08-09-2002 01:09 PM - edited 03-02-2019 12:35 AM
Maybe I better start a new conversation for this, my message in the "AS5300 with Static IP" got somehow messed up...
Ok, I got the static problem sorted out, but I'm having another problem with my home Cisco 803 router (maybe with othet routers as well, haven't been able to test yet) and AS5300... After my original config which worked fine with Portmaster PM3 I've tried all the examples I've found from Ciscos site, without luck. It just woun't authenticate, or at least the connection doesn't come up.
Here is the As5300 config and some debugging, the problem seems to be in the end, Vi1 MLP etc... but what does it exactly mean? The C803 is using the plain NAT config found from Ciscos 800-804 software config manual.
Another problem I'm having, probably not related, is that my Viscom Radius server authenticates dialup users fine and even assigns static IP's if needed, but after that the server thinks ("sh users" in the radius server) all users are having 0.0.0.0 address. AS5300 "sh users" as well as Windows clients "ipconfig" etc however show the addresses correctly, and the connection works fine. So it's only a cosmetic problem, but annoying. Any ideas?
qnet-as5300-hki1#sh run
Building configuration...
Current configuration : 4291 bytes
!
version 12.2
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname qnet-as5300-hki1
!
aaa new-model
!
!
aaa authentication login default enable
aaa authentication ppp default group radius none
aaa authorization network default group radius local
aaa accounting network default start-stop group radius
aaa session-id common
enable secret 5 $xxxxxxxxxxxxxxx.
enable password yyyyyyyyy
!
username administrator privilege 15 password 0 xxxxxyyyyy
username admin privilege 15 password 0 xxxxxyyyyy
username root password 0 xxxxxyyyyy
spe 1/0 1/9
firmware location system:/ucode/mica_port_firmware
!
!
resource-pool disable
clock timezone EET 2
!
calltracker enable
calltracker history max-size 30
calltracker call-record verbose
syscon address 62.142.221.2 xxxxxyyyyy
syscon shelf-id 0
modem call-record terse
modem country mica finland
ip subnet-zero
no ip source-route
ip name-server 195.74.0.47
ip name-server 195.74.0.55
!
async-bootp dns-server 195.74.0.47 195.74.0.55
isdn switch-type primary-net5
!
!
!
!
!
!
fax interface-type modem
mta receive maximum-recipients 0
!
controller E1 0
clock source line primary
pri-group timeslots 1-31
!
controller E1 1
clock source line secondary 1
pri-group timeslots 1-31
!
controller E1 2
clock source line secondary 2
pri-group timeslots 1-31
!
controller E1 3
clock source line secondary 3
pri-group timeslots 1-31
!
controller E1 4
shutdown
clock source line secondary 4
!
controller E1 5
shutdown
clock source line secondary 5
!
controller E1 6
shutdown
clock source line secondary 6
!
controller E1 7
shutdown
clock source line secondary 7
!
!
!
interface Loopback0
ip address 62.142.220.129 255.255.255.128
no ip mroute-cache
!
interface Ethernet0
no ip address
no ip mroute-cache
shutdown
!
interface Serial0
no ip address
no ip mroute-cache
shutdown
no fair-queue
clockrate 2015232
!
interface Serial1
no ip address
no ip mroute-cache
shutdown
no fair-queue
clockrate 2015232
!
interface Serial2
no ip address
no ip mroute-cache
shutdown
no fair-queue
clockrate 2015232
!
interface Serial3
no ip address
no ip mroute-cache
shutdown
no fair-queue
clockrate 2015232
!
interface Serial0:15
ip unnumbered Loopback0
encapsulation ppp
dialer-group 1
isdn switch-type primary-net5
isdn incoming-voice modem
peer default ip address pool dialin_pool
ppp authentication chap pap
ppp multilink
!
interface Serial1:15
ip unnumbered Loopback0
encapsulation ppp
dialer-group 1
isdn switch-type primary-net5
isdn incoming-voice modem
isdn T321 40000
isdn T310 4000
peer default ip address pool dialin_pool
ppp authentication chap pap
ppp multilink
!
interface Serial2:15
ip unnumbered Loopback0
encapsulation ppp
dialer-group 1
isdn switch-type primary-net5
isdn incoming-voice modem
isdn T321 40000
isdn T310 4000
peer default ip address pool dialin_pool
ppp authentication chap pap
ppp multilink
!
