[j-nsp] M7i as LNS
Matthias Gelbhardt
matthias at commy.de
Thu Apr 2 07:03:31 EDT 2009
Hi!
At the moment I am trying to get a M7i as LNS working to terminate DSL
lines. At the moment it seems, that the tunnel is trying to build, but
could not be established, due to a dead tunnel 6 pic. I understand,
that I have one of these, but do I have to switch it alive somehow?
the logs:
Apr 2 12:59:55 jnp_l2tp_fsm_tr_wait: New packet from
213.148.133.62:1701: 139 bytes
Apr 2 12:59:55 jnp_l2tp_avp_decode_message_type: Message Type SCCRQ (1)
Apr 2 12:59:55 jnp_l2tp_avp_decode_protocol_version: Protocol Version
1.0
Apr 2 12:59:55 jnp_l2tp_avp_decode_firmware_revision: Firmware
Revision 0x1130
Apr 2 12:59:55 jnp_l2tp_avp_decode_host_name: Host Name: QSC_DLR2
Apr 2 12:59:55 jnp_l2tp_avp_decode_vendor_name: Vendor Name: Cisco
Systems, Inc.
Apr 2 12:59:55 jnp_l2tp_avp_decode_receive_window_size: Limiting
receive window size to configured maximum: 32 vs requested 20050
Apr 2 12:59:55 jnp_l2tp_avp_decode_receive_window_size: Receive
Window Size 32
Apr 2 12:59:55 jnp_l2tp_avp_decode_challenge: Challenge:
Apr 2 12:59:55 00000000: 13cd 6460 e212 e119 d19f ff42 c428
507e ..d`.......B.(P~
Apr 2 12:59:55 jnp_l2tp_avp_decode_assigned_tunnel_id: Assigned
Tunnel ID 15766
Apr 2 12:59:55 jnp_l2tp_avp_decode_framing_capabilities: Framing
Capabilities 0x00000000
Apr 2 12:59:55 jnp_l2tp_avp_decode_bearer_capabilities: Bearer
Capabilities 0x00000000
Apr 2 12:59:55 jnp_l2tp_decode_packet: Unrecognized AVP: vendor_id=9,
attribute_type=110, reserved_set=0, mandatory=0
Apr 2 12:59:55 jnp_l2tp_tunnel_id_alloc: Allocated Tunnel ID 41230
Apr 2 12:59:55 Tnl 41230 L2TP: I tunnel from QSC_DLR2
213.148.133.62:1701 local x.x.x.x:1701
Apr 2 12:59:55 Tnl 41230 L2TP: tunnel_info max_sessions_per_tunnel =
0 local_chap = 0, lcp_renegotiaton = 0, auth_order LOCAL
Apr 2 12:59:55 Tnl 41230 L2TP: I tunnel pic 6 not alive
Apr 2 12:59:55 jnp_l2tp_fsm_cc_responder_reject_new: New control
connection establishment rejected
Apr 2 12:59:55 Tnl 41230 L2TP: Open failed
Apr 2 12:59:55 Tnl 41230 L2TP: result 4 error 0)
Apr 2 12:59:55 jnp_l2tp_tunnel_terminated: Cancel hello timer for 41230
Apr 2 12:59:55 jnp_l2tp_tunnel_terminated: cancel no session timer
for 41230
Apr 2 12:59:55 jnp_l2tp_fsm_tr_wait: Freeing tunnel 41230
Apr 2 12:59:55 jnp_l2tp_fsm_tr_wait: Cancel all timers for 41230
Apr 2 12:59:59 jnp_l2tp_fsm_tr_wait: New packet from
213.148.133.62:1701: 66 bytes
Apr 2 12:59:59 jnp_l2tp_avp_decode_message_type: Message Type StopCCN
(4)
Apr 2 12:59:59 jnp_l2tp_avp_decode_result_code: Result Code `General
error - A generic vendor-specific error occurred in the LAC' (2 6)
Apr 2 12:59:59 jnp_l2tp_avp_decode_result_code: Error Message: Too
many retransmits
Apr 2 12:59:59 jnp_l2tp_decode_packet: Unrecognized AVP: vendor_id=9,
attribute_type=105, reserved_set=0, mandatory=0
Apr 2 12:59:59 jnp_l2tp_avp_decode_assigned_tunnel_id: Assigned
Tunnel ID 15766
Apr 2 13:00:03 jnp_l2tp_fsm_tr_wait: New packet from
213.148.133.62:1701: 66 bytes
Apr 2 13:00:03 jnp_l2tp_avp_decode_message_type: Message Type StopCCN
(4)
Apr 2 13:00:03 jnp_l2tp_avp_decode_result_code: Result Code `General
error - A generic vendor-specific error occurred in the LAC' (2 6)
Apr 2 13:00:03 jnp_l2tp_avp_decode_result_code: Error Message: Too
many retransmits
Apr 2 13:00:03 jnp_l2tp_decode_packet: Unrecognized AVP: vendor_id=9,
attribute_type=105, reserved_set=0, mandatory=0
Apr 2 13:00:03 jnp_l2tp_avp_decode_assigned_tunnel_id: Assigned
Tunnel ID 15766
the config:
sp-1/2/0 {
unit 0 {
family inet;
}
unit 1 {
dial-options {
l2tp-interface-id lns;
dedicated;
}
family inet;
}
unit 2 {
dial-options {
l2tp-interface-id lns;
dedicated;
}
family inet;
}
}
lo0 {
unit 0 {
family inet {
address x.x.x.x;
}
}
}
ccess {
profile lns_tunnel {
authentication-order password;
client QSC_DLR2 {
l2tp {
interface-id lns;
ppp-authentication chap;
shared-secret "xxx"; ## SECRET-DATA
ppp-profile lns_user;
}
}
}
profile lns_user {
client "gelbhardt at dsl.dlrz.net" {
# hier kann ich mich nicht entscheiden
chap-secret "xx"; ## SECRET-DATA
pap-password "xx"; ## SECRET-DATA
ppp {
idle-timeout 0;
primary-dns x.x.x.x;
framed-ip-address x.x.x.x;
}
}
}
}
services {
l2tp {
tunnel-group lns {
l2tp-access-profile lns_tunnel;
ppp-access-profile lns_user;
local-gateway {
address x.x.x.x; # <- lo0 Adresse
}
service-interface sp-1/2/0;
}
}
}
More information about the juniper-nsp
mailing list