Re: Callback between PC WinNT4.0 and Cisco1721

cmejuto · ‎09-04-2002

I have a problem with my PC NT4.0 and a Cisco1721. I am triyng to callback, and the router not accept the authentication of the PC. The router accept the call, but don´t make the callback. "MCB: Callback not authoriced for this user".

The router configuration is:

!

hostname C_Verea

!

logging buffered 32000 debugging

logging console informational

!

enable password <deleted>

username Softgal01 password <deleted>

!

no ip name-server

!

isdn switch-type basic-net3

!

ip subnet-zero

no ip domain-lookup

ip routing

!

interface BRI 0

ip unnumbered FastEthernet 0

encapsulation ppp

dialer map ip 192.168.128.98 name Softgal01 class remaccess 981173772

dialer-group 1

no cdp enable

ppp callback accept

ppp authentication chap

no ppp multilink

!

map-class dialer remaccess

dialer callback-server username

!

interface FastEthernet 0

no shutdown

ip address 192.168.128.1 255.255.255.0

ip nat inside

keepalive 10

!

The active debugs are:

debug ppp nego

debug ppp cbcp

debug callback

The register of the debugs is:

*Mar 1 00:02:21: %LINK-3-UPDOWN: Interface BRI0:1, changed state to up

*Mar 1 00:02:21: BR0:1 PPP: Treating connection as a callin

*Mar 1 00:02:21: BR0:1 PPP: Phase is ESTABLISHING, Passive Open

*Mar 1 00:02:21: BR0:1 LCP: State is Listen

*Mar 1 00:02:21: BR0:1 LCP: I CONFREQ [Listen] id 1 len 40

*Mar 1 00:02:21: BR0:1 LCP: MagicNumber 0x000051F4 (0x0506000051F4)

*Mar 1 00:02:21: BR0:1 LCP: Callback 6 (0x0D0306)

*Mar 1 00:02:21: BR0:1 LCP: MRRU 1614 (0x1104064E)

*Mar 1 00:02:21: BR0:1 LCP: EndpointDisc 1 Local

*Mar 1 00:02:21: BR0:1 LCP: (0x131701CC4B0A20BFFA11D6BE1C000086)

*Mar 1 00:02:21: BR0:1 LCP: (0x5ED96900000000)

*Mar 1 00:02:21: BR0:1 LCP: O CONFREQ [Listen] id 1 len 15

*Mar 1 00:02:21: BR0:1 LCP: AuthProto CHAP (0x0305C22305)

*Mar 1 00:02:21: BR0:1 LCP: MagicNumber 0x0945BB10 (0x05060945BB10)

*Mar 1 00:02:21: BR0:1 LCP: O CONFREJ [Listen] id 1 len 8

*Mar 1 00:02:21: BR0:1 LCP: MRRU 1614 (0x1104064E)

*Mar 1 00:02:21: BR0:1 LCP: I CONFACK [REQsent] id 1 len 15

*Mar 1 00:02:21: BR0:1 LCP: AuthProto CHAP (0x0305C22305)

*Mar 1 00:02:21: BR0:1 LCP: MagicNumber 0x0945BB10 (0x05060945BB10)

*Mar 1 00:02:21: BR0:1 LCP: I CONFREQ [ACKrcvd] id 2 len 36

*Mar 1 00:02:21: BR0:1 LCP: MagicNumber 0x000051F4 (0x0506000051F4)

*Mar 1 00:02:21: BR0:1 LCP: Callback 6 (0x0D0306)

*Mar 1 00:02:21: BR0:1 LCP: EndpointDisc 1 Local

*Mar 1 00:02:21: BR0:1 LCP: (0x131701CC4B0A20BFFA11D6BE1C000086)

*Mar 1 00:02:21: BR0:1 LCP: (0x5ED96900000000)

*Mar 1 00:02:21: BR0:1 LCP: O CONFACK [ACKrcvd] id 2 len 36

*Mar 1 00:02:21: BR0:1 LCP: MagicNumber 0x000051F4 (0x0506000051F4)

*Mar 1 00:02:21: BR0:1 LCP: Callback 6 (0x0D0306)

*Mar 1 00:02:21: BR0:1 LCP: EndpointDisc 1 Local

*Mar 1 00:02:21: BR0:1 LCP: (0x131701CC4B0A20BFFA11D6BE1C000086)