interface Serial3:15
ip unnumbered Loopback0
encapsulation ppp
dialer-group 1
isdn switch-type primary-net5
isdn incoming-voice modem
isdn T321 40000
isdn T310 4000
peer default ip address pool dialin_pool
ppp authentication chap pap
ppp multilink
!
interface FastEthernet0
ip address 62.142.221.2 255.255.255.248
no ip mroute-cache
duplex auto
speed auto
no mop enabled
!
interface Group-Async1
ip unnumbered Loopback0
encapsulation ppp
ip tcp header-compression
no ip mroute-cache
async mode interactive
peer default ip address pool dialin_pool
ppp authentication pap chap
group-range 1 120
!
ip local pool dialin_pool 62.142.220.130 62.142.220.253
ip classless
ip route 0.0.0.0 0.0.0.0 62.142.221.1
no ip http server
!
access-list 101 permit ip any any
dialer-list 1 protocol ip permit
!
!
!
radius-server host 194.251.131.15 auth-port 1645 acct-port 1646
radius-server retransmit 3
radius-server timeout 10
radius-server attribute 8 include-in-access-req
radius-server attribute 44 include-in-access-req
radius-server key AS5300xz
call rsvp-sync
!
!
mgcp profile default
!
gateway
!
!
line con 0
logging synchronous
autoselect ppp
line 1 120
modem Dialin
autoselect during-login
autoselect ppp
line aux 0
line vty 0 4
exec-timeout 30 0
password xxxxxyyyyy
!
scheduler interval 1000
end
**********************************************
qnet-as5300-hki1#undeb all
All possible debugging has been turned off
qnet-as5300-hki1#term moni
qnet-as5300-hki1#debug dialer
Dial on demand events debugging is on
qnet-as5300-hki1#debug isdn q931
ISDN Q931 packets debugging is on
qnet-as5300-hki1#debug ppp neg
PPP protocol negotiation debugging is on
qnet-as5300-hki1#debug ppp auth
PPP authentication debugging is on
qnet-as5300-hki1#debug ip peer
IP peer address activity debugging is on
qnet-as5300-hki1#
07:27:31: ISDN Se0:15: RX <- SETUP pd = 8 callref = 0x6782
07:27:31: Bearer Capability i = 0x8890
07:27:31: Channel ID i = 0xA9839B
07:27:31: Date/Time i = 0x0208091538
07:27:31: Calling Party Number i = 0x0183, '063221964', Plan:ISDN, Typen
07:27:31: Called Party Number i = 0x81, '810', Plan:ISDN, Type:Unknown
07:27:31: %LINK-3-UPDOWN: Interface Serial0:26, changed state to up
07:27:31: ISDN Se0:15: TX -> CALL_PROC pd = 8 callref = 0xE782
07:27:31: Channel ID i = 0xA9839B
07:27:31: ISDN Se0:15: TX -> CONNECT pd = 8 callref = 0xE782
07:27:31: Channel ID i = 0xA9839B
07:27:31: Se0:26 PPP: Treating connection as a callin
07:27:31: Se0:26 PPP: Phase is ESTABLISHING, Passive Open
07:27:31: Se0:26 LCP: State is Listen
07:27:31: ISDN Se0:15: RX <- CONNECT_ACK pd = 8 callref = 0x6782
07:27:31: ISDN Se0:15: CALL_PROGRESS: CALL_CONNECTED call id 0x1D8, bchan 26, d0
07:27:32: Se0:26 LCP: I CONFREQ [Listen] id 13 len 25
07:27:32: Se0:26 LCP: MagicNumber 0x30F24F24 (0x050630F24F24)
07:27:32: Se0:26 LCP: MRRU 1524 (0x110405F4)
07:27:32: Se0:26 LCP: EndpointDisc 1 gw-qnet1 (0x130B0167772D716E657431)
07:27:32: Se0:26 PPP: Authorization required
07:27:32: Se0:26 LCP: O CONFREQ [Listen] id 11 len 38
07:27:32: Se0:26 LCP: AuthProto CHAP (0x0305C22305)
07:27:32: Se0:26 LCP: MagicNumber 0x321A7C12 (0x0506321A7C12)
07:27:32: Se0:26 LCP: MRRU 1524 (0x110405F4)
07:27:32: Se0:26 LCP: EndpointDisc 1 qnet-as5300-hki1
07:27:32: Se0:26 LCP: (0x131301716E65742D6173353330302D68)
