryDns = 1.1.1.25
<191> 09/12/2008 23:57:29 [ppp] pppPacket (interface GigabitEthernet8/0.38):
time: 18.50, tx ipNcp confAck, id = 66, length = 22, ipAddress =
172.18.4.103, primaryDns = 1.1.1.24, secondaryDns = 1.1.1.25
<191> 09/12/2008 23:57:31 [ppp] pppPacket (interface GigabitEthernet8/0.38):
time: 19.54, rx ipNcp confReq, id = 67, length = 22, ipAddress = 0.0.0.0,
primaryDns = 1.1.1.24, secondaryDns = 1.1.1.25
<191> 09/12/2008 23:57:31 [ppp] pppPacket (interface GigabitEthernet8/0.38):
time: 19.54, tx ipNcp confNak, id = 67, length = 10, ipAddress =
172.18.4.103
<191> 09/12/2008 23:57:31 [ppp] pppPacket (interface GigabitEthernet8/0.38):
time: 19.55, rx ipNcp confReq, id = 68, length = 22, ipAddress =
172.18.4.103, primaryDns = 1.1.1.24, secondaryDns = 1.1.1.25
<191> 09/12/2008 23:57:31 [ppp] pppPacket (interface GigabitEthernet8/0.38):
time: 19.55, tx ipNcp confAck, id = 68, length = 22, ipAddress =
172.18.4.103, primaryDns = 1.1.1.24, secondaryDns = 1.1.1.25
<191> 09/12/2008 23:57:31 [ppp] pppPacket (interface GigabitEthernet8/0.38):
time: 20.59, rx ipNcp confReq, id = 69, length = 22, ipAddress = 0.0.0.0,
primaryDns = 1.1.1.24, secondaryDns = 1.1.1.25
<191> 09/12/2008 23:57:31 [ppp] pppPacket (interface GigabitEthernet8/0.38):
time: 20.59, tx ipNcp confNak, id = 69, length = 10, ipAddress =
172.18.4.103
<191> 09/12/2008 23:57:31 [ppp] pppPacket (interface GigabitEthernet8/0.38):
time: 20.59, rx ipNcp confReq, id = 70, length = 22, ipAddress =
172.18.4.103, primaryDns = 1.1.1.24, secondaryDns = 1.1.1.25
<191> 09/12/2008 23:57:31 [ppp] pppPacket (interface GigabitEthernet8/0.38):
time: 20.59, tx ipNcp confAck, id = 70, length = 22, ipAddress =
172.18.4.103, primaryDns = 1.1.1.24, secondaryDns = 1.1.1.25
<190> 09/12/2008 23:57:31 [icc] ppp (): Action indication on slot 8
<191> 09/12/2008 23:57:31 [ppp] ppp (interface ): Authenticate terminate -
sessionId = 2097207
<189> 09/12/2008 23:57:31 [pppoe] pppoe (): Link for PppoeSub 0x12002759,
adminStatus=adminStatusUp, operStatus=operStatusDown, reason= PPP Indication
I would really appreciate if some kind soul could tell me what I'm doing
wrong with the config to cause this behavior.
ERX Configuration:
boot config running-configuration
boot system erx_5-1-3p0-1.rel
no boot backup
no boot subsystem
no boot backup subsystem
no boot force-backup
!
license b-ras ********
aaa domain-map "mydomain.net"
router-name default
address-pool-name pool1
ipv6-router-name default
!
aaa parse-order domain-first
aaa profile "mydomain.net"
deny default
allow "mydomain.net"
!
traffic-class "best-effort"
!
drop-profile default
!
queue-profile default
!
scheduler-profile default
!
statistics-profile default
!
qos-profile "atm-default"
!
qos-profile "serial-default"
!
qos-profile "ethernet-default"
!
qos-profile "server-default"
!
!
qos-port-type-profile ethernet qos-profile "ethernet-default"
!
qos-port-type-profile atm qos-profile "atm-default"
!
qos-port-type-profile serial qos-profile "serial-default"
!
qos-port-type-profile server-port qos-profile "server-default"
!
profile test1
ppp authentication virtual-router default chap ppp mru 1400 ppp log
pppPacket ppp log pppStateMachine ppp aaa-profile "mydomain.net"
pppoe sessions 100
pppoe duplicate-protection
pppoe always-offer
pppoe acName test1
!
virtual-router default
aaa dns primary 1.1.1.24
aaa dns secondary 1.1.1.25
aaa authentication ppp default radius
aaa accounting ppp default radius
!
ip address-pool local
interface null 0
!
interface gigabitEthernet 8/0
ip address 172.18.4.1 255.255.255.0
pppoe
pppoe auto-configure
pppoe profile any test1
!
!
ip local pool pool1
ip local pool pool1 172.18.4.101 172.18.4.110 !
radius authentication server 3.3.3.3
udp-port 1645
retransmit 2
timeout 5
deadtime 10
key secret
!
radius rollover-on-reject enable
Thank you for your consideration in looking at his for me.
Best Regards to all
Rocco DiSanto
No virus found in this incoming message.
Checked by AVG.
Version: 7.5.526 / Virus Database: 270.6.21/1669 - Release Date: 9/12/2008
2:18 PM
No virus found in this outgoing message.
Checked by AVG.
Version: 7.5.526 / Virus Database: 270.6.21/1669 - Release Date: 9/12/2008
2:18 PM
More information about the juniper-nsp
mailing list