*Mar 1 00:02:21: BR0:1 LCP: (0x5ED96900000000)

*Mar 1 00:02:21: BR0:1 LCP: State is Open

*Mar 1 00:02:21: BR0:1 MCB: Initialize

*Mar 1 00:02:21: MCB: Flush

*Mar 1 00:02:21: BR0:1 PPP: Phase is AUTHENTICATING, by this end

*Mar 1 00:02:21: BR0:1 CHAP: O CHALLENGE id 1 len 28 from "C_Verea"

*Mar 1 00:02:21: BR0:1 LCP: I IDENTIFY [Open] id 3 len 18 magic 0x000051F4 MSRASV4.00

*Mar 1 00:02:21: BR0:1 LCP: I IDENTIFY [Open] id 4 len 23 magic 0x000051F4 MSRAS-1-LTE5250

*Mar 1 00:02:21: BR0:1 CHAP: I RESPONSE id 1 len 28 from "Softgal01"

*Mar 1 00:02:21: BR0:1 PPP: Phase is FORWARDING, Attempting Forward

*Mar 1 00:02:21: BR0:1 PPP: Phase is AUTHENTICATING, Unauthenticated User

*Mar 1 00:02:21: BR0:1 PPP: Phase is FORWARDING, Attempting Forward

*Mar 1 00:02:21: BR0:1 PPP: Phase is AUTHENTICATING, Authenticated User

*Mar 1 00:02:21: BR0:1 CHAP: O SUCCESS id 1 len 4

*Mar 1 00:02:21: BR0:1 MCB: Start

*Mar 1 00:02:21: BR0:1 MCB: Callback not authorized for this user Softgal01

*Mar 1 00:02:21: BR0:1 MCB: Newstate 0-INIT -> 2-WAIT_RESPONSE

*Mar 1 00:02:21: BRI0:1 PPP: O MCB Request(1) id 1 len 6

*Mar 1 00:02:21: BRI0:1 MCB: O 1 1 0 6 1 2

*Mar 1 00:02:21: BR0:1 MCB: O Request Id 1 Callback Type None

*Mar 1 00:02:21: BR0:1 PPP: Phase is CBCP

*Mar 1 00:02:21: BRI0:1 PPP: I MCB Response(2) id 1 len 6

*Mar 1 00:02:21: BRI0:1 MCB: I 2 1 0 6 1 2

*Mar 1 00:02:21: BR0:1 MCB: Received response

*Mar 1 00:02:21: BR0:1 MCB: Response CBK-None 1 2

*Mar 1 00:02:21: BRI0:1 PPP: O MCB Ack(3) id 2 len 6

*Mar 1 00:02:21: BRI0:1 MCB: O 3 2 0 6 1 2

*Mar 1 00:02:21: BR0:1 MCB: O Ack Id 2 Callback Type None

*Mar 1 00:02:21: BR0:1 MCB: No Callback negotiated; Exit

*Mar 1 00:02:21: BR0:1 MCB: Flush

*Mar 1 00:02:21: BR0:1 PPP: Phase is UP

*Mar 1 00:02:21: BR0:1 IPCP: O CONFREQ [Closed] id 1 len 10

*Mar 1 00:02:21: BR0:1 IPCP: Address 192.168.128.1 (0x0306C0A88001)

*Mar 1 00:02:21: BR0:1 CCP: I CONFREQ [Not negotiated] id 5 len 10

*Mar 1 00:02:21: BR0:1 CCP: MS-PPC supported bits 0x00000006 (0x120600000006)

*Mar 1 00:02:21: BR0:1 LCP: O PROTREJ [Open] id 2 len 16 protocol CCP (0x80FD0105000A120600000006)

*Mar 1 00:02:21: BR0:1 IPCP: I CONFREQ [REQsent] id 6 len 40

*Mar 1 00:02:21: BR0:1 IPCP: CompressType VJ 15 slots CompressSlotID (0x0206002D0F01)

*Mar 1 00:02:21: BR0:1 IPCP: Address 0.0.0.0 (0x030600000000)

*Mar 1 00:02:21: BR0:1 IPCP: PrimaryDNS 0.0.0.0 (0x810600000000)