07:27:32: Se0:26 LCP: (0x6B6931)
07:27:32: Se0:26 LCP: O CONFACK [Listen] id 13 len 25
07:27:32: Se0:26 LCP: MagicNumber 0x30F24F24 (0x050630F24F24)
07:27:32: Se0:26 LCP: MRRU 1524 (0x110405F4)
07:27:32: Se0:26 LCP: EndpointDisc 1 gw-qnet1 (0x130B0167772D716E657431)
07:27:32: Se0:26 LCP: I CONFACK [ACKsent] id 11 len 38
07:27:32: Se0:26 LCP: AuthProto CHAP (0x0305C22305)
07:27:32: Se0:26 LCP: MagicNumber 0x321A7C12 (0x0506321A7C12)
07:27:32: Se0:26 LCP: MRRU 1524 (0x110405F4)
07:27:32: Se0:26 LCP: EndpointDisc 1 qnet-as5300-hki1
07:27:32: Se0:26 LCP: (0x131301716E65742D6173353330302D68)
07:27:32: Se0:26 LCP: (0x6B6931)
07:27:32: Se0:26 LCP: State is Open
07:27:32: Se0:26 PPP: Phase is AUTHENTICATING, by this end
07:27:32: Se0:26 CHAP: O CHALLENGE id 6 len 37 from "qnet-as5300-hki1"
07:27:32: Se0:26 CHAP: I RESPONSE id 6 len 29 from "gw-qnet1"
07:27:32: Se0:26 PPP: Phase is FORWARDING, Attempting Forward
07:27:32: Se0:26 PPP: Phase is AUTHENTICATING, Unauthenticated User
07:27:32: Se0:26 PPP: Sent CHAP LOGIN Request
07:27:32: Se0:26 PPP: Received LOGIN Response PASS
07:27:32: Se0:26 PPP: Phase is FORWARDING, Attempting Forward
07:27:32: Se0:26 PPP: Phase is AUTHENTICATING, Authenticated User
07:27:32: Se0:26 DDR: Remote name for gw-qnet1
07:27:32: Se0:26 DDR: Authenticated host gw-qnet1 with no matching dialer map
07:27:32: Se0:26 CHAP: O SUCCESS id 6 len 4
07:27:32: Se0:26 PPP: Phase is VIRTUALIZED
07:27:32: Vi1 PPP: Phase is DOWN, Setup
07:27:32: Vi1 MLP: VP: Clone from AAA
07:27:32: Vi1 MLP: Invalid AAA cloning
07:27:32: Se0:26 PPP: Phase is TERMINATING
07:27:32: Se0:26 LCP: O TERMREQ [Open] id 12 len 4
07:27:32: Se0:26 LCP: I TERMACK [TERMsent] id 12 len 4
07:27:32: Se0:26 LCP: State is Closed
07:27:32: Se0:26 PPP: Phase is DOWN
07:27:32: Se0:26 DDR: disconnecting call
07:27:32: Se0:26 PPP: Phase is ESTABLISHING, Passive Open
07:27:32: Se0:26 LCP: State is Listen
07:27:32: %ISDN-6-CONNECT: Interface Serial0:26 is now connected to 063221964 g1
07:27:32: ISDN Se0:15: TX -> DISCONNECT pd = 8 callref = 0xE782
07:27:32: Cause i = 0x8090 - Normal call clearing
07:27:32: ISDN Se0:15: RX <- RELEASE pd = 8 callref = 0x6782
07:27:32: %LINK-3-UPDOWN: Interface Serial0:26, changed state to down
07:27:32: ISDN Se0:15: TX -> RELEASE_COMP pd = 8 callref = 0xE782
07:27:32: Se0:26 LCP: State is Closed
07:27:32: Se0:26 PPP: Phase is DOWN
07:27:32: Se0:26 DDR: disconnecting call
08-09-2002 03:56 PM
803 is trying to negotiate the multilink connection with as5300.."debug aaa authorization" will report more but AS5300 is trying to clone virtual access interface but since virtual template interface is not configured, its dropping the connection..Are you trying to pass authorization parameters from aaa to AS5300 for that user??
To fix this issue configure the following
conf t
multilink virtual-template 1
!
interface virtual-template 1
ip unnumbered Loopback0
encapsulation ppp
peer default ip address pool dialin_pool
ppp authentication chap pap
ppp multilink
!
Problem should be solved with that..If not need following debug
debug aaa authorization
debug aaa per-user
debug ppp negotiation
term mon
08-10-2002 12:01 AM
Solved, thanks!
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide