ASA 5505 very slow to connect PPPOE - 5 minutes

Robert Brown · ‎11-18-2015

Hi,

I have a Cisco 877 in bridge mode (please dont tell me I am wasting the device in this configuration. It is the only DSL modem that connects and stays connected. I am nearly 4km from the Exchange). I have an ASA 5505 with ASA Version 9.2(4) installed. This then connects to an unmanaged switch (2 concurrent users, 1 server normally).

Everything seems to be working perfectly, good speed, etc, except, in this configuration, if I reload the ASA or power off/on the 877, then it takes about 5 minutes for the ASA to authenticate the PPPOE and for me to get connection to the internet.

If the 877 is in standalone mode (IE it does the authentication and routing) then it takes about 20-40 secs.

Is there any reason why the ASA takes so long to authenticate and provide access. The logs at this time (I have the logging level set to debug) show nothing about trying to connect/authenticate, and just show a few DNS requests from the PC and Server I have on the swtich.

Thanks,

Rob

Vibhor Amrodia · ‎11-22-2015

Hi,

I think the 'debug pppoe event/error/packet' would help. Also , provide the PPPOE configuration.

Thanks and Regards,

Vibhor Amrodia

Robert Brown · ‎11-23-2015

Thanks for your reply.

Ive included the 877 config I am using for Bridge mode. Maybe I have something wrong in that as stated, when th 877 is used by itself to do the authentication, etc, it takes 20-40 secs to connect.

This is the output of the debug (this takes about 5 minutes as previously mentioned):

PPPoE: send_padr:(Snd) Dest:dc38.e122.385c Src:a44c.11e7.5d4a Type:0xC000=PPPoE-Other
PPPoE: Ver:0 Type:0 Code:02=Unknown Code Sess:34915 Len:4377
PPPoE: PPPOE : Resending PADR

PPPoE: Shutting down client session

PPPoE: PPPOE : Resending PADR

PPPoE: send_padi:(Snd) Dest:ffff.ffff.ffff Src:a44c.11e7.5d4a Type:0x8863=PPPoE-Discovery
PPPoE: Ver:1 Type:1 Code:09=PADI Sess:0 Len:12
PPPoE: Type:0101:SVCNAME-Service Name Len:0
PPPoE: Type:0103:HOSTUNIQ-Host Unique Tag Len:4
PPPoE: 00000001
PPPoE: send_padi:(Snd) Dest:ffff.ffff.ffff Src:a44c.11e7.5d4a Type:0x8863=PPPoE-Discovery
PPPoE: Ver:1 Type:1 Code:09=PADI Sess:0 Len:12
PPPoE: Type:0101:SVCNAME-Service Name Len:0
PPPoE: Type:0103:HOSTUNIQ-Host Unique Tag Len:4
PPPoE: 00000001
PPPoE: padi timer expired

PPPoE: send_padi:(Snd) Dest:ffff.ffff.ffff Src:a44c.11e7.5d4a Type:0x8863=PPPoE-Discovery
PPPoE: Ver:1 Type:1 Code:09=PADI Sess:0 Len:12
PPPoE: Type:0101:SVCNAME-Service Name Len:0
PPPoE: Type:0103:HOSTUNIQ-Host Unique Tag Len:4
PPPoE: 00000001
PPPoE: padi timer expired

PPPoE: PPPoE:(Rcv) Dest:a44c.11e7.5d4a Src:dc38.e122.385c Type:0x8863=PPPoE-Discovery
PPPoE: Ver:1 Type:1 Code:07=PADO Sess:0 Len:54
PPPoE: Type:0102:ACNAME-AC Name Len:14
PPPoE: ncy6-chatswood

PPPoE: Type:0103:HOSTUNIQ-Host Unique Tag Len:4
PPPoE: 00000001
PPPoE: Type:0101:SVCNAME-Service Name Len:0
PPPoE: Type:0104:ACCOOKIE-AC Cookie Len:16
PPPoE: 8D5FC012
PPPoE: 2B88A6D2
PPPoE: 524B86E3
PPPoE: 7E34AD4A
PPPoE:

PPPoE: Type:0000:EOL-End of List Len:0
PPPoE: PADO

PPPoE: send_padr:(Snd) Dest:dc38.e122.385c Src:a44c.11e7.5d4a Type:0x8863=PPPoE-Discovery
PPPoE: Ver:1 Type:1 Code:19=PADR Sess:0 Len:54
PPPoE: Type:0102:ACNAME-AC Name Len:14
PPPoE: ncy6-chatswood

PPPoE: Type:0103:HOSTUNIQ-Host Unique Tag Len:4
PPPoE: 00000001
PPPoE: Type:0101:SVCNAME-Service Name Len:0
PPPoE: Type:0104:ACCOOKIE-AC Cookie Len:16
PPPoE: 8D5FC012
PPPoE: 2B88A6D2
PPPoE: 524B86E3
PPPoE: 7E34AD4A
PPPoE:

PPPoE: Type:0000:EOL-End of List Len:0
PPPoE: PPPoE:(Rcv) Dest:a44c.11e7.5d4a Src:dc38.e122.385c Type:0x8863=PPPoE-Discovery
PPPoE: Ver:1 Type:1 Code:65=PADS Sess:9757 Len:16
PPPoE: Type:0101:SVCNAME-Service Name Len:0
PPPoE: Type:0103:HOSTUNIQ-Host Unique Tag Len:4
PPPoE: 00000001
PPPoE: Type:0000:EOL-End of List Len:0
PPPoE: PADS

PPPoE: IN PADS from PPPoE tunnel

PPPoE: Opening PPP link and starting negotiations.

This is how the 877 is configured for Bridge Mode

no service pad

service timestamps debug datetime msec

service timestamps log datetime msec

no service password-encryption

!

hostname Router

!

boot-start-marker

boot-end-marker

!

logging message-counter syslog

!

no aaa new-model

!

dot11 syslog

ip source-route

no ip routing

!

no ip cef

no ipv6 cef

!

multilink bundle-name authenticated

!

archive

log config

hidekeys

!

interface ATM0

no ip address

no ip route-cache

no atm ilmi-keepalive

pvc 8/35

encapsulation aal5snap

!

bridge-group 1

!

interface FastEthernet0

!

interface FastEthernet1

!

interface FastEthernet2

!

interface FastEthernet3

!

interface Vlan1

no ip address

no ip route-cache

bridge-group 1

!

ip forward-protocol nd

no ip http server

no ip http secure-server

!

control-plane

!

bridge 1 protocol ieee

!

line con 0

no modem enable

line aux 0

line vty 0 4

login

!

scheduler max-task-time 5000

end

And the PPPOE sections from the ASA Config:

vpdn group BP-DIALER-GROUP request dialout pppoe
vpdn group BP-DIALER-GROUP localname user@domain.com
vpdn group BP-DIALER-GROUP ppp authentication chap
vpdn username user@domain.com password ***** store-local

dhcpd auto_config outside

mtu inside 1500
mtu outside 1492

interface Vlan2

nameif outside

security-level 0

pppoe client vpdn group BP-DIALER-GROUP

ip address pppoe setroute

Thanks,

Rob