*Mar 1 00:02:21: BR0:1 IPCP: PrimaryWINS 0.0.0.0 (0x820600000000)

*Mar 1 00:02:21: BR0:1 IPCP: SecondaryDNS 0.0.0.0 (0x830600000000)

*Mar 1 00:02:21: BR0:1 IPCP: SecondaryWINS 0.0.0.0 (0x840600000000)

*Mar 1 00:02:21: BR0:1 IPCP: O CONFREJ [REQsent] id 6 len 34

*Mar 1 00:02:21: BR0:1 IPCP: CompressType VJ 15 slots CompressSlotID (0x0206002D0F01)

*Mar 1 00:02:21: BR0:1 IPCP: PrimaryDNS 0.0.0.0 (0x810600000000)

*Mar 1 00:02:21: BR0:1 IPCP: PrimaryWINS 0.0.0.0 (0x820600000000)

*Mar 1 00:02:21: BR0:1 IPCP: SecondaryDNS 0.0.0.0 (0x830600000000)

*Mar 1 00:02:21: BR0:1 IPCP: SecondaryWINS 0.0.0.0 (0x840600000000)

*Mar 1 00:02:21: BR0:1 IPCP: I CONFACK [REQsent] id 1 len 10

*Mar 1 00:02:21: BR0:1 IPCP: Address 192.168.128.1 (0x0306C0A88001)

*Mar 1 00:02:21: BR0:1 IPCP: I CONFREQ [ACKrcvd] id 7 len 10

*Mar 1 00:02:21: BR0:1 IPCP: Address 0.0.0.0 (0x030600000000)

*Mar 1 00:02:21: BR0:1 IPCP: O CONFNAK [ACKrcvd] id 7 len 10

*Mar 1 00:02:21: BR0:1 IPCP: Address 192.168.128.98 (0x0306C0A88062)

*Mar 1 00:02:21: BR0:1 IPCP: I CONFREQ [ACKrcvd] id 8 len 10

*Mar 1 00:02:21: BR0:1 IPCP: Address 192.168.128.98 (0x0306C0A88062)

*Mar 1 00:02:21: BR0:1 IPCP: O CONFACK [ACKrcvd] id 8 len 10

*Mar 1 00:02:21: BR0:1 IPCP: Address 192.168.128.98 (0x0306C0A88062)

*Mar 1 00:02:21: BR0:1 IPCP: State is Open

*Mar 1 00:02:21: BR0 IPCP: Install route to 192.168.128.98

*Mar 1 00:02:21: BR0:1 IPCP: Add link info for cef entry 192.168.128.98

*Mar 1 00:02:22: %LINEPROTO-5-UPDOWN: Line protocol on Interface BRI0:1, changed state to up

*Mar 1 00:02:27: %ISDN-6-CONNECT: Interface BRI0:1 is now connected to 981173776 Softgal01

Thank you for your help. Best regards,

Carlos Mejuto

cmejuto@softgal.com

tepatel · ‎09-04-2002

Try using the dialer interface config on the callback server, just the way discussed at following url

http://www.cisco.com/warp/public/793/access_dial/isdn-ppp-callback.html

cmejuto · ‎09-05-2002

Thank you for you answer. Don´t work with dialer profile. I proved this method before.

Which is the problem? Why don`t work?

Carlos Mejuto

cmejuto@softgal.com

AD VISSER · ‎09-10-2002

Hi,

Try on interface BRI0

ppp authentication pap.

Best regards

wieringen · ‎10-01-2002

Hello,

I have experienced the same problem and finally got it working with interface BRI. Try setting up router with aaa and username .... dialerstring. Only difference with your situation is that the client PC i'm using has Windows 2000 installed.

The problem with this solution is that i only need one B-channel for callback, but now i have to use the BRI interface for this purpose.

Can't get callback working with dialerprofile, If anyone has a solution please let me know.

Best regards

mljohnson · ‎10-02-2002

I'm not sure what version code you are at, but this could be CSCdw27654, which was a 12.2T bug fixed in 12.2(8.5)T and later code. The workaround is to do the following:

aaa new-model

and aaa authorization network local

If you are not running 12.2T code, then you might try as another workaround attempt the command "username Softgal01 callback-dialstring 981173772 password secret"; what is happening is that the IOS seems to think, right from the start, that this user is not authorized for callback.